Freelancer profile translated to English.

Description

I have 3 main areas of expertise. I have a very good knowledge of networking (Routing & Switching). I have worked extensively with CISCO hardware (and also Mikrotik). I have good knowledge of routing protocols (static routing, BGP, OSPF) and layer 2 protocols (VLAN, STP). In terms of security, I have done Firewalling, particularly on Fortigate and PFSENSE products (traffic routing, NAT, PAT, VIP, VPN: OpenVNP, IPSEC, etc.). Finally, I have worked extensively on GNU/LINUX systems (particularly DEBIAN, I have done some RHEL and CentOS). I have administered Debian servers (I am very comfortable with the CLI), NFS mounts, LVM partition extensions, SSH server configuration (generating an SSH key on the client, sending the public key to the server). I have administered Apache servers mainly, and also NGINX (enabling/disabling Vhosts, Vhost configuration, HTTPS activation, setting up Kerberos authentication on Apache for SSO). I have some experience administering databases with MariaDB. In terms of security on GNU/LINUX systems, I enjoy working with iptables. Finally, to monitor the infrastructure, I have also set up and/or configured supervision servers such as ZABBIX (template creation, item and trigger configuration, alert configuration), LibreNMS (installation and host addition, alert configuration), and Graylog (alert configuration). I have the ability to set up a complete infrastructure, improve an existing infrastructure, or migrate an existing solution to another. Gradually, when the need arises, especially when there are a certain number of servers and repetitive tasks, I propose to automate the tasks either using a simple BASH script or with Ansible.

Languages

French
Native or bilingual
English
Fluent
Arabic
Conversational

Workplace preferences

Can work on-site

Mantes-la-Jolie (up to 50km)

Air Liquide
Linux System Administrator
October 2022 - March 2025 (2 years and 5 months)
-> Project: setting up a highly available infrastructure with Proxmox -> Setting up an open-source remote desktop solution (Guacamole) for analysts -> Automation of security policies (ssh, 2FA, user, etc.) with Rudder. -> Pfsense: PAT filtering, VPN for the investigation infrastructure. -> Configuration of an Nginx reverse proxy for internal applications
AWS Proxmox HA Proxmox Backup Server AWS S3
SAFEO
Linux Administrator
January 2022 - September 2022 (8 months)
-> Zabbix Server 4.2 Migration -> Zabbix Server 6.0.1:
• - Migration of the Zabbix DB and DB update.
• - Reconfiguration of certain templates and triggers -> Automation of time-consuming actions on the client's infrastructure (mainly Debian machines): - #ANSIBLE and #BASH Security updates creation of an interactive bash script that launches different Ansible playbooks according to the need.
FLEXNETWORK
Network and Systems Administrator
January 2022 - December 2022 (11 months)
-> CISCO: IOS, IOS XR - Routers: VXR (7200), ASR 1002, ASR 9001 - Switch: Cisco ME 4900, Cisco 2960 -> CISCO Implementation of BGP interconnections for PPP collection -> CISCO Implementation of a BGP interconnection for customer IP transit - #CISCO Propagation of VLANs on core network switches -> PROXMOX Installation of the Proxmox hypervisor -> PROXMOX Implementation of HA and replication on PROXMOX - Linux Systems Administration: updates, NFS mounting, etc. -> Ansible: setting up a playbook to automate the creation of sudo users on the park machines -> FIREWALL PFSENSE: configuration of PAT rules and filtering -> IPTABLES: securing servers (nperf, dns, web servers) directly connected to the internet.