Hamdi Lion

- Comprehensive audit of the existing infrastructure to assess resource allocation and identify consolidation points

- Design of a standardized hub & spoke architecture for all applications, centralizing cross-functional services and isolating workloads by spoke

- Multi-region/multi-zone deployment strategy adapted for scaling multiple applications

- Operational maintenance (MCO) of the infrastructure (availability, incidents, security patches)

- Creation of standard and reusable Terraform/OpenTofu modules within DiFa to standardize provisioning

- Refactoring of Terraform/OpenTofu code according to clean code principles

- Terragrunt rework using GitOps approach; delivery time reduced from over 2 weeks to 5-10 minutes, a 20-fold decrease

- Automation of state migrations between regions and zones

- Integration of Sops for centralized encryption and multi-zone secret rotation

- Implementation and deployment of Azure Container Apps (serverless, auto-scaling, ingress, hub & spoke integration)

- Azure Front Door CDN: configuration of endpoints, routing, and multi-region caching

- AI workflows and agents (automated DNS request creation) for certificate renewal and DNS records, reducing processing time by 10x

- Implementation of Azure AI Foundry to industrialize DiFa's AI agents

- GitHub Actions pipelines to orchestrate global deployments, releases, and builds

- Reusable and composite GitHub Actions to standardize CI/CD chains

- Management of internal dependencies with Renovate (automated updates, supply chain security)

- Go CLI (Cobra) to apply a GitOps approach to deployments

- Azure Monitor monitoring stack: logs via Log Analytics, transformation via Logic App, Microsoft Teams notifications

• Migration of SSL ingress/certificate management from Traefik to Nginx with Cert Manager and Let's Encrypt, ensuring automated renewal and better compatibility with modern standards.

• Comprehensive audit of the existing Kubernetes infrastructure followed by automation of cluster provisioning on OVHcloud via Terraform, including advanced node configuration (taints, labels, affinities).

• Implementation of a unified observability solution based on Grafana Alloy and Loki for centralized collection of logs and metrics from the entire cluster (Traefik, Nginx, Django, K8s, etc.).

• Standardization and security of application deployments with Helm and Helmfile, coupled with SOPS integration for encrypted secret management.

- Conducted an audit of the existing infrastructure, including in-depth historical analysis.

- Migrated Sonatype Nexus from version 3.62 to 3.72.

- Refactored the old codebase of the Scan command (ClamAV) into GoLang.

- Implemented a baseline module to standardize Kubernetes cluster configuration.

- Implemented PrivateEndpoints / Private Links / NSG / Route Tables and opened flows between different services.

- Implemented the Gitea component using Terraform/Terragrunt