Léonardo - Chef de projet WINDOWS 2003

Unified GEM workplace and Windows 10 migration
Engie Global Markets (ex GDF Suez Trading) via Artemys
Context: Due to Windows 7 end of support, GEM workplace must be upgraded to
Windows 10. There is still 2 workstation suppliers (3000 pc, 2/3 managed by EGM, 1/3
managed by Engie IT). This is also the opportunity to unify the computer workplace by
replacing Engie IT computers by EGM computers. In the meantime, GEM is growing
internationally and process should be created to deploy new Trading Desks in new
countries. Furthermore, the new Trading Software (Orchestrade) requires more powerful
computers to compute, new models must be purchased.
Achievement:
- Define the new Windows 10 environment to comply security constraints
- Define the new hardware catalogue
- Define the unified application catalog and define the business applications profiles.
- Follow the application remediation and order Ivanti sof tware to fix UAC and ACL
issues; this sof tware helped to avoid a huge remediation budget for legacy applications
- Steer and manage the windows 10 project
- Enhance skills, and mindset, and level of quality of the helpdesk team members,
during their onboarding in migration projects with the Workplace Engineers.

Digital & Workplace Service Manager
Léonardo ******** – ********.i

- Define the processes to migrate Traders f rom the Engie IT network with Engie IT PC,
to the GEM network with GEM computers.
- Nexthink contract and build of the Cloud service for GEM in order to :
o Manage home working support due to Covid-19 situation
o Reduce costs of the support teams
o Automate common process of the Helpdesk and the Administrators with Service
Now integration
o Define KPI to follow the workplace user experience, the monitoring of the most
critical applications at end user level
- Study the technical organization and the governance to create/manage new
workplaces on dif ferent sites and countries
- Study of the modern workplace for GEM, based on Azure Active Directory, Intune and
White Glove process in collaboration with the hardware suppliers.

Unified GEM workplace and Domain migration

Engie Global Markets (ex GDF Suez Trading) via Artemys
Context: Af ter Exchange Online migration, there is still 2 workstation suppliers (2600
pc, 60% managed by EGM, 40% managed by Engie IT). This is make applications running
on any computer, whatever provider it is. As f rom now, network restrictions prevented
running trading applications f rom Engie IT network, and the network flows were closed
between both networks. The Domain migration is also the opportunity to do a final
assessment and define what will be the unified GEM workplace.
Achievement:
- Migrate Engie IT computers and reduce the number of computers in use
- Follow the application packaging project to create all applications in both environment
(GEM and Engie IT)
- Work with Engie to increase the quality of support services on GEM workplace
- Perform an assessment of Engie IT capacity to comply GEM business service Level
when supporting users and computers
- Prepare the future unified workplace where GEM computer should remain the only PC
- Open the flows f rom the Trading network to Engie IT networks to support all
application consumed by GEM
- Deploy on GEM computers the most important applications that never worked before
(SAP and the VPN). As soon as these applications were deployed the business started
demanding to change their workplace environment.
- Resource hiring to build the new GEM workplace
- Increase relations with all technical actors delivering users interface (Citrix team,
Helpdesk, desktop engineers and architects)
S1 2018 : Exchange Online migration for Engie GEM
Engie Global Markets (ex GDF Suez Trading) via Artemys
Context: 4000 mailboxes hosted on premise in Exchange 2013 farm
End of supply contract to manage Exchange servers, expected on June 2018
Mailbox migration will the final step to migrate all Engie users in the Microsoft
Cloud Of fice 365
Remediation must be done on applications using mails services or mailboxes
Of fice 2016 Client migration ongoing as a requirement
Achievement:

Digital & Workplace Service Manager

- Migrate all mailboxes and web services before S1
- Ensure continuity of service without incident for critical business teams. Manage the
migration based on ACL between mailbox or user accounts
- Take into account VIP and assistants constraints
- Validate all requirements before migration
- Update Run processes for the supply chain
- Work on the litigation hold impacts (GDPR versus Trading compliancy and regulation)
- Participate in the change management communications (video streaming, Yammer…)
related to Of fice 365 applications

