Charaf Sfaoua

Integrated into the Orange group security team, I contributed to the redesign and development of two critical applications managing digital signatures, certificates, and HSM (Hardware Security Module) modules. Sensitive systems used across the group.

Redesign of PKI-SIGN-BIN — a secure digital signature application for documents and binaries, exposed as an API for other internal services.

· Design and development of Spring Boot REST APIs: signing operations, JWT token management, integration of an internal timestamping service.

· Complete security: Spring Security, JWT authentication, fine-grained role and permission management via LDAP.

· Token management portal for exposing the application as an API consumable by third parties.

· Implementation of the Jenkins CI/CD pipeline and participation in code reviews.

Mission 2 — PKI-HARD-ROCK

Development from scratch of PKI-HARD-ROCK — a HSM (Hardware Security Module) administration application for managing the complete lifecycle of cryptographic keys and certificates.

· Spring Boot REST APIs for interfacing with HSM modules: key generation, certificate management (creation, consultation, revocation).

· Implementation of business services with robust error handling and detailed logging of sensitive operations.

· Implementation of HSM load monitoring.

Digitalization project for a social protection organization: redesign of a work management tool to centralize manager activities, reduce workload peaks, and digitize beneficiary files.

OPERA (Organization, Sharing, and Activity Regulation) is a common and shared activity pool to facilitate workload peak management, as well as simplify workflows by centralizing manager activities within a single interface for operational gains in daily activities.

· Development and evolution of Spring Boot REST APIs for business functionalities (workflow, assignment, activity filtering).

· Design and development of Angular interfaces: centralized dashboard, shared activity pool, filtering system, and advanced search.

· Creation of a reusable Angular component library in collaboration with the design team — used across the entire platform.

· Design of functional mockups before development (UX/Dev collaboration).

· Continuous integration: Jenkins, Git, SonarQube.

Scale-up specializing in online long-term rentals, with clients including Amazon Spain and Samsung Italy. Full-stack mission within a product team of 11 people in Scrum.

Design and development from scratch of an end-to-end B2C digital subscription process, from pricing simulation to the payment tunnel. Integrated into the platforms of major clients (Amazon Spain, Samsung Italy).

· Full-stack development: Spring Boot REST APIs on the backend, React interfaces on the frontend (product configurator, pricing simulation, payment tunnel).

· Careful UX: responsive design, real-time form validation, user-oriented error handling.

· Implementation of Google Tag Manager for behavioral tracking of new flows to pilot product adoption.

· Implementation of a comprehensive testing strategy: unit tests, integration tests, non-regression tests at the end of each sprint.