Thomas Ieong

Securing the energy optimization platform: taking over an infrastructure with significant technical debt to ensure service continuity for major clients (Carrefour, Intermarché...).

Code cleanup, reduction of docker image size, reduction of pipeline times, updating critical components (elasticsearch, postgresql, vault, argocd, OVH managed kubernetes...).

Leading an infrastructure team of 3 people — facilitating weekly rituals and regular follow-ups.

Reducing cloud costs: optimizing OVH infrastructure (from 4,500€ to 2,284€/month) by removing unused resources, rightsizing, and implementing a data retention policy, same for AWS (from $12,000 to $6,000).

Close collaboration with architects and the Product team, all within an international environment with colleagues in Singapore and Malaysia.

Architecture and implementation of a SaaS solution "Optonum" on AWS for intellectual property management.

Close collaboration with development teams in Paris and technical exchanges with the New Zealand client (in English).

Design of part of the architecture: secrets management, rotation of secrets, setting up a VPN between the client and AWS, deployment using ArgoCD...

Management of Kubernetes clusters for development teams on-premise (kube clusters hosted by Coexya on VMware) and on AWS.

Using Terraform and Terragrunt to provision infrastructure on AWS (EKS, RDS, S3, EC2, Security groups...) and ArgoCD for microservice deployment.

Setting up applications in different environments using Helm, Helmfile, configuring Debian and Rocky Linux servers using Ansible.

Lift and Shift of our application to Nubo using Terraform and Ansible and refactoring to use managed services.

Server and firewall configuration via Ansible, writing several playbooks and modules as well as tests using Molecule.

Adding Prometheus metrics to application code and setting up the Grafana/Loki/Promtail stack to monitor various metrics (disk space, 500 error rate...).

Parallelizing Selenium tests to reduce the execution time of our continuous integration chain from 20 minutes to 9 minutes.

Adding several static analyzers to improve code quality (Sonar, Psalm, PHPStan...) and security (Trivy, Tflint, Gitleaks...). Reducing Git repository size using Gitlab, removing secrets and other sensitive files from the repo history using git-filter-repo.

Automating vulnerability tests with OWASP ZAP, manual tests with Burp.