CV/Mission d'Expert Serverless freelance

Exemple de missions de Hicham,
Expert Serverless habitant les Yvelines (78)

Professional experiences

DataOps / MlOps , ModusBox ( Financed by Bill & Melinda Gates Fundation )
June 2020– today
ܜܛܚ Among a team of data scientists and machine learning engineers I was in charge to help the
production launch of multiple projects at group scale.
 Advising data projects
- Designing the infrastructure needed in Aws.
- In charge of securing and monitoring the infrastructure.
- Forming non familiar people with Aws services and possibilities.
 Development
- Data exploratory analysis.
- Etl jobs with PySpark ( populating datalake or datawarehouse )
- Real Time Streaming analysis with PySpark on EMR.
- Machine learning models creation ( pre built in Sagemaker ) or customs with
tensorflow.
- Api serving Ml models predictions in a full serverless infrastructure.
 Level 3 supports
- Migration of Sql/NoSql databases on premises or in other cloud providers to Aws.
- Risks mitigation of vulnerabilities found by security auditors.
- Data infrastructure monitoring and continuous cost optimization.
- Deployment of ML models to production.
- Architecting data lakes for other teams.
- Data Dimensional Modeling.
Aws Expert, AllianceBlock
June 2021 – June 2022
ܜܛܚIn charge of facilitating the massive extension of Aws cloud use.
- Implementing cloud resources consumption strategy.
- Doing training sessions to internal teams in order to make them more familiar with
the Aws ecosystem.
- Implementing multi account strategy
- Helping different projects to design their architecture in Aws and doing Level 3
support.
- Implementing security audit solutions and automating the remediation of non
respect of main security rules.
- Designing and implementing global network connectivity management between
different teams and projects.

Aws Expert referent in container technologies, Canal +
March 2019– September 2020
ܜܛܚ Create a service offer at group level of container management in Aws : Many projects inside
different teams deployed containerized services on Aws, but without any common rules or governance,
my work was to build this service offer at group level, it was declined in different level :
 Writing a set of governance documentation of container management ( security
requirements, network requirements,deployment, offer access , tutorials for non familiar
people with those technologies…).
 Creating a monitoring system in charge of the surveillance of all containers, based on
Prometheus Grafana Cloudwatch and Datadog.
 Automating the deployment of a production ready EKS cluster using IaC.
 Writing customs security policies with Open Policy Agent.
 Presenting the offer at different group level ( technical teams, managers…)
 Helping projects which used microservices in their infrastructure design.

Aws Expert, M6Web/Lagardere
June 2018– 2020
ܜܛܚ Design and build of app infrastructure in AWS : I helped an IT French company specialized in
outsourcing and managed services for big groups. They decided to extend their activity in to the cloud
and they needed help, I helped them as AWS architect and devops tech lead. I was in charge of 3
deliverables :
 Migration Plan:
- AWS logical account partition according to business entities of each company
- IAM policy.
- Networking strategy between AWS and on premise environment.
- Definition of the AWS network architecture.
- Targeting of the managed services to use.
- Automation plan (tools to use, test strategy)
- Tools needed for a reliable migration.
 Tooling set up and migration:
- Deployment of an ultra scalable monitoring service giving global view of the
infrastructure.
- Automated deployment of AWS infrastructure using Ansible, Packer, Terraform,
Bash, AWS CLI.
 Level3 Support:
- Interconnexion between on premise and AWS.
- Kubernetes cluster set up in AWS (EKS), on premise (IBM ICP)
- Session training to help developers to deploy on Kubernetes.
Aws Security Expert, EDF
February 2016 – February 2018
ܜܛܚ Cyber security referent architect on AWS infrastructure:
 Definition and implementation of a governance strategy to adopt :
- Lead a large risk analysis on the main threat that public cloud can bring to our
group.
- Study of the share responsibility model with Amazon and definition of our
responsibility scope in terms of security.
- Writing of an operational public cloud security policy.
- Permanent member of the governance committee in charge of validate the
externalization in the cloud of projects.
 Design and build of a secure AWS infrastructure:
- Help on projects infrastructure design with a strong focus on security issues in the
infrastructure ( network level, application level , IAM , ciphering, monitoring, attack
response …).
- Lead of a scripting experts teams in charge of automating the mitigation of security
issues in aws.
- SIEM integration in AWS.
- Deployment of a cisco VPC transit.
- Global configuration of AWS WAF/SHIELD ( writing of rules…)
- SSO integration.
 Maintenance in operational conditions :
- Integration of AWS Systems Manager and management of a large pool of EC2
production instances ( patch management, automation tasks…).
- Creation of a security dashboard for the CISO, based on the new CIS for AWS
referential.
- Maintenance in operational condition of the infrastructure: VPC networking ( VPN,
bastion, VPC transit Cisco, implementation of security groups and NACLs);
Implementation of a fully open source IPS solution in AWS.
- Key management: CMK deletion process and management, AWS KMS policy
configuration.
- DDOS mitigation attack. Here the task was to lead the periodical test of our
infrastructure when it has to face a DDOS attack.

