PG / 2026Rouen · France · Remote & on siteFreelance Thu & Fri · full time from January 2027

Security that holds up in production.

I help you deploy endpoint protection, build an actionable SIEM and secure your infrastructure. From the initial assessment to handing it over to your team.

Book a call Download my CV

LinkedIn

Malt

§ 01EXPERTISE

Protect. Observe. Make it reliable.

Practical engagements grounded in your team’s needs and production constraints.

Protect

EDR · Identity

Stop an attack from getting in and spreading: advanced protection on every computer and server (EDR), and locked-down accounts and access.

EDR & endpoint protection

Windows/Linux rollout, CrowdStrike Falcon policies, Firewall Management and Device Control. GPO/Ansible automation, coverage validation and team handover.

What you get

Tuned EDR, firewall and Device Control policies
Repeatable GPO / Ansible rollout
Fleet coverage verification
Documentation and operations workshops

See the real case

Identity & secure infrastructure

Active Directory Tier 0, Entra ID, Conditional Access and PIM. Linux/Windows hardening, network segmentation, audit remediation and vulnerability management.

What you get

Prioritised audit remediation plan
Conditional Access tested, then enforced
PIM and privileged accounts under control
Documented Tier 0 hardening

See the real case

Observe

SIEM · Logs

See what is happening and be alerted in time: every trace gathered in one place (SIEM), with alerts that make sense.

SIEM & actionable detection

Architecture, collection, correlation, detection rules and dashboards. ELK-to-Wazuh migration, log retention and integration with your existing alerting pipeline.

What you get

Architecture and collection pipelines
Detection rules and dashboards
Defined log retention
Backup and recovery procedures

See the real case

Make it reliable

Automation · IaC

Keep everything running in production: infrastructure described and versioned, repeatable deployments and tested backups.

Automation & reliability

Infrastructure as Code, migrations, CI/CD and observability. Repeatable deployments, tested backups and production-ready runbooks.

What you get

Infrastructure described and versioned as code
CI/CD with deployment evidence
Tested backups
Operations runbooks

See the real case

Integrations & toolsMore than 50 tools, from EDR to code.See integrations & tools

§ 02PROJECTS

Systems built, not just sketched.

Professional engagements (end clients anonymised), research and personal engineering. Every project makes its context clear.

P–01Cybersecurity

Extia

Professional engagement · insurance

Windows & Linux endpoint protection

Industrialising EDR coverage across approximately 1,000 endpoints.

HDS-certified environment (health data)
About 1,000 Windows and Linux endpoints covered
Tuned EDR, firewall and Device Control policies
Repeatable rollout through GPO and Ansible

CrowdStrike FalconGPOAnsibleWindowsLinux

P–02Cybersecurity

Extia

Professional engagements & personal infrastructure

From logs to actionable alerts

Building a SIEM pipeline from collection to operations.

Highly available Wazuh architecture
Actionable detection rules and dashboards
Retention, encrypted backups and tested recovery

WazuhVictoriaLogsGrafanaAlertmanager

P–03Cybersecurity

Codbip

Personal project · production lab

EDR CODBIP · policy control

Connecting SIEM visibility with versioned network policies.

Inventory, signals and alerts in one cockpit
Real preview before every policy change
Guarded rollback and an action log

Next.jsAnsiblePulumiDokployNetBird

P–04Cybersecurity

Extia

Capgemini

Professional engagements · telecoms & luxury

Identity, privileges & governance

Hardening Entra ID and Active Directory identity services.

Audit remediation within an ISO 27001 approach
Conditional Access tested report-only, then enforced
Active Directory Tier 0, GPO, DNS and PKI

Entra IDPIMISO 27001Active DirectoryTier 0

P–05Infrastructure

Aimaira

Final-year project & apprenticeship · software publisher

Modernisation with operational control

Architecture, cloud migration and HAProxy load balancing.

About 67% lower costs with HAProxy
SQL Server Always On and a dedicated preproduction
Jenkins CI/CD and a validated migration strategy

AzureHAProxySQL Always OnJenkinsLinux

P–06Infrastructure

CESI

Engineering project · education

A segmented network infrastructure

VPN, firewall, domain services and a DMZ.

pfSense firewall and VPN tunnels
Domain, proxy and controlled access
Web services isolated in a DMZ

pfSenseVPNActive DirectoryIISDMZ

P–07Blockchain

ÉTS Montréal

Research · ÉTS Montréal · 2024

Verifiable voting on Ethereum

A DApp exploring integrity, transparency and auditability.

Research internship at the FUSEE lab
Complete application: interface, API and blockchain
Report and scientific presentation in English

EthereumSoliditySepoliaFastAPIReact

P–08Blockchain

PAOLOMINING

Codbip

Entrepreneurship · since 2021

Blockchain infrastructure & monitoring

Operating nodes, wallets and specialised hardware.

