Freelancer profile translated to English.
Back to original languageAbout Tarek
SRE / DevOps for 7 years, I specialized in AWS Cloud.
Through my various experiences, I have developed skills in Cloud and DevOps. The combination of my studies and experiences has allowed me to focus on DevSecOps.
French
Native or bilingual
Can work on-site
Paris (up to 50km)
Experience
- KeringAWS SRELUXURY GOODSMarch 2021 - Today (5 years and 3 months)Paris, France■ Infrastructure As Code• Managed AWS infrastructure via Ansible, Terragrunt, and Terraform• Created Amazon Machine Images (AMIs) using Ansible and Packer• Followed a FinOps approach to optimize cloud usage and reduce costs■ Continuous Integration - Continuous Deployment (CI/CD)• Ensured industrialization of deployments across various environments using Jenkins• Continuous deployment on Kubernetes via ArgoCD• Collaborated on and CI'd Terraform projects via Atlantis■ Security• Implemented a patching pipeline for AWS AMIs using Ansible• Analyzed vulnerabilities on EC2 instances and generated reports on S3 using OpenSCAP and Ansible• Managed access permissions and security across the entire platform• Improved the security and quality of Terraform code using Tfsec■ Monitoring• Developed a proactive Lambda function to monitor and suggest optimizations for Solr shard distribution• Monitored EMR applications via Lambda, SNS, and Alertmanager• Collected, transformed, and visualized logs using Vector, Kafka, and Elasticsearch■ Migration from Gitlab to GitHub■ Implemented a tool for operating Cassandra Change Data Capture (CDC)■ Ensured the proper functioning (performance, security, costs) of the AWS Cloud platform across all environments■ Proposed and defined the team's technical roadmap
- La Poste – Branche Services-Courrier-ColisDevSecOps EngineerPUBLIC SECTORJuly 2018 - April 2022 (3 years and 9 months)Issy-les-Moulineaux, FranceDevelopment of Reactive Architecture and IT System Foundation:■ Infrastructure As Code• Automated management of virtual machines, volumes, and networks on OVH cloud via Ansible/Terraform• Industrialized installation and operation of architecture components■ Continuous Integration - Continuous Deployment (CI/CD)• Industrialized deployment pipelines with rollback management• Created an ephemeral Docker environment for integration tests on Gitlab runners• Optimized the time required to validate and release new software updates■ Kubernetes• Designed and industrially implemented the Kubernetes cluster• Automated the creation of deployment manifests• Provided technical support to development and operations teams• Managed users and configured Role-Based Access Control (RBAC)• Automated TLS certificate management via Vault PKI and cert-manager• Implemented network policies with Calico■ Secrets Management - HashiCorp Vault• Studied architecture and implemented Vault/Consul• Configured a Key-Value (KV) secrets engine for use in deployment scripts and set up a PKI as a Service■ Metrics and Monitoring Platform• Proactive monitoring of applications, infrastructure, and CI/CD processes• Centralized log management via Elastic Stack, Grafana, and Prometheus• Set up real-time alerts■ Supported development teams in the deployment and monitoring of microservices.■ Managed middleware and provided support for technical incidents■ Ensured the scalability and resilience of the platform■ Conducted technical studies and participated in the selection of solutions to implement
Recommendations
Be the first to recommend Tarek
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master in CybersecurityTelecom ParisTech2018
- Computer EngineeringHigher Institute of Computer Science and Communication Techniques2017
Certifications
- LPIC-101Linux Professional Institute Certification2016
- AWS Certified SysOps Administrator – AssociateAWS2023