Fayssal Mohamed-Harzallah

Context:

Mission within a large energy sector client, in a complex, secure, and highly industrialized AWS environment, with high demands in terms of governance, security, and cost control.

Main Responsibilities:

Design and implementation of robust, secure, and scalable AWS architectures

Deployment and maintenance of infrastructure as code with Terraform, using standard modules

Implementation of DevSecOps best practices (security by design, automation, compliance)

Consideration of FinOps constraints from the design of the architectures

Technical support and guidance for development and system teams

Contribution to architectural choices, technical audits, and continuous platform improvements

Stack & technologies:

AWS (VPC, IAM, ECS Fargate, S3, EventBridge, RDS),

Terraform, Gitlab CI/CD, Serverless, AWS Security, FinOps.

Value delivered:

- Standardized, secure, and maintainable AWS architectures

- Reduction of security and compliance risks

- Improvement of deployment industrialization and reliability

- Cost optimization and better cloud governance

Audit, Construction, and Management of AWS Landing Zones for various clients.

- AWS Organizations, SCP, SSO, Terraform, Python, AWS CloudFormation,

Junior DevOps best practices for deploying a solution for managing an AWS Landing Zone

Deployment of AWS accounts, Management of configuration drifts, management of events related to account configuration.

- SCP, KMS, AWS Organization, IAM, SSO, Lambda, Python, EventBridge, DynamoDB, CodeCommit

POC and Construction of Serverless solutions for different client cases

- Lambda, Python, EventBridge, Step Functions, DynamoDB, SSM

Audit and POC on BigData and Security projects

- S3, Cloudtrail, FlowLogs, Security Hub, Splunk

Construction and Continuous Improvement of infrastructure for the MSP (Managed Service Provider) offering

- SSM, Cloudwatch, EventBridge, IaC, Terraform, AWS Backup, SNS, JIRA FinOps

- Audit and proposal of a new RI/SP plan, POC and Responses to tenders focused on FinOps, Cloud Infrastructure Cost Optimization Security

- Audit, Projects, Consulting, and POC on various security aspects around and within client AWS Landing Zones

POC and Audit on diverse topics

- Netapp GFC + AWS FsX Ontap, AWS Control Tower, EKS

POC around AI topics

- AWS SageMaker, LLM, Python, AWS Rekognition

Design and management of AWS infrastructure in Terraform, using Terraform modules provided by an expert team. Implementation and optimization of the architecture based on FinOps and security requirements. Support and upskilling on AWS (fullstack developers and system team). AWS stack used: API Gateway, Route 53, ECS Fargate, EventBridge, S3, DynamoDB, Cognito.