Alouane - Architecte DOCKER

WORK EXPERIENCE

Project manager
Ministry of higher education and scientific research - Rabat, MoroccoSeptember 2019 to 2021

Project: Docker swarm cluster setup
-Served as a solution architect to build up a secure and prod ready docker swarm cluster, the main cluster had to be
highly resilient, scalable and easy to replicate (100% configurable and automated), monitor and supervision. The entire
process fits into the following steps
• Setup of two DMZ zones
o Public: Dedicated for docker swarm slaves that will host any frontal/public services (e.g., Frontal
Traefik gateway, Frontal apps)
o Private: Dedicated for docker swarm managers that will host internal services (e.g., Grafana, Kibana,
Atlassian suite…) but cannot interfere with ministry internal network
• Setup of a persistence storage volume (GlusterFs) solution as a container storage system for high availability
• Setup a supervision UI (Portainer) to manage all cluster nodes, services, volumes, containers, users and teams
• Setup a scheduled system prune job that frequently clean up unused images, volume or dangling/unreferenced
containers to free nodes storage space (As a docker swarm service)
• Deploy a keepalived container at each Frontal node for high availability, this has helped provision a failover of
a virtual IP address from one node to another
• Deploy a monitoring UI system (Grafana + Prometheus) in order to view several resource consumptions per
service like:
o Network usage

o Protocol usage (e.g., POST, GET, PUT…)
o Status code (e.g., 2xx, 4xx, 5xx)
o Socket usage
o Uptime and response time
• Release a stack deployment best practice report for the dev team and exploitation team that includes
o Stack files and image versioning strategy
o Service routing, dns and subnets strategy
o Volume binding and service backups strategy
o Database backups strategy (i.e., Full, differential and transactional backups with automated job
scheduling)
o Service health check strategy
o User name space and non-rooted container strategy
Project: Docker registry (Docker registry + Portus)
-Served as a solution architect to setup a highly resilient, easy to replicate (100% configurable and automated), and
role-based access control registry, this will empower dev teams to push/pull service images locally for testing, and the
CI/CD platform to pull/push staging and production labelled service images. The entire process fits into the following
steps:
• Setup docker registry (open-source version) as a scalable service in the docker swarm cluster
• Setup a supervision UI (Portus) in order to manage namespaces, repositories, users and team authorisations
• Setup a Portus background process service to ensure data synchronisation between docker registry and Portus
UI service in case of a downtime

Project: Data stream pipeline (Confluent)
-Served as a solution architect to setup a data streaming pipeline platform, easy to replicate (100% configurable and
automated), that connects and process event data in real time between different micro services deployed by different
dev teams, The entire process fits into the following steps:
• Setup Zookeeper to store persistent cluster metadata and critical component of the Confluent platform
• Setup messaging broker service (Kafka) in cluster mode
• Setup Confluent Schema Registry
• Setup Confluent control center for cluster, broker, topics management and supervision
• Setup a Ksql DB to process real time data with simple sql statement
• Release a topic normalisation best practice report for the dev team and exploitation team

Project: Gateway (Traefik)
-Served as a solution architect to setup a high availability, easy to replicate (100% configurable and automated), and
secure frontal gateway (Traefik) in a cluster mode that supports the following
• Service auto discovery
• Loadbalancing
• Api control
• Dynamique Certificate management
• Orchestrator event consumption via Socat service (Socat exposes the docker socket)
• Redirect traefik metrics to Prometheus for service monitoring

Project: Logging system (EFK)
-Served as a solution architect to build up a role-based access and easy to replicate (100% configurable and automated)
logging system, it helps index service logs via Elasticsearch DB, then empower different dev/exploitation teams to
monitor, search and analyse data in real time through Kibana UI. The entire process fits into the following steps:
• Setup Elasticsearch service in cluster mode, with a snapshot/index backup strategy, each dev team has limited
access to the spaces, indexes and logs related to applications they have deployed
• Setup a Filebeat service that auto collects and ships relevant logs from different micro services to Elasticsearch
after some filtering and processing, with an index life cycle management strategy per service
• Setup Kibana service to explore, visualize and analyse data

Project: Atlassian suite
-Served as a solution architect to setup the Atlassian suite as a collaboration tool for enterprise product development
teams, the setup has to be 100% configurable, automated and easy to replicate, the entire process fits into the following
steps:
• Setup a postgreSql DB service to power up all Atlassian products, with a backup strategy support and
performance consideration in order to support large team workload
• Setup an Adminer service for postgreSql DB visualisation and supervision
• Setup of Jira software service with a data backup strategy, and custom workflows schemes appropriate for a
scrum environment and DevOps driven
• Setup of Jira service desk with a data backup strategy and custom SLA strategies and web portals
• Setup of confluence with a data backup strategy, and custom space structure organisation
• Setup of Bitbucket with a data backup strategy and synchronisation with other Atlassian products
• Setup of Bamboo as a CI/CD platform and in sync with the local docker registry and other Atlassian products

