Freelancer profile translated to English.

Description

I am a freelance DevSecOps engineer specializing in the implementation of secure and automated cloud solutions. My expertise covers infrastructure as code (IaC), CI/CD pipelines, and integrating security from the development cycle, to assist companies in modernizing, industrializing, and securing their environments.

🔹 Key Skills:

Cloud: Design, deployment, and optimization of architectures on AWS and Alicloud

Infrastructure as Code (IaC): Automation and environment management via Terraform

CI/CD & DevOps: Implementation of robust GitLab CI/CD pipelines, continuous integration, and automated deployment

DevSecOps: Securing cloud environments and pipelines (vulnerability scans, compliance, security best practices)

Observability & Resilience: Monitoring, logs, and alerting to ensure system reliability and performance

🔹 What I bring to your projects:

Accelerated deliveries through automation and continuous deployment

Reduced risks by integrating security into every stage of the application lifecycle

Optimization of costs and performance of your cloud infrastructures

Implementation of reliable and scalable collaborative workflows for your teams

I work with startups in the scaling phase as well as with large corporations looking to strengthen their cloud and security strategy.

Languages

French
Native or bilingual
English
Fluent
Thai
Basic

Workplace preferences

Can work on-site

Genf (up to 50km)

Richemont International SA
DevSecOps and Infrastructure engineer
LUXURY GOODS
October 2018 - Today (7 years and 8 months)
Geneva, Switzerland
Provisioning cloud resources using Terraform enterprise and GitLab (IaC) for AWS
and Alibaba Clouds: EC2/ECS, ECR, K8s, S3/OSS, SQS/MNS, IAM/RAM, RDS for
Aurora/Apsara MySQL, and Redis
- Migration of the whole cloud resources (Kubernetes clusters, databases, queues,
buckets,…) and applications from Aliyun to Alibaba cloud
- Kubernetes Ingress controller migration (Ambassador / Traefik)
- Kubernetes Secrets migration (External secret operator/Spring Vault)
- Jenkins instance management and maintenance
- Manage and provision Jenkins nodes with Ansible and Packer
- Evolving maintenance of Jenkins/Gitlab CI/CD
o BitBucket/Gitlab source code (GitGuardian security)
o Java/springboot artifact packaging with Maven
Angular transpiling
o Tests (unit, e2e, smoke, Trivy, Sonarqube, Checkmarx)
o Artifacts and docker image storage (Nexus/Jfrog)
o Kubernetes deployment with Helm and ArgoCD
o Akamai caching
o Security checks with Snyk
- Performance testing with Locust
- Monitoring solutions with Datadog (metrics, APM, logs, RUM, monitors and
alerts via Terraform)
- Team users accesses and permission management (Azure AD/AD, RBAC, SSH)
- Services access via Keycloak, including Keycloak client configuration.
Creation and maintenance of Linux bastions to secure access to RDS instances
- Setting up Akamai NetStorage for static resources
- Work with the different cyber-security and connectivity teams (WAF rules
through F5 BigIP, security platform PRISMA, application and infrastructure
Pentests, Firewall rules request and DNS management)
- DNS and SSL certificate management for more 500 domain
CI/CD Snyk Docker Sonarqube Maven
developper
Angular developer engineer
October 2018 - December 2018 (3 months)
• Views, components, and unit tests with Angular (v5 to v9) in a full REST api
• End-to-end tests with protractor
• WeChat development and authentication (auto-login, Tencent captcha),
• Microservices oriented application (bound to Java SpringBoot back-end)
• Multi language application (i18n – internationalization)
• Construct a custom way to serve the mock, build the application, extract, and generate the translations with a NodeJS sub-stream process
• Reactive programming with RxJS
• Security compliance
• Monitoring with New Relic or Datadog,
• Google Tag Manager and HotJar integration
YuccApp
Freelance - Mobile developer
August 2018 - September 2018 (1 month)
Annecy, France
International address book web and mobile applications.
• Complete conception of mobile application with the Ionic framework
• Designed views using Angular 6
• Cross-platform application with Apache Cordova (HTML, TypeScript, and CSS)
• Server communication via the Rest API built using Symfony
• Secure data exchange, authentication, and authorization
• QRCode integration and NFC connection Android
• Deployment on Play Store
• Manage Gitlab CI/CD