Freelancer profile translated to English.
Back to original languageAbout Clément
Expert in automating and securing critical infrastructures.
With over 5 years of experience in IT, including 3 years in the highly sensitive Health Data Hosting (HDS) sector, I help companies industrialize their deployments and strengthen their security.
What I bring to your projects:
🚀 Total Automation (IaC): Design of CI/CD pipelines and provisioning of immutable infrastructures with Terraform and Ansible.
🛡️ Security & Hardening: Audit and hardening of Linux systems according to ANSSI recommendations. Implementation of Zero-Trust strategies.
☸️ Cloud-Native Orchestration: Deployment and management of Kubernetes clusters (K3s/K8s) using a GitOps approach (ArgoCD).
📦 Industrial Containerization: Migration and securing of workloads under Docker and Podman (rootless).
Why collaborate with me?
My dual System & Security culture allows me to guarantee stable, reproducible, and highly secure production environments. I primarily work on environments with strong constraints (Air-gapped, Defense, Health).
✅ Methodology: Root Cause Analysis (RCA), Infrastructure as Code, rigorous documentation.
💻 Technical Stack: Ansible, Terraform, Kubernetes, Podman, Jenkins, Python, Bash, eBPF.
Available for consulting, auditing, or technical implementation missions.
French
Native or bilingual
English
Fluent
Can work on-site
Toulon (up to 30km)
Experience
- Axe e-santeSystem & DevOps Engineer - HDS EnvironmentsSeptember 2025 - Today (11 months)Mission to automate and secure a Health Data Hosting (HDS) infrastructure, subject to strong regulatory and security constraints.🔹 IaC Automation: Design and execution of a "Zero-Touch" deployment via Ansible on a fleet of over 230 production servers (Bare-metal and VMs).🔹 Security & Compliance: Linux OS hardening, automated encryption of production databases, and strict secrets management via Ansible Vault.🔹 Network & MCO: Level 3 support, network diagnostics (OSI model, Firewalls, complex routing) and Operational Maintenance.Technical Environment: Linux, Ansible, Bare-metal, PostgreSQL/MySQL, Firewalls, HDS Standards.
- Architecte Cloud-Native (Indépendant)Cloud-Native & DevSecOps Architect (R&D)June 2025 - Today (1 year and 2 months)Design, deployment, and maintenance of highly available and secure industrial platforms (Air-Gapped and Zero-Trust).🔹 GitOps Approach: Creation of a production-level Kubernetes cluster (K3s) with declarative deployment and auto-discovery via ArgoCD (ApplicationSets).🔹 Provisioning & CI/CD: Automated deployment via Terraform (Proxmox API) and Jenkins pipelines (Build, Scan Trivy, Push).🔹 Defense Security: "Air-Gapped" architectures with image exports (Podman), kernel hardening (sysctl), and Zero-Trust networks (no exposed inbound ports, Cloudflare Tunnels).🔹 Observability: Implementation of a complete centralized monitoring stack (VictoriaMetrics, Prometheus, Grafana, Loki).Technical Environment: Kubernetes (K3s), Terraform, Ansible, Podman, Jenkins, ArgoCD, Traefik, Trivy, Proxmox.
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Level 6 RNCP Title - Application Developer DesignerLa Capsule2021Titre RNCP Niveau 6 - Concepteur Développeur d'Applications
- Licentiate degree, Information TechnologyUniversity of Toulon2020Licentiate degree, Information Technology