Looking for a job

enrique vazquez

@enriquevazquez

Message

Security Architect at Capgemini who designed Zero Trust architecture for ruggedized maritime data rooms.

Germany

Message

What I'm looking for

I’m available immediately for permanent, transformation, or high-criticality architecture engagements, and I’m open to international relocation.

At Capgemini, I designed Zero Trust infrastructure for ruggedized maritime data rooms on a VMware/Tanzu platform, protecting communications, workloads, and data access in contested electronic-warfare conditions. I also modeled secure operation during disruption, including jamming, interception, and signal manipulation.

Across roles at Sopra Steria, Fujitsu, and other organizations, I developed security architecture for IT and industrial environments, including OT security strategies and data discovery capabilities. My work has included threat modeling, security operations, incident response, and controls aligned with industrial and regulatory requirements.

Experience

Work history, roles, and key accomplishments

Security Architect

Capgemini

Jan 2022 - Feb 2026 (4 years 1 month)

Engineered Zero Trust architecture for ruggedized military-grade maritime data container rooms, ensuring secure operations in contested environments. Built enterprise and solution architecture repositories with LeanIX, Bizzdesign, and HOPEX, and defined OT security concepts across multiple industrial sectors.

Zero Trust VMware Tanzu Enterprise Architecture LeanIX Bizzdesign HOPEX Sparx Enterprise Architect IriusRisk OT Security ISA IEC 62443 SABSA TOGAF ADM NIST CENELEC 50701 Archer GRC

Lead Security Architect

Sopra Steria

Aug 2019 - Jan 2022 (2 years 5 months)

Translated business objectives and risk appetite into a future state security engineering strategy with enforceable controls. Led security operations, digital forensics, and root cause analysis, and planned transition from legacy VPN to SASE and Zero Trust operating models.

SASE Zero Trust ISO 27001 CIS Controls BaFin KRITIS MaRisk Digital Forensics Incident Response MITRE ATT&CK AttackIQ Splunk RSA Palo Alto FireEye NetScout Microsoft Security

Security and Data Protection Consultant

Fujitsu

Sep 2015 - Jul 2019 (3 years 10 months)

Led privacy data discovery and mapping to locate PII, establish data flows, and support GDPR Article 30 obligations. Designed and implemented DLP, CASB, WAF, DAM, container security, endpoint protection, and SIEM capabilities.

GDPR Data Discovery DLP CASB WAF DAM Container Security SIEM Symantec Imperva QRadar Carbon Black Crowdstrike CyberArk Cisco ISE AAA PAM NAC

Security Project and Governance Consultant

Computer Futures

Apr 2010 - Aug 2015 (5 years 4 months)

Ensured consistent IT security approach across European subsidiaries and initiated migration to a new data-centre model. Built SOC from ground up, deployed Zero Trust and microsegmentation, and developed cloud identity and key management services.

Zero Trust Micro Segmentation NSX T Palo Alto Panorama Splunk SOC SIEM Cloud Security Azure AWS WAF Imperva Identity Management Certificate Management

Information Security Auditor

Randstad

May 2007 - Mar 2010 (2 years 10 months)

Helped establish information security governance, risk, and compliance committee, translating regulatory requirements into policies and procedures. Led over 20 security projects covering SIEM, MDM, DNS security, and asset management.

Governance Risk Compliance SIEM MDM DNS Security Vulnerability Management Qualys Nessus Rapid7 Retina Burp suite Nmap ArcSight WAF IDS

Governance Consultant

Ernst & Young

Feb 2004 - Apr 2007 (3 years 2 months)

Applied NIST 800-53 controls and RMF to security plans, risk assessments, and remediation. Supported PCI DSS and ISO 27000 audits, and implemented identity, IPS, IDS, NAC, endpoint, and DLP controls.

NIST 800 53 RMF POA&M PCI DSS ISO 27000 Risk Assessment Penetration Testing Identity IPS IDS NAC DLP SIEM

Security Incident Handler

Accenture

Jun 2002 - Jan 2004 (1 year 7 months)

Managed managed security services for top Spanish banking clients, including security monitoring, anti-phishing, and perimeter defense. Operated Verisign Teraguard SIEM for log analysis and event correlation.