Project: Legacy app automation (CI/CD)
-Served as a DevOps consultant to setup many automation pipelines for legacy apps (12 apps) developed in different
technologies, all pipelines needed an auto-deployment step for staging environments and a manual confirmation step
for production deployment, these pipelines were built to support the following frameworks
• Backends
o Spring boot (Java)
o Django (Python)
o Symfony (Php)
o Laravel (Php)
o Express (Nodejs)
• Front
o Angular (Js)
o React (Js)
• Mobile
o Flutter (android & ios) via firebase app distribution
o Ionic (android)

Project: Cursussup platform
-Served as a Techlead and architect to build a national bachelor platform, where all Moroccan candidates (1 million) in
each year have to choose their preferred universities, prioritize and confirm or decline the proposed offer, the selection
system implements the well-known Gale-Shapley algorithm for maximum transparency. The platform has:
• A Front office where candidates can view latest news and apply to different universities (Angular 9)
• A Backoffice where universities can manage selection formulas, test/Assessment score required to passe and
candidates’ post registrations (Angular 9)
• A Backend with 3 micro services (Spring Boot + Liquibase for DbOps + Swagger for API documentation +
ehcach and vranish for caching)
o Referentiel: Manage all system data and repositories
o Orientation: Manage all candidates data and orders
o Selection: Manage selection formulas and candidates scoring
o The 3 micros services exchange events through Kafka topics
o Each micro service has its own SQL server database with a backup and recovery strategy
o Each service logs gets pushed using filebeat, and can be analysed through Kibana
o Each service has its own health check and rate limiter
• An SMTP service (AWS SES) with
o Backoff strategy to overcome service consumption limits
o Bounce rate and complaints rate listener
o Notification fallback in case of
▪ Hard bounce (Full User inbox, Email inexistant, ISP block)
▪ Complaints
▪ Delivery delays
Upon each pull request approval in an env branche (e.g., staging), a new docker image gets build and published (via
Bamboo CI/CD) in docker registry then gets deployed automatically via Portainer in the appropriate environment
(except for production env that needs a manual approve before deployment)
-Links: ******** -

Project: Accreditation platform
-Served as a techlead and architect to build a national course accreditation platform, where all establishment and
universities (800 entities) have to apply for course accreditation before starting the enrolment. The ministry teams and
the National Quality Agency (NQA) assess each application through a peer review process for compliance with the
standards. The NQA has more than 1000 experts that continually review applications, and gets paid monthly for their
contributions, all performance review of each expert gets calculated by the same platform and generates the right
monthly amount of payment.
More than 1200 Jira tickets has been processed and the project is still in active development and maintenance
The same technologies, workflows and stacks used in Cursussup platform have been deployed for this one
-Links: ******** -

Project: Equivalence platform
-Served as a techlead and architect to build a national degree equivalence platform, where all students have to apply for
an equivalence certificate when they have got a foreign degree. The ministry teams and the National Quality Agency
assess each application through a blind review process for compliance with the standards
The same technologies and stacks as Cursussup platform have been deployed for this one
-Links: ******** -

Project manager
Arkiia - Rabat, MoroccoSeptember 2018 to 2019
Project: E-Council platform
-Served as a project manager to build an E-council platform similar to clarity.fm, It’s a marketplace for better matching
between consultants and professionals through a new form of support (VideoConferencing), while using latest
technologies:
• Design workflow: Invisionapp
• Tasks management: Asana (Scrum disposal)
• Webrtc for VideoConferencing
• Angular 6 app for the front site
• Angular 6 app for the backoffice app
• Payment gateways (Paypal and Payzone)
• Varnish cdn, new cluster build
• Crawlers redirection in the cdn edges side (SEO friendly)
• Social networks integration
• S3 as an origin hosting solution
• Slim Restfull API
• Aws code deploy + Php units + travis cli integration for deployments automation from github repository
-Links: ******** -

