Elhadji is available for hire
Hire ElhadjiElhadji Birahim Ndiaye
Verified Expert in Engineering
IT Security and Infrastructure Developer
Montreal, QC, Canada
Toptal member since January 3, 2023
Bio
Elhadji is an architect and senior project manager with over 10 years of experience in IT, cybersecurity, and infrastructure. He has numerous certifications (PMP, CISM, CISA, AWS-SAP, CCIE Written Sec, CCDP, CCNP Sec, CCNP Datacenter, WSFE, and ACFE, to name a few). He customizes long-term solutions for clients while ensuring immediate fixes. Elhadji has written cybersecurity programs and processes, redesigned architectures, completed audits, and implemented data centers across various sectors.
Portfolio
ICM (Montreal Heart Institute)
Architecture, CISO, IT Service Management (ITSM), IT Networking, Networking...
Desjardins Group
Agile Project Management, SAP Security, Architecture, Cloud Security...
Kinessor
Agile Project Management, IT Projects, IT Security, Cybersecurity...
Experience
- Security Architecture - 15 years
- IT Project Management - 13 years
- IT Projects - 13 years
- Architecture - 12 years
- Cybersecurity - 12 years
- Cloud Security - 10 years
- CISO - 5 years
Preferred Environment
CISO, IT Project Management, IT Projects, Architecture, Agile Project Management, SAP Security, API/Services Architecture, Web Security, Web App Security, Cybersecurity, Cloud Platforms, Unity Catalog, GDPR
The most amazing...
...security and cybersecurity solution architecture (CISO) I've delivered included encryption, firewall FortiGate, EDR/XDR antivirus, and Apex-One.
Work Experience
CISO, Principal Security & SIEM Architect
2022 - PRESENT
ICM (Montreal Heart Institute)
- Served as the strategic security advisor to the VPTI for all business, IT, and security needs.
- Participated, identified, and wrote good security practices and protections to be applied to information systems, ensuring they comply with standards and regulations.
- Carried out various audits, security compliance projects, and missions. Architected a centralized SIEM ecosystem to ingest multi-source telemetry, leveraging EDR/XDR and FortiGate feeds to drive real-time behavioral analytics and threat detection.
- Completed orientation and reviewed encryption, privacy protection, firewall FortiGate, vulnerability scanning tools, EDR/XDR antivirus, Apex-One, etc.
- Realized and managed different budgets of the technological IT projects.
- Designed automated governance frameworks that translated regulatory requirements into technical security controls within a multi-cloud (AWS/Azure/GCP) environment.
Technologies: Architecture, CISO, IT Service Management (ITSM), IT Networking, Networking, Cybersecurity, SAP Security, AWS Cloud Architecture, Azure Cloud Services, Google Cloud Architecture Framework, Security, Google Cloud, Azure Network Security Groups, Cloud, Amazon Web Services (AWS), IT Security, Information Security, Security Information and Event Management (SIEM), IDS/IPS, Vulnerability Scanning, BitLocker, Splunk, Microsoft Defender Antivirus, NMap, Palo Alto Networks, Compliance, ISO 27001, Information Security Management Systems (ISMS), Cloud Networking, VPN, DevSecOps, SecOps, GitHub Actions, SOC 2, Angular, Sprints, User Experience (UX), User Interface (UI), UI Design, Cloud Security, Product Security, Vulnerability Management, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Penetration Testing, CI/CD Pipelines, OWASP, SOC Compliance, PCI DSS, General Data Protection Regulation (GDPR), PCI Compliance, Risk Assessment, Industrial Control Systems (ICS), Identity & Access Management (IAM), Encryption, Python, APIs, Wiz Cloud Security Platform, NIST, Google Cloud Platform (GCP), Snowflake, Datadog, Ruby, Grafana, BigQuery, Code Review, GitHub, JSON Web Tokens (JWT), JSON Web Signature (JWS), MERN Stack, Azure, Risk Management, CAPTCHA, Pipelines, Orchestration, White-hat Hacking, Workflow, Reverse Engineering, Offensive Security, Red Teaming, Open-source Intelligence (OSINT), Scraping, Azure Active Directory, IoT Security, Bluetooth Low Energy (BLE), Bluetooth, STRIDE, Embedded C, Docker, Kubernetes, Application Security, Web Application Security (Web AppSec), Risk Analysis, Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Security Architecture, DevOps, MacOS, Data Orchestration, MacBook, Data Retention, Incident Response, Role-based Access Control (RBAC), Supabase, California Consumer Privacy Act (CCPA), Vanta, Infrastructure, Terraform, AWS Cloud Security, Software Development Lifecycle (SDLC), AWS Proton, Solution Architecture, Telemetry, OpenTelemetry, SIEM, Security Operations Centers (SOC), Cortex XSOAR, Auditing, Personally Identifiable Information (PII), Audits, Fintech, Replit, Access Control, Logging, Microsoft Entra ID, Azure Key Vault, Azure Databricks, Cloud Platforms, Unity Catalog, Web Applications, Node.js, PHI, TypeScript, HIPAA, Full-stack, JavaScript, Healthcare, Insurance, React, Web Architecture, Software Architecture, HIPAA Compliance, AI Security, Policies & Procedures Compliance, Security Policies & Procedures, Security Engineering, Endpoint Security, IT Administration, Education Technology (Edtech), Apple DEP, SaaS, GDPR, Data Privacy, CSPM
Lead Security Architect & Consultant: Cloud Foundations
2024 - 2025
Desjardins Group
- Served as the strategic security advisor to the VPTI for all business, IT, and security needs.
