Guillaume Brenier

Consultant, Cloud Architect

Consultant, Cloud Architect on Azure and GCP

• Networking: Vnet, VPC, Load balancer L4/L7, Traffic Manager, Akamai CDN/WAF, ExpressRoute, Interconnect, routing, Azure/GCP private access topologies
• Compute: VM, GKE, AKS, ACI, CloudRun, Dataflow, Vertex AI
• Security: perimeter/zero trust, VPN, FW, (reverse) proxy, bastion, certificates, IAM (RBAC, SAML, OAuth2, OIDC), CIS benchmarks, encryption, key/secret management, separation of duties
• Storage: Disk, Bucket, Storage Account, AzureSQL, NetApp, CloudSQL, BigQuery, Filestore
• Microservices: PubSub
• Backup/Recovery, DRP: Azure Backup, Google BDR, SLA
• Automation & IaC: GitHub, Python, Azure DevOps, Terraform, Kubernetes (AKS, GKE)
• Systems: AD, Linux, Windows Server, DNS architectures, Citrix, Mail (DKIM, SPF)
• Projects: GenAI, Move2Cloud, DRP, SFTP, SAP S/4, Citrix, Data science, IT merger, eCommerce

Consultant, SAFe Product Owner for the Cloud Management Platform

• Defining requirements and the backlog (in-house application)
• Incident, documentation and communication management
• Working with stakeholders (IT delivery, PO, PM, dev, ops, security)
• Writing an RFI for a “make vs. buy” study in the context of the upcoming multi-cloud environment
• Ecosystem: OpenStack, OpenShift, Vault, PostgreSQL

Web application development

• Design of the 3-tier architecture on AWS
  • Segmentation (Account, IAM, VPC, Subnet)
  • Security (ACL, SG, Secrets Manager, WAF)
  • Application: containers with ECS + Lambda + SES
  • ALB + CloudFront
  • ElastiCache (Memcached) and Aurora (MySQL)
  • Monitoring: CloudWatch, SNS
  • Repos: GitLab, ECR
  • IPSec on-premises connectivity (BGP routing, Transit Gateway)
• Setting up the continuous deployment pipeline for application + infrastructure: Terraform Cloud, GitLab-CI (GitLab flow for the application and GitHub flow for the infrastructure)
• Infrastructure-as-code: Terraform / CloudFormation
• Application development (Python, HTML, CSS, Django, Bootstrap)

Consultant, responsible for overall technical consistency – Move-to-Cloud project migrating the China infrastructure to Alibaba Cloud

• Preparing the migration phase
• Cloud architecture design (VPC, connectivity, network addressing, etc.)
  • Support for the SAP ecosystem (SAP ECC application / IBM DB2 / satellite systems)
• Security building blocks of the technical and managed offering (encryption, identity management, environment isolation, Security Assurance Plan)
• Business continuity and disaster recovery plan (cross-AZ and cross-region replication)
• WAN connectivity and resilience mechanisms

Cloud consulting engagement – Support in running an RFP for separate DataCenter-as-a-Service offerings in Europe and China, in French and English

• Presenting technical and organizational cloud concepts
• Cloud migration strategy
• Building a business case
• Conducting interviews / workshops
  • CTO, CISO, IT managers and bidders
• Building and analyzing the inventory, gathering requirements
• Writing the requirements specification
• Technical and financial analysis of the bids
• Contract and commercial negotiations
• Defining architectures aligned with the service commitments
  • Telecom
  • Cloud
• Internal communication on the newly available offerings

Consulting engagement – Scoping the future mobile VPN solution, in French and English

• Workshops with the Technical Directors (current state, requirements, solution overview)
  • Current-state analysis
  • Requirements gathering
  • Presentation of market solutions and best practices
• Deliverable: Group standard for the mobile VPN solution
• Objective: launching an RFP based on the standard

Run and WAN Delivery Manager (team of 4)

• Incident and change management (ITIL environment)
• Scope: WAN, LAN, Wi-Fi, proxy, DC, VoIP, FW
• Client relationship management (steering committees, quality monitoring, continuous improvement, etc.)
• Continuous improvement management (defining IT processes, etc.)
• SATAWAD context (Secure Anytime, Anywhere, Any Device), closure of private DCs as part of the move to cloud

Consulting engagement – WAN strategy review

• Analysis of the current state and requirements
• Architecture study and scoping document for the IT master plan
• Contracting support (negotiations, drafting contract schedules)
• Volume sizing and service commitments (SLAs and KPIs)
• Context: preparing a “public cloud ready” network (SD-WAN)

Consulting engagement – Telecom infrastructure overhaul

• Scope: LAN / WAN / VoIP and public Wi-Fi
• Analysis of the current state and requirements
• Writing the requirements specification
• RFP management (bidder relations, bid evaluation, business case)
• Volume sizing and service commitments (SLAs and KPIs)
• Executive summary for senior management and contracting support
• Context: opening up the IT landscape to cloud offerings

Support for public Wi-Fi rollout projects, in French and English

• Presenting the Group Wi-Fi standards to local entities (in France and abroad)
• Tracking and approving the equipment to order / deploy (technical architecture, budget)
• Monitoring vendor compliance with the standards

WAN Project Manager (Italy, UK, Germany, Switzerland, Brazil), in French and English

• Running RFPs (technical and financial analysis, writing the requirements specification, contract negotiation)
• Deployment/Acceptance testing (pilot + full rollout phase)
• Transition to operations (run)
• Billing activation
• Stakeholder coordination (Carrier, local IT, Procurement, Legal, Engineering, Operations, Financial Control)
• Responsible for all aspects of the project: identifying and planning activities, controlling and monitoring costs, quality, timelines and risks, reporting to management