Hamdi Lion

- Complete audit of the existing infrastructure to assess resource allocation and identify consolidation points

- Design and implementation of a new deployment strategy adapted to multi-region/multi-zone needs and the scaling of multiple applications

- Refactoring of Terraform/OpenTofu code applying best practices for clean code to facilitate maintenance and evolution

- Rework of Terragrunt code to simplify deployment pipelines, adopting a GitOps approach for clear versioning and easier rollback

- Automation of Terraform/OpenTofu state migrations between regions and zones to ensure environment consistency

- Integration of Sops to centrally encrypt and secure secrets, including during automatic rotation across multiple zones

- Implementation of GitHub Actions pipelines to orchestrate deployments, releases, and builds of various codebases worldwide

- Creation and standardization of reusable and composite GitHub Actions to unify CI/CD chains, reduce duplication, and accelerate production releases

- Development of a CLI in Go using Cobra to apply a GitOps approach to the deployment of all applications

- Implementation of a monitoring stack with Azure Monitor; log collection via Log Analytics Workspace and data transformation via a Logic App before sending notifications to Microsoft Teams

• Migration of SSL ingress/certificate management from Traefik to Nginx with Cert Manager and Let's Encrypt, ensuring automated renewal and better compatibility with modern standards.

• Complete audit of the existing Kubernetes infrastructure followed by automation of cluster provisioning on OVHcloud via Terraform, including advanced node configuration (taints, labels, affinities).

• Implementation of a unified observability solution based on Grafana Alloy and Loki for centralized collection of logs and metrics from the entire cluster (Traefik, Nginx, Django, K8s, etc.).

• Standardization and security of application deployments with Helm and Helmfile, along with SOPS integration for encrypted secret management.

- Conducted an audit of the existing infrastructure, including in-depth historical analysis.

- Migrated Sonatype Nexus from version 3.62 to version 3.72.

- Refactored the legacy codebase of the Scan command (ClamAV) into GoLang.

- Implemented a baseline module to standardize Kubernetes cluster configuration.

- Set up Private Endpoints / Private Links / NSG / Route Tables and opened flows between different services.

- Deployed the Gitea component using Terraform/Terragrunt