Freelancer profile translated to English.
Back to original languageAbout Julien
Who Am I? 🛠️
Cloud Engineer/Platform Engineer/SRE/ **AWS DevOps**, I am now integrating AI into my processes to push automation and efficiency even further.
With over 15 years of experience in Systems & Networks, I master Cloud, Kubernetes, and Linux.
I am above all a Problem Solver: my role is to transform complexity into simple, robust, and maintainable solutions. **100% client satisfaction**.
My Side-Project: WizStatus.com 📡Sovereign Agentless Monitoring SaaS platform. Free offering.
My Value Proposition 🎯
✔️ I standardize
✔️ I scale
✔️ I secure
✔️ I empower your teams
Clouds:AWS, Azure, OVH, Scaleway, GCP
Tools & Technologies 🛠️
FromLinuxto **Kubernetes**, via **Docker**, **Ansible**, **Terraform**, and many others, I build reliable, high-performance stacks ready to handle the load.
Your Project, My Challenge 🚀
Budgets, constraints, objectives: I help you navigate the technological jungle and find the mostsuitable, sustainable, and securesolution.
Mixed Skills 🤹♂️
💻 I speak code
🌐 I speak network
☁️ I speak cloud
What I Do For You ✔️
⛅ Creation of next-gen cloud environments
🚀 Frictionless CI/CD pipelines
🚨 24/7 High Availability Infrastructures
🧑🔧 Real DevOps, not buzzwords
🔨 End-to-end automation
👮♂️ Security built-in by default
My Stack 🛠️
Ready to collaborate?
Let's discuss your project and see how I can help you level up. 🚀
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km), Lyon (up to 50km), Marseille (up to 50km), Nantes (up to 50km), Lille (up to 50km)
Experience
- OkeiroDevOps Kubernetes GCP - Deployment of FHIR e-Health platform (HDS)MEDICALFebruary 2026 - March 2026 (1 month)Paris, FranceDeployment of the Fyrstain health interoperability platform onPredict4Health's (Okeiro) GKE Autopilot infrastructure, hostedon sovereign GCP S3NS (Thales x Google) in an HDS certification context.- [Helm Chart] Design of an "okeiro-interop" Helm chart packaging4 interdependent components: FHIR R4 server (HAPI - patient data),FHIR R5 server (HAPI - StructureMap/ConceptMap artifact repository),Mapping Service ( $transform transformations), and ApacheAirflow 3.0 (interoperability pipeline orchestration).Official Airflow subchart integrated with LocalExecutor.- [GKE Adaptation] Transformation of the original Docker Composearchitecture into production-ready Helm charts for GKE Autopilot:CloudSQL Proxy sidecar for secure connection to PostgreSQL databases,Workload Identity (zero static credentials), init containers for managing startup dependencies (wait-for health checks between components).- [Multi-environment] Creation of values per environment(sandbox, preproduction, production) with isolation by dedicated namespace(interoperability-fyrstain), node selector and tolerationsfor placement on dedicated nodes, Service Accounts with GCP WorkloadIdentity per component.- [Individual Charts] Development of 3 separate Helm charts(fhir-simulator-r4, fhir-simulator-r5, mapping-service) integratedinto the existing helm-charts monorepo, following team patterns:CloudSQL Proxy sidecar, Gateway API, Workload Identity, IAM authentication to CloudSQL (no passwords).- [Databases] Configuration of 3 dedicated CloudSQL PostgreSQLdatabases (hapi_r4, hapi_r5, airflow) with IAM authenticationvia GCP Service Accounts, PostgreSQL grants for Workload Identity.**Result**: FHIR interoperability platform deployed on GKEsandbox, ready for promotion to preproduction and productionon sovereign HDS-certifiable cloud.
- KNDSDevOps Cloud & Security - Defense Kubernetes InfrastructureDEFENSE AND MILITARYFebruary 2026 - March 2026 (1 month)Paris, FranceDesign and deployment of asecure Cloud infrastructureforKNDS(Defense industry) via **UserAdgents**.Multi-environment Kubernetes architecture on OVH Cloud:
- [Terraform] Complete modular Infrastructure-as-Code: vRack network, MKS Kubernetes cluster, managed PostgreSQL, Valkey (Redis), OKMS, S3 storage for state backend.