- Oversaw needs and requirements, analysis criteria, operational impacts, and costs.
- Contributed to the drafting of the document analyzing potential solutions. Wrote cybersecurity programs and guided the entire IT and security ecosystem.
- Documented and detailed target infrastructure and security architectures that met business and project needs and requirements.
- Lead the architectural design of multi-tenant cloud security pipelines, integrating Azure Monitor and AWS CloudTrail into a unified observability framework.
- Monitored the implementation of different solutions, including testing. Wrote the documentation of the operating architecture model and the detailed distribution diagrams required.
- Contributed to the drafting of implementation and test strategies. Secured data tokenization and application cache platforms.
- Participated in the design of security and cybersecurity architectures, the documentation of security positioning, and drafting hardening guides (IaaS, CaaS, SaaS, PaaS) within the Desjardins movement.
- Developed security architectures on the various data and IT foundations that met the evolving needs and technological targets of multiple business lines and projects.
- Developed secure data foundation architectures focused on telemetry normalization and tokenization; ensured disparate data sources aligned with organizational security standards for audit-ready logging.
Technologies: Agile Project Management, SAP Security, Architecture, Cloud Security, Web App Security, Web Security, AWS Cloud Architecture, Cloud Architecture, Azure Cloud Services, Azure Media Services API, Microservices Architecture, Microservices, APIs, Cloud, Amazon Web Services (AWS), IT Security, Information Security, Security Information and Event Management (SIEM), IDS/IPS, Vulnerability Scanning, BitLocker, Splunk, Microsoft Defender Antivirus, NMap, Palo Alto Networks, Compliance, ISO 27001, Information Security Management Systems (ISMS), Cloud Networking, VPN, SAML, Mobile Device Management (MDM), Okta, OpenID Connect (OIDC), DevSecOps, SecOps, GitHub Actions, SOC 2, Network Design, RADIUS, Ansible, Network Monitoring, Angular, Sprints, User Experience (UX), User Interface (UI), UI Design, Product Security, Vulnerability Management, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Penetration Testing, CI/CD Pipelines, OWASP, SOC Compliance, PCI DSS, General Data Protection Regulation (GDPR), PCI Compliance, Software Architecture, IoT Security, Risk Assessment, Industrial Control Systems (ICS), Identity & Access Management (IAM), Encryption, Python, PCI, Wiz Cloud Security Platform, NIST, Google Cloud Platform (GCP), Snowflake, Datadog, Ruby, Grafana, BigQuery, Prometheus, Loki, Code Review, GitHub, JSON Web Tokens (JWT), JSON Web Signature (JWS), MERN Stack, Azure, Risk Management, CAPTCHA, Pipelines, Orchestration, White-hat Hacking, Workflow, Reverse Engineering, Offensive Security, Red Teaming, Open-source Intelligence (OSINT), Scraping, Azure Active Directory, Bluetooth Low Energy (BLE), Bluetooth, STRIDE, Embedded C, Docker, Kubernetes, Security, Application Security, Web Application Security (Web AppSec), Risk Analysis, Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Security Architecture, DevOps, MacOS, Data Orchestration, MacBook, Data Retention, Incident Response, Role-based Access Control (RBAC), Supabase, California Consumer Privacy Act (CCPA), Vanta, Infrastructure, Terraform, AWS Cloud Security, Software Development Lifecycle (SDLC), AWS Proton, Solution Architecture, Telemetry, OpenTelemetry, SIEM, Security Operations Centers (SOC), Cortex XSOAR, Auditing, Personally Identifiable Information (PII), Audits, Fintech, CISO, Replit, Access Control, Logging, Microsoft Entra ID, Azure Key Vault, Cloud Platforms, Unity Catalog, Web Applications, Node.js, PHI, TypeScript, HIPAA, Full-stack, JavaScript, Insurance, Web Architecture, HIPAA Compliance, AI Security, Policies & Procedures Compliance, Security Policies & Procedures, Security Engineering, Endpoint Security, IT Administration, Education Technology (Edtech), Apple DEP, SaaS, GDPR, Data Privacy, CSPM
Principal Architect: Global Telemetry & Security
2021 - 2023
Kinessor
- Realized and managed the budgets of various technological projects of certain major customers (millions of $CAD). Managed IT teams (internal employees and external consultants and partners) for the execution of projects.
