Philippe HATTON
IAM Administrator
Lausanne
Profil professionnel
IAM professional with 9 years of experience in Identity and Access Management, working with Active Directory, Microsoft EntraID and SailPoint, including 3 years of experience in SailPoint integration. Team point of contact, I provide support, analysis and resolution of incidents related to identity and access management issues, and manage access reviews and access governance activities. I support audits by ensuring compliance with regulatory requirements, particularly FINMA requirements and ISO standards. My dual functional and technical expertise allows me to contribute effectively to access security, regulatory compliance, and the continuous improvement of IAM processes.
Vue d'ensemble
6
6
Languages
3
3
years of post-secondary education
19
19
years of professional experience
Expérience
IAM Identity and Access Management
Crédit Agricole Suisse (Azqore)
Lausanne
2017.01 - 2026.01
- Management of permissions and access rights in Active Directory, applying the principle of least privilege (RBAC).
- Creation, administration and deletion of user accounts (Active directory) across all applications used within the company.
- Identity Specialist, responsible for defining and managing identity lifecycle states
- User and group management in Microsoft Entra ID and authentication (SSO, fédération, SAML, OAuth 2.0)
- Administration of access to specific tools: FiroTrust, FiroContinuity, FirocoOnline, GT Match, GT Exchange, HID and Kyteworks Private Data Network.
- Ensuring IAM process compliance with ISO standards, security policies and regulatory requirements applicable to the banking sector.
- Management of SWIFT access and certificates through Swift Alliance Gateway.
- Management of S2I-BI (SAP Business Objects) access and administration of the CyberArk portal.
- Administration of SecurID and RSA Secure Access & Authentication solutions.
- Monitoring and management of access security for S2I, Crédit Agricole's main banking application.
- Management of DLP (Data Loss Prevention).
- Administration of AD Manager and ADAudit Plus.
- Access reviews.
- Handling calls and requests related to access rights and permissions issues.
- Knowledge of ITIL best practices, including incident, service request and change management.
- EBanking support and incident resolution.
- Creation, tracking and management of incident tickets.
- Active Directory reporting and management of tools and platforms.
- JIRA administration, including dashboard creation and project tracking.
- Management of software and physical tokens.
- Management of accounts for screening tools and other critical applications.
- SailPoint IdentityIQ.
- Liaison between IAM and developers to request new features
- Correlations
- Post release testing and validation to ensure development compliance
- Access right management and provisioning monitoring
- SSH/SFTP connexions (Unix) via cyberark or mobaXterm for data updates
- Documentation and continuous improvement
- Writing and updating the SECU IAM knowledge base
- Contributing to process and workflow improvements
Support applicatif
Page Group Europe
Barcelone
2016.03 - 2017.06
- Provided IT support to 5,000 users across Europe
- Diagnosed and resolved hardware and software incidents, including Windows, printers, VPN and business applications
- Provide L1/L2 technical support to users on site, by phone, email, using a ticketing system
- Achieved an 85% first-contact resolution rate
- Created and managed support tickets, performed network and system diagnostics
- Contributing to process and workflow improvements
IT Service Desk
Colt Telecom
Barcelone
2007.03 - 2016.02
- Diagnosed connectivity issues, including Internet, Ethernet, MPLS, VPN, and SD-WAN
- Recived and managed incidents
- Monitored network alerts and created incident tickets
- Performed first-level analysis and resolved incidents whenever possible
- Escalated complex incidents to Level 2 and Level 3 network teams and followed them through to resolution
- Provided regular updates to customers on incident status and progress
- Coordinated with network operators, service providers, and field technicians
- Ensured compliance with SLA requirements for response and resolution times
- Documented incidents and updated procedures
Formation
SC300 - identity and access administrator
Microsoft
BTS - Action Commerciale
CPEA
Paris 2003.01 - 2005.01
Bac Pro - Commerce
Forges-les-Eaux 2002.01 - 2003.01
Compétences
- IAM
- Active Directory
- Microsoft Entra ID / Authenticaton
- CyberArk
- RSA SecurID
- Gitlab
- ERP
- Kyteworks
- DLP
- Swift Alliance
- SAP Business Objects
- JIRA
- AD Manager
- AD Audit Plus
- Firco
- GT Match/Exchange/Data
- Sailpoint integrator
- Lotus notes
- Outlook
Langues
French
Native language
English
B1
Spanish
B1
Chronologie
IAM Identity and Access Management
Crédit Agricole Suisse (Azqore)
2017.01 - 2026.01
Support applicatif
Page Group Europe
2016.03 - 2017.06
IT Service Desk
Colt Telecom
2007.03 - 2016.02
BTS - Action Commerciale
CPEA
2003.01 - 2005.01
Bac Pro - Commerce
2002.01 - 2003.01
SC300 - identity and access administrator
Microsoft