← Back
EPITA Corp
The fil-rouge of the SecDevOps major: we build an enterprise IT system on a real Proxmox host, then we make it live. Simulated attacks, cloud migration, post-acquisition merger, and at every step the real decisions to make, both technical and business.
STACK
HIGHLIGHTS
- Bootstrap of the IT system on bare-metal Proxmox: OPNsense firewall, VLAN segmentation, multi-DC Active Directory, internal services (DNS, DHCP, file, mail, web). Starting from nothing, installing everything.
- Defensive posture from day one: AD and exposed-services hardening, GPO, centralised logging, monitoring and detection. The idea is that security is in place at first deployment, not bolted on later.
- Tested through Red / Blue cycles: pentests, AD attack-path exploitation, exfiltration, post-exploitation. Each round produces findings that feed the security policy and harden the next iteration.
- Lifecycle evolutions matching a real company's life: partial cloud migration, post-acquisition merger with another AD domain to integrate (trusts, policy harmonisation, identity deduplication, access overhaul).
- Iterations across multiple semesters, NIS2 and GDPR alignment, formal security policy, and documented tech / business trade-offs at every step.