Fayssal Mohamed-Harzallah

Context:

Mission within a large energy sector company, in a complex, secure, and highly industrialized AWS environment, with high demands regarding governance, security, and cost control.

Main Responsibilities:

Design and implementation of robust, secure, and scalable AWS architectures

Deployment and maintenance of infrastructure as code with Terraform, using standard modules

Implementation of DevSecOps best practices (security by design, automation, compliance)

Consideration of FinOps constraints from the architectural design phase

Technical support and coaching for development and systems teams

Contribution to architectural choices, technical audits, and continuous platform improvements

Stack & Technologies:

AWS (VPC, IAM, ECS Fargate, S3, EventBridge, RDS),

Terraform, Gitlab CI/CD, Serverless, AWS Security, FinOps.

Value Delivered:

- Standardized, secure, and maintainable AWS architectures

- Reduction of security and compliance risks

- Improved industrialization and deployment reliability

- Cost optimization and better cloud governance

Audit, Construction, and Management of AWS Landing Zones for various clients.

- AWS Organizations, SCP, SSO, Terraform, Python, AWS CloudFormation,

Junior DevOps best practices for deploying a solution to manage an AWS Landing Zone

Deployment of AWS accounts, Management of configuration drifts, event management related to account configuration.

- SCP, KMS, AWS Organization, IAM, SSO, Lambda, Python, EventBridge, DynamoDB, CodeCommit

POC and Construction of Serverless solutions for various client cases

- Lambda, Python, EventBridge, Step Functions, DynamoDB, SSM

Audit and POC on BigData and Security projects

- S3, Cloudtrail, FlowLogs, Security Hub, Splunk

Construction and Continuous Improvement of infrastructure for the MSP (Managed Service Provider) offering

- SSM, Cloudwatch, EventBridge, IaC, Terraform, AWS Backup, SNS, JIRA FinOps

- Audit and proposal of a new RI/SP plan, POC and Responses to tenders focused on FinOps, Cloud Infrastructure Cost Optimization Security

- Audit, Projects, Consulting, and POC on various aspects of security around and within the different client AWS Landing Zones

POC and Audit on diverse topics

- Netapp GFC + AWS FSx Ontap, AWS Control Tower, EKS

POCs on AI topics

- AWS SageMaker, LLM, Python, AWS Rekognition

Design and management of AWS infrastructure in Terraform, leveraging Terraform modules provided by an expert team. Implementation and optimization of the architecture based on FinOps and security requirements. Support and upskilling on AWS (fullstack developers and systems team). AWS stack used: API Gateway, Route 53, ECS Fargate, EventBridge, S3, DynamoDB, Cognito.