02/2024 – 06/2026THALES
Kubernetes architect — Digital Factory · Team: 3 people
Contribution: Industrialised on-demand AKS cluster provisioning and cut the cloud bill through a tooled FinOps practice.
- Designed and built the client permission model with a Go operator (Kubebuilder), OPA Gatekeeper policies and Helm charts, across three profiles: read, develop, operate.
- Built a Python API driven by Argo Workflows covering the full cluster lifecycle: creation, deletion, node pool add and remove, address range reservation, Azure application management.
- Reworked multi-tenant isolation of the AKS clusters with Capsule.
- Rolled out the FinOps stack — Karpenter, KEDA, cast.ai — so capacity tracks real load.
- Wrote the Bats test suites validating each cluster's PaaS components before production.
- Handed over Kubernetes, Python and Go skills to the team's Devoteam engineer.
Azure, AKS, Terraform, Argo Workflows, GitLab CI, FluxCD, Kubebuilder, OPA Gatekeeper, Capsule, Prometheus, Datadog, Fluent Bit, KEDA, Karpenter, cast.ai
05/2023 – 11/2024FRENCH MINISTRY OF JUSTICE
Solution & IaC architect — AXONE programme · Team: 7 people
Contribution: Automated deployment of the archival platform across five environments in two data centres, and cleared entrenched technical debt.
- Audited the automation and observability practices of the existing infrastructure as code.
- Designed and implemented the disaster recovery plan.
- Built the Terraform modules provisioning the VITAM and XAM infrastructure across five environments.
- Wrote the Ansible roles and playbooks configuring both architectures, validated by Molecule scenarios on the PostgreSQL, MongoDB, Elasticsearch, Consul, Nexus and Jenkins clusters.
- Installed full monitoring — Prometheus, Alertmanager, Grafana, Consul — with Node, Blackbox, JMX, PostgreSQL and MongoDB exporters.
- Wrote custom Prometheus exporters tracking database backups and OpenStack containers.
- Built the Grafana dashboards and alert rules, with their operating documentation.
OpenStack (NUBO government cloud), Terraform, Ansible, Molecule, Nexus, Jenkins, Consul, Prometheus, Alertmanager, Grafana, MongoDB, Elasticsearch, PostgreSQL, ActiveMQ
11/2019 – 01/2024REPUBLIC OF GABON — ANINF
Architect — Gabon Digital 2025 plan (freelance) · Team: 11 people
Contribution: Wrote the architecture report for the e-Government programme, the backbone of the national digital strategy.
- Defined the target architecture of the e-Government programme for the national agency for digital infrastructure and frequencies.
- Supported ANINF in steering the Gabon Digital 2025 national plan.
- Brought current cloud, architecture and infrastructure practice to an administration in full transformation.
e-Government architecture, cloud computing, shared national infrastructure
03/2023 – 05/2023MAIF
Kubernetes expert — OpenShift clusters · Team: 8 people
Contribution: Automated control-plane certificate rotation, until then a manual operation.
- Hardened the Ansible roles deploying OpenShift 4.10 clusters on VMware and bare metal.
- Built an Ansible-based Kubernetes operator with the Operator Framework.
- Set up automatic rotation of kube-apiserver and kube-proxy certificates through cert-manager, backed by the company EJBCA PKI.
- Improved the patching procedures applied to Kubernetes resources by ArgoCD.
OpenShift 4.10, Red Hat, Ansible, Operator Framework, ArgoCD, cert-manager, EJBCA, Kyverno, Sealed Secrets, Velero, Reloader, Prometheus
01/2023 – 03/2023GL EVENTS
Kubernetes & DevOps expert · Team: 1 person
Contribution: Brought deployment of every application down to a single Helm chart, instead of one configuration per application.
- Designed a generic Helm chart covering every resource: Service, Deployment, StatefulSet, Job, CronJob, Ingress, Secret, PVC, ConfigMap, RBAC, PodDisruptionBudget, HorizontalPodAutoscaler, StorageClass.
