Alexandre Bessard

Freelance mission via LEXOFT for Atos / Ministry of National Education — National Identity System (RNI), 33 academies, several million users.

End-to-end architecture and security: design and deployment of a critical IAM platform (Keycloak + MidPoint + LDAP) covering the entire identity lifecycle for millions of users. Strong authentication: OTP, TOTP, and FIDO2/WebAuthn with personalized user journeys, MFA, advanced sessions, granular security policies. DevOps industrialization: complete GitLab CI/CD pipelines, Docker containerization, observability, automated multi-environment deployments. Secure backend and APIs: Java 17/Spring Boot microservices, custom Keycloak SPI providers, Spring Batch pipelines for massive imports/exports (LDAP, CSV). Front-end: Angular 14-18 applications for end-users and academic administrators. GDPR compliance and public sector security requirements.

Stack: Java 17, Spring Boot, Spring Batch, Angular 14-18, Keycloak, MidPoint, LDAP, FIDO2/WebAuthn, GitLab CI/CD, Docker, PostgreSQL, Python.

Freelance mission via LEXOFT

• • National Identity System (RNI), 33 academies, several million users

◦ • Orléans / Remote

• • Letter of recommendation available

• • End-to-end architecture & security: design and deployment of a critical IAM

platform (Keycloak + MidPoint + LDAP) covering the entire identity lifecycle for millions of users.

• • Strong authentication: OTP, TOTP, and FIDO2 / WebAuthn with personalized user journeys; MFA, advanced sessions, granular security policies.

• • DevOps industrialization: complete GitLab CI/CD pipelines, Docker containerization, observability, automated multi-environment deployments.

• • Secure Backend & APIs: Java 17 / Spring Boot microservices; custom Keycloak SPI providers; Spring Batch pipelines for massive imports/exports (LDAP, CSV).

• • Front-end: Responsive Angular 14-18 applications for end-users and academic administrators; optimized UX, custom Keycloak themes.

• • Compliance: log auditing, traceability, GDPR, and public sector security requirements.

Stack 17, Boot, Batch, Angular 14-18, Keycloak, MidPoint, LDAP, FIDO2 / WebAuthn, GitLab CI/CD, Docker, PostgreSQL, Python.

• • Full-stack reinforcement on an internal solution: new features validated by Tech Leads, robust REST APIs, CRON tasks for punctual and global indicator calculations.

• • UX redesign of the sensor list (Angular 17), manual and unit tests ensuring delivery reliability.

Stack: Angular 17, Java, Spring Boot, REST APIs, PostgreSQL.