Arthur Perrot

Infrastructure & Cybersecurity Architect — Blue Team

8+ years designing, securing and keeping Windows/Linux infrastructures standing under real pressure: ransomware, exfiltration, audits, compliance. From a 180-seat accounting firm to self-hosted hybrid cloud.

EXP.	8+ years
LANGUAGES

TYPICAL SCOPE OF WORK

Audit
& assessment

Firewall /
segmentation

Windows / Linux
servers

Detection
EDR / Wazuh

Immutable backup
/ DR

Users
& workstations

Revision log

Field notes, blue team and homelab write-ups.

UPCOMING POSTS

RÉV·01

Spotify no longer starts after a hostname change (Linux) Oct 23, 2026

RÉV·02

Minecraft 26.3 (Prism): transparent item icons Oct 23, 2026

RÉV·03

Setting Up a Cloudflare Dynamic DNS on Debian with systemd Sep 29, 2026

See all posts Subscribe via RSS

THEY TRUSTED ME

Jet Systems
Ministère de l'Éducation Nationale
Maison Rostang
Koesio
Ministère de l'Agriculture
L'Hermitage
Muze
Vinesio
Winedoze
Watch Club Business School
CSVPN
Tetra Corp
CFPH Écully
Groupe Prieur
Vipus
LEGTA Dardilly
GetInov
EDC Informatique
E-mma
DYB
Jet Systems
Ministère de l'Éducation Nationale
Maison Rostang
Koesio
Ministère de l'Agriculture
L'Hermitage
Muze
Vinesio
Winedoze
Watch Club Business School
CSVPN
Tetra Corp
CFPH Écully
Groupe Prieur
Vipus
LEGTA Dardilly
GetInov
EDC Informatique
E-mma
DYB

Professional experience

Head of Cybersecurity & Infrastructure, Co-founder — DYB

VALENCE · LYON · PARIS · REIMS · TROYES (FR) — DEC 2023 → SEPT 2026

Architecture and hardening of multi-site Windows/Linux infrastructures for a portfolio of SMB clients
Self-hosted hybrid cloud: Proxmox VE, Hyper-V, Ceph, TrueNAS, self-hosted Kubernetes cluster
Backup and DR strategy — immutable and offline backups, automatically tested restores
Crisis management / incident response (account compromise, exfiltration, ransomware, failed updates)
Detection chain: Bitdefender EDR, Wazuh, Graylog log centralisation · pre-sales and technical scoping

€0 → €1M revenue, 3 years

team ≈ 20 people

incident response < 72h

IT Security Architect — Groupe Prieur, accounting firm

TROYES (FR) — APR 2022 → FEB 2024

Full IT infrastructure overhaul across 7 sites, under professional secrecy
Migration to a segmented network architecture (pfSense, VLAN, site-to-site VPN, firewalls) with no service interruption
Server/workstation hardening against ANSSI baselines; internal penetration tests and remediation
Secure file-transfer platform with an OCR processing pipeline

180 workstations · 7 sites

Architecture & Cybersecurity Consultant — Lord Perrot

FRANCE — MAR 2021 → JUN 2025

Architecture, administration and security for about ten clients; ≈20 Windows Server/Linux servers managed
VPN (OpenVPN, WireGuard), firewalls, VLAN segmentation · virtualisation (Proxmox VE, Hyper-V)
Backup strategies (Veeam, SyncBack); penetration testing and hardening

REFERENCES

DevOps — GetInov

LYON (FR) — APR 2022 → MAY 2022

Docker container deployment and operation; CI/CD pipelines on GitLab
Infrastructure as code (Terraform) and secrets management (HashiCorp Vault)

Systems & Network Administrator — LEGTA Dardilly (EPLEFPA)

LYON (FR) — AUG 2020 → APR 2021

Server and network administration for the school
Design and rollout of the CFPH network (segmentation, firewalls, Cisco, pfSense)
Active Directory migration from 2008 to 2019

See full CV

Skills

SYSTEMS &
VIRTUALISATION

Windows Server (2008–2025), Active Directory, GPO, Exchange · Linux (Debian, Ubuntu, Arch) · Proxmox VE/PBS, Hyper-V, Ceph, TrueNAS · Docker, Kubernetes

NETWORK

pfSense, OPNsense, Cisco (Meraki, IOS), Netgear · VLAN, segmentation, routing · site-to-site & remote-access VPN (IPsec, OpenVPN, WireGuard) · Cloudflare, DNS, PKI/TLS

CYBERSECURITY
BLUE TEAM

ANSSI hardening · pentest, vulnerability management · Bitdefender EDR, Wazuh, Graylog · IAM, MFA, Zero Trust, HashiCorp Vault · incident response, ransomware resilience · PMG, SPF/DKIM/DMARC

AUTOMATION
& CLOUD

Ansible, Terraform, GitLab CI/CD, Bash, PowerShell, Python · self-hosted hybrid cloud · Azure, Microsoft 365, Google Workspace

DEVELOPMENT

Python, Rust, C, C++, PHP, SQL (MariaDB/MySQL) · microservices architecture

MANAGEMENT

Project management, Agile, team management, pre-sales, client relations

Projects & contributions

cal.rs RUST

Self-hostable scheduling platform. Microsoft Exchange (EWS) connector with two-way calendar sync, SMTP configuration, video-link generation, embed code generator, OIDC SSO through Authentik.

7 merged PRs · ≈7,700 lines added