- Industrialised Symfony and Nginx image builds through Source-to-Image, with an entrypoint driving configuration from environment variables, Secrets and ConfigMaps.
- Tuned the PHP and Nginx configuration for both security and performance.
AKS, Kubernetes, Helm, ArgoCD, GitLab CI, Source-to-Image, Alpine, CentOS, Debian
07/2022 – 11/2022TINEA — PARIS POLICE PREFECTURE
Technical architect — PVPP programme · Team: 1 person
Contribution: Produced 40% of the final study expected by the Ministry of the Interior, single-handedly.
- Defined the architecture of the internet gateway and the shared information system, meeting ANSSI requirements.
- Wrote the high-level and detailed design documents for secure remote administration (Wallix), network detection and protection (SELKS 7) and the proxy (Squid).
- Deployed the chosen solutions, from provisioning through configuration.
- Costed and designed Centreon monitoring, rack maps included.
Nutanix, Red Hat, Centreon, Splunk, Nexus, Packer, Terraform, Ansible, GitLab CI, Wallix, SELKS 7, Squid
03/2022 – 07/2022PARIS POLICE PREFECTURE
Kubernetes, Cloud & IaC expert — architecture unit · Team: 1 person
Contribution: Ran the study for a SecNumCloud-qualifiable cloud offering, with two services: on-demand virtual machines and a shared Kubernetes cluster.
- Wrote the technical design document on OVH VMware Cloud: high level — logical architecture, technologies, sizing — and detailed — network, bastion, VPN, peering, DNS, internet gateway, NTP, log collection, automation, monitoring, backup.
- Defined the continuous integration model on the Docker engine, with image configuration through Ansible and Vault.
- Defined the continuous delivery model around Kubernetes, Helm, ArgoCD and GitLab CI.
OVH VMware Cloud, Nutanix Karbon, vSphere, Kubernetes, Docker, GitLab CI, Harbor, Nexus, Vault, Ansible
05/2020 – 03/2022PARIS POLICE PREFECTURE
Kubernetes & IaC expert — architecture unit · Team: 7 people
Contribution: Opened an internal on-demand Kubernetes cluster service on Karbon, under strict security constraints.
- Designed, with the systems architect, the production chain built on the Karbon hyperconverged platform for Kubernetes cluster deployment.
- Defined the continuous integration and delivery models around Docker, Harbor and Nexus.
- Built an Ansible role library: RKE 1 and 2 cluster creation, etcd, Calico networking, CephFS and GlusterFS storage, firewall rules, etcd snapshot backup and restore, certificate rotation.
- Assembled a tooling role library — PKI, firewall, journald, rsyslog, Splunk, NTP, hardening — and a Docker image library.
- Set up continuous integration for the CCOS and PFAU projects.
- Passed on DevOps and DevSecOps containerisation practice to the teams.
Nutanix Karbon, vSphere, Kubernetes RKE 1 & 2, Docker, Swarm, Calico, CephFS, GlusterFS, GitLab CI, Harbor, Nexus, Vault, Ansible, Packer
09/2019 – 04/2020RENAULT
AWS & GKE cloud, IaC, Kubernetes expert · Team: 34 people
Contribution: Coached the manufacturing systems division's technical leads towards a unified CI/CD pipeline on Kubernetes.
- Coached the technical leads of the Angular and Spring Boot projects in setting up continuous integration on GKE.
- Provisioned AWS infrastructure with Terraform and Packer.
- Took part in the Anthos proof-of-concept workshops aimed at the factories.
- Extended the in-house Kubernetes operators: per-project service account management, runner configuration, multi-tenant isolation of the GKE cluster.
AWS, GCP, Azure, GKE, Anthos, Kubernetes, Docker, Terraform, Packer, Ansible, GitLab CI, Nexus, Vault, ArgoCD
02/2019 – 08/2019FRANÇAISE DES JEUX
Technical architect — Kubernetes expertise
Contribution: Took the infrastructure past 100 million API calls a day. The additional betting it opened up represents several hundred thousand euros of daily revenue.
