Amine Haouari

• Definition and implementation of the target architecture based on Kubernetes, as part of a strategic migration plan, ensuring a gradual, coherent, and secure transition of applications to a containerized environment.

• Industrialization of deployment processes through the implementation of robust CI/CD pipelines (GitLab CI), ensuring agility, traceability, and reproducibility of production releases.

• Implementation of a complete containerization and application orchestration solution for Java and Drupal technologies, through the definition of a structured workflow for building, packaging, and deploying containers, adapted to development, integration, pre-production, and production environments.

• Deployment of an orchestration service "as a service" based on Kubernetes, offering projects a unified, secure, and industrialized framework for deploying application workloads.

• Industrialized creation of on-demand Kubernetes clusters, via Crossplane and ClusterAPI, enabling automated, reproducible, and standardized provisioning of Kubernetes platforms according to project needs.

• Strengthening of security and technical governance through the implementation of granular access mechanisms (RBAC), Network Policies, and a DevSecOps approach integrated into project cycles.

• Design of a complete observability stack (Prometheus, Grafana, Loki, Jager, Opentelemetry) enabling proactive monitoring, relevant alerts, and better incident response.

• Optimization of service performance, scalability, and high availability, by defining dynamic resource allocation, redundancy, and resilience strategies.

• Build and lead the Observability and Support strategy within IT teams.

• Ensure application service levels (SLI/SLO) by leading the SRE approach within the teams.

• Actively participate in the monitoring of the PaaS platform and its components.

• Implementation of observability with Datadog (APM, Logs, Metrics, CSPM, Webhooks, MongoDB Atlas integration, Jira Integration).

• Event management with Azure Functions.

• Implementation of service performance metrics.

• Capacity planning (KEDA, HPA, VPA).

• Implementation of the AKS provisioning strategy and its MCO.

• Assist the project in setting up automatic provisioning of its environments using an Infrastructure as Code approach, integrating exploitability components (observability, FinOps, backup, etc.).

• Design, develop, and integrate automation and infrastructure monitoring solutions to enable scaling of sensitive operations and critical processes.

• Monitor consumption evolution and propose optimizations.

• Ensure that critical application chains can return to a nominal state as quickly as possible in case of failure, incident, or extreme demand.

• Develop tooling to maximize operational automation.

• Observe, analyze, and monitor the behavior of our infrastructure's distributed systems to propose modifications for optimizing our usage.

• Participate in various daily tasks for infrastructure maintenance and propose ways to automate recurring tasks.

• Participate in the development of the technical roadmap for the PaaS platform team.

• Define, design, and manage complex architectures integrating Landing Zone, Security, Networks, and especially Cloud Native Services.

• Reference for container orchestration with AWS EKS and management of its use cases (compliance, security).

• Build best practices with users.

• Build technical modules in line with standards (Terraform module).

• Definition of HLD and LLD for applications migrated to AWS.

• Implementation of CI/CD pipelines with strong implementation of GitOps principles.

• Participate in cloud migration and industrialization (Packer, Ansible, Terraform, Terragrunt, etc.).

• Participate in the evolution of automation and monitoring processes.

• Participate in continuous infrastructure optimization (Performance, Security, Costs).

• Define the strategy for transforming Legacy infrastructures to AWS.

• Conduct architecture audits and formalize directives / action plans / recommendations.

• Training and knowledge transfer of some outsourced tasks to teams in India (Bangalore/Chennai).

• Participate in the technical impact study of any new project on the existing architecture.

• Ensure alignment of projects with the strategic directions of the IT department.

• Evangelize teams on architecture standards and new practices.

• Creation of Terraform code registries and a service catalog as part of the 'platform engineering' strategy.