Freelancer profile translated to English.

Description

Passionate about software development and specializing in API management and secure file transfers, I am an experienced Java developer with solid expertise in API Management and MFT (Managed File Transfer). My professional background is marked by complex and diverse projects, where I have provided innovative and secure solutions, contributing significantly to the improvement of systems and user satisfaction.

Key Skills

Java Application Development: Mastery of Spring Boot, J2EE frameworks, and front-end technologies Angular and TypeScript.

API Management: Expertise in managing and securing APIs with tools like AXWAY and Gravitee.

Secure File Transfer (MFT): Development of transfer scripts on

GoAnywhere, management of SSH key pairs, and integration of antivirus controls via ICAP.

Information Security: Implementation of OIDC authentication policies, cache management, and development of custom fault handlers to ensure data and system security. I also have some knowledge of penetration testing.

Do not hesitate to contact me for more information.

Languages

English
Fluent
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km), Paris (up to 60km)

RATP
MFT / API Management Platform Engineer
TRANSPORTATION
January 2022 - Today (4 years and 5 months)
Paris, France
API Manager (AXWAY)

Carried out scoping with projects wishing to onboard APIs
Deployment/securing/configuration of APIs in AXWAY API Management
Development of OAuth2 Okta policies with policy studio
Addition of cache, rate limit, quota policies

Realization of a PoC for Gravitee, Kong, MuleSoft Flex Gateway API Management
Carried out the PoC from an RATP VM to validate installation,
registration, startup, and gateway visibility in each control plane
Validation of API virtualization via a Swagger
Validation of API accessibility from the exposed gateway URL to the
API backend accessibility in pass-through mode without authentication
Validation of API accessibility from the exposed gateway URL to the
API backend accessibility with OAuth2 authentication
Redevelopment of our custom Okta policy under API Management

Migration from AXWAY to Gravitee:
Following the choice of the Gravitee editor
Participation in technical architecture workshops
Installation/configuration of gateways
Implementation of automation scripts for migrating APIs from AXWAY to Gravitee
Accompanying clients for testing

Integration: Implementation of a GoAnywhere cluster
Installation of a two-node GoAnywhere cluster based on Tomcat
Implementation of two gateways for external connection to the DMZ
Configuration of each cluster node.
Load balancing setup on the gateways.
Implementation of a two-node Clearswift antivirus cluster
Coordination of network requests (network tunnel setup, VIP, etc.) for the
antivirus cluster, DMZ gateways, and on-premise GoAnywhere.

Monitoring and Supervision:
Installation of the Datadog agent for supervision and monitoring of machine resources,
MFT flows, and API calls
Creation of dashboards representing MFT and API flows
API goanywhere MFT API Management Gravitee
HackerOne + BugCroud + les CTF
Junior Information Security Consultant (Bug Bounty Programs)
CONSULTING AND AUDITS
January 2020 - Today (6 years and 5 months)
Paris, France
Searching for vulnerabilities in HackerOne + BugCrowd programs

 Burp Suite
 BackTrack, Kali
 XSS
 SSRF
 Nmap (Then searching for vulnerabilities on applications open on these ports)
 SQL Injection
 Sublist3r
 Dirbust3r
 SQLMap
 Searching for components/frameworks with exposed vulnerabilities

Kali Linux nmap burpsuite xss SQL Injection
SFR
Full Stack Java JEE Developer - Angular
TELECOMMUNICATIONS
January 2018 - December 2018 (1 year)
Paris, France
Development of APIs for operators for order taking for the EACCESS offer, the web service handles eligibility, price retrieval, order storage in the database, and then sending the order to the dedicated space in AWS S3

Declaration of APIs to be exposed to external consumers via internally developed API Management.

Declaration of external APIs to be consumed within the same platform.

Creation/configuration of an Airflow batch that retrieves EACCESS orders and sends them to the SFR internal orchestration.

Creation of an Angular HMI (pleiade-monitoring) and the API that enriches it with orders not processed by the orchestrator, including the cause if available (XSD error...)

Migration of REST web services to Java 8 / Spring Boot 2

Migration of an extranet application offer to Spring 5.

Participation in the development of a new fiber offer on the B2B extranet (Ethernet Access Fiber) and the addition of a new DSO RANGE on Pleiade by orchestrating the order with various SFR application subsystems

Development of fixes or evolutions in existing offers.

Implementation of developer assistance tools (easyPatch, easyDeploy, revisionSelector...) and Jenkins jobs.

Implementation of continuous code control SONAR.

Implementation/update of Jenkins Jobs.

Exposure of web services (ERP / order API / sending order confirmation emails...)

Deployment and interventions on Linux systems
hosting the services.

Correction of performance issues:
- Poorly managed connection pool
- Cursor leaks
Java REST API API Management API Gateway