Ahmed Aissa

Infrastructure administration on OVH Cloud: Kubernetes clusters (MKS), network, DNS, load balancing, storage, Gateway, and compute services. Provisioning and management of GCP resources with Terraform: GKE clusters, VPC, subnets, firewall rules, load balancers, Cloud Storage, and compute services. Industrialization of microservice deployments via Helm Charts. Standardization and optimization of GitLab CI/CD pipelines using GitLab Catalog and reusable templates. Deployment of high-availability PostgreSQL databases with CloudNativePG on Kubernetes: replication, auto-healing, failover, automated backups, and DR/PITR strategies. Automation of Keycloak instance configuration with Terraform (realms, clients, roles, mappers, groups, users, and access policies). Migration of application exposure mechanisms from Ingress Controllers to a centralized API Gateway architecture (Fabric). Improvement of critical service resilience and scalability: multi-AZ deployments, Horizontal Pod Autoscaler (HPA), and workload autoscaling. Operation of production environments outside Kubernetes (legacy): Linux servers (RedHat/Ubuntu), Apache, HAProxy, Docker containers, and HA PostgreSQL clusters (Patroni, PgBouncer, Barman). Automation of operations and administration tasks with Terraform, Ansible, Bash, and Python. Participation in technical workshops, architecture choices, and cloud-native solution design with development, infrastructure, and architecture teams. Participation in Agile ceremonies: sprint planning, retrospectives, refinement, and cross-functional coordination with multiple technical squads.

Main achievements: Administration and operation of cloud infrastructures on AWS: EKS, EC2, Route53, Security Groups, load balancers, EBS, S3, VPC network, and IAM access management. Deployment and management of workloads on EKS with autoscaling implementation (HPA), high availability management, and Kubernetes resource optimization. Setup and maintenance of local Kubernetes environments with Kubespray, NFS Server, and MetalLB. Implementation of environment monitoring and supervision via Datadog: infrastructure metrics, application logs, dashboards, and alerting. Hardening of Linux servers, TLS certificate management, and securing Kubernetes environments (network segmentation, firewalling, access control). Integration of DevSecOps controls into CI/CD pipelines: SonarQube, Trivy, OWASP ZAP, Dependency Check, and Gitleaks. Standardization of CI/CD pipelines and automation of build, test, and deployment workflows. Implementation of ArgoCD as a multi-cluster GitOps platform. Centralization and tracking of vulnerabilities via DefectDojo. Close collaboration with DevOps, Security, and Development teams for the implementation of DevSecOps best practices and continuous improvement of delivery processes.