- Coordinated and guided customers in various sectors of security activities. Carried out or participated in various large-scale projects. Participated in the change committee (CAB) to validate the activities to be done.
- Performed analyzes of needs, performance capacity, and implementation costs and determined the appropriate strategies. Represented clients with different suppliers and partners to coordinate the realization of projects and carry out the required tie-ups.
- Identified customer needs and designed secure technological solutions for the advancement of projects. Managed budgets for security, technology, and telecommunications projects. Assisted account managers with responses to calls for proposals.
- Wrote processes and security guidelines to oversee and validate with the compliance team the governance and compliance needs. Developed detailed architectures, configurations, and implementation plans for solutions to meet evolving needs.
- Managed project resources and participated in designing and documenting technological architectures (security, networks, applications, clouds) in various customer environments.
- Strengthened the security postures of customer environments (on-premises, cloud) by guiding them on good security and cybersecurity practices.
Technologies: Agile Project Management, IT Projects, IT Security, Cybersecurity, Telecom Equipment & Solutions, IT Services, Cloud, Amazon Web Services (AWS), Information Security, Security Information and Event Management (SIEM), IDS/IPS, Vulnerability Scanning, BitLocker, Splunk, Microsoft Defender Antivirus, NMap, ISO 27001, Information Security Management Systems (ISMS), Cloud Networking, VPN, OAuth 2, OpenID Connect (OIDC), DevSecOps, SecOps, SOC 2, Network Design, RADIUS, Ansible, Network Monitoring, Angular, Sprints, User Experience (UX), User Interface (UI), UI Design, Cloud Security, Product Security, Vulnerability Management, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Penetration Testing, General Data Protection Regulation (GDPR), PCI Compliance, Software Architecture, Industrial Control Systems (ICS), Identity & Access Management (IAM), PCI, Wiz Cloud Security Platform, NIST, Google Cloud Platform (GCP), Datadog, JSON Web Tokens (JWT), Risk Management, CAPTCHA, Pipelines, Orchestration, White-hat Hacking, Workflow, Reverse Engineering, Offensive Security, Scraping, Azure Active Directory, IoT Security, Bluetooth Low Energy (BLE), Bluetooth, STRIDE, Embedded C, Docker, Kubernetes, Security, Application Security, Web Application Security (Web AppSec), Risk Analysis, Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Security Architecture, DevOps, MacOS, Data Orchestration, MacBook, Data Retention, Incident Response, Role-based Access Control (RBAC), Supabase, Infrastructure, Terraform, AWS Cloud Security, Software Development Lifecycle (SDLC), AWS Proton, Solution Architecture, Telemetry, OpenTelemetry, SIEM, Security Operations Centers (SOC), Cortex XSOAR, Auditing, Personally Identifiable Information (PII), Audits, Fintech, CISO, Vanta, Access Control, Logging, Microsoft Entra ID, Azure Key Vault, Cloud Platforms, Unity Catalog, Web Applications, Node.js, PHI, TypeScript, HIPAA, Full-stack, JavaScript, Healthcare, Insurance, Web Architecture, HIPAA Compliance, AI Security, Policies & Procedures Compliance, Security Policies & Procedures, Security Engineering, Endpoint Security, IT Administration, Education Technology (Edtech), Apple DEP, SaaS, Data Privacy, CSPM
Security Operations (SOC) & Infrastructure Lead
2019 - 2021
Fondaction
- Realized and managed the budgets of different technological projects (approximately one million CAD). Directed the architectural transition to a Cloud-Native SOC, optimizing log ingestion streams and automated alerting to improve incident response time and system resilience.
- Ensured strategic management of infrastructure operations and services (backup, recovery, archiving, replication, network, servers, storage, security routines, etc.).
- Ensured the availability, performance, and security of the infrastructure. Developed system administration standards and procedures according to best practices.
- Managed IT teams (internal employees and external consultants and partners) for the execution of various projects.
- Ensured proactive management of services and systems through maintenance, monitoring, and automation tools. Participated in the design and documentation of the technological and security architecture.
