Soufiane B.

Project: SRE Squad – ADONIS: Setup/Definition of Landing Zone Architecture

Ardian is a private equity fund that specializes in various areas of private equity investment, including traditional private equity, venture capital, co-investment, and fund of funds. Within the ITSystems entity, in the SRE team, my mission is to support project teams during their migration to or landing in Azure cloud. (Definition of the architecture of Azure services to be deployed (Front, Back, DB, Backup, FrontDoor exposure, Apim, networking, etc.), Terraform deployment strategy, post-delivery support), MCO and RUN. Participate in the definition of the target architecture for the entire new Azure landing zone (Hub & Spoke).

Missions:

• Build infrastructure based on Terraform

• Participate/Challenge and Define the architecture of the new Landing Zone

• Support Developers in Azure Ardian

• Automation of monitoring processes for prevention and alerting (DataDog/Dynatrace via Terraform)

Technical Environment:

• Terraform / Terragrunt / Arm / Bicep / Ansible

• V.Networking/VirtualWan/RouteTable/Nsg

• Azure Firewall/Policies

• Private Endpoint, Private Link, Service Endpoints,

• PrivateDnsResolver, Private DNS zones,

• EntraID

• Storage/FS/Blob,

• AppService/FunctionApp

• EventHub, Logic Apps, SendGrid

Project: FTPAAS – TRUST & CONTROL

Société Générale Corporate & Investment Banking (SG CIB) is the brand of the Société Générale group's corporate and investment banking arm. SG CIB's business, like that of most investment banks, consists of advising and supporting entrepreneurs, large corporations, financial institutions, governments, and investors in establishing connections in capital markets (e.g., financial markets), and providing them with financing, investment, and risk management solutions. Within the FTPAAS team at SGCIB, I participated in the Trust and Control project, which aimed to provide Azure environments that met banking constraints (+200 subscriptions).

Missions:

• Implementation of the TrustAndControl SGCIB governance plan in Azure

• Security/Patching in T&C of Azure services and coordination with security teams.

• Development, scheduling, and scaling of automated processes in T&C

• User support in Société Générale Azure

• Participation in the analysis, architecture, and definition of use cases for new T&C services

• Automation of monitoring processes for prevention and alerting (ElasticSearch, Kibana, Alerta)

• CI/CD deployment with Jenkins pipelines

Technical Environment:

• Azure/AAD

• Blueprints Policies

• Storage

• Networks/Firewall

• Service Endpoints

• Automation

Project: TRUST & CONTROL

ALD Automotive is a subsidiary of the Société Générale group specializing in long-term leasing and fleet management. ALD and its various subsidiaries host applications in Azure. To gain visibility and control over all projects, ALD wants to equip itself to facilitate the integration of new projects and the updating of existing ones. Architecture, governance in Azure, security, automation, CI/CD integration.

Missions:

• Implementation of the ALD governance plan in Azure

• Implementation of security and remediation strategies in Azure (Networks, applications, security, Monitoring, Storage, APIs Management, Containers)

• Automation of security processes for business perimeters in Azure (Dev, Test, and Prod):

• Development of PowerShell scripts

• Writing policy rules for securing project environments under Azure (Azure subscriptions dedicated to Regions/Projects) and their publication under the Azure Blueprint framework

• Development, scheduling, and implementation of Azure runbooks

• Automation of Azure resource deployments managed and made available to users in their dedicated environments (via ARM templates and Blueprint)

• Implementation of the Azure resource diagnostic plan by Azure Log Analytics

• Deployment of Azure DevOps CI/CD Pipelines. (Build/Release)

Technical Environment:

• Azure PaaS (Blueprints, Policies, Storage, DataFactory, Networks, Automation, Kubernetes Services, App Service, Function App, Active Directory, Vault, Compute, Container Registry)

• PowerShell

• Azure DevOps

• APIs