lucien@blueteam
~/lucien · zsh
lucien@blueteam:~$

Lucien Pannatier

IT & Security Lead · Blue Team · InfoSec · Valais, Switzerland

Defender by trade. I build security posture from the ground up, break my own homelab for fun, and prefer things open-source and self-hosted. Photographer on the side.

statusoperational
homelabonline
photography5 albums
local--:--:--
INFO$ cat about.md

Whoami, the long version

I've been hooked on technology since I was 13, spending long evenings teaching myself how computers actually work, and I never really stopped.

After training as a Mediamatician with the Valais Cantonal Police, I ran my first real migration under pressure: digitizing the State of Valais land registry. Then came seven years at SKIDATA as a Certified System Engineer, running database servers, deploying access systems across the region, and doing QA on new products, followed by CIGES, where I supported regional infrastructure and taught entry-level InfoSec.

Today I'm IT & Security Lead at Croix-Rouge Valais, where I run IT end to end and own the security posture. I lean Blue Team: hardening, monitoring, incident response, turning inherited environments into something actually defensible, with the systems administration and data governance that come with the role.

Off the clock: a self-hosted homelab that mirrors how I work, plus cooking, photography, and (too many) video games.

OK$ cat skills.yaml

What I do now

Where I spend my days: running and securing a Microsoft 365 environment end to end, across systems administration, security engineering, and data governance. From identity and endpoints to threat response, infrastructure, migrations, and Swiss data-protection compliance.

Identity & access
Microsoft Entra IDConditional AccessFIDO2 / passkeysphishing-resistant MFAleast privilege / RBACOAuth app governance
Endpoint & device
Microsoft IntuneWin32 app deploymentAttack Surface Reductioncompliance policiesBitLocker / LAPSWindows · macOS · Linux
Threat protection & response
Defender for BusinessDefender for Office 365incident responsehoneypots / deceptionphishing simulationalerting pipelines
Data governance & compliance
Microsoft Purview DLPsensitivity labelingdata classificationdata lifecycle & retentionSwiss nLPD / LPDcantonal LIPDADPA review
Systems & infrastructure
Microsoft 365 administrationPowerShellendpoint fleet managementmigrationsself-hosting (Proxmox · Docker · Caddy)SharePoint / OneDriveDNS · networkingbackup & recovery
How I work
defense in depthleast privilegereport-only before enforceverify logs before blockingopen-source by preference
OK$ journalctl -u career --reverse

Career path

Reverse-chronological, like any good log.

since 2026
IT & Security Lead · Croix-Rouge Valais
IT operations and security ownership. Blue Team: hardening, monitoring, incident response, identity & endpoint security.
2023-2025
Analyst Desk · CIGES SA
L1 helpdesk, IT technician, L1 InfoSec, and teaching entry-level InfoSec classes.
2016-2023
Certified System Engineer · SKIDATA GmbH
Sysadmin and database management; configuration of access systems (turnstiles, cashdesks, RFID/barcode); networking; QA & testing for new products; customer training; project management.
2015, 4-month project
Mediamatician · État du Valais, Land Registry
RF2020: modernizing the land registry and introducing a computerized federal land-parcel information system.
2015-2017
Podcaster & Journalist · EuroTechTalk.comside
Produced a weekly one-hour live tech-news podcast (and VOD), in English.
2011-2016
Music Journalist · Tink.chside
Coverage of music festivals including Caprices Festival (Crans-Montana) and Tohu-Bohu (Veyras).
2008
IT Intern · Banque Cantonale du Valais
Three-month IT internship.
OK$ ls ~/credentials/

Credentials

memberships & community
2026
Microsoft Security Advisors Program
Microsoftmember
active
Cybersécurité Valais
Regional infosec communitymember
certifications
2018
Certified System Engineer (People Access)
SKIDATA GmbHobtained
education
2011-2015
Federal VET Diploma (CFC), Mediamatician
EPTS / Police cantonale du Valaisdiploma
2009-2011
Commercial Vocational Baccalaureate
ECCG-EPP, Sionobtained
INFO$ systemctl status lab

Projects & lab

A few things I build and run in the open.

blue team
m365-intune-scripts
Scripts for Microsoft 365 & Intune: endpoint deployment, detection, and hardening.
honeypot
OpenCanary-Dashboard
A dashboard for the OpenCanary honeypot, surfacing alerts from deployed sensors.
more
Everything else
Homelab bits, one-off tools, and experiments.
INFO$ ls ~/photography/

Photography

Five sets, shot across Switzerland and beyond. Click an album to open the gallery.

INFO$ open ~/channels

Get in touch

Best reached on the fediverse or X. No contact form by design. Direct channels only.