Design. Secure.Keep it running.

I design structured local networks with clear separation between uses and control over communication between zones.

• LAN redesign and VLAN organisation.
• Inter-VLAN filtering and FortiGate policy configuration.
• Traffic analysis to refine segmentation.

I connect sites and branch offices around the available links, the applications they use and their remote-access needs.

• Hub-and-spoke SD-WAN and ADVPN architectures.
• VPNs, dynamic routing and connectivity troubleshooting.
• Headquarters and branch interconnection.

I define who can communicate with what, then turn these needs into clear, maintainable security policies.

• FortiGate policies: zones, objects, services and filtering rules.
• Control of communications between users, servers, branches and the Internet.
• Log analysis, rule review and change preparation with FortiManager and FortiAnalyzer.

Network connectivity alone is not enough: identity must be checked, authentication strengthened and access defined.

• Integration of FortiAuthenticator into the authentication chain.
• Strong authentication and integration with directories and access devices.
• Sign-in flows, access policies and troubleshooting authentication failures.

Administrative accounts reach the most sensitive systems. I centralize this access to control its use and keep a record of interventions.

• WALLIX bastion integration between administrators and target resources.
• Organization of SSH and RDP access to servers and devices.
• Session traceability and review to support operations and investigations.

I secure access to applications according to the user and connection context, whether at the office, in a branch or working remotely.

• ZTNA access to private applications with Fortinet and Netskope.
• Access policies that account for identity and device context.
• Web and cloud access security using a SASE / SSE approach.

Network and web application firewalls serve different roles. With FortiWeb, protection focuses on requests reaching web applications.

• FortiWeb integration into the application access path.
• HTTP/HTTPS protection policies and event analysis.
• Protection tuning with the application’s expected behavior in mind.

Email is an everyday entry point. I work on protecting exchanges, identifying suspicious messages and authenticating domains.

• Mimecast integration into the email delivery flow.
• Protection against malicious messages, phishing and impersonation.
• DMARC Analyzer, domain authentication and related report analysis.

I use logs, traffic and monitoring to understand an incident and restore normal operation.

• Analysis of logs and network communication.
• Service monitoring with Zabbix and Centreon.
• Troubleshooting and technical support in production.

I build tools for network operations and AI agents to reduce repetitive work. My email and technology-watch assistants are already part of my daily routine.

• FortiFlow2 for preparing filtering rules; FortiUpgrade for preparing upgrades.
• Email agent: triage, filing, thread summaries and drafts submitted for my approval.
• Technology-watch agent: new developments and CVE alerts gathered into a daily briefing.
• Python, JavaScript and Bash automation with tests and containerized deployments.

My telecoms background complements my network work: telephony, carrier connections, systems and virtualisation platforms.

• VoIP telephony, IPBX and Wi-Fi.
• Linux, Windows and Active Directory environments.
• VMware, Hyper-V and Proxmox virtualisation.