Application Security

Identity and access management expertise and consulting

I help organisations design and roll out their identity and access management, mostly around Keycloak and OpenID Connect. Acting as technical lead, I scope the requirements, define the architecture and the access control strategy, guide configuration and identity modelling choices, then support teams all the way to production. Training is an integral part of this approach: I train development teams on Keycloak and identity protocols so they become self-sufficient. I have held this role across varied settings: defence (MindefConnect), healthcare (Maincare), retail (CDiscount) and business-to-business data exchange (Dawex).

8 yrs

of expertise in identity and access management

assignments as Keycloak / OIDC lead

nationwide solution shipped (MindefConnect)

15 yrs

of development experience

Technologies

IAM

IAM architecture & strategy

Scoping requirements, modelling identities and defining the organisation-wide access control strategy.

Keycloak

Go-to expertise: configuration, custom extensions, migrations and industrialisation.

OpenID Connect (OIDC)

Designing authentication and authorisation flows, SSO and securing service-to-service exchanges.

FOR

Training & enablement

Training development teams and supporting them as they integrate and adopt identity solutions.

DEV

Secure development

Building security into the code: reviews, dependency and secret management, vulnerability prevention (OWASP).

K8s

Docker / Kubernetes

Secure, repeatable deployment of identity components on a cluster.

Related experience

Zenika

Permanent · 5 yrs

Mar. 2025 – present · 1 yr 6 mos

Platform Engineer · CDiscount

Keycloak technical reference: local development stack, optimised CI/CD (TFS) pipeline and support for migrating CDiscount.com to Keycloak.

Oct. 2024 – Mar. 2025 · 5 mos

Eclipse Dataspace Component Developer · Dawex System

Keycloak / OIDC expertise on a business-to-business data exchange platform: integration into EDC and securing the Dataspace protocol.

Apr. 2023 – Oct. 2024 · 1 yr 6 mos

Platform & DevEx Architect · Maincare

Keycloak reference within the architecture team: organisation-wide access control strategy through UMA 2 and a full rework of the developer experience.

2021 – present

Keycloak Trainer

Training development teams on Keycloak and identity management.

French Air Force

Fixed-term · 10 yrs

Sept. 2018 – Jul. 2020 · 1 yr 10 mos

Senior Developer / OIDC Trainer · Innovation Unit

OpenID Connect and Keycloak reference on MindefConnect, the Single Sign-On solution of the French Ministry of the Armed Forces, interfaced with FranceConnect.