Riadh Habbachi

Owned and operated cloud infrastructure on Azure for a pre-seed healthcare startup. Infrastructure & Cloud

Developed internal Terraform module library for Azure resources (VNets, Entra, App Service, VMs). Refactored IaC codebase for maintainability and extendability. Maintained Ansible roles and host configurations. Deployed AKS cluster for internal tooling with Flux CD for GitOps-based continuous delivery. Evaluated Oracle Cloud as a sovereign deployment target for health record regulatory compliance, with production migration planned. Implemented Tailscale mesh networking for secure cross-provider access.

CI/CD & Security Cut release cycle from 1h to under 10min by designing CI/CD pipelines using GitHub Actions across 3 projects. Integrated container image scanning (Trivy) and dependency vulnerability auditing (bundler-audit) into CI pipelines for every commit.

Observability & Reliability Built observability stack integrating Grafana, Loki, and Azure Monitor with App Service and Azure VMs. Added granular health-check API endpoints and Sentry monitoring, reducing mean-time-to-detection from 30min to 5min. Maintained 99% uptime against SLO targets through structured incident response and troubleshooting processes.

DR, Security & Compliance Planned and documented backup and disaster recovery strategies across 4 production regions. Drove infrastructure compliance efforts for ISO-27001, ISO-9001, CE marking, CE Plus, and NHS DSPT certification.

Provided technical leadership and managed infrastructure for a legal technology platform (Symfony, Next.js, MySQL, OpenSearch) deployed across 10 instances in 3 countries, indexing 1.5M+ documents from 30+ legal sources. Defined application architecture and provided technical direction to the development team. Deployed and managed Kubernetes clusters on OVH and on-premises infrastructure using Terraform and Terragrunt. Implemented GitOps deployment workflow using Argo CD across all instances, bringing deployment time under 15 minutes. Created and maintained 5 Helm charts for all application components. Built document processing data pipelines using Argo Workflows to support OCR and document parsing, achieving 3K documents/hour throughput. Set up Victoria Metrics stack for metrics and log aggregation. Integrated Sentry for application monitoring. Maintained 99% uptime with 5min MTTD and 15min average MTTR. Integrated container image scanning (Trivy) into CI pipelines for all deployments. Configured Cloudflare WAF, DNS, and Zero Trust for traffic security and access control. Planned and implemented backup and disaster recovery strategies.

Led infrastructure migration from quasi-on-premise to cloud on AWS and OVH for an established healthcare startup (19.3M visits monthly).

Introduced Infrastructure as Code practices using Terraform and Terragrunt across all environments. Led production workload migration to AWS (EKS, RDS) and OVH across 3 engineering teams. Orchestrated deployments of healthcare products (PHP, MySQL, OpenSearch) on EKS/RDS. Integrated RabbitMQ event-driven messaging for legacy system interoperability. Architected Apache Airflow-based ML training and data processing pipelines on behalf of the Data Engineering team. Automated stage and production model deployments (Python/PostgreSQL/BigQuery). Implemented cost saving measures for larger pipelines. Revamped Jitsi-based telemedicine deployment, improving system stability and reducing customer churn. Implemented traffic routing and security through Cloudflare Argo Tunnels, WAF, and Zero Trust. Centralized user account management with Keycloak. Improved developer release velocity through better local development tooling and CI/CD automation in GitLab and GitHub (Docker, Docker Compose, Skaffold). Integrated GitLab SAST and SonarQube into pipelines for static analysis and code quality.