Freelancer profile translated to English.

Description

12 years of experience. Initially JAVA/JEE and Spring boot Solution Architect, then IBM Filenet solutions Expert, Camunda BPMN solution Expert then AWS/GCP/Terraform Kubernetes Cloud builder. Also proficient in Kafka and ElasticSearch. I am passionate about these technologies.

Languages

French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

Abeille Assurance
Lead Architect CCoE AWS
BANKING AND INSURANCE
September 2023 - Today (2 years and 11 months)
Paris, France
Building the AWS organization and taking over existing infrastructure
Complete refactoring of the Jenkins platform
Setting up an EKS (Elastic Kubernetes Service) cluster
Deploying Jenkins on EKS and configuring it with Ansible
Creating CI/CD pipelines and Jenkins jobs for various applications
Architecture and deployment of the Artifactory platform
Setting up the Splunk platform for monitoring
Deployment and configuration of RDS/PostgreSQL, with secure exposure to the datacenter
Migrating applications from the datacenter to AWS: Compute only, Data only, Lift & Shift, Re-Architecture
Implementing Lambda functions for serverless processing
Deploying dedicated infrastructures for business applications
Connecting to on-premise applications via AWS Direct Connect
Building golden AMIs with hardening via Packer and Ansible
Scanning, encrypting, and distributing application AMIs across multiple accounts
Integrating EDR (Endpoint Detection & Response) solutions
Implementing a multi-region backup strategy (AWS Backup + Vault)
Analyzing AMI compliance with CIS-CAT report generation
Integrating Dataiku into the CCoE DevOps chain
Optimizing infrastructure costs with a FinOps approach
Leading technical meetings with DevOps teams
Code review via pull requests
Technical support to users
Other cross-functional tasks in architecture, security, DevOps
Ansible Cloud AWS AWS Transit Gateway AWS Lambda AWS Backup
TotalEnergies
Lead Architect/DevSecOps/SRE AWS & Azure
ENERGY AND UTILITIES
July 2022 - September 2023 (1 year and 2 months)
Paris, France
Setting up AWS accounts in collaboration with the Landing Zone team
AWS cost evaluation, optimization, and re-billing to internal clients (FinOps)
Setting up secure connections between AWS accounts via AWS Transit Gateway
Setting up secure connections with AWS VPC Lattice
Setting up identity federation on AWS and Azure
Supporting several squads on AWS account design
Building the hybrid APIGEE platform (AWS + EKS and Azure + AKS)
Setting up base shared flows (Cache, SpikeArrest, CORS, JWT, etc.)
Deploying pipelines for proxies, KVMs, products, apps, etc.
Dynamic deployment of proxies with CI/CD pipelines
Setting up IDP detection and token validation (Cognito, EntraID)
Centralized error handling (RaiseFault, FaultRules)
Migrating APIs (Azure APIM and AWS API Gateway) to APIGEE
Deploying API Gateways via AWS building blocks
Deploying and configuring AKS and EKS clusters
Creating Helm Charts for microservices
Deploying Prometheus via Helm Charts on Azure and AWS
Deploying ECS/Fargate for processing metrics (API Gateway logs)
Exporting metrics with OpenTelemetry on AKS and EKS
Automated creation of multi-source Grafana dashboards (AWS, Azure, Prometheus)
Integrating PingPong into Grafana for alert distribution
Setting up health checks on Azure
Defining SLAs, SLOs, SLIs with the SRE team + quarterly evaluation
Defining OKRs and weekly evaluation
Conducting a VPC Lattice POC with AWS RAM
Implementing OAuth2 on Azure APIM and AWS API Gateway
CI/CD with GitHub Actions
Infrastructure as Code with Terraform/Terragrunt
Vulnerability management (CVE) with Sonar
Code analysis with CheckMarx One
Secret management with GitGuardian
Mentoring a team of 4 DevOps (AWS & Azure)
Leading technical meetings with dev/DevOps teams
Etc.