- Wrote installation, maintenance, and technology support instructions. Carried out or participated in various projects related to their field of expertise. Managed the different on-premises and cloud environments of the infrastructure.
- Proceeded with the planning and scope of audits. Reviewed security incidents and analyzed and monitored vulnerabilities. Directed the architectural transition to a Cloud-Native SOC, optimizing log ingestion streams and automated alerting to improve incident response time and system resilience.
- Presented audit reports and monitored the cybersecurity program. Identified different security and cybersecurity-oriented business needs. Managed training for all resources to raise awareness in terms of security and cybersecurity.
- Participated in the change committee (CAB) to validate activities. Identified new initiatives and presented them to the management team (management and vice-presidency).
Technologies: Team Leadership, IT Management, IT Project Management, IT Projects, Agile Project Management, Architecture, Cloud, Amazon Web Services (AWS), IT Security, Security Information and Event Management (SIEM), IDS/IPS, Vulnerability Scanning, Splunk, Microsoft Defender Antivirus, NMap, ISO 27001, Information Security Management Systems (ISMS), Cloud Networking, VPN, DevSecOps, SecOps, SOC 2, Network Design, RADIUS, Ansible, Network Monitoring, Sprints, User Experience (UX), User Interface (UI), UI Design, Product Security, OWASP, SOC Compliance, PCI DSS, General Data Protection Regulation (GDPR), PCI Compliance, Software Architecture, Industrial Control Systems (ICS), Identity & Access Management (IAM), Encryption, Python, APIs, CI/CD Pipelines, PCI, Wiz Cloud Security Platform, NIST, Google Cloud Platform (GCP), Snowflake, Datadog, Grafana, Azure, Risk Management, CAPTCHA, Pipelines, Orchestration, White-hat Hacking, Reverse Engineering, Offensive Security, Azure Active Directory, IoT Security, Bluetooth Low Energy (BLE), Bluetooth, STRIDE, Embedded C, Docker, Kubernetes, Security, Application Security, Web Application Security (Web AppSec), Risk Analysis, Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Security Architecture, Data Centers, DevOps, MacOS, Data Orchestration, MacBook, Data Retention, Incident Response, Role-based Access Control (RBAC), Supabase, California Consumer Privacy Act (CCPA), Terraform, AWS Cloud Security, Software Development Lifecycle (SDLC), AWS Proton, Solution Architecture, Telemetry, OpenTelemetry, SIEM, Security Operations Centers (SOC), Cortex XSOAR, Auditing, Personally Identifiable Information (PII), Audits, Fintech, CISO, Vanta, Access Control, Logging, Microsoft Entra ID, Azure Key Vault, Cloud Platforms, Unity Catalog, Penetration Testing, Web Applications, Node.js, PHI, JavaScript, Insurance, Web Architecture, HIPAA Compliance, AI Security, Policies & Procedures Compliance, Security Policies & Procedures, Security Engineering, Endpoint Security, Education Technology (Edtech), Apple DEP, SaaS, Data Privacy
Senior Consultant (Networks–Security and Cybersecurity Collaboration)
2017 - 2018
NOVIPRO
- Animated teams in the execution of various projects as project manager. Provided guidance and support to advisors on the execution during the implementation of technological projects.
- Set up different technological architectures and customer security. Implemented all LAN, WAN, wifi, VoIP, security, and cybersecurity network solutions. Participated in various implementation projects, updating, redesign, and optimization.
- Planned and implemented required updates. Prepared hardware and software configurations. Assisted account managers in identifying customer and space needs.
- Provided support, implementation, and administration of security, network and VoIP needs. Ensured the integration of our various customers in the IaaS, PaaS, SaaS, and cloud infrastructure (space).
- Provided third-level customer service to escape administrators and various NOVIPRO customers. Facilitated the implementation of hardware and software for customers.
- Participated in the change committee (CAB) of various customers to validate the activities. Wrote project documentation, space, and customers.
- Presented new technologies from different partners (suppliers) with account managers to help customers update their assets in their infrastructure. Participated in the monthly review of business and customer needs with the management team.
