romaric onana haentjens

Mai 2022 – December 2022: Network administrator at Mediapart – Paris (75)

Network activities

• Draw HLD (High Level of Design) network architecture of the differents sites.
• Rebuild the network of one of the client sites, build a new network architecture, replace some equipment or reconfigured them (equipment’s Fortinet, Juniper, DLINK-AP, DELL)
• Wrote the road map of the switching of the equipment’s without disturbed the consistency of service. 
• Maintain and propose new evolution for the network equipment’s of the sites: physical and logical network of both site / Dot1X (802.1x) configuration / LACP configuration / AP-Controller / AP

Firewall

• AP wifi / Controller wifi: optimize the covered wifi on all our sites.
• Build the VPN IPsec access Between our sites.

January 2021 – Mars 2022: Network and system Consulting, Responsible for the Network Infrastructure, Transdev – ATS (Autonomous Transport System) Versailles, FR.

Cloud activities

• Define HLD and upgrade the network architecture of the ATS (Autonomous Transport System) solution.
• Implementation and configuration of different technologies (Broker MQTT, SIP server-Asterisk, IPsec-Strongswan, Openvpn, SD-WAN, PrivateLink technology, server-DNS, LDAP-server (FreeIPA).
• Define and apply the network filtering (Security groups) between all the VPC (Virtual Private Cloud), between the Cloud VM (Virtual Machine) and between the traffic from the Backend (Cloud) and the Frontend equipment’s (shuttles, Operating Control Center).

Cybersecurity activities

• Responsible for the network expertise in the MITRE ATT&CK working group. Find and apply solution to satisfy the requirements regarding our systems. 

SD-WAN (VeloCloud) integration

• Implementation the VMware VeloCloud solution in the Cloud Instances and on the physical machines.
• VCO (VeloCloud Orchestrator): VMware tool for Monitor, configure, test and manage all your equipment’s. 

Build the PKI solution for ATS

• Define the PKI architecture (root CA, Sub CA, Registry Authority and Validation Authority) and integrate it in our global network architecture.

Benchmark Cloud providers

• Benchmark hybrid Cloud solutions (AWS, Google Cloud, OVH, OutScal).

Jan 2019 – December 2020: Network Consulting, Migration of network equipment, AIRBUS Defence and Space, Elancourt, FR.

Switch benchmark

• Component companies: CISCO, JUNIPER, HP-ARUBA, EXTREME and ALCATEL

Requirements: environmental, Technical and performances 

• Drafting of the Benchmark documentation

Network devices migration

• Build and validate the stacking configuration on Cisco for all the current topology
• Test and choose the correct SFP transceiver / Port security configuration on CISCO or Juniper.
• Configurate all the other commutation functions on Cisco and Juniper switch:

Vlan, Local authentication (AAA), Sflow, Spanning- tree, static routes, http, scp, ssh, remote authentication (radius), Extended and standard Access Lists, NTP, SNMP and Spanning Tree (MST).

Build the test environment 

• Test the port security implementation, upgrade the commands on the user’s tools  
• Transceiver validation: connection between Cisco and Alcatel, or Cisco and Cisco.

Products from: Avago, Startech, Alcatel, Cisco and others.

• Migrate all the configuration of the Access Control Lists (ACLs) translation from the Alcatel technology to Cisco technology (stateless equipment), Cisco ACLs technologies: Port ACLs (PALCs), Cisco IOS ACLs (ACL apply on level 3 interfaces) Vlan ACLs (VACLs). Testing the three technologies.

Nov 2017 – Dec 2018:  Network Consulting PMR (Private Mobile Radio Network), IP/MPLS Backbone Deployment, Thales SIX-Vélizy, Fr

Conception and design

• Find the appropriate solution to transport a Multicast traffic on a Backbone. 
• Studying MPLS MVPN (Multicast VPN) & MLDP (Multicast LDP)/ Multicast PIMv2/ Auto-RP, BSR.

Prototyping the solutions on the platform 

• Implement the solution I chose (MPLS MVPN/ BGP, OSPF, EIGRP routing/ PIM-SSM, Auto-RP/ QoS).
• Unit validation of the proper functioning of the solution, drafting of the test books.
• Implementation of tooling tests and passing all the test books (MulticastHammer / Iperf)

Global validation of IP/MPLS Backbone

• Test the traffic limit with MulticastHammer, Multicast group with Iperf and radio equipment tools, Qual’IT tool for QoS implementation.
• Derisking of migration in the field, writing the migration procedure.

February-July 2017: Trainee engineer Software Defined-WAN, AIRBUS Defence and Space, Elancourt, FR.

Prototyping SDN solution on our network build in CML

• Study: Network configuration protocol, ODL (OpenDayLight) Controller SDN and YANG language.

Handling Cisco Modeling Labs platform (CML)

• Study and product documentation of CML/ Test the platform capacity (Debit)

     Study and implementation of the Cisco traffic engineering solution (PFR)

• Study and build the PFR solution on my CML labs (routing BGP, OSP, Virtual routing forwarding Cisco).

Realization WAN Design (Similar to the client model, security and Bandwidth constraints)   

• Study, Validation of BGP protocol under the Cisco environment, tools Iperf.

2016-2017: Master Informatic in Computing and Networking, Pierre et Marie Curie University (UPMC) Paris 

June-August 2016: Certified from Manchester Academy of English, upper-intermediate.

2012-2014: Master (IST) in Electronic Equipment for Telecommunication, Paris Sud University 

2011-2012: Bachelor of Science Degree (IST) Information Systems and Technology, Paris Sud University

2009-2011: Technology University Degree (DUT) Electrical engineering and industrial computing, Evry University