Active Directory Migration of Engie Global Markets in ENGIE forest
Engie Global Markets (ex GDF Suez Trading) via Artemys
Context: Users to migrate may have account on 3 dif ferent domains. The migration of
these 3 active directories in the Engie Forest is the final target to achieve at the end of
2018 (migration of the GEM Business Unit in the Engie Forest). The first milestone for
the GEM migration concerns Engie Global Markets
Sponsors: ENGIE CTO to lead this program at group level ; GEM CIO
Low impact on application, but remediation is expected
Various directories and meta directories (ADLS, FIM, OKTA, IAM…) are used to
provide credentials to access shared resources or application. Impacts on
these directories must be taken into account.
GEM is an International BU managed by local IT but only Belgium, France and
Singapore are in the scope of this first migration. Other countries must be
informed but will manage themselves the migration.
Integration in the new Engie PKI
Take into account 802.1X requirements for the migration of computers in
Brussels

Achievement: Migrate users and computer with « zero touch » process (scripting)
Migrate users and computers of EGM before End of 2017
Group migration and purge when possible
Upgrade of users and computers management environments (SSCM Current
Branch, Symantec Endpoint Protection 14)
Build of the new master to stage computers in the new forest
Update logon scripts, GPOs to comply the new policies
Update the life cycle process of user accounts
Update the supply chain processes and organize trainings
Deliver a console to migrate manually users and computers when required
(for missing people like travelers…; for missed computers that was not in the
inventory or that remain offline during the several waves of migration)
2016-2017 : Office 2016 migration of GEM in AppStore mode for 2000 people
Engie Global Markets (ex GDF Suez Trading) via le Permis Informatique
Context: 2 environments with Of fice 2007 and Of fice 2010
2 workstation suppliers to manage (3000 pc, 1/3 managed by EGM, 2/3
managed by Engie IT)
Application remediation (Macros, reports and linked application with Excel…)
Remain compliant with Engie Policy

Building of the mobile service for VEOLIA Eau and its infrastructure
(~7000 devices-750 md)
VETECH via IORGA

Digital & Workplace Service Manager
Léonardo ******** – ********.******** – +33 6 7373 4379 Page 5 of 11
Context: 6000 concerned user located in 30 regional centers
3000 former fleet of devices are running under WinCe
Front Inf rastructure of the application is built in Amazon Cloud
Authentication access is based on Google
The former hosted Inf rastructure were unstable
Gouvernance splitted between regions and Business units
Social context is tense (Strikes…)
Achievement: deploy 6000 Androids for business usage
Secure the server inf rastructure and the devices with required policies
Creation of the first Line Support
Building of the fleet management
Call for tender to choose an MDM solution
Creation of the service contract deploy, maintain and support the Mobile
device management solution (Citrix)
Study how to save money with operator contracts (SFR)
Creation of the mobility service offer for Veolia Eau

Build secured technical infrastructures comply PCIDSS regulation
Vinci Autoroute via Neurones IT
Context: 320 toll stations
1 central IT Site
PCI DSS rules should be applied on all payment environments

Achievements: Follow the PCI DSS Audit recommendations to :
- upgrade the current payment inf rastructure of toll stations
- Update the processes to comply PCI DSS rules
- Awareness and to support technical and administration teams on PCI DSS
constraints

Responsible for implementing Secure Wifi Infrastructure and its
delivery service (500 man days)
Eif fage via Neurones IT
Context: 1000 sites distributed in 10 regional departments
20000 Windows XP/7 users
Achievement: Providing Wifi service in any location of Eif fage (including building sites)
Deployment capacity objectives in the next 3 years: 2,000 Wifi access
points
Main activities during the project:
- Participating in Market Study
- Involved in Secured Wifi request for proposal
- Organizing the proof of concept workshops with the 2 final tenderers
- Writing the Services Contract
- Following the delivery
- Managing the Implementation of the 3/3 Microsoft PKI
- Managing the building of the full redundant Wifi Inf rastructure in the client data center
- Change Management for Technical teams and existing processes
- Monitoring the Wifi deployment in 5 pilot sites located in 4 dif ferent regions of France

