Freelancer profile translated to English.

Description

I am primarily involved in the design and implementation of resilient, secure, and scalable infrastructures. I have solid experience in managing distributed systems, containerization technologies, and orchestration tools. My skills include managing secret systems, private key infrastructures (PKI), and service discovery. Deployment contexts range from On-Premise based on OpenStack to Public SecNum-Cloud. My work has often been driven by strong interaction with development teams and end customers. I thrive in the DevOps and GitOps philosophy and proactive customer support, but most importantly in a team with a strong sharing culture. My achievements have often provided real added value and practical use cases.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Brest (up to 50km), Quimper (up to 10km)

DINUM
DevOps
PUBLIC SECTOR
December 2024 - Today (1 year and 6 months)
Paris, France
Participation in the design of a cloud offering based on OpenStack and Kubernetes in an internal cloud and a cloud offering in a SecNum-Cloud environment. Within a team of 8 people, the automatic construction of Kubernetes clusters is done in GitOps mode using ClusterAPI, OpenTofu, ArgoCD on Outscale and OpenStack clouds.

○ Participation in the creation of the infrastructure hosting the Kubernetes clusters and the necessary services (OpenStack, OpenTofu, Cloud-Init, ClusterAPI, Helmfile).
○ Implementation of network filtering and routing (Debian, Nftables, Netplan).
○ Automatic creation of modular inputs for OpenTofu from an IPAM repository (Python, Jinja2).
○ Configuration of forward-proxy and reverse-proxy (Unbound, Nginx, HAProxy)
Kubernetes Argo CD DevOps OpenTofu Openstack
Exail Robotics
DevOps
DEFENSE AND MILITARY
March 2024 - December 2024 (9 months)
Plouzané, France
Design of a scalable infrastructure to automate the construction, analysis, testing, and deployment of products. The result is a significant improvement in performance, flexibility, and robustness. I also proposed the creation of a deployment repository, which allows for version management and idempotence across deployments.
○ Automation of deployment creation on Vsphere and HyperV (Packer, Ansible, Terraform, Bitbucket, Artifactory).
○ Automation of AD and ADCS creation described in the repository (PKI, Teamcity, Ansible, Powershell).
○ Orchestration of pipelines and CI/CD projects as code (Python, Kotlin, Teamcity, Bitbucket)
○ Creation and pipelining of a Zero-Trust type secret management library (Keepass, Python, FastAPI)
FastAPI Packer Terraform VMware vSphere Prometheus
Satelliz
DevOps/SRE
CONSULTING AND AUDITS
September 2023 - March 2024 (6 months)
Brest, France
Design of Helm packages for client workloads. I worked on the deployment and administration of Kubernetes clusters on Outscale SecNumCloud and OVH using Terraform, Flux, and GitLab and GitOps. I also implemented Zero Trust solutions in deployments. These achievements allow for simple and scalable management of workloads for nearly 22,000 end-users across 16 Kubernetes clusters.
○ Implementation of Zero Trust solutions for cluster access management (Pass, Teleport, Vault).
○ Upgrade of Satelliz PaaS under continuous service availability constraints.
○ Improvement of deployments and upgrades with the creation of Helm packages for OpenSearch, BlueMind, MariaDB, PostgreSQL, Redis.
○ Level 2/3 customer support, with strict incident resolution time constraints.
Kubernetes Python Vault OVH Helmfile