Technologies: Cloud Architecture, AWS Cloud Architecture, CCNP Security, Cybersecurity, Azure Cloud Services, IT Networking, Wireless Networking, IT Security, Cloud, Amazon Web Services (AWS), Information Security, Security Information and Event Management (SIEM), IDS/IPS, Vulnerability Scanning, ISO 27001, Information Security Management Systems (ISMS), Cloud Networking, VPN, Security Compliance, Okta, SOC 2, Network Design, RADIUS, Ansible, Sprints, User Experience (UX), Static Application Security Testing (SAST), Penetration Testing, PCI DSS, General Data Protection Regulation (GDPR), PCI Compliance, Software Architecture, Risk Assessment, Industrial Control Systems (ICS), PCI, NIST, GitHub, Azure, CAPTCHA, Pipelines, Reverse Engineering, Azure Active Directory, IoT Security, Bluetooth Low Energy (BLE), Bluetooth, STRIDE, Embedded C, Security, Web Application Security (Web AppSec), Risk Analysis, Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Security Architecture, Data Centers, DevOps, MacOS, Data Orchestration, MacBook, Incident Response, Role-based Access Control (RBAC), Supabase, Infrastructure, AWS Cloud Security, Software Development Lifecycle (SDLC), Solution Architecture, OpenTelemetry, SIEM, Security Operations Centers (SOC), Cortex XSOAR, Auditing, Personally Identifiable Information (PII), Audits, Fintech, Vanta, Access Control, Logging, Azure Key Vault, Cloud Platforms, Unity Catalog, Node.js, PHI, Web Architecture, AI Security, Policies & Procedures Compliance, Apple DEP, SaaS, Data Privacy
Senior Consultant (Networks–Security and Cybersecurity Collaboration)
2017 - 2018
UAP INC.
- Redefined the architecture of all UAP infrastructure across Canada and the interconnection with the United States. Implemented LAN, WAN, wifi, VoIP, security, and cybersecurity network solutions.
- Participated in various implementation projects, updating, redesigning, and optimizing customer networks. Planned and implemented required updates.
- Prepared hardware and software configurations. Analyzed and optimized network performance. Provided support, and implementation of different business needs.
- Ensured the integration of new sites (stores) across Canada. Wrote and documented deliverables resulting from the projects.
- Wrote installation, maintenance, and technology support instructions. Participated in the change committee (CAB) to validate activities. Participated in the quarterly review of business needs with the management team.
Technologies: Architecture, Networking, IP Networks, CCNP Security, Security, Cisco, Cisco Switches, Cloud Networking, VPN, SOC 2, CAPTCHA, Pipelines, Orchestration, Reverse Engineering, Offensive Security, Azure Active Directory, IoT Security, Bluetooth Low Energy (BLE), Bluetooth, STRIDE, Embedded C, Risk Analysis, Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Security Architecture, MacBook, Data Retention, Incident Response, Role-based Access Control (RBAC), Infrastructure, Software Development Lifecycle (SDLC), Solution Architecture, OpenTelemetry, SIEM, Security Operations Centers (SOC), Cortex XSOAR, Auditing, Personally Identifiable Information (PII), Audits, Fintech, CISO, Access Control, Education Technology (Edtech), Apple DEP
IT Project Manager | Engineer (Security, Networks, & Telecommunications Collaborations)
2011 - 2017
CFAOTECHNOLOGIES
- Guided teams in the execution of a project as project manager. Carried out audits of infrastructures, networks, security, and collaborations.
- Responded to different calls for tenders from different customers and different subsidiaries for their major accounts.
- Provided level-three support to engineers for major accounts in maintaining customer infrastructures in good operational condition.
- Provided support while implementing major technological and security projects, including administration tools, as a network, security, and telecommunications engineer.
- Provided technical sales support for business needs and customer support. Carried out critical projects for major accounts.
- Presented new technologies from different partners (suppliers) to help customers update their assets in their infrastructures. Wrote security and cybersecurity programs for clients.
Technologies: Cloud Security, Security Architecture, IT Projects, IT Project Management, Request for Proposal (RFP), Request for Information (RFI), Agile Project Management, IT Networking, IT Security, Security, Cloud Networking, VPN, Azure, Risk Management, Orchestration, Reverse Engineering, Offensive Security, Azure Active Directory, Bluetooth Low Energy (BLE), Bluetooth, STRIDE, Embedded C, Web Application Security (Web AppSec), Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Data Centers, Data Orchestration, MacBook, Data Retention, Incident Response, Role-based Access Control (RBAC), Supabase, AWS Cloud Security, Software Development Lifecycle (SDLC), Solution Architecture, OpenTelemetry, SIEM, Security Operations Centers (SOC), Auditing, Audits, Fintech, Access Control, Web Applications, Education Technology (Edtech), SaaS
IP Support Engineer
2010 - 2011
Sonatel
- Participated in the execution of projects carried out at the level of the network infrastructure IP backbone of Sonatel. Interconnected sub-regional and global operators to provide quality service to subscribers.
- Supervised Sonatel platforms (IP, TV on ADSL, MiTV, service platform) at the national and sub-regional level for all subscribers.
- Followed up and resolved incidents reported by the Sonatel platforms, namely, the company hotline and back office.