Digital & Workplace Service Manager
Léonardo ******** – ********.******** – +33 6 7373 4379 Page 6 of 11
Technologies:
- Security Certificates : Microsoft Windows 2008 3/3 PKI and OCSP
- 802.1X Authentication: Windows 2003 Radius IAS, Windows 2008 Radius NPS, Windows
2003 Active Directory and GPO
- Wifi : Aruba 3600 Controlers ; Remote and Campus Access Points, Mesh and Bridge
Mode
2010-2011: Responsible for Migrating Eiffage workstations from Windows XP/MS
Office 2003 to Windows 7/MS Office 2010 (1500 man days)
Eif fage via Neurones IT
Context: 1000 sites distributed in 10 regional departments
20000 users nearly all local administrators of their computer
50 sites fitted with des Inf rastructure servers (2003 AD, WSUS,
Antivirus)
Heterogeneous masters and applications depending on each region
25% of the applications are Citrix applications
Low WAN links (f rom 0.5 to 2 Mbit/s in 80% of the cases)
No packaging technology
No sof tware deployment tool
Achievements: Defining the workstation Master Pan
To be able to migrate 90% of all the computers in less than 3 years
Main activities during the project:
- Monitoring the technical audits
- Participating on the master plan which have finally suggested the following advices :
o Migrating the existing computers to Windows 7 and MS Of fice 2010 o
Preserving hardware computers (versus virtual ones)
o Implementing MS SCCM 2007 to streamline and to control the migration o
Finding the necessary budget for the next 3 years to migrate at least 90% of
the computers
- Involved in migration strategy
- Organizing and monitoring the necessary changes around the workstations (upgrades or
replacements) and the servers (updates or migration of printer servers…)
- Managing the building of MS SCCM 2007 Inf rastructure in the datacenter and inside 50
sites with distribution points installed
- Study and Inventory of existing computers
- Involved in the design of the single computer Master Image using MS MDT
- Managing the packaging design and rules using InstallShield 2010
- Organizing the technical staff training around the new tools and technologies
- Change Management for o Business units contacts and Directors o Each IT manager of
region o Users o IT Development Department o Service Desk and Hotline
- Designing and applying the new technical processes and the migration methods o At
sof tware level o At hardware level
- Managing the Migration for the first 1000 computers
- Setting up the indicators and follow up dashboards for: migration state, incidents,
problems and risks
Technologies:
- Deploying and asset management tool : Microsoft SCCM 2007
- Packaging : InstallShield 2010, Microsoft App-V

Digital & Workplace Service Manager - Master Image Building: MDT

- Migration tools: Windows User State Migration Tool (USMT), Office Migration Planning
Manager for Macros compatibility and migration

Digital & Workplace Service Manager
Léonardo ******** – ********.

Achievement: Provide in the application store the last package to update/install Of fice
2016 and the Symantec Vault version 12
Process to migrate and purchase an E3 license instead of the default E1 Limit
impacts on remediation providing separate packages of former version of
Microsoft office components (word, Excel…)
Training for suppliers to support and manage Office 365 of fice applications
2015-2016: Windows 7 Migration (~1500 computers, 150 Applications, ~1.5 m€)
Engie Global Markets (ex GDF Suez Trading) via le Permis Informatique
Context: 3rd project leader after 18 month of project
1500 computers / 850 users
Trading and financial Constraints
100 packaged applications
50 built applications
Dev teams do not collaborate
Migration done by replacing hardware
Achievement: Relaunch the migration
Engage developers in the required remediation of their applications
Follow the applicative remediation
Build the migration process
Specify the new security policies
Follow and validate the build of the new master for staging and the new active
directory GPO
Build the fixed price contract to migrate all computers (rhythm: 50PC/week)
Manage and drive the Roll out Supplier
Training and engagement of the supply chains
Creation of the news Hardware catalog negotiated with Lenovo
Process to deliver obsolete hardware to a social institution instead of paying a
broker (850 PC delivered to EMMAUS and 10 other institutions)

2014 : Build of the Trading Floor of Roma (Italy)
GDF Suez Trading via le Permis Informatique
Context: Build network inf rastructure and desks for 20 traders in Italy
Premises are provided by Gdf Suez Italia
Trading application will be reachable via Citrix
Put in place the financial market network contracting with Etrali
Achievement: Build the trading floor
Service contract with GDF Suez Italy to support and host traders following the
financial requirement in terms of policy and compliance
Build the technical and network policies to comply the finance regulation
Manage traders requests
Training of the local IT
Create the supply chain for italian traders