Kévin Rauscher

Within the 'Edge' group, I led and mentored a team of 5 engineers.

I led the migration of the existing nginx proxy control plane from a singleton architecture to a multi-deployment setup. I designed this migration, which had failed twice before, to proceed smoothly by identifying iterative steps to build confidence in the solution. This migration was essential to prevent major incidents related to automatic deployments of incorrect configurations across all Zendesk proxies.

We rewrote the system managing the DNS configuration for Zendesk's customer domains from a batch process to a fully event-driven system. This allows customers to see their DNS changes in near real-time and provides much better observability of their DNS usage.

I facilitated discussions regarding the removal of the DST Root CA X3 cross-sign by Let's Encrypt. I helped identify the scope of the problem and potential solutions to allow Zendesk customers to continue supporting older Android phones.

I designed and implemented a solution to route traffic from Zendesk's infrastructure to the correct data centers of new acquisitions, such as Tymeshift. This helped provide customers with seamless usage of acquisitions from their Zendesk accounts.

Within the back-end team, our mission is to provide services to other Ledger projects to enable them to offer the best cryptocurrency services. Some examples include blockchain explorers, countervalues, and cryptocurrency exchange capabilities.

Technical environment: Scala, Http4s, Cats, FS2, Circe, Datadog

Within a team of 7 back-end developers, I participated in the maintenance, updates, and evolution of a major project, the Merchant Service Hub, architected as a microservice. In this context, I encouraged the application of good functional programming practices through training and peer reviews. I also updated and restructured the automation around infrastructure management to improve maintainability. Finally, I actively participated in the redesign and implementation of numerous key components such as authentication with OAuth and multi-factor authentication.