Freelancer profile translated to English.
Back to original languageAbout Nicolas
⭐ Senior Expertise (15+ years) at your service for your growth. FormerCTO / Tech Leadfor critical systems, I combine industrial rigor and AI innovation to transform your IT into a performance lever.
🚀 MY 3 AREAS OF EXCELLENCE:
1. Backend Architecture & Senior Engineering
- Stack Expertise:Advanced mastery of **Symfony 6+, PHP 8, Node.js (NestJS), and TypeScript**.
- Performance & Big Data:Optimization of massive databases and management of high-intensity traffic.
- Multi-tenant SaaS:Design of architectures with strict data isolation under Kubernetes.
2. Generative AI & Automation
- n8n / Make Workflows:Complex automation of your business processes (CRM, ERP, E-commerce) to eliminate manual tasks.
- Autonomous AI Agents:Implementation of agents capable of performing analysis and automatic remediation tasks in seconds (AIOps).
- Data Sovereignty:Exclusive deployment onsovereign clouds (Scaleway, OVHcloud)to guarantee enterprise-level security **(ISO-27001 compliant)**.
3. Security & Strategy
- Identity & SSO:Implementation ofKeycloakfor centralized access management and client SSO integration.
- Audit & Quality:Technical support, Clean Code, and systematic automated testing
- Teaching:Former IT trainer, I translate complex technical choices into clear growth levers for decision-makers
🎯 WHY COLLABORATE TOGETHER?
- Owner's Mindset:I immerse myself in your business to propose solutions focused on results, not just code.
- Industrial Quality:Documented, tested, and production-ready deliverables
- Responsiveness:Response time < 1 hour.
Based in Auvergne — Available Remotely or Hybrid.
Let's discuss your project to build a solid and automated backend infrastructure!
English
Fluent
French
Native or bilingual
Can work on-site
Clermont-Ferrand (up to 50km), Lyon (up to 100km), Paris (up to 100km), Montpellier (up to 50km), Nice (up to 50km)
Experience
- ResalocalIAM & Security Expertise: Keycloak and Fine-Grained Authorization (FGA) IndustrializationSOFTWARE PUBLISHINGMay 2026 - May 2026Context:Assisted in the implementation of an Identity and Access Management (IAM) infrastructure for two major projects (Resalocal and Premices), covering 4 environments (QA and PROD).Key Achievements:Multi-Tenant Architecture & Authentication:
- Assisted in configuring and deploying 4 Keycloak realms on Kubernetes.
- Implemented hybrid authentication flows: Social Login (Google, Microsoft Entra ID) and Passwordless (Magic Link).
- Complex management of client hierarchies through Keycloak group and subgroup structures.
GitOps Strategy & CI/CD Automation:- Designed a generic JSON Master Template to ensure strict parity between QA and PROD environments.
- Full automation of deployments via GitLab CI/CD and the keycloak-config-cli tool, enabling incremental synchronization without service interruption.
- Developed data cleaning and portability scripts (UUID deletion, encoding management, dynamic secret injection).
Strategic Consulting & Architecture:- Wrote a comprehensive comparative study for choosing the Policy Enforcement Point (PEP): application approach (Laravel/Nuxt) versus external (Kubernetes infrastructure proxy).
- Analysis of the transition to a Relationship-Based Access Control (ReBAC) model via OpenFGA for very high granularity scalability.
- IDPositionCTO - Tech LeadSOFTWARE PUBLISHINGApril 2021 - October 2025 (4 years and 6 months)Paris, FranceThe challenge:Transform a technical POC into a secure and scalable multi-tenant SaaS platform capable of meeting the requirements of CAC 40 groups (Orange, Dior, FDJ, Vinci, BNP...).Key Achievements:
- SaaS Architecture & Scalability:Led the migration to aKubernetesinfrastructure (Scaleway) in multi-tenant mode, ensuring total data isolation with a dedicatedPostgreSQLdatabase per client.
- Performance & Big Data:Global optimization of the database and SQL queries on volumes exceeding 3 million lines, resolving critical performance bottlenecks.
- Security & Identity (Enterprise-grade):Implementation ofKeycloakfor centralized authentication and client SSO integration. Deployment of protections via Cloudflare, with several successful external security audits.
- Fullstack Development:Designed a robust API underSymfony 6 / PHP 8including a complex rights management engine (profile and access rights) and a responsive user interface under **Vue.js 3**.
- Industrialization (DevOps):Implementation of automated CI/CD pipelines withArgoCDand **GitHub Actions**, ensuring stable and frequent deployments.
Technical Environment:Symfony 6, PHP 8, Vue.js 3, Node.js, PostgreSQL, Kubernetes, Docker, Keycloak, RabbitMQ, ArgoCD, Cloudflare - ParentorCreation of a custom Symfony/Vue siteEDUCATION AND E-LEARNINGMay 2020 - April 2021 (11 months)Creation of a language learning website for young children.I developed the backend in Symfony 5 and the front-end in Vue 2. The principle is quite simple: 6 sessions are offered each day, alternating the display of words according to a precise algorithm.The site offers English or French learning for different native languages.The administration allows managing all possible languages and evolving them as needed.
Reviews
Thibault
CTPO - Resalocal
Reviewed on 5/13/2026
A big thank you to Nicolas for his precious help in setting up multi-tenant Keycloak.
Daniel
ID Position
Reviewed on 4/20/2021
Nothing to report.
Nicolas has chosen to hide 1 review
Recommendations
TT
+3
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Scientific BaccalaureateUniversité Blaise Pascal, Clermont-Ferrand2008
- BTS IRIS (Computer Science and Networks for Industry and Technical Services)Jean Monnet, Aurillac2012