Dorin BARBOIU

From technical point of view I am responsible for:

Sentinel Migration + DLP

• Use case migration from Splunk to Sentinel
• New Data Sources onboarding (Standard and Non-Standard Connectors)
• Review the Use Cases from performance point of view
• Develop and optimize new Sentinel KQL
• Deploy new DPL policies for different Use cases

Cybersecurity Projects

• Design security solution for a governmental cloud
• Design security architecture for 2 solutions: EDR and Anti Virus Platform

Designing security architecture based on the customers requirements with a strong focus in encryption/ cryptographic area for for public cloud infrastructure and private cloud infrastructure. (Different HSM products integration with the public cloud)

Designing and implemented O365 Security Solutions based on the customer's license

Design and implement Cloud Security solutions based on Microsoft Azure native security service, following HUB and SPOKE model:

• Privilege Identity Management at Azure Resources level and AD level
• Enabled MFA for group of people
• SSO integration with 3rf party applications (around 50 apps)
• Define Conditional Access Policy
• Encrypt Data Bases, VM Disks, Storage Accounts using Azure Key Vault and Azure Key Vault Managed HSM.
• Enabled Defender for Cloud with all plans (Defender for Servers, Defender for Endpoint, Defender for Database etc)
• Enabled and monitor Defender CSPM
• Implement Defender for Cloud Recommendations
• Remediate vulnerabilities exposed in Defender for Endpoint Console
• Configured MDE to act as EDR in block mode
• Deployed Cloud-based endpoint management solution: Intune
• Deployed and configured Microsoft Sentinel

Implemented Ansible Playbooks for RHEL8 to hardened the OS. Network Security (Azure DDOS Protection, Web Application Firewalls, Azure Gateway) - Basic understanding concept

Computer Network, 3rd year:

• Explained OSI Layer
• Routing protocols
• Wireshark, Packet Tracer

Security of computer networks, 1st year Master Degree:

• Explained DDOS attack
• Nessus Essentials
• NMAP, LYNIS, NGFW Palo Alto

• Started to lead encryption team from technical perspective.
• We have deployed different encryption solutions to secure cloud environment using BYOK technology and on premises environment ( encrypted databases, files, VM life cycle) using different types of HSMs and KMS.
• Technology: Python, Bash, Docker, Cloud Services (AWS,GCP Azure), Encryption Services (CMEK, CSEK, AWS Cloud HSM, AWS Cloud KMS, Azure Vault), Virtru Crypto Products: Proteccio HSM, Luna HSM, DataProtect KMS, Thales HSM.
• Other Projects where I was leading: Atos DataProtect KMS configured and integrated with GCP services (Compute Engine, Cloud Storage) Atos DataProtect KMS configured and integrated with Azure Key Vault and Amazon Cloud KMS for customers from eco and energy area
• Configured and integrated Atos Proteccio HSM with Solaris 10 and Tomcat 6 for customers from financial area
• Developed encryption mail solution by Integrated Proteccio HSM with Virtru Administrated Luna HSMs and Proteccio HSMs for customer form audit, aeronautic, defense area
• Designed and implemented PKI solution using HSMs

• Being part of Big Data and Security department, my responsibilities were to administrate the High Performance Computing infrastructure for a customer from automotive area, by doing hardware and software troubleshooting, developed methods for orchestration tool and benchmark tests for different applications.
• Technology used : Univa Grid Engine, scVenus, Nagios, BMC Remedy OS used: Linux (Open Suse and RHEL) Other Project: Implemented and automated Nagios using Ansible for a large number of servers.

• Developed and automate benchmark tests for Hyper-V drivers with an important focus regarding network and storage performance for Microsoft LIS project (https://www.microsoft.com/en-us/download/details.aspx?id=55106)
• Build up a Ci/CD Pipeline to tests the
• Technology used: Python, Bash, Power Shell, Microsoft SQL, Jenkins, Git and Power BI OS used: WS Server (2008, 2012, 2012R2, 2016, Nano Server), RHEL distributions, Ubuntu distributions, OpenSuse distributions.
• Other Projects where I was part of: Openstack deployments using RDO and DEVSTACK Built custom windows Images for bare metal servers Kernel compilation for RHEL, Ubuntu and Open Suse.