I'm a challenge enthusiast, I appreciate the start-up mentality and like to combine technologies to resolve problems. My fields of expertise are DevSecOps, mostly with Linux/Docker/Kubernetes and IT security. I also try to automate as much as possible, using Bash/Python scripts or with tools such as Ansible and Jenkins.
Hive helps enterprises maximize their video experience to achieve alignment and engagement in a world of massive change.I'm in the video experience Team and member of the Security Council.
Azure Platform Management
Compliance (ISO 27 001, SOC2) Reporting and improvement of our compliance
Infrastructure as Code (Azure Devops, Databricks, Terraform) Module creation, import and deployment
Mentoring of Junior and developers on infrastructure, CI/CD and containers
Vulnerability/Patching management Migration to Docker Hardened Images
Design and implementation of a Networking simulation service. This solution is helping the engineers to improve our software and troubleshot customer issues.
Logs/Metrics/Tracing implementation and management (ELK, Prometheus, Jaeger)
Patch management (Dependabot, Renovate)
Kubernetes scanning (kube-hunter, kube audit, trivy) Reporting to defectdojo
Application security testing (Nuclei, SSLyze, Zap) Created reports for ISO27001 and SOC2 certifications
Azure Cloud
Kubernetes (AKS, Helm, Istio, Kyverno) Prepared and migrated from ACS to AKS Migration from Helm2 to 3 and 4 Migration to Azure CSI Driver
Azure Pipeline, GitOps Implementation of a centralized system for the pipelines to improve speed, security and reliability
Internal documentation and trainings
IaC (Terraform) Designed modules. Created terraform base for the company and helped each time to implement it
Network Security Implemented Istio as service mesh and created a zero-trust networking
Disaster recovery plan (AKS, DBs) Went from multiple days to few hours to recover
Docker/K8s
Mentoring: Junior Devops, Kubernetes, Terraform
Images optimization and security hardening
Vulnerability management (Trivy) Scan during the build in the CICD and while running in the clusters
CISO
Limina Financial Systems
November 2017
to September 2020
Full-time
Stockholm
Limina simplify and automate processes to let fund managers focus on core business. Our product is an All in one buy-side system. I manage the Infrastructure part and take care of the Company Security.
Presentations and trainings:
Security meetings
Internal tools
Disaster recovery tests
Linux Server Security: LDAP, Ubuntu, Infrastructure design
SIEM deployment and management (Elastic Suite, Wazuh)
Public Cloud migration proof of concept (AWS, OVHCloud, Scaleway)
Proxmox Terraform plugin development (Golang)
DevOps Hebex
Orange - AUSY Contractor
October 2016
to April 2017
Consultant
Sophia Antipolis
Orange is a global leader in corporate telecommunication services in Europe and Africa. The Hebex (Hosting Exploitation) is the privileged host of the Orange Group. It pilots and participates in numerous projects, characterized by short cycles, strong time-to-market constraints, high visibility, and specific "mission-critical" production.
High availability production environment
Server administration
Scripts development
Server Administration and monitoring:
Ansible
Docker
Jenkins
Ubuntu
Scripts development in Bash & Python
Technical Lead
GreenLeaf SAS
July 2014
to October 2016
Full-time
Sophia Antipolis
France
GreenLeaf is a startup specialized in home automation. Greenleaf produces a software that eases the creation of a home automation system, from the component selection to the visualization interface.
Team management Allocating daily jobs and workloads Mentoring and training up junior Reporting to CEO Implementing new process
Customer and internal training
Domoleaf V2 configurator
SaaS software
AWS EC2/RDS (V2.1)
Web Development (HTML/CSS/PHP/SQL/Jquery)
Software Architecture based on OpenVZ and LAMP (V2.0)
KNX component selection algorithms
Domotic box
Interface and API development (Web)
Embed development (Python/C)
Network and Docker/Linux Development
Debian repository for updates
IT Engineer
GreenLeaf SAS
June 2013
to June 2014
Full-time
Sophia Antipolis
France
GreenLeaf is a startup specialized in home automation. Greenleaf produces a software that eases the creation of a home automation system, from the component selection to the visualization interface.
Technical Infrastructure management
Research and development (C, Jquery, PHP)
Domoleaf is a solution based on a box that eases the creation of a home automation system, from the component selection to the visualization interface.
Migration to cloud computing of a single user software
Study and implementation of new features
Development of a panel and software to manage and monitor home automation servers
Communication IP / KNX
Dedicated servers infrastructure
Home automation (Protocols: IP, KNX, EnOcean)
Junior, IT Engineer
Sopra Group - Sopra Banking Software
February 2012
to September 2012
Apprenticeship
Rodez
France
Sopra Group is a company in consulting, technology services and software publishing in Europe. Its subsidiary, Sopra Banking Software, is specialized in software solutions for the financial market.
Study and start of the migration of banking software Evolan IB from NS-Design to NatXtend. For that I had both versions of the software and I adapted the code to restrict changes to make. As part of this migration I wrote a procedure to switch NS-Design to NatXtend. I also changed the migration script provided by NatSystem (NatXtend editor) to reduce its running time of over 75%.
Junior, IT Engineer
Powow
September 2009
to December 2011
Apprenticeship
Lyon
France
Powow is a communications agency. His area of expertise is the creation of websites, flash animations and graphics for printing.
Local development infrastructure maintenance
Development of multiple websites.
Intern in web development
LCIS
April 2009
to June 2009
Internship
Valence
France
LCIS (Laboratoire de Conception et d'Intégration des Systèmes) conducts research primarily oriented embedded and networked systems.
Development of two websites based on Joomla and creation of maintenance guides.
Skills
Platform management
Azure
Advanced
GNU Linux: Centos, Debian, Gentoo, Ubuntu
Advanced
Docker: Kubernetes, Kubernetes as a Service, Swarm
Advanced
Web servers: Apache, Nginx
Advanced
Ansible
Good
Terraform
Good
Virtualization: OpenVZ, Proxmox
Good
Databases: MariaDB/MySQL, PostgreSQL
Good
Monitoring: Xymon, Zabbix
Advanced
SIEM: Wazuh, Elastic Stack
Intermediate
Jenkins
Good
Elastic Stack, Grafana
Good
Development
Unix Shell Scripting
Good
Python
Good
Nodejs
Good
Golang
Notions
Languages
English
Advanced
Spanish
Notions
Swedish
Notions
Education
Master's degree
3il Rodez, Engineer school
September 2009
to September 2012
Apprenticeship, Master's Degree, Information Technology Specialization: Network (Cisco) and Security
Associate's degree
Valence University of technologies
September 2007
to June 2009
Technologic Academic Studies Degree in IT Specialization: Software engineering End of study project: Study of Jaspersoft BI suite
Interests
Personal projects
Tech blog writing
System (GNU/Linux, GNU-Hurd, mobile)
Development
Security
Ellàs War Next v2
Angular/Bootstrap frontend development
NodeJS/Redis/MySQL backend development
Ubuntu administration, deployed using Ansible & Docker Compose
Monitoring: Grafana, Better Uptime, New Relic
GitHub actions
Ellàs War Next, a free strategy game developed with AngularJS/NodeJS/Redis/MySQL/Cordova