Freelancer profile translated to English.
Back to original languageAbout Eric
Solution Architect and Tech Lead with over 10 years of experience in the banking sector (BNP Paribas, Crédit Agricole). From designing target architectures to supporting teams, I champion quality, security, and innovation daily: microservices, DevSecOps, Cloud, and now generative AI (LLM, RAG, agents). Certified by HEC in corporate finance, a Software Craftsmanship advocate, and a basketball pivot in my spare time.
English
Fluent
Spanish
Basic
French
Native or bilingual
Can work on-site
Colombes (up to 50km)
Experience
- BNPPArchitect/Tech LeadBANKING AND INSURANCEJune 2025 - Today (1 year and 2 months)Paris, FranceAs part of the Compliance System Team, I lead the architecture and delivery of screening solutions (sanction lists, PEPs, embargoes) and real-time transaction filtering, while managing the sensitive data encryption/pseudonymization program to ensure compliance (AML/CFT, GDPR) and system resilience.Key Responsibilities
- Target architecture for filtering chains (event-driven, microservices, API), definition of NFR requirements (latency, throughput, SLO/SLA, resilience).
- Tech Lead for build teams: technical scoping, code reviews, common standards and patterns, coaching.
- Design and implementation of a tokenization/de-tokenization and encryption service (KMS/HSM, key rotation, mTLS, RBAC) integrated into application workflows.
- Security by design: threat modeling, data classification, logs/auditability, secrets management, privacy-by-default.
- Integration of screening engines (names/IBAN/transactions) and optimization of rules to reduce false positives.
- End-to-end observability (traces, metrics, alerting) and SRE practices (runbooks, autoscaling, chaos/DR).
- CI/CD industrialization (quality metrics, SAST/DAST, contract testing), release management, and secure production deployments.
- Governance: ADR, HLD/LLD, flow mapping, GDPR compliance, alignment with SecOps, Risk, DPO, and business stakeholders.
Technical Environment:Back-end: Java 17, Spring Boot (Security, WebFlux), REST/OpenAPI, microservices.Data/Streams: Kafka (event-driven, DLQ/outbox), Mongo DB.Security: KMS/HSM, FPE/tokenization, OAuth2/OIDC, mTLS, secrets management.Ops: IBM Cloud, Docker/K8s, observability (metrics/logs/traces), CI/CD, integrated quality & security. - Credit AgricoleDesign Authority ArchitectBANKING AND INSURANCEJanuary 2024 - April 2025 (1 year and 3 months)Paris, FranceDrafting Compliance/GreenIT standards:
- Identify the scope of these tasks corresponding to activities governed by Design Authority (software engineering) standards and validate it with the CA-PS working group, then integrate it into the corpus of norms and standards.
- Document BDD principles and the use of Cucumber: Adapt its use to CA-PS operations by gathering feedback from a project (collaboration between developers, testers, and BAs).
- Identify possible improvements in the CA-PS context (additional tooling, capitalization on feedback within the Crédit Agricole SA Group, ...).
Transcribing Java development standards into SonarQube rules to streamline the textual standard document:- Inventory of rules corresponding to standard SonarQube rules and removal of these rules from the normative document. Inventory of CA-PS specific rules implementable as SonarQube rules and planning of their implementation.
- Implementation of rules as SonarQube rules and removal of the rule from the documentation corpus.
Technologies used: Springboot 2/3, java 8/java 17, maven, JUnit 5, Angular 13, React 18, Jest, Typescript, IBM Cloud, Docker, Kafka, Kubernetes, Sonar, Jenkins, helm, jfrog, mongoDB, elastic Search - BNP PARIBASJava/Spring ExpertBANKING AND INSURANCEJanuary 2021 - December 2023 (3 years)Paris, France
- Ensuring the quality of application deliverables for programs within the project: code audits, quality standards updates.
- Training project teams on good software development and architecture practices: training, dojos...
- Development and delivery of application components to facilitate the work of project teams: Implementation of a configuration file encryption library. Implementation of a multi-environment deployment process for Angular 13+ applications.
- Assistance with application migration to the cloud: Architecture studies, POCs in the IBM cloud, migration of on-premise data to the cloud (MongoDB, Postgres, Elasticsearch).
- DevSecOps Referent: Ensuring adherence to the 10 OWASP principles so that project teams deliver code that is not only qualitative but also secure.
Technologies used: Springboot 2/3, java 8/java 17, maven, JUnit 5, Angular 13, React 18, Jest, Typescript, IBM Cloud, Docker, Kafka, Kubernetes, Sonar, Jenkins, helm, jfrog, MongoDB, elastic Search
Reviews
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Computer EngineeringInstitut d'ingenierie d'informatique de Limoges2016
- Computer Science DegreeUniversity of Yaoundé 12013
Certifications
- Blockchain for Business by The Linux FoundationLinux Foundation2018
- CERTIFICATE OF ADVICE IN ORGANIZATION AND CHANGE MANAGEMENTL'Institut Pour l'Expertise Paris2019