Bastien L.

Bellova CORP deploys the Oscar Cloud OS range, an integrated solution aimed at simplifying and securing businesses' digital infrastructure. Your role involves managing the lifecycle of three major pillars:

System Architecture (Oscar Cloud OS): Design and optimize a high-performance cloud operating system, ensuring a fluid user experience and kernel robustness.

Network Infrastructure (Smart Routing): Oversee the development of intelligent routing solutions, guaranteeing high-availability connectivity and enhanced perimeter security.

Data Resilience (Backup): Define critical backup and restore protocols to ensure business continuity for clients against cyber threats.

Strategic Responsibilities

Innovation & R&D: Identify emerging technologies to maintain Oscar Cloud OS's competitive edge.

Interoperability: Ensure that hardware (Router) and software (OS/Backup) communicate natively and with ultra-security ("The ecosystem effect").

Product Management: Transform complex business needs into simple, integrated, and scalable features.

Key Skills (Hard Skills)

OS Engineering: Mastery of Kernel environments, virtualization, and Cloud environments.

Network Expertise: Routing protocols, bandwidth management, and security (Firewall/VPN).

Data Protection: Replication strategies, data immutability, and Business Continuity Planning (BCP).

Technical Achievements:

Virtualization with Proxmox VE: Installation and configuration of the hypervisor for optimized resource management (VMs and LXC Containers).

DevOps & CI/CD Environment: Setup of a self-hosted GitLab server with GitLab Runners configuration for automating tests and continuous deployment (CI/CD).

Database Management: Deployment and security of high-performance MySQL instances, with backup strategies and query optimization.

Routing & Reverse Proxy: Nginx Proxy configuration for managing inbound traffic, SSL termination (HTTPS Let's Encrypt), and load balancing.

Security & Isolation: Network segmentation between services and implementation of strict firewalling policies.

Technical Stack:

Hypervisor: Proxmox VE

Web/Proxy: Nginx

Database: MySQL

CI/CD: GitLab, GitLab CI

OS: Linux (Debian/Ubuntu)

Zabbix Implementation

- Installation of Zabbix on an Azure machine running Ubuntu 22.10

- Installation of MariaDB on a Debian 11 machine on Azure

- Configuration of Zabbix with a valid SSL certificate and behind an Nginx Proxy

- Adding servers (Windows and Linux) to Zabbix

- Using Jira APIs for Zabbix alerts (Auto-ticket creation)

- Setting up Zabbix Proxies (at Hexanet and Azure)

- Training the ICI team on Zabbix software

Continuous Technological Watch

- Testing new technologies

- Reporting on each technology (Advantages, disadvantages)

- Checking CVEs for each technology

- Applying necessary updates quickly

Protection

- Blocking a Layer 7 DDoS attack on the Azure infrastructure

- Blocking attacks via Fail2ban and a LUA script

- Blocking countries other than France

- Blocking an attack from 1.7 million botnets

Development of a GO program

- Simplified Linux server administration via menu-driven options

- Communication with Zabbix APIs in case of Web interface issues

- Self-diagnosis for basic system issues

IT Management / Implementation

- Handling production incidents and debugging

- Using Jira and Confluence

- Virtualized environment under VMWare

- Primarily Windows environment