Description

I’m a passionate advocate for crypto-agility because the future of cybersecurity won’t be defined by how strong our algorithms are, but by how fast we can evolve them.

If we don’t adapt now, the next global outage could make Y2K look like a minor glitch.

My mission is to help organizations:

- Map and understand their cryptographic dependencies

- Build adaptive, upgrade-ready architectures

- Automate cryptographic transitions without downtime or disruption

Because in cybersecurity, resilience is no longer about being unbreakable it’s about being adaptable !

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

CGI Business Consulting
PKI consultant
February 2023 - August 2025 (2 years and 6 months)
Paris, France
L3 PKI Bank :

- PKI migration

- INTUNE / Airwatch deployment
- HSM operations: Proteccio, C2P, ECB, Luna
- HSM initialization and personalization
- Deployment of virtual HSM
- Préparation and participation in Key Ceremony
- Level 3 incident management (PKI, HSM, CLM, CMS)
- Standards knowledge: PCI-DSS, DORA, RGS
- Encryption Key Management (KMS)
- Installation and configuration of Entrust KMS
- BYOK implementation
- Access rights review
- API development for third-party MDM integration with CMS

CLM Integrator :

- Requirements gathering workshops
- Drafting functional specifications and High-Level Design (HLD)
- Writing and executing UAT plans
- Consulting and implementing protocols: ACME, EST, WCCE
- Deployment and integration of connectors with private and public PKI
- Drafting integration and evolution procedures
- Infrastructure operations maintenance
- Training users and future CLM maintainers

IAM consultancy :

- Support for project management: design, testing, UAT coordination, change management, and functional support
- Support for IAG migration: definition of user stories, migration strategy, RACI
- Role matrix creation based on existing systems using VBA scripting
- Coordination and facilitation of business workshops
- Technical integration of a POC Directory / Data Sync via Ping Directory / Ping Datasync
- Setup and configuration of PingFederate
- Keycloak (IdP) administration: authentication flows (SSO, MFA, etc.)
- Keycloak client and realm configuration: security policy and identity federation management (LDAP, Active Directory, SAML, OAuth2)
PKI CLM HSM Gestion des identités et des accès (IAM) PQC