Project manager
Threecomp - Rabat, MoroccoDecember 2018 to Today

Project: Asset tracking (On going)
-Served as a solution architect to build up a flexible and easy asset tracking software, clients can use the service as a
SAAS platform, with a proprietary mobile device including a built-in barcode and RFID scanner, clients can customize
their internal workflow and data schemas as they go with a role-based access, and can perform more advanced audit
and maintenance jobs. The platform has 3 main components
• Front office where managers orchestrate jobs and workflows (Angular 12 + state and store management)
• Backend API for processing requests (Spring boot + Liquibase + ehcache + Swagger Api)
• Mobile app for auditors and maintenance jobs (Ionic + Capacitor)
• CI/CD pipeline is configured via Bamboo CI/CD
o Front office: Node based image (Install modules, test, Build release) + Bamboo docker image build
and push to docker hub registry
o Backend: Maven (Compile, test, Package) + Jib (Docker image build and push to docker hub registry)
o Mobile: CircleCI android/IOS based image (Install modules, Verify, Test) + Firebase CLI + Fastlane
(Generate screenshots, build signed release, Push to Beta/Alpha/Production stores)

Project: Docker swarm cluster setup
-Served as a solution architect to build up a secure and prod ready docker swarm cluster, the cluster had to be highly
resilient, scalable and easy to replicate (100% configurable and automated), monitor and supervision all deployed
services

Project: Data stream pipeline (Confluent)
-Served as a solution architect to setup a data streaming pipeline platform, easy to replicate (100% configurable and
automated), that connects and process event data in real time between different micro services deployed by different
dev teams

Project: Gateway (Traefik)
-Served as a solution architect to setup a high availability, easy to replicate (100% configurable and automated), and
secure frontal gateway (Traefik) in a cluster mode

Project: Logging system (EFK)
-Served as a solution architect to build up a role-based access and easy to replicate (100% configurable and automated)
logging system, it helps index service logs via Elasticsearch DB, then empower different dev/exploitation teams to
monitor, search and analyse data in real time through Kibana UI

Project: Atlassian suite
-Served as a solution architect to setup the Atlassian suite as a collaboration tool for enterprise product development
teams, the setup has to be 100% configurable, automated and easy to replicate

Project: Single sign on (SSO)
-Served as a solution architect to setup a keycloak based SSO to manage user identity, access and authorization for
• Atlassian suite (Private realm)
• Legacy LDAP based apps (Private realm)

Lead Technical Architect
Audivity - Tucson, United StatesDecember 2017 to December 2018

Project: Audivity Platform
A react based platform to automate conversion of written content into digital audio, also leveraging AI voice
reconstruction, script automation, voice-over, editing, publishing and analytics to make things simpler for content
creators.
-Core Content:
• React front/backoffice app
• Nodejs API (Loopback 3.X)
• AmplitudeJs based audio player
• Cloudfront as cdn audio delivery solution
• S3 as an origin hosting solution
• Public audio canals integration (itunes, soundcloud)
• Aws Lambda + S3 +nginx for analytics
• ffmpeg for audio processing
• Aws code deploy + Php units + travis cli integration for deployments automation from github repository
-Links: ******** –

Lead Technical Architect
Arkiia - Rabat - Morocco
May 2016 to September 2018
Project: Video hosting platform
-Served as technical lead for a team of developers to build a fully functional video hosting platform similar to
********
platform where the public can monetize their videos & make money from vast ads impressions -Core Content:
• Angular 2 app for the front site
• Angular 2 app for the backoffice app
• Highwinds cdn integration for video, thumbs & assets hosting
• Crawlers redirection in the cdn edges side (SEO friendly)
• Social networks integration
• S3 as an origin hosting solution
• Cloudfront for backoffice app hosting
• Aws elastic transcoder for video transcoding
• Dmca for content ownership & report protection
• Slim Restfull API
• Videogular2 integration + plugins development
• Lightweight embed player solution for other sites
• Yeild bird Async adx integration
• Aws Lambda + S3 +nginx for click frauds & bots’ detection
• Daily Cron jobs for users, videos, channels statistics
• Aws elastic loadbalancer + Autoscaller for backend scalability
• Aws S3 + Kuberenetes + Vitess cluster management system as a database solution
• Aws code deploy + Php units + travis cli integration for deployments automation from github repository
-Links: ********, ********

CHEF Orchestration expert
Arkia - Rabat -
October 2017 to January 2018
A varnish cdn solution for a VOD platform to deliver small files (HLS/HDS manifests) as well as large files (Full-HD
video fragments) efficiently with following requirements:
-Highly configurable for a multi origin, worldwide nœuds setup (CHEF orchestration tool) -Able to handle
10Gbps of traffic with bursts of up to 2,000 connections per second -An architecture that allows to write
custom modules/plugins -Support origin shielding

