Marc Andreu

Since 2021, I've operated as a freelance consultant through ITQuaLab, specializing in DevOps/TestOps automation, Dockerization, complex migrations, and improving security throughout the software development lifecycle (SDLC).

Recent Highlighted Project:

I led the complete automation of a critical GitLab migration from version 11.4 to 18.6 for a company, using Python scripts and GitLab APIs. The solution included:

• LDAP integration for authentication and centralized user management

• Configuration of Harbor as a private container registry with automatic vulnerability scanning, image signing, and role-based access control (RBAC)

• Zero-downtime migration of repositories, projects, issues, groups, runners, and complete configurations

Result: A modern, self-hosted, secure, and compliant platform with enhanced container governance and adherence to enterprise security policies.

This project exemplifies my hands-on approach: I don't just advise; I design, develop, and implement practical, scalable solutions that deliver measurable results (increased speed, consistency, cost reduction, and improved security posture).

Services I typically offer:

• Technical quality assurance (QA) and application security (AppSec) assessments

• Design and implementation of CI/CD pipelines (GitHub Actions, GitLab CI/CD, Jenkins)

• Dockerizing applications and environments (Compose, Swarm) for reproducible setups

• Development of internal tools and automations using Python, Bash, and APIs

• Configuration of secure self-hosted infrastructure and quality assessments (including testing AI-powered solutions, e.g., collaboration on Alknoma.com)

I work remotely and internationally. Available for similar consulting, implementation, or ad-hoc support projects.

Contact me to discuss how I can help you modernize and strengthen your development infrastructure!

I have transitioned into the application security team where I have been improving the automated processes of the Security Issues Management tool with Python scripts. These processes import vulnerabilities from SAST and Penetration testing reports into the SIM project. I am also maintaining various internal Wikis and documents related to security tooling and best practices. I support the usage of SAST tools that run in our continuous delivery pipelines. On the side of consulting activities, I help with security-related questions from development teams and I perform Threat Modeling sessions. I keep updating the checklists for secure code reviews. I advocate for security best practices while helping to improve our security culture with better training and documentation.

I was the lead Quality Assurance Software Engineer in the Mobile applications department. I primarily promoted and improved test practices across all SDLC phases. I specifically worked on business requirements reviews, preparing practical test plans, improving testing infrastructure, developing new test cases, and implementing automated test suites.