Adramé Ndiaye

• Lead customer engagements as the technical security authority, currently spearheading a CAD $3.5M AWS ProServe engagement with Sun Life Financial to deliver a secure, enterprise-scale Conversational AI contact center platform. • Architect and deploy security capabilities as code, including WAF, SIEM, and IAM boundary enforcement using Terraform, Python, and CloudFormation. Provide SME oversight for cross-functional teams, reviewing IaC templates, CI/CD pipelines, and architectures to ensure best practices from day one. • Coach executive security and cloud leaders on security strategy, cloud security operations optimization, and Zero Trust adoption across multi-account AWS environments. • Invent and adapt AWS-native services (IAM, GuardDuty, Security Hub, Config, KMS, VPC) to address unique risk profiles and Canadian FSI regulatory requirements (OSFI, PIPEDA) for GenAI workloads processing sensitive customer data. • Direct AWS Partner Network (APN) delivery partners and cross-functional teams (Customer Delivery Architects, Solution Architects) to execute initiatives within a CAD $5.0M (~USD $3.7M) total engagement value.

I joined BNC to oversee security at a tech factory working on a confidential special project. My role requires me to master the intricacies of technology within banking environments, which involves learning new terminology, technology stacks, and operational protocols. The tech factory is tasked with creating and implementing a new ecosystem designed to significantly revolutionize the organization.

• Led a comprehensive overhaul of Bouygues Telecom’s information security program, protecting sensitive data and critical systems for approximately 7,500 employees across multiple countries. • Designed, implemented, and continuously upgraded robust security measures to safeguard network infrastructure and hardware. • Proactively identified vulnerabilities and targeted areas for improvement to uphold the highest standards of cybersecurity. • Managed change processes for overhauling and upgrading security systems, ensuring seamless transitions and uninterrupted protection.

• Integrated Cloud services with Google's managed solutions (Cloud Functions, Firestore, Kubernetes Engine, and Terraform), boosting productivity by 35% for Société Générale, BNP Paribas (Cardif Assurance), and AXA Assurance. • Developed and implemented a comprehensive security and threat management policy for a $5.6 billion banking institution, covering 1,500+ financial and mortgage centers and supporting over 12,000 employees. • Streamlined the consolidation of threat intelligence from diverse sources (academic articles, research papers, vendor publications, partner agencies), reducing reporting time by 40%.

- Supported 6+ early-stage startups in Switzerland, Germany, the Netherlands, and France, delivering secure cloud infrastructure and DevSecOps pipelines across regulated industries (adtech, HR tech, fintech). - Led the design and deployment of Anthos-based Kubernetes platforms for 3 clients, enabling consistent governance and policy control across GCP and on-prem environments, reducing deployment errors by 40%. - Developed and implemented a malware scanning pipeline for file uploads to Google Cloud Storage and AWS S3, handling 10,000+ documents/month, with automatic quarantine or clearance based on scan results. - Defined and enforced Google Workspace DLP policies for an HR consultancy with 150+ employees, reducing policy violations by 80% within 3 months through rule tuning and user education. - Deployed infrastructure-as-code stacks using Terraform and secure CI/CD pipelines with Cloud Build, reducing environment provisioning time from 1 day to under 30 minutes. - Performed Kubernetes hardening using PodSecurityPolicies, RBAC least privilege, and container image scanning, improving compliance posture and reducing critical misconfigurations by 60%.

• Enhanced intranet tool sustainability by configuring G-Suite with a focus on endpoint security. • Safeguarded network integrity through meticulous application whitelisting and blacklisting. • Ensured GMAIL messaging compliance and security by auditing and optimizing the incident management system. • Improved SOA, SAAS, and API management by configuring proactive alerts on the MULESOFT platform. • Conducted rigorous security and confidentiality audits across AMAZON AWS Multi-cloud and Google Cloud platforms.

Consultant - Network Engineering • Spearheaded client network infrastructures (both wired and wireless), achieving an uptime of 80% through the implementation of Cisco SD-WAN solutions, in collaboration with the leadership team. • Developed and executed IT network strategy, encompassing requirements gathering, technical specifications, and target architecture definition. • Led Agile/DevOps transformation projects for leading French companies and blockchain innovations.

As part of the CIO Advisory service line, I enhanced the operational performance through audit and consulting engagements with Key Account clients. My areas of expertise: • Providing customized support to ensure that technological developments align with the company's strategic goals and conducted comprehensive audits of IT functions. • Identifying various intervention areas to discover cost reduction opportunities, institutionalize these practices, and integrate them into a sustainable transformation process for the IT department. • Facilitating the implementation of infrastructure rationalization and outsourcing initiatives. • Offering guidance in selecting appropriate technological solutions. • Delivering project management support for strategic IT projects.

• Led an urbanization study to assess and resolve key challenges in urban logistics, implementing solutions that significantly enhanced data quality. • Led the analysis and optimization of IS authorization procedures at Orange Wholesale France, improving security and ensuring compliance across the organization. • Spearheaded the development of a user-friendly information base, improving data accessibility and driving greater operational efficiency within logistics. • Contributed to the strategic planning and prioritization of application security measures, enabling more efficient data extraction and analysis. • Utilized VBA programming to develop several resource management applications in the logistics sector, compliant with the Sarbanes-Oxley Act, enhancing operational integrity and accountability. Technical Environment: • Database Management Systems (DBMS) • Enterprise-grade cloud computing solutions • VBA scripting for automation and process enhancement • SQL for database querying and management