CV/Mission d'Expert e*Gate freelance

Exemple de missions de Marouan,
Expert e*Gate habitant les Hauts-de-Seine (92)

DevSecOps Program Manager
MedInvention – BNP Paribas / Personal Finance SINCE
1/2020 -
Project « DevSecOps – DevOps Core Team »

Within Core Team DevOps, ensure designing, building and deployment of a "Quality Gate" into DevOps Toolchains of BNP Paribas PF to ensure continuous improvement of source code quality and security of the various software components operating in IT systems.

Management & Lead
Developing the overall strategy of the DevSecOps project in a cross-cutting way to PF.
Docking international entities of PF (Spain, Italy, Denmark, Bulgarian, Roman, Mexico, China, ...) to the DevSecOps toolchain by adopting the security strategy (Gate, Shift Left/Right).
Implementation of internal organizational transformation (RACI, Workflow, Roles).
Defining and promoting the “Security Champion” role and “AppSec” expert’s communities with security responsible and human resources of BNP Paribas PF.
Animation of various steering committees (CoPIL, CoDIR, ...) of the project.
Steering of costs, expenses and risks associated with the transformation to DevSecOps.
Member of DevOps program governance.
Animation of workshops with contributors to define project guidelines (definition of required quality and safety levels of components, consideration of BNPP group rules, ...)

DevOps & Architecture
Integrating a Nexus IQ Server (SCA) solution into DevOps processes and toolchain by adjusting security policies, defining organizations/roles, and unifying analysis strategies.
Study of various SAST solutions such as SonarQube, RIPS and Fortify.
Integration of SonarQube into DevOps toolchain as a tool for source code quality monitoring and some security vulnerabilities (SAST).
Building and deployment of a restrictive "Quality Gate" with CI/CD Pipelines to supervise safety and quality requirements compliance, supporting Java, .NET, NET Core and Python.
Implementation of a “Grand Father” concept in “Quality Gate” to resolve technical debt problems of legacy Assets (application).
Adapt the “Quality Gate” solution to IBM's Cloud environments (private and dedicated) (Kubernetes under ICP, MZDR Pass V2 and V3) by analyzing and signing images.
Training of BNP Paribas PF's development teams (national and international) as part of the deployment process of the “Quality Gate”.
Inclusion of the "Security by Design" approach by interfacing toolchains with ALM Octane (Micro-Focus) tools to manage and track functional tests and penetration tests.
Support of development teams during Shift-Left adoption (Workspace).
Technical tools: Python, Groovy, Eclipse, Visual Code Source, Git, Maven, GitLab, Jira, Octane, Confluence, Bash, Nexus IQ Server, Nexus Repository, SonarQube, RIPS, Docker, Kubernetes, Ansible, Jenkins, IBM Cloud Platform.

Technical Lead – DevOps Engineer
MedInvention - InTheZone
10/2019 -
Project « Advanced Supervisor Cam »

Building of an Android application dedicated to managing, controlling and visualizing of IP cameras
group with backend service in Amazon Cloud on Serverless mode.

Lead & Dev
Building of Android mobile front for RTSP video stream processing and IP cameras
controlling with API calls.
Automation of unit tests and integration tests (UI test) of Front.
Design and development of Backend side, using SpringMVC & SpringBoot (full API
Rest) guided by TDD method.
Integration of AWS Lambda Handler (with CloudWatch).
Integration of Amazon Gateway API with Lambda Proxy and Cognito Authorizer.
Integration of SNS service via Firebase for push notifications management.

DevOps
Administering of AWS environment.
Making of Production Pipeline (build, test, deploy, run) using CodePipeline (CodeCommit, CodeBuild, CodeDeploy) for Backend side.
Making of Mobile Front Build and Test chain using GitLab CI.
Automation of infrastructure stack deployments via CloudFormation.
Extension of supported resources by CloudFormation & SAM (Custom resources).
Application Log Monitoring using CloudWatch by creating Dashboards and configuring alarms.

Architecture
Design of Backend technical architecture in Serverless mode.
Adoption of NoSQL by integrating DynamoDB service.
Integration of Cognito service (User Pool) for management of Sign In/Up users to Mobile
Front and authentication to Backend
Swagger documentation of Backend APIs.
Technical tools: Java, Spring MVC, Spring Boot, DynamoDB, SNS, SqlLight, S3, Cognito, Amazon API Gateway, RestFull, Android App, Firebase, Mockito, UIAutomator, Espresso, Gradle, Maven, Git, Gitlab CI, JUnit, RTSP, GitLab, AWS Lambda, CodePipeline, CodeBuild, CodeDeploy, CloudFormation, SAM.

