Experience
-
Orange Business
Aug. 2024 – PresentSolutions & Pre-Sales Engineer Paris, France- Bid Engineering: Contributed to 4 Tier-1 banking & insurance RFP responses, translating client infrastructure and security requirements into connectivity architecture, costing, and alignment with Product Owners and deployment teams.
- Azure ExpressRoute & Security: Designed zero-Internet private connectivity from a bank’s on-prem site to Azure Italy North; chose direct ExpressRoute over vWAN (per-hub cost unjustified for two sites) and specified Palo Alto VM-Series inspection.
- SD-WAN & Satellite Integration: Co-designed LEO satellite backup for international branches of a 3,500+ site Cisco SD-WAN: LEO over GEO for latency, OneWeb over Starlink to limit third-party concentration risk (DORA).
- BGP & Anti-DDoS Diagnosis: Early diagnosis on a live DDoS incident on a real-time payment service: the scrubbing /24 never reached on-net routers (partial routing tables), so attack traffic followed the /18 by longest-prefix match and bypassed anti-DDoS; it fed the operator’s response.
- Production Automation (Go): Built and deployed a standalone Go CLI automating fiber address qualification (SSO/JWT-authenticated, headless): 300+ requests processed in under 5 minutes instead of 3 days; in production, presented to 80+ engineers.
- Enterprise AI Tooling (MCP & Go): Built a prototype connecting Orange’s internal AI assistant to a legacy client-data tool: client architecture retrieved in under 20 s instead of a manual, screen-by-screen search; browserless corporate SSO sign-in (NTLM/SAML) and an MCP server with a designed access model. User pilot starting.
-
Orange Services
May 2025 – July 2025Software Engineer, iOS (Intern) Bucharest, Romania- Accelerated development cycles: Implemented a "Demo Mode" with a mocked data API, enabling production-like journeys independent of backend availability.
Projects & Hackathons
- Paris, France
- Lexora: Built the team’s first working prototype of a WhatsApp intake assistant for criminal-defense firms (team of 4): voice notes transcribed with Voxtral, documents read by OCR, every agent action recorded in a tamper-evident HMAC-chained log.
-
Agent Control Point – Deterministic Governance for AI Agents (MCP)
Sept. 2026 – Present- Engineered a public zero-trust gateway between AI agents and their tools: limits what a compromised or prompt-injected agent can do (demo blocks 4 attack attempts); implemented SPIFFE/SPIRE workload identity (mTLS), human approval for sensitive actions, tamper-evident hash-chained audit log; k3s lab with e2e tests.
-
leVPN – Multi-Region Forward Proxy
May 2026- Developed a public Go forward proxy (HTTP CONNECT over TLS 443) with a reusable Terraform module for one-flag multi-region AWS rollouts; served 20+ users and 11,800+ encrypted connections for under $20/month.
Education
-
ECE Paris – School of Engineering
Sept. 2024 – Aug. 2027Master of Engineering in Cybersecurity & Information Systems Paris, France -
University of Orléans
Sept. 2022 – June 2024L2 - Double Bachelor’s Degree in Mathematics and Computer Science Orléans, France
Certifications
- AWS Certified Solutions Architect – Associate (Issued Jan. 2026)
Skills
- Networking & Security
- BGP, MPLS / VRF, IPsec, TLS & PKI, Cisco SD-WAN, SASE/SSE & ZTNA design, DDoS mitigation
- Cloud & Infrastructure
- AWS (Certified SAA), Azure ExpressRoute, Terraform, Docker, Kubernetes, Linux, SDN/NFV
- Programming
- Go, Python, Bash, SwiftUI
- Vendors (design level)
- Palo Alto (VM-Series, Prisma), Fortinet, Zscaler, Cisco WLC
- Languages
- French (Native), English (Full Professional Proficiency)