- [Security] Secret management via OVH OKMS (Vault compatible) with mTLS authentication and External Secrets Operator (ESO) for automatic synchronization in Kubernetes.
- [Isolation] Strict separation of environments (dev/preprod/prod): dedicated node pools with taints/tolerations, default-deny NetworkPolicies, isolated CIDR subnets per environment, granular RBAC.
- [Kubernetes] OVH MKS v1.31 cluster with PriorityClasses (prod-critical/preprod-standard/dev-low), autoscaling on the production pool, hardened pod security contexts (non-root, read-only rootfs, dropped capabilities, seccomp).
- [Helm] Development of a custom Helm chart integrating ExternalSecret templates, multi-env deployment of Strapi CMS v5 with PostgreSQL + Valkey.
- [GitOps] ArgoCD with automatic sync, self-heal, and pruning. Kustomize structure for NetworkPolicies, RBAC, and namespaces.
- [Observability] Grafana Alloy stack with Prometheus, Loki, and Tempo for metrics, logs, and traces.
- [Network] NGINX Ingress + cert-manager (Let's Encrypt) + External DNS (OVH webhook). End-to-end TLS.
- [Docker] Custom multi-stage Strapi v5 image on Node 20 Alpine with pre-compiled admin and integrated PostgreSQL driver.
**Result**: production-ready infrastructure, compliant with Defense sector security requirements, 100% reproducible from code. - Direction Générale des Entreprises (DGE) -- via BloomFlowCloud Infrastructure Architect SecNumCloud -- BloomFlow / DGEPUBLIC SECTORJanuary 2026 - Today (7 months)Paris, FranceDesign and deployment from scratch of a sovereign Cloud infrastructure on Outscale CloudGouv (SecNumCloud) for the DGE company monitoring platform. DevSecOps, Platform Engineering, and Cloud Native approach. AI-assisted collaboration with Claude Code for IaC.━━ Infrastructure as Code (Terraform) ━━● Complete provisioning: 3 isolated VPCs, VPC Peerings, subnets, Security Groups, NAT Gateway, EIPs, S3 object storage● Lifecycle adapted to HA failover (ignore_changes on NICs and routes)● GitOps: versioned infra, PR review, declarative and idempotent deployment━━ Network Security / Zero Trust ━━● Stormshield SNS EVA HA active/passive firewall cluster, automatic VIP failover● Complete high availability configuration: file synchronization, SSH keys, authkey● Filtering and NAT rules: DNAT SSH bastion, DNAT HTTPS to OKS, port monitoring IP whitelist● Centralized secrets via HashiCorp Vault + External Secrets Operator━━ Kubernetes / GitOps / Platform Engineering ━━● Managed OKS v1.32 cluster, dedicated node pools (monitoring, application)● GitOps ArgoCD CI/CD: multi-tier apps (Node.js/Moleculer API, frontend, CubeJS, backups), Airbyte ETL pipeline, n8n workflow automation, ClamAV, portal, and IDP● Nginx Ingress controller with IP filtering at the firewall level━━ Observability / SRE ━━● LGTM Stack: Grafana 12, distributed Mimir, SimpleScalable Loki, OSU S3 storage● Firewall log collection: syslog TCP pipeline → Grafana Alloy → Loki● Alloy for K8s metrics/logs (migration from kube-prometheus-stack)● Centralized alerting Mimir Ruler, PostgreSQL monitoring via Prometheus━━ Technical Stack ━━Terraform · Sovereign SecNumCloud · Stormshield SNS · Kubernetes · ArgoCD · Helm · Grafana LGTM · Alloy · Vault · Airbyte · n8n · PostgreSQL · MongoDB · Prometheus · Claude Code AI
Reviews
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Network & Telecommunications EngineerTelecom Lille2010Spécialité en système et réseaux Informatiques
- IUT Network & TelecommunicationsBlois2007