Said Bouhanou

Context: Within the Open Cloud Platforms domain, I supported the entity in the design of the shared API Management platform, based on Google Apigee OPDK and Hybrid technology.

Tasks:

• Design and implementation of the API Registry, API repository.

• Implementation of a framework for generating Apigee proxies based on generic templates covering all the entity's needs: Oauth2, OIDC, JWT

• Onboarding of APIs with the implementation of best practices and API design recommendations.

• Creation of an Oauth2 server to secure northbound APIs and manage southbound connectivity: client credentials, authorization code with PKCE, JWT.

• Resolution of on-premise API management limitations (SSE, Websocket, Grpc): implementation of the Envoy proxy with Apigee adaptor.

Technical Environment:

Apigee OPDK/Hybrid, Java 19, SpringBoot, Gitlab, Kubernetes, Docker, IBM cloud (dmzr), GCP, Keycloak, Oauth2, OIDC.

Context: The project's challenge is to develop a custom system to streamline internal work procedures for organizing physical and online auctions.

Agile Method: Scrum

Tasks:

• Definition of the project architecture (Microservices deployed on serverless).

• Design and implementation of continuous integration and deployment processes and workflows.

• Creation of a software factory with automated quality and functional tests (GitHub, SonarQube, Docker,..)

• Definition of development standards and support for developers.

• Ensuring compliance with LNE standards for cash register system certification.

• Design and deployment of highly available, scalable, and secure technical solutions for the auction system in the GCP cloud (CloudRun, FireStore, CloudFunctions, CloudTasks...)

• Implementation of the secure deployment architecture on GCP (IAM, LoadBalancer with CloudArmor, VPC, Firewall, Secret Manager, Firebase authentication...).

• Implementation of API Management with APIGEE: Proxies, shared flows, policies, KVM, Spike.

• Development of an OAuth2 provider.

Technical Environment:

Java 11, SpringBoot, VueJs, NuxtJs, Github Actions, SonarQube, Docker, CloudRun, Appengine, CloudFunctions, CloudTasks, IAM, CloudStorage, CloudSql, cloudArmor, Cloud LoadBalancer, Secret Manager, AntMedia server, FireStore, Apigee.

Project: Eclasseur

Context: Project to refactor the electronic document management system for the IMMO subsidiary of the Mousquetaires group.

Agile Method: Scrum

Tasks:

• Migrate the application to a microservice architecture.

• Redesign inter-application flows with optimization of related processes.

• Implementation of the CI/CD chain on Gitlab CI/CD.

• Migrate application environments from VM to containers on Openshift 3.11.

• Guide and support developers to ensure the technical success of developments and compliance with best practices and deliverable quality.

• Manage the application release cycle according to programmed MVPs.

Technical Environment:

Java 8/11, Apache Camel, Spring Boot, Spring Cloud, ElasticSearch, MongoDb, Gitlab CI/CD, SonarQube, Nexus, S3, Harbor, Docker, Kubernetes, Openshift, Kaniko, Helm, Instana, Prometheus, Grafana, Cypress, Clair, Checkmarx.

Project: NOVA

Context: Project to migrate all Devfactory applications (~150) to the Nova platform containing all containerization and security tools, with deployment on an Openshift cluster.

Agile Method: Scrum

Tasks:

• Redesign and containerization of back-end, front-end, or mobile applications.

• Implementation of CI/CD pipelines on Gitlab CI/CD (build/quality/dockerize/security/deploy...).

• Migration of old Jenkins jobs to the new platform.

• Training and support for STIME developers in DevOps technologies: Git, OpenShift / Kubernetes / Docker, Gitlab-CI, CI/CD.

• Participation in architecture committees and promotion of DevOps culture within the DevFactory pole.

Technical Environment:

Gitlab CI/CD, Jenkins, SonarQube, Nexus, S3, Harbor, XlRelease, Docker, Kubernetes, Openshift, Kaniko, Makisu, Helm, Kustomize, Instana, Prometheus, Grafana, Cypress, Locust, Clair, Checkmarx, Owasp, Burp.