Expérience professionnelle
DevSecOps engineer 02/2023 – Present
Société Générale Bank - Paris - France
Mission: Management of DevOps Infrastructure and Automation of Tasks for a Java Application (Spring Boot)
Dedicated to Credit Risk Calculation.
DevOps and automation: Github, jenkins, sonarqube, Nexus, Kubernetes, ELK stack
- Automate tasks through shell and Python scripts: Installation of Softwares like metricbeat on Linux VMs,
Management of Github organization (manage users access, manage repositories (list, add, delete))
- Maintain Github, Jenkins, maven, Sonar, nexus and Kubernetes CI/CD pipelines for a java spring boot
application.
- Define and create Jenkins jobs using Configuration as Code (CasC)
- Define and build CI/CD pipelines in Jenkinsfile using Declarative Pipeline syntax, orchestrating the build,
test, and deployment stages.
- Deploy applications on Kubernetes clusters using YAML manifests and Helm charts (deployment, service,
ingress, ConfigMaps and secrets)
- Implement Kubernetes pods monitoring using ELK Stack (metricbeat and filebeat sidecars)
24 Boulevard de la Mission Marchand, 92400
SENIOR DEVOPS,
APPLICATION SUPPORT AND PRODUCTION ENGINEER
Iac: Terraform and Ansible
- Define infrastructure requirements and specifications in Terraform configuration files, including compute
instances, networks, storage, and security groups.
- Utilize Terraform to provision and manage infrastructure resources on Société Générale's private cloud,
ensuring adherence to security and compliance policies.
- Develop Ansible playbooks for configuring and managing deployed infrastructure components, including
operating system configurations and software installations.
- Implement automation pipelines with Jenkins for continuous infrastructure deployment and configuration
management.
Security: Vault, Illumio, and SSL certificates
- Configure Vault policies and roles to grant appropriate access controls to different teams and applications,
ensuring least privilege access to sensitive data.
- Integrate applications and infrastructure components with HashiCorp Vault for secure secrets management,
including API keys, passwords, and encryption keys.
- Work with Illumio team to Integrate the tool for network segmentation and micro-segmentation of
applications and workloads.
- Define and enforce security policies in Illumio to restrict network communication between application
components based on predefined rules and segmentation policies.
- Manage SSL/TLS certificates lifecycle using certificate management tools.
Troubleshooting
- Investigate Kubernetes deployment issues, including pod scheduling failures, container crashes, or resource
constraints impacting application deployment.
- Troubleshoot build failures, test failures, or artifact generation issues, ensuring dependencies are resolved
and build environments are properly configured.
Documentation and Knowledge Sharing
- Document infrastructure configurations, deployment procedures, and automation workflows.
- Organize and lead training sessions.
DevOps & Application Support Engineer 11/2020 – 02/2023
Natixis, BPCE Bank Group - Paris – France
Mission: Technical Support in a DevOps Context for Business applications around the Sophis software (Equity
and Commodity management) and a multi-grid computing environment (Front-to-Back Activity,
booking, P&L, and risk calculations).
DevOps and automation: Bitbucket, jenkins, artifactory, Xl deploy, Xl release, Zabbix, control-M
- Administrate and L2 support on DevOps tools: Xl Deploy, Xl Release, Jenkins, Artifactory.
- Integrate and configure of applications within the DevOps tools (internal cloud, Jenkins, Xl Deploy, Xl
Release, JFrog Artifactory, Git, Control-M, Zabbix, Xymon).
- Build of CI/CD pipelines for python Flask and Java applications deployment.
- Manage of technical migrations, obsolescence, or vulnerabilities (Hardware, OS, Middleware, or Database
upgrades) of applications to internal cloud.
- Implement of applications and infrastructure monitoring on Zabbix and Xymon.
- Manage the renewal of SSL certificates and their installations.
- Manage of API Supervision and Security via API GATEWAY (AXWAY).
- Use of APIs which are available on Natixis marketplace for software installation via Postman.
- Automate Tasks through Python scripts (for XL Deploy, Xl Release templates, Zabbix, Control-m)
- Create and configure of Control-M jobs for batch automation.
Data
- Monitor Hadoop cluster health and performance using Ambari.
- Manage of security and access ploicies for Hadoop clusters using Apache Ranger.
- Manage FS on HDFS (copying from the EdgeNode, deletion, editing, etc.).
- Request the creation of Kafka topics to the BigData team and manage their permissions.
- follow application running logs using YARN CLI.
- Executing queries on Hive (via beeline).
- Troubleshoot Sqoop jobs (importing data from Oracle to Hadoop)
Technical support
- Troubleshoot and fix incidents related to CI/CD pipelines (releases on Xl Release, build jobs on Jenkins,
package publication on Artifactory, and deployments on XL Deploy).
- Supervise and maintain of a highly complex environment:
o Over 10,000 tasks in Control-M.
o Several thousand compute cores (Windows + Linux).
