Senior Cybersecurity Consultant

Integration into the team at KBC within the banking and financial services sector to pilot the architecture and transformation strategy of a large-scale PAM modernization program.

• Defined the target PAM architecture and vault consolidation strategy.
• Led the migration from a distributed vault model to a centralized model.
• Standardized the governance framework and privileged access model across the organization.
• Designed and delivered the complete transformation and migration roadmap.
• Technical environment: CyberArk, PAM Architecture, Information Systems Security.

Joined ADB Safegate within the aviation and critical infrastructure sector to secure a supplier contract as a security partner and trusted hardware provider for airfield ground lighting systems.

• Delivered system hardening and secure configuration for airfield ground lighting racks and controllers.
• Applied cybersecurity best practices and defense-in-depth to critical OT and airside-adjacent infrastructures.
• Advised on OT security posture, vulnerability remediation, and ground airport system resilience.
• Bridged hardware supply and security assurance as an ongoing on-demand partner for new airside deployments.
• Technical environment: OT Systems, Critical Infrastructures, Airfield Lighting Hardware.

Took charge of the design and delivery of a greenfield CyberArk Vendor PAM platform in a regulated telecom environment for Proximus.

• Designed end-to-end Vendor PAM architecture in compliance with NIS2 requirements.
• Defined the governance model, onboarding processes, and audit framework.
• Implemented PSM-based privileged session traceability across all vendor accesses.
• Established PAM KPIs and executive security dashboards for management visibility.
• Technical environment: CyberArk, Vendor PAM, PSM, NIS2.

Practiced as an architect and program owner across financial services, pharma, and retail for modernization programs and enterprise CyberArk PAM architectures.

• Designed and implemented enterprise security architecture across the entire privileged access stack (Vault, CPM, PSM, PTA, CP / CCP, Conjur).
• Piloted the full lifecycle of privileged accesses, from onboarding and operations to decommissioning.
• Directed platform security: vulnerability management, patch application, hardening, and compliance.
• Defined and executed BCP / DR strategies with failover testing, and delivered enterprise integrations across SIEM, ITSM, AD, and the cloud.
• Managed CyberArk Core PAS production environments and ensured operational continuity.
• Managed privileged account integration: discovery, vault creation, reconciliation, and validation.
• Built automation playbooks via CyberArk REST APIs, reducing manual operational workload.
• Delivered SWIFT CSP and NBB compliance reports; recognized as a technical UNIX reference in Europe.
• Technical environment: CyberArk, Vault, CPM, PSM, PTA, CP/CCP, Conjur, SIEM, ITSM, Active Directory, Cloud, REST API.

Integrated the privileged access practice at Devoteam, supporting Euroclear and Mercedes Pay, gradually taking responsibilities for integration, onboarding, and automation in large-scale enterprise environments.

• Took charge of onboarding, integration, and automation in enterprise PAM environments.
• Improved onboarding efficiency, operational stability, and automation maturity.
• Technical environment: PAM, Enterprise Environments, Euroclear, Mercedes Pay.