Mohammed Amine Sahmoudi

Load and performance testing with k6

■ Design and implementation of a load testing platform based on Grafana k6.

■ Separation of responsibilities between:

■ Industrialization of performance tests in a Kubernetes context with controlled and reproducible execution.

■ Support for application teams on structuring k6 scripts and integrating them into CI/CD workflows.

AWS Cloud Infrastructure with Terraform / Gitlab CI / Argo CD

■ Contribution to AWS infrastructure management via Terraform in a secure banking environment.

■ Participation in the provisioning and configuration of AWS services.

■ Management of sensitive variables and integration with existing secret mechanisms.

■ Contribution to the industrialization of environments (dev / preprod / prod) via Infrastructure as Code.

Kubernetes Deployments & Service Mesh

■ Responsibility for the Kubernetes application deployment layer.

■ Use of ArgoCD (GitOps) for application deployment and synchronization.

■ Contribution to structuring Helm charts and values per environment.

■ Implementation and maintenance of Istio configurations.

■ Analysis and resolution of issues related to NetworkPolicies, TLS certificates, and inter-service flows.

Keycloak as Code

■ Contribution to managing Keycloak in "as code" mode.

■ Definition and maintenance of configurations.

■ Versioning of Keycloak configurations and automated deployment via CI/CD pipelines.

Lago Billing Platform and Redis (onprem) Sentinel

■ Deployment and operation of the Lago platform in a Kubernetes environment (onprem Cagip).

■ Implementation and configuration of Redis in Sentinel mode for high availability:

■ definition of Sentinel endpoints,

■ master election management,

■ configuration of application clients (Sentinel URI).

■ Analysis and resolution of Redis connection issues with TLS.

■ compatibility of Redis / Sentinel client in Lago.

■ Design and development of critical features for business applications.

■ Code review, pair programming, technical mentoring of developers.

■ Implementation and continuous improvement of CI/CD pipelines (GitLab CI and Argo CD).

■ Contribution to the cross-functional authentication module (OAuth2, Spring Security).

■ Participation in the development and maintenance of shared technical modules (core).

■ Implementation of GitOps practices via Argo CD for Kubernetes deployment management.

■ Support for Ops teams on tooling and pipeline templates.

■ Leading technical discussions, sharing knowledge, writing documentation.

Mission carried out for the DGFIP, in close collaboration with the Ops teams, as part of the reliability and automation of an internal OpenStack infrastructure. The main objective was to build a CI/CD chain for automating deployments via Infrastructure as Code (Terraform, Ansible), and to conduct a high availability (HA) study including failure simulations and recovery scenarios on several critical layers of the IS.

■ Implementation of Jenkins pipelines for IaC automation (Terraform + Ansible).

■ Support for Ops teams on the use and industrialization of DevOps tooling.

■ Comparative study and implementation of blue/green deployment and rolling update scenarios on: the application layer, the load balancer (HAProxy), the database (PostgreSQL managed by Patroni + Etcd).

■ Performance of resilience tests simulating the failure of critical components, according to Chaos Engineering principles, to verify the system's ability to recover automatically.

■ Implementation of a monitoring and observability stack with Prometheus (metrics collection) and Grafana (dashboards), for performance monitoring and proactive incident detection.

■ Writing technical documentation and formalizing architecture recommendations to ensure service continuity.