02 / Work

Secure infrastructure.Work that moves forward.

My professional work comes first: networks, cybersecurity, deployments and production support. Then the tools and agents I build to make everyday work easier.

01 / Professional work

My everyday work.

My full experience
SNS SecuritySince June 2020

Connect sites.
Protect everyday work.

LAN and VLAN redesign, SD-WAN / ADVPN connectivity, access security, bastions, application and email protection.

Architecture · Integration · OperationsExplore my role
Alliance Telecom2015 — 2020

Keep communications
working.

VoIP / IPBX deployment and operation, carrier connections, Wi-Fi and networks. Zabbix / Centreon monitoring, troubleshooting and user support.

Telephony · Networks · SupportExplore my role

02 / Networks & cybersecurity

Connect sites. Protect access.

Devices, controls and traffic flows explained clearly. Each diagram illustrates one area of my work using a generic environment.

Connections & trafficControls / logsProtection / blocking

01 / FortiGate · Switches · VLAN

LAN redesign & segmentation

Separate uses and allow only the communications that are needed.

  • Organize user, server and guest VLANs.
  • Route inter-zone traffic through the firewall.
  • Read logs to verify filtering.
Connections & trafficControls / logsProtection / blocking

02 / FortiGate · VPN IPsec · Multi-sites

Hub-and-spoke SD-WAN

Connect branches to headquarters through VPN tunnels and controlled network paths.

  • Distinguish carrier links from encrypted tunnels.
  • Organize connectivity around the hub.
  • Monitor link behavior to support operations.
Connections & trafficControls / logsProtection / blocking

03 / FortiGate · Hub / Spoke · BGP

Multi-branch SD-WAN & ADVPN

Keep the hub as a reference point and establish direct branch-to-branch shortcuts on demand.

  • Structure routing between headquarters and branches.
  • Distinguish hub tunnels from dynamic shortcuts.
  • Diagnose inter-site traffic and routing paths.
Connections & trafficControls / logsProtection / blocking

04 / Netskope · Fortinet · Identité / Identity

ZTNA, SASE & cloud access

Grant access to the required application according to identity and device context, from a branch or on the move.

  • Check identity and connection context.
  • Apply access policies to private applications.
  • Protect web and cloud usage through their respective controls.
Connections & trafficControls / logsProtection / blocking

05 / WALLIX · PAM · SSH / RDP

Bastion & administrator access

Control interventions on sensitive systems and preserve session records.

  • Authenticate administrators before resource access.
  • Apply permissions through the WALLIX bastion.
  • Record SSH / RDP sessions and support their review.
Connections & trafficControls / logsProtection / blocking

06 / FortiAuthenticator · Annuaire / Directory · MFA

Strong authentication

Connect identity, the second factor and access policies in a coherent sign-in flow.

  • Connect the directory and authentication service.
  • Strengthen sign-in with a second factor.
  • Return the result to the service controlling access.
Connections & trafficControls / logsProtection / blocking

07 / FortiWeb · WAF · HTTP / HTTPS

Web application protection

Inspect application requests and block traffic identified as malicious.

  • Place the WAF in the web request path.
  • Inspect HTTP / HTTPS exchanges.
  • Review events and tune protection.
Connections & trafficControls / logsProtection / blocking

08 / Mimecast · Cybergraph · DMARC

Email & domain protection

Protect email and make domain authentication controls easier to understand.

  • Filter messages before delivery to Microsoft 365.
  • Isolate suspicious messages for review.
  • Analyze domain authentication with DMARC Analyzer.

03 / Tools & automation

Business tools & AI agents.

FortiFlow2, FortiUpgrade and my personal assistants: practical needs, real uses and opportunities for further development.

Contact

Let’s discuss your project.

A team to join, infrastructure to improve, an idea to explore.

Contact me
Reference architecture

100 %Scroll the diagram to explore the details.
Connections & trafficControls / logsProtection / blocking