Mohamed Amine Jarboui

Project: Design and deployment of a log monitoring platform on Kubernetes, based on Grafana, Loki, and Alloy.

Activities:

Project: Provide business teams with ETL platforms to manage their data. Activities:

• Deployment of a QAAS (Query As Service) platform on IKS (IBM Kubernetes Service). This platform is based on Starburst/Trino technology (https://www.starburst.io/). The platform manages several types of databases (Cassandra, Oracle, Postgres, Elasticsearch) and Data Viz/Analyst tools (Tableau, Dataiku, Domino).

• Development of Helm charts for deploying the solution on IKS.

• Management of authorizations, policies, and datasources on the QAAS platform with CI/CD pipelines.

• Provisioning IBM Cloud services (VMs, VIP, COS, Postgres, etc.) via a control plane.

• Secret management with Hvault (creation of roles and policies).

• Automation of Keycloak configuration with Terraform.

• Vulnerability analysis of used images with Trivy.

• Development of an Ansible module to manage policies in Apache Ranger.

• Development of an Ansible role to manage certificates (creation, renewal) using the BNPP internal tool's APIs.

• Monitoring and supervision of services with ELK, Prometheus/Grafana, and Dynatrace.

• Customer support and incident management (research, analysis, and correction).

• Documentation: DE, DI, Network Design, and DAT.

Technical environment: Redhat 8, Ansible, Kubernetes, Terraform, Artifactory, Apache Ranger, Hvault, Gitlab CI, Python, Starburst/Trino, Hive Metastore, Keycloak, Elasticsearch, Kibana, IKS, Dynatrace.

Project: Deployment of a Smart Metering platform. Activities:

• System and network administration of the "SICONIA" software suite.

• Implementation of a CD workflow (Nexus, Gitlab, and Ansible) to automate integration and deployment in several environments (Product/System Test, Performance, and Production).

• Configuration management with Ansible.

• Change management leading to production deployment.

• Gitlab administration (Ansible source code management, runners, and releases).

• Management and analysis of application logs with Elasticsearch, Logstash, Kibana, and Filebeat agents.

• Web application administration (Httpd, Tomcat, and Nginx).

• Database administration (PostgreSQL, MongoDB, and Elasticsearch).

• Implementation of monitoring dashboards with Prometheus and Grafana.

• Application certificate management with keytool and openssl.

• Containerization of Springboots applications with Docker.

• (PoC) Study and implementation of a Kubernetes cluster with Rancher, ArgoCD.

• Participation in writing technical documents (Installation Guide, Operations Guide, etc.).

• Participation in load/robustness tests to improve performance.

• Handling incidents and evolution requests with a view to continuous improvement.

• Technical interface between 3 R&D sites (Tunis, Paris, and Budapest).

Technical environment: CentOS/Redhat 7, Ansible, Nexus, Docker, Prometheus, Grafana, Rancher, Harbor, K8S, AWX, Shell / Python scripting, PostgreSql, NFS, OpenSSL, keytool, Tomcat, Karaf, ActiveMQ, Nginx, Httpd, Talend, ELK, TCP/IP, DNS, FreeIPA.