Freelancer profile translated to English.

Description

Senior DevSecOps Engineer with 13 years of experience in cloud-native infrastructure, automation, and security. Expert in Kubernetes (CKA & CKS — full training), Terraform, Ansible, and multi-cloud (AWS, GCP, Azure, IBM Cloud). Specializes in integrating security into CI/CD pipelines (shift-left security), secret management, cluster hardening, and cyber-recovery. Proven ability to operate in critical, large-scale environments (banking, telecom, biometrics). Autonomous, proactive, and comfortable in international Agile teams.

Industry field of expertise

Languages

English
Fluent
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km), Lille (up to 50km)

Frequencies
DevSecOps
CIVIC AND SOCIAL ORGANIZATIONS
February 2026 - Today (4 months)
Paris, France
As part of a volunteer project for the NGO Frequencies, I am acting as an architect for the implementation of an identity infrastructure.

Implementation of SSO (Single Sign-On) between Google Workspace and Azure Entra ID (Azure AD) via SAML 2.0 / OIDC federation.
▸ Configuration of identity federation between Azure Entra ID and Azure DevOps: management of groups, RBAC, and conditional access policies.
▸ Automatic user provisioning (SCIM) between Google Workspace and Azure AD.
▸ SSO validation tests, architecture documentation, and administrator training.
Azure DevOps Azure Entra ID Cloud GCP Firebase Google Workspace
Société Générale (La Défense)
Senior DevOps & Automation Engineer
BANKING AND INSURANCE
July 2024 - January 2026 (1 year and 6 months)
Paris, France
Long-term assignment at Société Générale as a Senior DevOps Engineer in an international Agile Scrum context (Paris, Bucharest, Bangalore, Montreal — 40+ people).

☁️ Migration to Azure Cloud & AKS: adaptation of Helm charts for all environments (DEV/UAT/PREPROD/PROD), management of Federated Identities on Azure Entra ID, securing secrets via Azure Key Vault + External Secret Operator (ESO), writing Terraform manifests (BLOB Storage, Key Vault, Azure SQL, IAM, DNS), continuous deployment via Jenkins + Azure CLI.

📊 Observability & Metrics: log collection pipeline via Fluent Bit → S3, metrics pipeline with Kafka brokers and S3 storage, secrets dynamically managed via HashiCorp Vault.

⚙️ CI/CD & Migrations: Nexus → JFrog Artifactory migration, TIBCo → RabbitMQ, SonarQube integration, automated deployments on XLDeploy and Autosys, industrialization of S3 buckets (Terraform + Ansible + Rclone), creation of Gen2 infrastructures on SG Private Cloud, migration of legacy sh/ksh/csh scripts, applications to Python 3.12, Python APIs for daily sanity checks.

🔒 Security & Resilience: complete infrastructure cyber-recovery procedures, Disaster Recovery (DR) tests.

🛠 Stack: AKS · Azure · Terraform · Ansible · Jenkins · GitHub Actions · HashiCorp Vault · JFrog · Docker · Podman · Kaniko · Kafka · Fluent Bit · Python 3.12 · RHEL 7/8/9 · S3 · XLDeploy · RabbitMQ · Elastic Cloud
VIACCESS-ORCA
DevOps Infrastructure Engineer
February 2023 - May 2024 (1 year and 3 months)
Orange, CA, USA
Project 1 — Anthos / GCP & AWS Infrastructure
▸ Automation of VM deployment with Ansible; vSphere 6 and 7 configuration and administration.
▸ Industrialization of Anthos cluster deployment (GCP + on-premises) with Terraform and Ansible.
▸ Jenkins pipeline for VM and Anthos API management.
▸ Observability stack: Prometheus, Grafana, Alertmanager on multi-tenant Kubernetes clusters hosted with Anthos.
▸ OpenEBS deployment (container storage); AWS infrastructure management (VPC, Transit Gateway, EC2, EKS).
▸ Working in SAFe Agile environment, participation in PI Planning; documentation writing.