lucien@blueteam
~/lucien — zsh
lucien@blueteam:~$

Lucien Pannatier

IT & Security Lead · Blue Team · InfoSec — Valais, Switzerland

Defender by trade. I build security posture from the ground up, break my own homelab for fun, and prefer things open-source and self-hosted. Photographer on the side.

statusoperational
homelabonline
photography5 albums
local--:--:--
INFO$ cat about.md

Whoami, the long version

I've been hooked on technology since I was 13, spending long evenings teaching myself how computers actually work.

After training as a Mediamatician with the Valais Cantonal Police, I took on a mandate from the State of Valais to migrate their land registry to a digital system — my first real-world migration under pressure.

That led me to SKIDATA, the world leader in access systems, where I spent seven years as a Certified System Engineer: running database servers, deploying and configuring access systems for customers across the region, and doing QA on new products.

Wanting broader ground, I joined CIGES, a local IT company running the infrastructure of several regional municipalities and two of Valais' largest energy providers — helpdesk, workplace support, and teaching entry-level InfoSec.

Today I'm IT & Security Lead at Croix-Rouge Valais, where I run IT and own the security posture. I lean Blue Team: hardening, monitoring, incident response — turning inherited environments into something actually defensible.

Off the clock: a self-hosted homelab that mirrors how I work, plus cooking, photography, and (too many) video games.

OK$ cat skills.yaml

What I do now

Where I spend my days: running and securing a Microsoft 365 environment end to end — systems administration, security engineering, and data governance in one role. From identity and endpoints to threat response, infrastructure, migrations, and Swiss data-protection compliance.

Identity & access
Microsoft Entra IDConditional AccessFIDO2 / passkeysphishing-resistant MFAleast privilege / RBACOAuth app governance
Endpoint & device
Microsoft IntuneWin32 app deploymentAttack Surface Reductioncompliance policiesBitLocker / LAPSWindows · macOS · Linux
Threat protection & response
Defender for BusinessDefender for Office 365incident responsehoneypots / deceptionphishing simulationalerting pipelines
Data governance & compliance
Microsoft Purview DLPsensitivity labelingdata classificationdata lifecycle & retentionSwiss nLPD / LPDcantonal LIPDADPA review
Systems & infrastructure
Microsoft 365 administrationPowerShellendpoint fleet managementmigrationsself-hosting (Proxmox · Docker · Caddy)SharePoint / OneDriveDNS · networkingbackup & recovery
How I work
defense in depthleast privilegereport-only before enforceverify logs before blockingopen-source by preference
OK$ journalctl -u career --reverse

Career path

Reverse-chronological, like any good log.

2026 — now
IT & Security Lead — Croix-Rouge Valais
IT operations and security ownership. Blue Team: hardening, monitoring, incident response, identity & endpoint security.
2023 — 2025
Analyst Desk — CIGES SA
L1 helpdesk, IT technician, L1 InfoSec — and teaching entry-level InfoSec classes.
2016 — 2023
Certified System Engineer — SKIDATA GmbH
Sysadmin and database management; configuration of access systems (turnstiles, cashdesks, RFID/barcode); networking; QA & testing for new products; customer training; project management.
2015 — 4-month project
Mediamatician — État du Valais, Land Registry
RF2020: modernizing the land registry and introducing a computerized federal land-parcel information system.
2015 — 2017
Podcaster & Journalist — EuroTechTalk.comside
Produced a weekly one-hour live tech-news podcast (and VOD), in English.
2011 — 2016
Music Journalist — Tink.chside
Coverage of music festivals including Caprices Festival (Crans-Montana) and Tohu-Bohu (Veyras).
2008
IT Intern — Banque Cantonale du Valais
Three-month IT internship.
OK$ ls ~/credentials/

Credentials

memberships & community
2026
Microsoft Security Advisors Program
Microsoftmember
active
Cybersécurité Valais
Regional infosec communitymember
certifications
2018
Certified System Engineer — People Access
SKIDATA GmbHobtained
education
2011 — 2015
Federal VET Diploma (CFC), Mediamatician
EPTS / Police cantonale du Valaisdiploma
2009 — 2011
Commercial Vocational Baccalaureate
ECCG-EPP, Sionobtained
INFO$ systemctl status lab

Projects & lab

A few things I build and run in the open. draft descriptions — tweak the wording as you like

blue team
m365-intune-scripts
Scripts for Microsoft 365 & Intune — endpoint deployment, detection, and hardening.
honeypot
OpenCanary-Dashboard
A dashboard for the OpenCanary honeypot — surfacing alerts from deployed sensors.
more
Everything else
Homelab bits, one-off tools, and experiments.
INFO$ ls ~/photography/

Photography

Five sets, shot across Switzerland and beyond. Click an album to open the gallery.

INFO$ open ~/channels

Get in touch

Best reached on the fediverse or X. No contact form by design — direct channels only.