Independent activity since 2021
Hardware monitoring and energy optimisation
Wallets isolated in virtual machines

PoW / PoSLinuxHyper-VMonitoring

P–09Development

CESI

Software project · education

Back up, replay, verify

A multithreaded, multi-job backup application.

Several backups running concurrently
Job replay and daily logs
Continuous integration with Azure DevOps

MVVMMultithreadingAzure DevOpsBackup

P–10Development

CESI

Big Data project · education

From data to a dashboard

An ETL pipeline, Hive warehouse and Power BI analysis.

PostgreSQL and CSV sources consolidated
Hive data warehouse
Power BI dashboards

TalendPostgreSQLHivePower BI

P–11Development

CESI

Programming project · education

Experimenting with sustainable mobility

A demonstrator for mobility solutions across different territories.

Team response to an ADEME call
Passenger and freight mobility
Demonstrators tailored to each territory

PrototypingTeamworkSustainable mobility

P–12Development

Codbip

Entrepreneurship · personal work

Codbip · products & infrastructure

Web applications and versioned delivery infrastructure.

Web applications in production
Immutable images and deployment proof
Centralised secrets and a private network

Next.jsDirectusCI/CDInfisicalPulumi

§ 03EXPERIENCE

Practical experience before promises.

An engineering degree, critical environments and a drive to build things that last.

June → October 2026
Capgemini
Luxury-sector client · professional engagement
Infrastructure & security engineer
Critical identity infrastructure: Active Directory, Tier 0, Windows Server, GPO, DNS, PKI and PowerShell. Risk analysis, remediation, build work and coordination with security and operations teams.
April → June 2026
Extia
Telecoms-sector client · professional engagement
M365 / Entra ID security consultant
Audit remediation within an ISO 27001 approach: Conditional Access, Identity Protection, PIM, sign-in analysis and controlled external sharing. Microsoft Graph PowerShell automation, verification and documentation.
Sept. 2025 → April 2026
Extia
Insurance-sector client · professional engagement
Systems & security consultant
HDS-certified environment (French health-data hosting). CrowdStrike across nearly 1,000 endpoints, firewalling and Device Control, Wazuh SIEM, Linux/Windows hardening, Debian/Oracle Linux migrations, segmentation, Nagios monitoring and operations-team handover.
2022 → 2025
Aimaira
Software for higher education
Systems & networks engineer · apprenticeship
Operating ERP infrastructure, Wi-Fi redesign, Azure cloud, HAProxy, SQL Server Always On, Jenkins CI/CD and architecture modernisation as a final-year project. Incident management, targeted API security work against the OWASP Top 10, and documentation.
Summer 2024
ÉTS Montréal
ÉTS Montréal · FUSEE · Mitacs Globalink
Blockchain & distributed-systems research
International research internship: a secure blockchain-based voting application. Data integrity, traceability, testing and a scientific presentation in English.
FUSEE Lab
Since 2021
Codbip
PAOLOMINING · later Codbip products
Independent entrepreneur · blockchain
Specialised hardware, systems and blockchain protocol operations. Web-product development, infrastructure automation, monitoring and operations.
June → July 2021
Industrial experience
Worker internship · aerospace industry
Learning aerospace-parts manufacturing processes, industrial practices and how production teams work.
March → April 2016
Hardware & IT support
Work-experience placement · IT
Component assembly, diagnosis, vulnerability awareness and security advice for users.

Education & certifications

2025
CESI Rouen
CESI Rouen
Computer engineering degree, cybersecurity specialisation
Work-study programme using problem-based learning: software development, cybersecurity, AI and information systems, in teams and project mode.
2025
ETS
ETS
TOEIC · 910/990
Advanced professional English (B2+).
2024
Mitacs · ÉTS Montréal
Mitacs · ÉTS Montréal
Mitacs Globalink Research Internship
Four-month international research programme at the FUSEE lab, ÉTS Montréal.
2020–2022
INSA Hauts-de-France
INSA Hauts-de-France
Scientific preparatory programme
Mathematics, algebra, wave physics, optics and electromagnetism, with a first hands-on practice of computing and software development.
2020
Lycée Delamare Deboutteville
Lycée Delamare Deboutteville
French scientific baccalauréat, engineering sciences · Highest honours
Physics, mathematics, mechanics, electronics and computing.

Native French · Professional English, TOEIC 910/990 · Spanish B1

Download my CV

A street in Rouen with Notre-Dame cathedral in the background — Fig. 02 — Based in Rouen, France · remote and on-site engagements

§ 04ABOUT

Engineer and builder.

I’m Paolo, a computer engineering graduate from CESI Rouen. My experience connects systems, networks, cybersecurity and software development. I enjoy understanding infrastructure end to end, automating repeatable work and leaving teams with a solution they can operate.

Through Codbip, I also build web products and production infrastructure. Blockchain research in Montréal gave me another perspective on trust, traceability and distributed systems.

View profileMalt

View profileLinkedIn