Technologies: IP Networks, Telecom Equipment & Solutions, IT Security, Telecom Business Support Systems (BSS), Cisco Switches, Multiprotocol Label Switching (MPLS), Border Gateway Protocol (BGP), VPN, Reverse Engineering, Bluetooth Low Energy (BLE), STRIDE, Security
Network & Telecommunications Engineer (Base Sub System Radio)
2009 - 2009
MILLICOM (TIGO SENEGAL)
- Proceeded with the planning and designing the various BSC and BTS of TIGO.
- Guided the execution of the incidents of TIGO's BSC and BTS. Participated in the migration of RAN (radio access network) and Node B 04G throughout the TIGO infrastructure.
- Assisted in commissioning BSC (base station subsystem ) and BTS (base transceiver station) 02G/03G.
Technologies: Telecom Business Support Systems (BSS), Telecom Equipment & Solutions, Telecommunications, VPN, Access Control
Experience
Security and Cybersecurity Networks
http://www.kinessor.comServed as the senior telecommunications architecture advisor on this project. Overhauled all of HDI's global security infrastructure with the implementation of the SDWAN solution, and these global sites (on-premises and cloud). Redefined the entire security architecture of various global HDI sites. Performed security audits of various HDI systems and application environments.
Security and Cybersecurity Solution Architecture (CISO)
https://www.icm-mhi.org/fr/institut-de-cardiologie-de-montrealServed as the specialist and senior expert on this project. Realized and managed the budgets of different technological projects (IT and cybersecurity). Wrote cybersecurity programs and guided the entire IT and security ecosystem. Participated, identified, and wrote good security practices and protections to be applied to information systems and ensured that they complied with standards, regulations, and validated environments. Oversaw orientation, encryption, privacy protection, firewall FortiGate, vulnerability scanning tools, EDR/XDR antivirus, and Apex-One. Wrote all directives, hardening guides, and organization processes regarding security.
Understood and interacted with related entities, directly or through committees, to ensure consistent application of policies and standards across all technology projects, systems, and services, including privacy, risk management, compliance, and business continuity management. Led and guided the targeted information security awareness training program for all employees, contractors, and approved users of the system and established measures to evaluate the effectiveness of this security training program for the various resources of the institute.
Understood and interacted with related entities, directly or through committees, to ensure consistent application of policies and standards across all technology projects, systems, and services, including privacy, risk management, compliance, and business continuity management. Led and guided the targeted information security awareness training program for all employees, contractors, and approved users of the system and established measures to evaluate the effectiveness of this security training program for the various resources of the institute.
Redefined Architecture (Fondaction)
Served as the project's IT project manager, principal advisor, and architecture and information systems (IS) manager. Redefined the entire architecture of Fondaction, allowing a highly available and redundant recovery site. Identified the business needs of the project with the prioritization of assets for managing the project in different phases. Validated various partner submissions for support on the implementation of the project. Validated the budget for the delivery of the project. Planned project activities to meet the specified deadline. Deployed and executed solutions with the support of the selected partner.
Set up infrastructure on the two main sites. Interconnected the primary and secondary sites of Fondaction and set up the administration tools on the infrastructure, and set up the security infrastructure. Integrated the business continuity site on the two main sites in the event of a disaster on one of the main sites. Planned and carried out the scope of the various environmental audits. Implemented a cybersecurity program that included governance, guidelines, procedures, management of various security tools, cybersecurity, Netskope, Vectra, Alienvault, Checkpoint, Terra nova, and Cloudflare.
Set up infrastructure on the two main sites. Interconnected the primary and secondary sites of Fondaction and set up the administration tools on the infrastructure, and set up the security infrastructure. Integrated the business continuity site on the two main sites in the event of a disaster on one of the main sites. Planned and carried out the scope of the various environmental audits. Implemented a cybersecurity program that included governance, guidelines, procedures, management of various security tools, cybersecurity, Netskope, Vectra, Alienvault, Checkpoint, Terra nova, and Cloudflare.
Team Leader - Senior Solution Architect Cybersecurity
https://www.desjardins.com/• Develop security architectures in the BSD (Desjardins Security Office) more specifically on the various Data/IT Foundations that meet the evolving needs and technological targets of the various business lines and projects.
• Securing the different IaaS, CaaS and PaaS environments (Azure) and SaaS providers (Azure, AWS)
• Secure the various projects of the Desjardins Security Office relating to IT/Data Foundations, GDN (Data Virtualization, Server Vault, MFT, Electronic Signature, External Document Sharing, APIs, Oauth2 authentication, data protection, Securing Document Vaults ) & Masking (Anonymization of the various references classified as Secrets/Highly Confidential/Confidential)
• Secure data tokenization platforms and application cache platforms and the use of encryption master key management and rotation.
