Si Nabil Yacini

• Selection of technical architectures and technologies used.
• Automation of application deployment.
• Assisting in securing the Kubernetes cluster: managing user access and workload security.
• Configuration of continuous integration and continuous deployment pipelines.
• Creation of versioned Docker images for different microservices.
• Creation of deployment templates for Kubernetes and Helm.
• Production deployment of the platform.
• Providing examples of cloud-native applications (starter kits).
• Writing technical documentation and architecture documents.
• Promoting best practices and writing a contribution guide for development conventions and processes: Clean code, Git, Code Reviews, Merge requests..
• Leading a community of developers/devops/architects to promote best practices,
• involving people to share knowledge and challenge solutions.
• Supporting and upskilling technical teams.
• Managing secrets on k8s with Vault and ExternalSecrets.
• Continuous deployment of applications in a k8s cluster with ArgoCD, Renovate.
• Continuous deployment of various application middlewares for project teams (Kafka, Couchbase, Keycloak, Elasticsearch, Minio, EMQX, pgweb) with ArgoCD and Flux.
• Managing backups/restores of k8s clusters with Velero.
• Platform observability with Prometheus/Grafana

Technical Achievements

• Selection of technical architectures and technologies used.
• Design and implementation of the base infrastructure and associated services.
• Infrastructure as Code with Terraform.
• Documentation and promotion of DevOps practices.
• Monitoring and QA verification of a remote hardware production chain with Ansible.
• Deployment and administration of Ansible Tower to automate infrastructure processes.
• Continuous integration and delivery of Docker images and Helm charts
• Design, writing, and automation of playbooks for deploying the platform on on-premise servers.
• Creation and automation of playbooks for configuring cloud servers from scratch.
• Setup of Grafana and VictoriaMetrics instances with configuration of a high-performance and versioned alerting system.
• Deployment and maintenance of Kubernetes clusters on AWS, OVH, and on-premise environments.
• Design of a tool for automatic execution of jobs triggered by server connection detection.
• Migration of a Docker Compose deployment stack to Kubernetes for increased scalability and resilience.
• Development of a tool for monitoring SSL certificates.
• Management and supervision of a fleet of servers and services on AWS, OVH, Scaleway, and on-premise.
• Implementation of a bastion host to secure and centralize server access with RBAC.

Planning

• Identification of needs, prioritization, and deployment of suitable DevOps practices/tools
• Planning, steering, and coordination of team tasks in Agile mode with stakeholders
• Writing of Technical Design Documents (DATs), action plans, deployment, operation, and monitoring procedures

Technical Stack and Tools

Technical Achievements

• Automate application deployment.
• Enhance Kubernetes cluster security: manage user access and secure workloads.
• Configure continuous integration and continuous deployment pipelines.
• Create versioned Docker images for various microservices.
• Develop deployment templates for Kubernetes and Helm.
• Ensure platform production deployment.
• Provide cloud-native application examples (starter kits).
• Write technical documentation and architecture documents.
• Promote best practices and write a contribution guide for development conventions and processes: Clean Code, Git, code reviews, merge requests, etc.
• Lead a community of developers, DevOps, and architects to share knowledge, challenge solutions, and disseminate best practices.
• Support and upskill technical teams with appropriate technologies.
• Implement a DevOps strategy for the creation of a dedicated center of excellence.

Technical Stack and Tools