Network & System Administration
leadplum - Quebec -
March 2017 to November 2017
Scale API is a machine learning based API for human intelligence. it brings human intelligence to software
applications.
I managed a self-healing aws infrastructure (Notifications, sms emails api component) to support real time failures
and server/database crashes during traffic pick times
- The core techs used in this task:
-Chef server
-Aws autoscaller loadbalancer
-Aws route53
-Aws Code deploy
-Aws Data Analysis and Model Building

Web devloper
UtilBill - New York, NY -
February 2017 to June 2017
A SPA platform for managing a set of utility billings and invoices, the platform has more than 50k customers
mainly in USA, Belgium and worldwide Core content:
-React + redux based app
Links: ********/

Android Developer
Arkiia - Rabat, MA -
August 2016 to June 2017
Project : Videos Mobile App
-Managed a native android mobile app for ******** site -Core
Content:
• Minimum sdk: 4.1
• Material design
• Exoplayer integration
• Admob integration + Google ima integration
• Aws SNS for push notifications (topic per channel subscription)
• Firebase analytics
• Social networks integration
-Links: ********?id=chouf.choufplus -
Screenshots:

Mobile Developer
Arkiia - Rabat, MA -
January 2016 to March 2017
Project: Mobile apps for a StandUp TV show (one of the most views tv show in this country)
- Developed the first mobile live vote system in morocco, so the public can interact with their favorite comedians
then vote for them. Also, the public can record their own videos to participate in a weekly contest in order to win
latest mobile devices tablets.
-Core Content :
• Full app developed using ionic 2 (Android/IOS)
• Multi language support
• Video recording + local transcoding
• High traffic wordpress setup with Aws
• Elastic loadbalancer Autoscaller system to accommodate high traffic
• S3 as an origin hosting solution
• Cloudfront as cdn delivery solution
• Elastic aws transcoder
• Wordpress Api integration
• Custom wordpress development for 5 live vote types
• Custom interaction wordpress plugin for the social interaction
• Custom wordpress plugin for notification management (Gcm, Apns)
-Links: ********?id=com.ionicframework.standup520312,
********-alaoula-tv/id1190139097?mt=8
-Screenshots:

Mobile Developer
Arkiia - Rabat, MA -
August 2016 to December 2016
Project: Soccer mobile app for the official Moroccan premier league
-Developed a mobile app + a backoffice app to manage all premier league events
-Core Content:
• Full app developed using ionic 1
• Android app/IOS app/Tizen App for Samsung smart tvs, Android smart tvs
• Live events streaming
• Notification subscription per team
• Backoffice app developed using AngularJs
• Matches planning
• Ads events Tracking Statistics
• Backend developed using slim php micro framework
• Aws sns for events notifications + subscription topic per team
• Players/Teams/Calendar/Matches Events management
• Advanced Google analytics integration
-Links: ********?id=com.ionicframework.elbotola609035

Web developer
Intelex – Quebec, Canada -
January 2016 to December 2016
Project: Quality management system for ISO 9001, 27001 & 14001
-Joined a team for an intranet enterprise level web applications development for ISO certified companies’ others
working on active preparation
-Core Content:
• Full app developed using RestFull symphony api + Bootstrap Responsive design
• Document management support
• Corrective & preventif action management
• Quality management plan
• Audit, ISO certifs, Surveys, Complaints, Company process management
********/

Mobile Developer
AACC - Paris, France -
February 2016 to October 2016
Project: Driving license aptitude test app for over 200 psychologist agencies
- Developed a mobile app that can run on large Android OS and Chrome OS for different psychologists’ agencies.
Basically, the app is used as a proof compliant test system with the French government to attest that each
patient/driver who passed the test, can get his driving license back along with his driving points -Core Content:
• Full app developed using ionic 1, Android & Web version
• Drivers management
• Psychologists management
• Tests management & configuration
• Statistics management
• Pdf, Word, Csv report generation
• Backend developed using slim php micro framework

Full Stack Developer
Oradhub - Quebec, Canada -
February 2016 to August 2016
Project: Ads impressions monetization platform
- Worked heavy on the front, backoffice & backend side on a daily basis to build a monetization platform like
Double click for publisher’s app from Google, to let basically all companies, public restaurants, coffees, museums or
even municipalities to sell their screen ad placements
-Core Content:
• Angular 2 app for the front site
• Angular 2 app for the backoffice app
• Cloudfront for videos, images, assets hosting
• Social networks integration
• S3 as an origin hosting solution
• Cloudfront for Front & backoffice app hosting
• Aws elastic transcoder for video transcoding
• Slim Restfull API
• Daily Cron jobs for screens, users, orangers statistics
• Aws elastic loadbalancer + Autoscaller for backend scalability
• Aws code deploy + Php units + travis cli integration for deployments automation from github repository
• Paypal, Strip & Payload Gateway
-Links: ********, ******** –

