Rabah Bourahla

Context: Senior DevOps reporting to the OPS team. The client is strengthening its team to maintain and evolve its application

https://suiviconso.edf.fr/ Maintaining the AWS OPENSHIFT platform. Infrastructure management via IAC. Deployment and incidents of the B2B application on all environments. RUN level 2/3 with HNO Improvement of delivery processes and quality of deliverables (SAST DAST Jenkins Sonarcube etc.) Raising developers' awareness of good security practices Containerization through the creation of manifests. Tracking requests via JIRA and respecting sprint deadlines Documentation via Confluence Management of alerts and setting up crisis points in case of recurring incidents. Reporting, studies, and corrections in case of problems Organization: Daily meeting sprint planning review planning

- Platform management on AWS

- Creation of AWS routes.

- Instance creation via TERRAFORM and TERRAGRUNT.

- Management and security of deployments via VAULT ANSIBLE.

- Creation of scheduled jobs via RUNDECK.

- Creation of Python API for data retrieval via FastAPI

- Application deployment on OPENSHIFT.

- OPENSHIFT cluster administration management.

- Management of OPENSHIFT cluster node updates

- Monitoring of OPENSHIFT cluster resources

- Access rights management via OPENSHIFT cluster RBAC

- Creation and addition of new nodes to the OPENSHIFT cluster

- Monitoring and resolution of application deployments and incidents on OPENSHIFT in dev, qa, and prod environments.

- GRAFANA dashboard management.

- Creation and configuration of DOCKER images.

- Management of updates and migration of GITLAB-CI platform tools.

- Creation and deployment via CI/CD chain under JENKINS (Groovy and jenkinsfile) and GITLAB-CI.

- Daily meeting – Sprint Planning – Planning review.

- Support for development teams.

HEALTH DIGITAL AGENCY 04/2022 – 12/2022

Context: For the Ministry of Health ANS, a new project for a total redesign of the site

https://esante.gouv.fr/. Tech lead Ops reporting to the Dev team in feature team mode. Technical architecture and proactive suggestions to improve the plan. Decision-making regarding the operating procedure for building the application (Creation of all HASHICORP tools.

- Architecture review and validation of technical choices.

- Implementation of VAULT HASHICORP solution.

- Integration of VAULT into the CONSUL NOMAD technical stack

- Creation and management of secrets and certificates via VAULT.

- Securing application secrets via VAULT

- Level III VAULT Support

- VM configuration via ANSIBLE

- NOMAD JOB configuration.

- Management of DOCKER image multistage.

- Management of DOCKER image security (USER privileges, secret management, etc.).

- Configuration and creation of all DOCKERFILE, NGINX, WAYPOINT, NOMAD files.

- Secret management via VAULT and DNS entry configuration in FABIO and CONSUL.

- Configuration of source files (environment.ts etc.)

- Maven build via Waypoint

- Implementation of deployment automation via WAYPOINT.

- Deployment of the build on the Nomad-Consul-Vault-Fabio containerized stack.

- Test management via JENKINS (sonarcube)

- Build and deployment automation via JENKINS

- Code versioning via GIT

- Incident tracking (DEV and TMA team), bug fixes.

- Creation of technical documentation and installation documentation.

- Management of requests via JIRA and CONFLUENCE.

- Migration of OVH platform to GCP Cloud.

- Study and feasibility of migration.

- Management of costs associated with tools (flow – redundancy etc.)

- IAM rights management.

- Creation of PROD and HPROD GKE (kubernetes) clusters

- Creation of VAULT HASHICORP cluster

- Implementation of VAULT secret retrieval via API for TERRAFORM and ANSIBLE

- Demonstration of VAULT consumption via VAULT SIDEcar AGENT for GKE

- Management of TOKEN TTLs via VAULT

- VAULT rights management

- Certificate management via VAULT

- Creation of routes, VPC.

- Management of kubernetes cluster exposure (endpoint).

- Installation and configuration of GITLAB-CI via HELM

- Management of rights associated with RBAC tools.

- Maintenance of the OVH platform, tracking requests via JIRA, incident resolution.

- Creation and implementation of NEXUS

- Platform evolution (updates, configuration management); correction of recurring incidents of the automation tool via ANSIBLE AND SALTSTACK.

- Migration plan for SALTSTACK jobs to ANSIBLE.

- Creation of custom images and security via PACKER.

- Instance provisioning via Terraform.

- Implementation and configuration of Nexus (instance) GKE.

- Support for DEV teams, documentation, and tracking of requests via JIRA and Confluence.

- Technical documentation