CEO CAPSULCORP, Web Development Agency
June 2015– today
Paris

👉BET Simulator: Development of a Bet simulator from scratch.
Development of the frontend with Bootstrap, HTML, CSS and Angular2+:
State Management of the data in the client side with the implementation of Redux for Angular, NGRX.
Development of the backend with Node.JS, Socket.IO PassportJS Express.JS and MongoDB(mongoose).
Creation of the data model, which has been stored in MongoDB.
Web Scrapping of the data with Cheerio.
Development of secure APIs in a RBAC manner
The module of authentication has been created from scratch with Passport.JS, it has coupled a basic authentication with JWT in order to ensure secure APIs and also to authenticate and manage clients session.
Server side caching with REDIS, in order to enable a better performance for the application.
Creation of a module of image upload using AWS S3.
Definition and implementation of unit tests which has to be successful in order to enable the deployment.
Node.JS High performance ensure with clustering.
Lazy Loaded Module for the frontend and take advantage of the Service Workers.
Convert the initial Angular App into an Angular Universal App in order to enable Server Side Rendering and to optimize performance and SEO.
Deployment in an AWS infrastructure (Cloudfront, S3,Lambda,Api Gateway, EC2…).

👉 Helping SME’s to take advantage of the Web: In order to help a great number of SME’s or liberal professions, I have automate a complete service.
I have created 4 main template, that will gather a maximum of functionalities (Authentication, Online Calendar which enable to take appointment, Serverless Contact Form, Chat tool, Online Payment….). The main technologies used in order to create these templates were: Angular2+, Firebase, AWS Lambda, Node.JS, Serverless Framework.
I worked a lot on the modularization and the reuse of this code in order to implement easily those functionalities in new projects.
Elaboration of an efficient Google SEO strategy (Performance Optimization, use of Angular Universal, logic way to display key words, Backlinks strategy…).
Design and Build of a complete CI/CD pipeline with Jenkins, in order to automate the build and deployment into production work.
Manage a Facebook Ads campaign, into 4 countries (Malaysia, France, Indonesia, Morocco).

👉 Popularization work: I am convinced that people are interested more and more into the Web Development, for sure the market is widely increasing and I also want to surf on it by transmitting my passion for the latest technologies. I have decided to launch a popularization program.
I want first to develop a maximum of free content through a serie of articles (ex: tackling advantages brought by GraphQL, How to create and deploy microservices… ) or even a Youtube Channel (still thinking about it ).
I am also developing educational content for the French market that will be published soon on Udemy (a course on GraphQL and Appollo and also a course on How to convert an MVC app into a microservices app or a Serverless app).

👉 Development of an hybrid mobile app: I Accompanied by an associate, we are working on a mobile app for the Senegalese market which has one main goal: allow Senegalese housewife to take care of their children while earning money by taking advantage of their incredible cooking sills. It wil be a kind of uber that will connect people to eat homemade food with the nearest Senegalese mothers which is register on the App. Today the app is in beta version and tested by 22 mothers.
The app is an hybrid app developed with Ionic 4 in order to decrease as much as possible the time to market.
The Backend is a complete serverless backend developed with Lambda, Api Gateway, NodeJS, Google Maps Api….

AWS Migration, VINCI Technology
January 2019– June 2019
Paris

👉A monitoring service for AWS environments: In order to help the clients of my clients to migrate in t...