Description

Je suis ingénieur DevSecOps freelance spécialisé dans la mise en place de solutions cloud sécurisées et automatisées. Mon expertise couvre l’infrastructure as code (IaC), les pipelines CI/CD et l’intégration de la sécurité dès le cycle de développement, afin d’accompagner les entreprises dans la modernisation, l’industrialisation et la sécurisation de leurs environnements.

🔹 Compétences clés :

Cloud : Conception, déploiement et optimisation d’architectures sur AWS et Alicloud

Infrastructure as Code (IaC) : Automatisation et gestion d’environnements via Terraform

CI/CD & DevOps : Mise en place de pipelines GitLab CI/CD robustes, intégration continue et déploiement automatisé

DevSecOps : Sécurisation des environnements cloud et des pipelines (scans de vulnérabilités, conformité, bonnes pratiques de sécurité)

Observabilité & Résilience : Monitoring, logs et alerting pour assurer la fiabilité et la performance des systèmes

🔹 Ce que j’apporte à vos projets :

Accélération des livraisons grâce à l’automatisation et au déploiement continu

Réduction des risques par l’intégration de la sécurité dans chaque étape du cycle de vie applicatif

Optimisation des coûts et de la performance de vos infrastructures cloud

Mise en place de workflows collaboratifs fiables et évolutifs pour vos équipes

Je travaille aussi bien avec des startups en phase de scaling qu’avec des grands comptes cherchant à renforcer leur stratégie cloud et sécurité.

Languages

French
Native or bilingual
English
Fluent
Thai
Basic

Workplace preferences

Can work on-site

Genf (up to 50km)

Richemont International SA
DevSecOps and Infrastructure engineer
LUXURY GOODS
October 2018 - Today (7 years and 8 months)
Geneva, Switzerland
Provisioning cloud resources using Terraform enterprise and GitLab (IaC) for AWS
and Alibaba Clouds: EC2/ECS, ECR, K8s, S3/OSS, SQS/MNS, IAM/RAM, RDS for
Aurora/Apsara MySQL, and Redis
- Migration of the whole cloud resources (Kubernetes clusters, databases, queues,
buckets,…) and applications from Aliyun to Alibaba cloud
- Kubernetes Ingress controller migration (Ambassador / Traefik)
- Kubernetes Secrets migration (External secret operator/Spring Vault)
- Jenkins instance management and maintenance
- Manage and provision Jenkins nodes with Ansible and Packer
- Evolving maintenance of Jenkins/Gitlab CI/CD
o BitBucket/Gitlab source code (GitGuardian security)
o Java/springboot artifact packaging with Maven
Angular transpiling
o Tests (unit, e2e, smoke, Trivy, Sonarqube, Checkmarx)
o Artifacts and docker image storage (Nexus/Jfrog)
o Kubernetes deployment with Helm and ArgoCD
o Akamai caching
o Security checks with Snyk
- Performance testing with Locust
- Monitoring solutions with Datadog (metrics, APM, logs, RUM, monitors and
alerts via Terraform)
- Team users accesses and permission management (Azure AD/AD, RBAC, SSH)
- Services access via Keycloak, including Keycloak client configuration.
Creation and maintenance of Linux bastions to secure access to RDS instances
- Setting up Akamai NetStorage for static resources
- Work with the different cyber-security and connectivity teams (WAF rules
through F5 BigIP, security platform PRISMA, application and infrastructure
Pentests, Firewall rules request and DNS management)
- DNS and SSL certificate management for more 500 domain
CI/CD Snyk Docker Sonarqube Maven
developper
Angular developer engineer
October 2018 - December 2018 (3 months)
• Views, components, and unit tests with Angular (v5 to v9) in a full REST api
• End-to-end tests with protractor
• WeChat development and authentication (auto-login, Tencent captcha),
• Microservices oriented application (bound to Java SpringBoot back-end)
• Multi language application (i18n – internationalization)
• Construct a custom way to serve the mock, build the application, extract, and generate the translations with a NodeJS sub-stream process
• Reactive programing with RxJS
• Security compliance
• Monitoring with New Relic or Datadog,
• Google Tag Manager and HotJar integration
YuccApp
Freelance - Mobile developer
August 2018 - September 2018 (1 month)
Annecy, France
International address book web and mobile applications.
• Complete conception of mobile application with the Ionic framework
• Designed views using Angular 6
• Cross-platform application with Apache Cordova (HTML, TypeScript, and CSS)
• Server communication via the Rest API built using Symfony
• Secure data exchange, authentication, and authorization
• QRCode integration and NFC connection Android
• Deployment on Play Store
• Manage Gitlab CI/CD