- Manage distributed computation farms.
Documentation and Knowledge Sharing
- Maintain comprehensive documentation on the software and technical architecture, operating
procedures, and Disaster Recovery Plan (DRP) in Confluence.
- Develop a training program to onboard new team members and ensure they are quickly up to speed on the
team's processes and technologies.
Natixis - Ingénieur Support Applicatif – DevOps
Nov 2020 - Aujourd’hui
Environnement technique :
- Xl Deploy, Xl Release, Artifactory,Jenkins, GIT et
Bitbucket, connaissance sur Openshift et docker
- Python, Api, Postman
- Zabbix, Xymon, Connaissances en Elasticsearch,
Kibana, Grafana,
- SSL (Venafi), Fierwall, Illumio,
- HADOOP (Ambari, Hue, Ranger, Hadoop, Kafka,
- Hive, Yarn)
- Sophis, Tibco Datasynapse, Calculation Grid,
Control-M, UNIX, Windows, Linux,
Oracle, Mysql, Citrix, CFT
- JIRA, ServiceNow, confluence
Consultant Devops: Administrateur Xl Deploy
Société Générale - Avril 2019 – Sept 2020
Environnement technique :
Jenkin, Xl Deploy, Artifactory, GIT, Jenkin, Zabbix,
JIRA, ServiceNow, Python, Postman
Ingénieur étude et développement : Atos & Lufthansa : mars 2015 - mars 2019
Environnement technique :
Langage C, SHELL, Linux, HPUX, HP quality Center
(Gestion des tickets et écriture et exécution des tests)
Mission : Support technique dans un contexte DevOps vis-à-vis des métiers pour les services applicatifs
autour du progiciel Sophis (Equity et commodity) et d’un environnement de plusieurs grilles de
calculs (Activité Front-to-Back, booking, Calculs p&L et risk)
DevSecOps :
- Administration et support N2 sur les outils DevOps : Xl Deploy, Xl Release, Jenkins, Artifcatory
- Intégration et configuration des applications du périmètre dans les outils DevOps (cloud interne, Jenkins, Xl deploy, Xl release, JFrog Artifactory, Git, Control-M, Zabbix, Xymon)
- Configuration et création des pipelines CI/CD de mise en production des applications
- Gestion les migrations techniques, obsolescence ou vulnérabilités (Upgrade hardware, OS, Middleware, ou Base de données) des applications vers du cloud interne
- Mise en place du monitoring applicatif et infrastructure sur Zabbix et Xymon
- Renouvèlement des certificats SSL sur Venafi et gestion de leurs installations
- Demande d’ouverture de ports sur le firewall et Illumio
- Gestion de la Supervision et de la sécurisation des APIs Via des API GATEWAY (AXWAY)
- Utilisation des APIs disponibles sur un marketplace pour installer des softwares via Postman.
- Automatisation des taches via des scripts Python (Pour XL deploy, Template Xl Relase, Zabbix, Control-m)
- Création de jobs Control-M d’automatisation des batchs
- Participation active aux projets métier en collaboration en mode Agile (Feature Team) avec les développeurs et les maitrise d'ouvrage
Data :
- Monitoring du cluster Hadoop sur Ambari
- Gestion de la sécurité pour les clusters Hadoop sur Apache Ranger
- Gestion des fichiers sur Hdfs (copie depuis le EdgeNode, suppression, Edit …ect)
- Demande de création de topics Kafka à l’équipe BigData et gestion de leurs droits
- Gestion des logs des applications en exécution via le CLI YARN
- Exécution des requêtes sur Hive (via beeline)
- Troubleshooting des jobs Sqoop (Import des data de Oracle à Hadoop)
Support technique :
- Suivi et maintien en conditions opérationnelles des applications du périmètre
- Résolution des incidents liés aux pipelines CI/CD (les releases sur Xl release, les jobs de build sur Jenkins, la publication des packages sur Artifactory et les déploiements sur XL deploy)
- Supervision et maintien en autonomie un environnement très riche :
⦁ Plus de 10 000 tâches dans Control-M
⦁ Plusieurs milliers de cœurs de calcul (windows + linux)
- Analyses et diagnostics avancés des incidents techniques
- Gestion des calculs et des fermes de calculs hétérogènes
Fonctionnels
- Rédaction des consignes
- Documentation des composants et le fonctionnement des applications sur Confluence : Architecture logicielle, architecture technique, procédures d’exploitation, Plan de Secours Informatique
- Mise en place d’un plan de formation pour les nouveaux arrivants dans l’équipe.
Mission : Administration de l’infrastructure de production Xl deploy
Administration de l'infrastructure Xl Deploy
- Maintien en conditions opérationnelles de l'infrastructure
- Résolution des incidents liés à xl deploy et aux pipelines CI/CD
- Réalisation des changement...