Freelancer profile translated to English.
Back to original languageAbout Mathias
Systems engineer by training, I am passionate about new technologies and cloud computing. I have over 13 years of experience on AWS, which has allowed me to tackle various topics and use cases... here are a few:
- Evangelizing AWS best practices and training teams.
- Migrating datacenters in lift and shift.
- Migrating applications to cloud-native services.
- Deploying landing zones (multi-AZ, multi-region).
- Exposing and securing services on the internet.
- Scalability and resilience.
- Security and compliance.
- Monitoring and observability.
French
Native or bilingual
Can work on-site
Paris (up to 50km)
Experience
- Europcar Mobility GroupAWS Network Tech LeadAUTOMOBILEMay 2021 - Today (5 years and 1 month)Paris, France*Mission- Technical referent for the network team.- Definition of AWS standards and best practices within the network team.- Automation and industrialization of the landing zone deployment (multi-account, multi-region) via gitlab-ci and Terraform.- Definition and implementation of an inspection solution (IPS-IDS) via AWS transit gateway,- Technical referent for the network team.- Definition of AWS standards and best practices within the network team.- Evangelizing AWS best practices and CI/CD.- Automation and industrialization of the "landing zone" deployment (multi-account, multi-region) via gitlab-ci and Terraform.- Design and implementation of a filtering and inspection solution (IPS-IDS) via AWS transit gateway, AWS gateway load balancer (Geneva protocol) and Palo Alto.- Design and implementation of the break-out to centralize and secure access to various services on the internet.- Design and implementation of the break-in to distribute and secure services/APIs exposed on the internet.- Centralization and automation of routing and firewall rules for the landing zone, taking into account constraints related to different connectivity types and multi-region.- Design and implementation of global connectivity between different stations and AWS via SD-WAN (AWS Cloudwan, Meraki VMx).- Design and implementation of a centralized DNS solution for the "landing zone" via Route53 to manage private, public, and split-view domains.- Design, implementation, and industrialization of VPN creation/configuration (static routing or BGP).- Implementation of analysis and monitoring dashboards.
- Euler HermesAWS Tech LeadBANKING AND INSURANCEMay 2018 - May 2021 (3 years)Paris, France*Certifications:- AWS Certified Security – Specialty- AWS Certified DevOps Engineer - Professional (Re-certification)*Missions:- Technical referent for CloudFoundation.- Contribution to architecture validations; Contribution to the validation of "infra as Code" deliverables for projects before deployment.- Responsibility for "build" activities on the Landing Zone – Definition and writing of norms and standards- Evangelizing guidelines and best practices to DevOps teams.- Design/Deployment of CI/CD pipelines on Gitlab.- IaC (infra-as-code) with Terraform and Cloudformation.- Creation of a multi-account/multi-region security event management system (Security Hub, Config, Event bridge, Lambda, SQS, SNS, DynamoDB, …).- Design of a protection solution for resources exposed on the Internet (Break-In) including APIs on API Gateway (Cloudfront, WAF, …).- Design and security of VPCs across the landing zone.- Implementation of compliance controls and auto-remediation rules.- Implementation of a cost saving system across the Landing zone.- Implementation of analysis and monitoring dashboards on Prometheus and Grafana.
- EDIFIXIOAWS Architect & DevOpsDIGITAL AND ITJuly 2014 - May 2018 (3 years and 10 months)Paris, FranceArchitect / DevOps AWS at Edifixio:*Certifications:-AWS Certified Solutions Architect - Associate-AWS Certified SysOps Administrator - Associate-AWS Certified Developer - Associate-AWS Certified Solutions Architect – Professional-AWS Certified DevOps Engineer - ProfessionalWorking within a "premier" AWS partner with "Migration" competency, my various missions at EDIFIXIO are mainly focused on:-Datacenter migration and application deployment on AWS under various OS (Windows server [2003, 2008R2, 2012, 2012R2], Linux [Ubuntu, Debian, CentOS]).-Implementation of highly available and elastic infrastructure (network/system) (VPC, Subnet, NatGateway, InternetGateway, VPN, NACL, EC2- SecurityGroup, ALB/NLB, Multi-AZ).-Automation (System and application deployment) and industrialization (environment provisioning) via CodeCommit, CodePipeline, CodeDeploy, S3, Cloudformation and custom Python tools (Boto3).-Infrastructure and application supervision via next-gen tools (CloudWatch, Nagios/Centreon, Munin, Sensu).-Implementation of log collection, analysis, and storage tools (Logstash, Kibana, ElasticSearch, Redis, CloudwatchLogs, FlowLogs).-Implementation of shared file systems: EFS, GlusterFS, DFS.-Implementation of serverless Backup systems (+ reporting), relying on Lambda, DynamoDB, CloudWatchEvents, CloudWatchLogs, S3.-Optimization of application patterns using AWS SaaS-type services.-Consulting on how to best use AWS "Best practices".-Development of tools (DevOps Python/Bash/Powershell).
Recommendations
Be the first to recommend Mathias
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Specialization: Cloud computingSUPINFO - The International Institute of Information Technology2015Spécialisation: Cloud computing
- Master of ScienceSUPINFO - The International Institute of Information Technology2015Master of Science (M.Sc.2)
Certifications
- AWS Certified Cloud PractitionerAWS2017
- AWS Certified DevOps Engineer - ProfessionalAWS2017