Freelancer profile translated to English.

Description

DevSecOps Engineer with 2 years of experience at Dassault Systèmes, specializing in deployment automation (CI/CD GitLab CI, Ansible, Terraform), Cloud infrastructure management (AWS, Kubernetes, Docker), and application security (OWASP, SonarQube, Trivy, SAST/DAST). I assist companies in implementing efficient pipelines, integrating security from the development phase, and proactive monitoring (Prometheus, Grafana) to accelerate deliveries while ensuring compliance and reliability. Available in Île-de-France or remotely.

Languages

English
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

Dassault Systèmes
DevSecOps
September 2023 - August 2025 (1 year and 11 months)
Vélizy-Villacoublay, France
**Rethink the integration of Python projects into the internal development chain to ensure their compliance with PEPs
Stack:** Python, Shell, XML, XQuery

Implementation of "Security devcontainers"
Training of collaborators on the use of devcontainers
Stack:React, Django, Python, Sonar, Trivy, OWASP Zap, Pre-commits (Ruff, ESLint, Prettier, GitLeaks)

Implementation of a secure private package repository for improved versioning and reusability of internal Python packages
Python development of an internal GitLab analysis tool
Creation of container images
Deployment and management of infrastructures on AWS, integration of containerized solutions (Docker, Docker compose), Linux administration (RHEL, Ubuntu)
Design and automation of CI/CD pipelines (GitLab CI, Terraform, Ansible, Sonarqube) to optimize the application lifecycle
Monitoring (availability, metrics, alerts)
Stack:Sonarqube, Trivy, Docker, GitLab-CI, Terraform, Ansible, AWS, RHEL, Prometheus, Grafana, Nginx

Development of a PyCharm IDE extension for automating internal development processes
Needs analysis and threat modeling
Java development and version management
Writing of installation, administration, and integration testing procedures
Vulnerability analysis, integration of security solutions (SAST, DAST, OWASP), remediation plan, and security awareness
Stack:Intellij Idea, PyCharm, GitLab-CI, Java 11+, JUnit, OWASP Top 10, OWASP Threat Dragon, Sonarqube