Etienne Deneuve

- Continuous optimization of infrastructure costs, notably through the implementation of FinOps methods (Savings of over 100K per year).

- Redefinition of cluster architecture for zero-trust compliant clusters:

+ Clusters are deployed via IaC with Terraform as adapted landing zones.

+ The architecture is bi-zonal or more to guarantee a very high SLA and facilitate daytime maintenance.

+ Everything contained within the clusters is deployed by Flux and secured with SOPS.

- Consulting and support for the transition to DevSecOps:

+ Strategic advice and personalized support to facilitate the transition of teams towards a DevSecOps approach.

+ Analysis of existing development and operations processes to identify obstacles to integrating security practices.

+ Implementation of strategies to incorporate security from the early stages of the development cycle (Shift Left Security).

+ Organization of training sessions and workshops to raise team awareness of security issues and promote a collaborative culture between developers, operations, and security experts. The goal of the transition is to lead to a significant improvement in code quality, a reduction in vulnerabilities, and an acceleration of deployment cycles.

- Implementation of Helm Charts after auditing the existing setup.

- Implementation of multi-architecture Docker builds for testing on ARM machines.

- Design and supervision of the implementation of a multi-zone and multi-cluster AKS architecture:

+ Responsible for the design and supervision of a multi-zone and multi-cluster AKS architecture to ensure high availability, increased resilience, and optimal application performance.

+ Close collaboration with teams to plan and deploy infrastructure capable of supporting large-scale workloads.

+ Implementation of load balancing and automatic failover strategies between zones to minimize downtime.

+ Integration of best practices in security, scaling, and resource management.

+ Continuous monitoring of the environment to ensure stable performance and identify improvement opportunities.

- Assistance for re-platforming to K8S:

+ Provision of technical and strategic support for migrating existing applications and services to the Kubernetes platform.

+ Analysis of legacy applications to determine containerization requirements and necessary adaptations.

+ Development of detailed migration plans, including the redesign of some applications to be "cloud-native".

+ Coordination with development and operations teams to ensure a smooth transition and minimize service interruptions.

- Implementation of CI/CD and GitOps strategy:

+ Development and deployment of a CI/CD strategy based on GitOps principles to automate and optimize deployment processes.

+ Integration of tools such as GitLab CI/CD and Flux to automate builds, tests, and deployments, for fast and reliable delivery of code to production.

+ Implementation of robust CI/CD pipelines that include quality checks, automated tests, and security verifications.

Consulting and supervision in the large-scale implementation of AKS:

+ Participation in the design of the platform architecture to ensure optimal performance, high availability, and enhanced security. Support for infrastructure teams to integrate best practices, automate deployments, and facilitate AKS cluster management across the organization.

- Complete redesign of OS Factory (Windows 10 & Windows Server):

+ Analysis of existing processes and identification of areas for improvement to optimize system image deployments. Implementation of new automated procedures, reducing deployment time by over 50% and improving the stability and security of deployed operating systems.

- Management of Ansible, Terraform & Packer updates to the latest versions:

+ Update and maintenance of Ansible, Terraform, and Packer automation tools to their latest versions. Ensuring compatibility with existing infrastructures and training teams on new features. This upgrade has led to increased operational efficiency, reduced configuration errors, and better integration of DevOps processes.

- Implementation of best practices for platform engineering:

+ Collaboration with development, operations, and security teams to design and deploy a robust, scalable, and highly available platform. Implementation of automation, standardization, and monitoring processes to optimize operational efficiency. Introduction of new technologies and tools to improve infrastructure and deployment management, while ensuring team training to adopt these new practices.