Technical Lead – DevOps Engineer – Software architect
Capgemini Consulting – CNAM / Digital
3/2018 - 12/2019
Project « Fond d’innovation – Article 51 »

Design and implementation of a platform to pay, pilot, monitor and evaluate experiments of
organization of care and remuneration modalities on innovation fund (Reference: LFSS Article 51).

Lead
Management of a team composed by 8 Full Stack developers in Scrum Mode.
Support of developers in execution of various tasks, to guarantee respecting deadlines and best quality of product (TDD and BDD).
Making of Team Brainstorming for a collective design.
Monitoring product quality indicators to ensure an optimal rate of compliance with coding standards (PSR-2).
Design and development of communicating bridge with other IT system, using CNAM
standards (Authapp, AccessMaster, DEMEX ...).
Making Scrum ceremonies such as Daily, Sprint-demo and Sprint-retro.
Technical qualification of backlog.
Animation of technical workshops to initiate and sensitize all members of my team to
continuous integration and continuous deployment.
Management and follow-up of various integration with Legacy ST and the partners
systems.

DevOps
Administration and management of containerized application environments deployed
under OpenShift in private cloud.
Implementation of production (pipeline) chains (build, test, deploy, run) via Jenkins.
Preparation of some S2I Images and BuildConfig suitable for deployment.
Realization of deployments and commissioning.
Monitoring and exploitation of different application Logs for monitoring application
health (with Kibana and AppDynamics).

Architecture
Establishment of software / technical architecture of application while respecting
overall architecture document.
Ensure integration of the new solution within the CNAM ST.
Maintain an application technical documentation.
With system architects, writing architectural project documents (DAV and DAV2).
Participate in the development of DDSI Master Plan.
Participate to the technical and architectural reflection workshops of the CIO.
Technical tools: PHP, PHPUnit, Eclipse, Git, GitLab, Jira, Confluence, PostGreSQL, SOAP, RestFull, Bash, Selenium, Sonar, JAVA, Spring, OpenShift, Docker, Kubernetes, Ansible, RedHat, Jenkins, Behat.

Project manager – Software architect
Capgemini Consulting - ANSM
7/2017 - 2/2018
Project « IT project management »

Managing a set of projects on many platforms with many technologies in the IT department of the national agency for safety of medicines and health products.

Management
Study expression of need and write the framing note to formulate goals and fit the scope.
Write refereeing notes for pilot committee's decision.
Contribution to the writing of project contract and functional and detailed specifications.
Animate committee’s project and coordinating between different actors.
Reviewing and validation of technical specifications.
Managing developments (external and internal).
Validation of deliverables on contractual, technical, quality and functional sides.
Tests monitoring.
Ensure deployment and service Go Live collaborating with IT architects.
Architecture
Implementation of software and technical architecture for some project respecting philosophy of IT architecture.
Writing technical architecture document and technical notebook choices.
Writing of deployment specifications and solutions operating.
Ensure integration of the new solution with others existing projects.
Create and maintain a graphical flow and application mapping documentation.
Contribution on preparation of various environments (pre-production, test and production).
Supervision of deployments and the go live.
Ensuring technical support to production teams.
Technical tools: C#, Java, PHP, Eclipse, SVN, Git, Sybase, Oracle, MySQL, SOAP, RESTfull, RedHat, Jenkins, NQI, Tipy, Gantter, MSProject.

ENGINEER OF STUDY AND DEVELOPMENT PHP5/SYMFONY – Technical Lead / Software architect
Talan - BOUYGUES TELECOM
10/2013 - 6/2017
Project « IT Enterprise »

Partial recast of Information system (Reflex) for operating department of Bouygues-Telecom for Enterprise.

Lead
Implementation of models and writing technical specifications, driving a team of four or five developers to partial redesign Information system (Reflex) for operating department of Bouygues-Telecom for Enterprise.
Initiation developers to unit tests, acceptances tests and presentation of TDD and workshops (learning by example)
Animate technical workshops for implementation of good practices, to review encodings standards PSR-2 and discuss architecture overall project.
Adopting Pair-Programming Mode for start developments, ensures than the whole team applies methods and project development rules.
Implementation and Configuration Continuous integration Tool (Jenkins), and monitor quality work (Sonar).
Development of charging tests (different scenarios) in PRE-DEP using JMeter tool to achieve some configurations and adjustments applications to ensure proper operation.
Managing
Building of the technical Roadmap tasks for project development, estimation and allocation of different tasks and pr...