• Securing network infrastructures, identity and access management, cryptography, data protection, analysis of vendor security annexes, planning of penetration tests and support for security patches).
• Securing the different IaaS, CaaS and PaaS environments (Azure) and SaaS providers (Azure, AWS)
• Secure the various projects of the Desjardins Security Office relating to IT/Data Foundations, GDN (Data Virtualization, Server Vault, MFT, Electronic Signature, External Document Sharing, APIs, Oauth2 authentication, data protection, Securing Document Vaults ) & Masking (Anonymization of the various references classified as Secrets/Highly Confidential/Confidential)
• Secure data tokenization platforms and application cache platforms and the use of encryption master key management and rotation.
• Securing network infrastructures, identity and access management, cryptography, data protection, analysis of vendor security annexes, planning of penetration tests and support for security patches).
Senior Cybersecurity Solution Architect
https://novipro.com/• Carry out mandates with customers to provide them with the support required to meet business needs (IATA, Id-Food, Collège Moderne Descartes, Aedifica, etc.)
• Provide level 3 incident and change management on demand with professional resources
• Participate in small or large project coordination request to support change/project management
• Manage large-scale projects
• Support for various projects as part of normal operations.
• Provide level 3 incident and change management on demand with professional resources
• Participate in small or large project coordination request to support change/project management
• Manage large-scale projects
• Support for various projects as part of normal operations.
Security Architecture of the FAS Platform
As a senior solution architect and cybersecurity expert, I implemented and strengthened the security architecture of the FAS platform by integrating secure authentication, encryption of sensitive financial data, cloud security controls, and tokenization improvements while ensuring compliance with GLBA and FFIEC standards. I collaborated with ethical hackers for penetration testing and produced compliance and security documentation.
Education
2005 - 2009
Master's Degree in Telecommunications Engineer
Ecole Superieure Multinationale des Telecommunications (ESMT Dakar) - Dakar, Senegal
2004 - 2005
High School Diploma in Science
Baccalaureat Diploma - Abidjan, Ivory Coast
Certifications
JULY 2025 - APRIL 2027
AI Security & Governance
Securiti
OCTOBER 2022 - PRESENT
AWS Certified Solutions Architect Professional
AWS
JULY 2022 - PRESENT
CISSP (Certified Information System Security Professional)
ISC2
MAY 2022 - PRESENT
CRISC (Certified in Risk and Information Systems Control)
ISACA
APRIL 2022 - PRESENT
CISA (Certified Information System Auditor)
ISACA
JANUARY 2022 - PRESENT
CISM (Certified Information Security Manager)
ISACA
DECEMBER 2021 - PRESENT
Project Management Professional (PMP)
PMI
DECEMBER 2017 - PRESENT
Attestation Business Creation
ECF Montreal
NOVEMBER 2015 - PRESENT
Network Session Delivery and Control Infrastructure Sales Specialist
Oracle
SEPTEMBER 2015 - PRESENT
Network Session Delivery and Control Infrastructure PreSales Specialist
Oracle
SEPTEMBER 2015 - PRESENT
CCNP Security
CISCO
SEPTEMBER 2015 - PRESENT
CCNP Voice
CISCO
JUNE 2015 - PRESENT
CCIE Written Security
CISCO
FEBRUARY 2015 - PRESENT
CCNP Datacenter
CISCO
SEPTEMBER 2014 - PRESENT
CDCUCDS (Cisco Datacenter Unified Comuputing Design Specialist)
CISCO
MAY 2014 - PRESENT
FCNSP (Fortinet Certified Network Security Profesionnal)
Fortinet
MAY 2014 - PRESENT
ITIL Foundation Certificate in IT Service Management
EXIN/EXOLIOS
FEBRUARY 2013 - PRESENT
ACFE Alcatel-Lucent OmniPCX Enterprise R10
Alcatel-Lucent
Skills
Libraries/APIs
RADIUS, Java Security, Azure Media Services API, Node.js, React
Tools
SAP Security, AWS IAM, Splunk, VPN, Logging, Azure Key Vault, Amazon Virtual Private Cloud (VPC), Azure Network Security Groups, BitLocker, NMap, Google Workspace, Grafana, GitHub, Terraform, AWS Proton, Ansible, BigQuery, Loki, SonarQube, Codacy
Languages
SAML, Snowflake, Ruby, Embedded C, TypeScript, JavaScript, Java SE (Core Java), Python
Paradigms