Senior Web Engineer
Techstats - Quebec, CanadaAugust 2015 to February 2016
Project: Survey management system
- Developed enterprise level web applications for managing client’s surveys for their customers in different Quebec
regions
-Core Content:
• Full Front & backoffice app with FuelPhp + Bootstrap
• Users management
• Devices management
• Surveys management
• Custom Google charts integration
• S3 as an origin hosting solution + statistics backup solution
• Cloudfront for assets hosting
-Links: ********

Junior Web Engineer
Innovision international - Quebec, CanadaAugust 2014 to August 2015
Project: CloudCore an E-training platform for Industry customers
- Joined the CloudCore team for daily maintenance & features improvements for new clients
-Core Content:
• Full Front & backoffice site with Smarty (PHP) + Bootstrap
• Users management
• Certifications management
• Training/Modules management
• Organization management
-Links: ********

Web Developer
Rejes - Rabat, Morocco -
May 2014 to August 2015
Project: Development of a GIS platform
- Developed a geographic information system platform for monitoring the various activities of the Ministry in
charge of relations with the parliament
-Core Content:
• Full app developed using Angularjs + a symphony rest api + Bootstrap o Responsive
design
• Document management support
• GIS Patterns management
• Document management
-Links: Local app

Mobile Developer
Arkia - Rabat, Morocco -
January 2014 to January 2015
Project: Video hosting mobile app in favour of the video.ma site
- Developed a mobile app that lets the public users to record & upload their buzz videos to the video.ma platform +
a new
transcoding system for fast & parallel videos processing -Core Content:
• Full app developed using cordova 5
• Responsive design
• JWplayer integration
• Google IMA + admob integration
• Statistics management (site's backoffice)
• Backend developed using smarty php
-Links: ********?id=com.accensit.vz

Mobile Developer
Threecamp - Rabat, Morocco -
June 2014 to August 2014
Project: Entertainment app for a Prehistoric animal museum
- Developed a mobile app that can run on both large android OS screens & chrome OS screens for a museum
reception, it contains documentation about all prehistoric creatures found in morocco in different languages, and
some entertainment games, animations & quiz for an interaction with the public
-Core Content:
• Full app developed using ionic 1
• Animation, games & quiz developed using html5 canvas
-Links: ********

Web Developer
Inovia - Rabat, Morocco -
January 2014 to June 2014
Project: Quality management system for ISO 9001, 27001 & 14001
- Developed intranet enterprise level web applications for ISO certified companies & others working on active
preparation
-Core Content:
• Full app developed using RestFull symphony api + Bootstrap o Responsive design
• Document management support
• Corrective preventif action management o ISO certifs
management
• Users management
• Audit management
• Quality management plan
• Company process management
• Surveys management
• Complaints management
-Links: Local app

Web Developer
LARIT - Kenitra, Morocco -
January 2013 to February 2014
Project : Social events mobile app
- Developed a meta-search engine + implementation of a semantic multi-words queries enrichment approach:
-Core Content :
• Two versions have been developed for this project, the first one is part of an internship with ********
site, and the second is part of a research framework where I have implemented a semantics enrichment approach
• Front backoffice was developed using JEE(Hibernat + Spring MVC) + Bootstrap
• Backend had to be fairly fast to compensate for the multi search queries performed by the main server, basically
I've used C language to write sites parsers + data extractors
• Multiplexage I/O to get a full control over each http request sent, so we can cancel it once we detect any first
frame delay,
• JNI for the intercommunication between JEE DAO layer & the C library

Android Developer
Inovia - Rabat, Morocco -
July 2013 to August 2013
Project : Social events mobile app
- Developed a mobile event management application organized by the Ministry of Youth and Sports of Qatar:
- Core Content:
• Minimum sdk 2.1
• Auth ofr members
• All activities history + autoscroll
• Manage participations
• Manage planning
• Social media integration
• Offline mode
• Public rest api integration
-Links: No longer public

Android Developer
Inovia - Rabat, Morocco -
April 2013 to July 2013
Project : Soccer mobile app
- Developed an android app for the flow up of all Moroccan premier league matches
-Core Content:
• Minimum sdk 2.3
• Matches events notifications
• Matches calendar
• Results per team & per player
• Offline mode
• Public rest api integration
-Links: No longer public