- Audited the existing architecture and identified the levers for improving API performance, under a hard resilience constraint.
- Wrote the architecture document for the new content manager driving every Parions Sport en Ligne web and mobile application, studied for containerised production on Swarm and Kubernetes.
- Ran the study on hardening bet placement security across web and mobile channels.
- Reviewed the evolution of the BetSys live-odds distribution system to terminals and applications, around Kafka, CQRS, Event Store and MongoDB.
OpenStack, Nginx, Hazelcast, Redis, Kafka, CQRS, Event Store, MongoDB, Node.js, Swarm, Kubernetes
12/2018 – 01/2019PÔLE EMPLOI
Solution architect · Team: 1 person
Contribution: Shipped a service discovery component for the Swarm orchestrator to production, released as open source.
- Wrote Sentinel, the Swarm container and service registrator, in Python, using object-oriented design and domain-driven design.
- Built the service discovery layer enabling load balancing across Swarm services.
- Deployed the solution to production.
Python, Docker Swarm, Sentinel (open source), DDD
02/2017 – 11/2018TAGERIM
Technical architect, DevOps & Symfony lead · Team: 12 people
Contribution: Designed the containerised architecture and the API layer of the group's new property management software.
- Wrote the technical design document for the containerised solution on a Swarm cluster.
- Built the functional and non-functional test qualification pipeline on GitLab CI.
- Designed the Symfony software architecture using domain-driven design, API first.
- Built the multi-cloud image management, PDF generation and JWT authentication APIs.
- Built an OpenResty and Lua gateway handling OAuth2 authentication, role-based access control, tracing and Prometheus metrics exposure.
Azure, Swarm, REST API, DDD, PHP 7, Symfony 3, Doctrine, CouchDB, MongoDB, PostgreSQL, OpenResty, Lua, Behat, PHPUnit
03/2016 – 11/2017AAREON
Technical architect, DevOps & Symfony lead · Team: 15 people
Contribution: Designed the microservices architecture of the Smart World platform, property management software used by more than 300 clients across five European countries.
- Defined the software architecture using domain-driven design, with the CQRS, event-driven and circuit breaker patterns.
- Supported the infrastructure team in building the Swarm and Ceph clusters across every environment.
- Industrialised the full pipeline: application images, unit, functional and load tests, code coverage, metrics dashboards.
- Built the OpenResty and Lua gateway handling OAuth2 authentication and role-based access control.
- Passed on microservices, Docker, Symfony and Git Flow practice to the fifteen-strong team.
VMware, Swarm, RabbitMQ, REST API, DDD, PHP 7, Symfony 3, Doctrine, CouchDB, MongoDB, PostgreSQL, ReactJS, OpenResty, Lua
03/2015 – 03/2016FRENCH MINISTRY OF DEFENCE
Technical architect — BNE and CASID programmes · Team: 10 people
Contribution: Wrote the ministry's PHP directive and trained twenty people to expert level.
- Produced the technical design document for the BNE programme and the ministerial PHP directive.
- Ran a five-day expert-level Symfony training course for twenty people.
- Built the test qualification pipeline and automated its execution in containers.
- Advised the vendor CAST on application architecture checks and the quality metrics suited to Symfony.
PHP, Symfony 2.7, Docker, Jenkins, Phing, Make, CAST Architecture Checker
09/2014 – 03/2015RAPP FRANCE
Architect — Air France KLM, Bel, Canal+
Contribution: Sustained an Air France KLM campaign at 5,000 concurrent connections for ten days, 500,000 visitors and 2 million page views a day across 100 domains.
- Defined the technical architecture of the campaign platform.
- Built the continuous integration pipeline covering integration testing and deployment.
- Ran functional, unit and load testing, plus the code audit.
Symfony 2, PHP 5, MySQL, Varnish, Jenkins, Phing, