Mohamed Ghassen Brahim

Projects:

Project: RWE – Development of a company-wide Zero Trust cybersecurity architecture (CITADEL) Role: Senior Enterprise Cybersecurity Architect / Zero Trust Architect Company: RWE AG Description: Concept and implementation of the strategic CITADEL cybersecurity target architecture at RWE, based on the Zero Trust architecture principle and aligned with regulatory requirements such as NIS2, ISO 27001 and company-wide security governance policies. The goal was to build a measurable, auditable and scalable security architecture with a strong focus on Identity Governance, compliance transparency and operational manageability. Responsibilities & Achievements:

• Zero Trust architecture design: Developed a company-wide Zero Trust reference architecture (Identity, Device, Network, Application, Data) including trust zones, control points and enforcement mechanisms according to NIS2.
• Identity & Access Governance (IGA): Designed and introduced IGA governance structures including role models, recertification processes, segregation of duties (SoD) and lifecycle management for identities and access.
• Security governance & KPIs: Defined and implemented security KPIs and metrics to manage Zero Trust maturity, identity risks and compliance at the management level.
• Compliance & reporting: Built standardized compliance reports and dashboards to support internal audits, external assessments and regulatory evidence (e.g. NIS2).
• Architecture & stakeholder alignment: Worked closely with Enterprise Architecture, IT operations and business units to integrate the CITADEL architecture into existing IT and security landscapes.
• Strategic security consulting: Advised programs and projects on Zero Trust compliance, identity centricity and regulatory requirements in the energy and critical infrastructure (KRITIS) environment. Technologies & Methods: Zero Trust Architecture, NIS2, Identity Governance & Administration (IGA), IAM, RBAC, SoD, Entra ID, SailPoint, Zscaler, Terraform / IaC, Policy as Code, security KPIs, compliance reporting, NIST 2.0, ISO 27001, Enterprise Security Architecture, governance frameworks, risk & control management

Project: Scalable AI Workbench Platform on Microsoft Azure Role: Cloud Architect & Engineer Company: Siemens Energy Description: Design, development and operation of a secure, modular cloud infrastructure to support Data Science, Machine Learning and AI applications for various engineering teams at Siemens Energy. Responsibilities & Achievements:

• Cloud architecture: Designed and implemented an Infrastructure-as-Code solution (Terraform) for automated provisioning of Azure resources (Resource Groups, Storage Accounts, Cosmos DB, Application Insights, networking, PostgreSQL Flexible Server, Azure Container Apps, Azure Container Registry).
• Developer portal: Used Backstage with custom frontend and backend plugins (Node.js, TypeScript, React.js, PostgreSQL, Container Apps) to enable self-service and empower developers, data scientists and AI/ML engineers.
• Role-based access control: Implemented Azure RBAC to grant targeted access (e.g. Storage Blob Data Contributor, Reader) to engineering groups (e.g. AI Engineers) for relevant resources.
• Data platform engineering: Built and configured a multi-layered storage landscape (Raw, Curated, Vector data), including automated container creation and access control for advanced analytics and AI workloads.
• DevOps integration: Integrated with Azure DevOps for CI/CD pipelines to automate deployment, monitoring and compliance.
• Security & compliance: Implemented Private Endpoints, network policies and Managed Identities to ensure data protection and regulatory compliance.
• Collaboration: Worked closely with cross-functional teams to align the cloud infrastructure with business and technical requirements and drive digital transformation at Siemens Energy. Technologies: Azure, Terraform, Azure DevOps, Cosmos DB, Application Insights, Azure Storage, Private Endpoints, Azure Synapse, Azure Machine Learning, Azure Entra ID, RBAC, Backstage, Node.js, React.js, PostgreSQL, Python (automation), Git

• Developed a risk assessment solution for re/insurance companies
• Architecture design, prototyping, POC, MVP and full product development on Azure
• Built CI/CD pipelines with Azure DevOps, app registration, security (Azure AD, Federation Services)
• Developed services in Node.js and .NET Core, compliance gate, security concepts
• Disaster recovery, business continuity, code reviews, unit tests, health checks, BDT, BIT, UI tests (Selenium, Mocha, NUnit, SpecFlow)

• Developed innovative fintech in crowdfunding, investment banking and blockchain
• Technologies: C#, .NET Core, ASP.NET Core, Azure Logic Apps, Azure DevOps (CI/CD), Azure Functions, Docker, Docker Compose, AngularJS, SQL Server, Redis, AWS

• Developed web applications with AngularJS, jQuery, Oracle, ASP.NET MVC, C#, HTML5, CSS3, Bootstrap, respond.js
• Advised on architecture and design, improving performance and reliability

• Developed APIs and Visualforce components in Salesforce (Apex, Triggers)
• Deployed Node.js microservices on Heroku
• Developed React Native apps for iOS/Android insurance management
• Client projects in real estate, IT consulting, e-commerce, financial services with Salesforce configuration, Marketing Cloud/Pardot

• Solution design and framework development for SaaS CRM using C# MVC 5, SQL Server, HTML5, CSS3, Bootstrap, JavaScript, jQuery, Kendo UI
• Development of a Smart City web interface with Meteor.js, DynamoDB, AWS SNS/S3, Google Maps API
• Mobile apps with Angular.js and Ionic, SOAP and REST API integration

• Requirement analysis and architecture design (UML), database design and prototype development of a maintenance management system with C# MVC 4, SQL Server 2012, JavaScript, HTML5, CSS3, jQuery, Kendo UI