API/Services Architecture, Web Architecture, Web Application Architecture, Cisco Certified Network Associate Routing & Switching, Management, DevSecOps, Role-based Access Control (RBAC), HIPAA Compliance, Agile Project Management, Microservices Architecture, Microservices, UI Design, Penetration Testing, DevOps, Agile
Platforms
Amazon Web Services (AWS), Azure, Vanta, Cortex XSOAR, Cloud Run, Web, Google Cloud Platform (GCP), MacOS, Replit, Docker, Kubernetes, Firebase, DigitalOcean
Industry Expertise
Cybersecurity, Telecommunications, Healthcare, Insurance
Storage
Data Centers, Google Cloud, Microsoft Entra ID, Amazon S3 (AWS S3), Azure Cloud Services, Datadog, Azure Active Directory
Frameworks
OAuth 2, Angular, JSON Web Tokens (JWT)
Other
CISO, IT Project Management, IT Projects, Architecture, Web Security, Web App Security, IoT Security, IT Management, Cloud, IT Governance, IT Audits, IT Service Management (ITSM), Network Security, IP Networks, Networks, Voice, Collaboration, IP Routing, Cisco Switches, Risk, Networking, IT Networking, IT, Design Collaboration, Routing, Cloud Security, Business Planning, Business Continuity Planning (BCP), Business Continuity & Disaster Recovery (BCDR), Business Continuity, Identity & Access Management (IAM), AWS Cloud Architecture, Controls, IT Systems Architecture, IT Security, Cloud Architecture, Disaster Recovery Plans (DRP), Certified Information Systems Security Professional, Fortinet Firewall Configuration, Alcatel, Certified Project Manager, CCIE, Cisco Certified Network Professional (CCNP) - Data Center, Cisco VoIP CCNP Voice CIPT1, Cisco VoIP CCNP Voice CIPT2, CCNP Security, IT Services, Team Leadership, Wireless Networking, Security Architecture, Security, Cisco, Engineering, Information Security, Security Information and Event Management (SIEM), IDS/IPS, Vulnerability Scanning, CISSP, CISM, Compliance, ISO 27001, Information Security Management Systems (ISMS), Cloud Networking, Security Audits, Security Compliance, Artificial Intelligence (AI), AI Security, Risk Models, Mobile Device Management (MDM), SecOps, SOC 2, Network Design, Application Security, Product Security, Vulnerability Management, SOC Compliance, PCI DSS, General Data Protection Regulation (GDPR), PCI Compliance, Software Architecture, Risk Assessment, PCI, Wiz Cloud Security Platform, NIST, Code Review, Risk Management, Web Application Firewall (WAF), Reverse Engineering, STRIDE, Web Application Security (Web AppSec), Risk Analysis, Security Assessment, Vulnerability Remediation, Vulnerability Assessment, Data Retention, Incident Response, Infrastructure, AWS Cloud Security, Software Development Lifecycle (SDLC), Solution Architecture, SIEM, Security Operations Centers (SOC), Auditing, Personally Identifiable Information (PII), Audits, Access Control, Azure Databricks, Cloud Platforms, Unity Catalog, Web Applications, HIPAA, Documentation, Policies & Procedures Compliance, Security Policies & Procedures, Security Engineering, Endpoint Security, Technical Leadership, IT Administration, Education Technology (Edtech), MDM, SaaS, Startups, GDPR, Data Privacy, CSPM, Consulting, SAP, Wiz.io, CyberArk, Data Governance, Governance, Cisco Wireless, Multiprotocol Label Switching (MPLS), Privileged Access Management (PAM), Disaster Recovery Consulting, Google Cloud Architecture Framework, APIs, Request for Proposal (RFP), Request for Information (RFI), Telecom Business Support Systems (BSS), Border Gateway Protocol (BGP), Microsoft Defender Antivirus, Palo Alto Networks, ISO 21434, Okta, OpenID Connect (OIDC), Network Monitoring, Sprints, User Experience (UX), User Interface (UI), Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), CI/CD Pipelines, OWASP, Industrial Control Systems (ICS), Encryption, CAPTCHA, Pipelines, Orchestration, White-hat Hacking, Workflow, Offensive Security, Red Teaming, Back-end, Active Directory (AD), Bluetooth Low Energy (BLE), Bluetooth, Data Orchestration, MacBook, Supabase, California Consumer Privacy Act (CCPA), Telemetry, OpenTelemetry, Fintech, Fivetran, Azure Data Factory (ADF), PHI, Full-stack, Apple Business Manager, Apple DEP, Prompt Engineering, Tax Accounting, Cisco CCNA Voice Certification, Telecom Equipment & Solutions, Business, Science, Design, GitHub Actions, Prometheus, JSON Web Signature (JWS), MERN Stack, Open-source Intelligence (OSINT), Scraping, Tokenization, Cloudflare
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring