Zouaoui Sami

1- DevOps / Build / AWS Cloud:

• Automation: Design and industrialization of generic Ansible playbooks and roles, improving deployment reusability and standardization.

• Deployment Standardization: Implementation and optimization of GitLab CI/CD pipelines for automated multi-environment deployments.

• Deployment and operation of Kubernetes platforms with a GitOps approach (Argo CD).

• Piloting application deployments via AWX.

• Securing applications and infrastructures: access management, certificates, and configuration hardening.

• Supporting development teams: Technical support around the FastAPI framework, DevOps and cloud best practices.

2 - Production / Run / Operations:

• Monitoring and orchestration of batch processing and data transfers (Control-M, VTOM, CFT).

• Support and production: Analysis and rapid resolution of production incidents, with daily monitoring and reporting.

• Participation in on-call duties: Management of critical incidents and rapid service restoration.

Technical Environment: Ansible, Python 3, FastAPI, Argo CD, Kubernetes, Control-M, VTOM, CFT, SonarQube, GitLab, AWX, Jira

1- DevOps / Cloud / Security:

• Operation on secure AWS Cloud environments in a sensitive data context.

• Design, migration, and optimization of CI/CD pipelines from Bitbucket to GitLab CI.

• Deployment and evolution of infrastructures via Infrastructure as Code (Terraform, Ansible).

• Administration of Kubernetes clusters (EKS): high availability, business continuity, access management.

• Complete management of SSL/TLS certificates (creation, renewal, integration).

• Implementation of proactive monitoring and alerting to ensure service availability.

2- Secret Management / Compliance:

• Implementation and operation of HashiCorp Vault: Centralization and security of secrets, definition of access policies, key rotation and revocation, integration of Vault with Kubernetes and CI/CD pipelines.

3- Organization / Documentation:

• Writing operational procedures, security guides, and technical documentation.

• Close collaboration with Dev & Ops teams for smooth and secure deployments.

Technical Environment: AWS (EKS, S3, Beanstalk), Kubernetes, Terraform, Ansible, HashiCorp Vault, GitLab CI, SonarCloud, Nexus, Rancher, Sentry, Slack.

1 - DevOps / Leadership:

• Operational management of a team of 4 DevOps engineers.

• Organization and facilitation of SAFe / PI Planning rituals.

• Industrialization and administration of Jenkins clusters.

• Development of reusable Groovy libraries and CI/CD pipelines.

• Implementation and operation of HashiCorp Vault: Integration of Vault with Kubernetes (Secrets, Authmethods, policies), Management of the secret lifecycle (creation, rotation, revocation).

• Automation and configuration: Ansible playbooks, roles, and collections, publication in an internal galaxy.

• Kubernetes Administration: Pods, Deployments, Services, ConfigMap, Secrets, PVC, Ingress.

• Deployment modernization: migration of tools and applications to Docker, support for Dev and business teams.

2 - Big Data / Security / Governance:

• Administration of Cloudera CDP clusters with strong security and governance requirements.

• Deployment and optimization of Spark on Kubernetes, Data processing and valorization via Spark APIs.

• Implementation of secure flows: Kafka, transmission tunnels.

• Data security and governance: Kerberos, FreeIPA, Apache Ranger (access policies and audit).

• N2/N3 and maintenance of Big Data platform availability.

Technical Environment: Linux, Kubernetes, Openshift, OpenStack, Cloudera CDP, Ranger, FreeIPA, Apache Jboss, Apache Tomcat, Apache Kafka, Apache Airflow, Jenkins, Vault, Ansible, Terraform, Artifactory, Python, Atlassian, GitLab, Sonar, JMeter