Duval Tagne

Project: Cloud Transformation – Veolia Group Operational management of Cloud platforms (AWS, GCP, Azure) in a multi-cloud environment.

- Operational management of multi-cloud platforms (AWS, GCP, Azure) in a hybrid and international context, ensuring the availability and performance of critical environments.

- Handling incidents and requests via ServiceNow (ITSM): qualification, end-to-end resolution, escalation to expert teams if necessary.

- Security compliance monitoring: implementation of remediation plans, deployment of Cloud Security policies (IAM, encryption, firewalling), participation in the continuous improvement of DevSecOps processes.

- Contribution to FinOps/GreenOps practices: implementation of cost monitoring dashboards (CloudWatch, BigQuery, Azure Cost Management), implementation of alerting, planning of instances and optimization of energy consumption.

- Participation in the evaluation and implementation of new Cloud services (serverless, managed DB, advanced monitoring solutions) with a focus on innovation and digital sobriety.

- Collaboration with Cybersecurity, Architecture, and Data departments to align Cloud deployments with regulatory requirements (GDPR, ISO 27001) and business roadmaps.

- Automation and Infrastructure-as-Code: contribution to CI/CD pipelines (Terraform & GitLab CI/CD) to industrialize multi-cloud deployments (AWS, GCP).

Technical environment: AWS, GCP, Azure, Terraform, Ansible, GitLab CI/CD, ServiceNow, CloudWatch, BigQuery, Azure Cost Management, FinOps/GreenOps tools, IAM, TLS/PKI, hybrid Cloud networks.

- Design & deployment of a secure and highly available infrastructure for a showcase website (AWS CloudFront + S3 + Terraform), integrating performance monitoring and optimized cost management.

- Overhaul of an AWS Config Rules reporting solution via Step Functions and distributed Lambdas, significantly reducing execution time and ensuring compliance across 40+ AWS accounts.

- Implementation of automatic status notifications (CloudWatch, SNS, GuardDuty) to improve proactive detection and incident escalation to SecOps and SysOps teams.

- File migration and inter-account S3 replication project with HSM encryption and advanced IAM role management, ensuring confidentiality and traceability of access.

- Automation of post-delivery checks via a Python script, reducing manual errors and standardizing post-deployment verifications.

- Contribution to the log descent project monitoring: integration of Filebeat and Logstash for data centralization and availability within the EDF observability ecosystem.

- Interaction with Cybersecurity and Architecture teams to ensure GDPR compliance in the face of the American CloudAct law issue (participation in workshops for integrating the AWS xks solution with Thales and writing a white paper).

Technical environment: AWS (S3, CloudFront, Config, Lambda, Step Functions, GuardDuty, CloudWatch, SNS, KMS), Terraform, Python, IAM, HSM, Elastic Stack (Filebeat, Logstash).