Kamal Sidki

▸ Analysis of the current LDAP/Active Directory authentication for the Cashier application.

▸ Integration of Keycloak SSO with SAML 2.0 protocol, in accordance with the framework and POC provided by the CA team.

▸ Configuration of the SAML service provider: metadata, keystore, certificates, ACS and SSO logout URLs.

▸ Adaptation of Spring Security to support Keycloak authentication while preserving existing authorizations.

▸ Management of user, role, and business attribute mapping between Keycloak and the Cashier application.

▸ Analysis and resolution of integration issues related to SAML assertions, redirections, and user profiles.

▸ Testing of the authentication flow and coordination with CA/IAM and business teams.

▸ Design and development of a health analytics platform for CNSS based on a hexagonal architecture (Ports & Adapters).

▸ Development and security of REST APIs with Spring Boot, Keycloak, OAuth2, JWT, and OpenID Connect.

▸ Implementation of functionalities covering all insured profiles: Employees, Self-employed, Pensioners, ASVI, AMO, family allowances, pensions, indemnities, and litigation.

▸ Design of a multi-level rate limiting mechanism with Bucket4j (Token Bucket), optimized by Caffeine Cache to improve performance and reduce latency under heavy load.

▸ Participation in Agile ceremonies (Scrum), code reviews, technical documentation writing, and code quality maintenance.

▸ KYC (Know Your Customer): design and development of critical compliance modules.

▸ Building a complete microservices architecture with Spring Cloud Gateway, Eureka, and Config Server, integrating Zipkin & Sleuth for distributed tracing between services.

▸ Implementation of centralized identity management via Keycloak with role-based access control — OAuth2, OpenID Connect, JWT — across all services.

▸ Integration of Apache Kafka for inter-service event communication.

▸ Migration from Oracle to PostgreSQL with optimization of complex queries and performance improvements.

▸ Setup of CI/CD pipelines with Jenkins and Docker, including automated tests, SonarQube static analysis, and deployments.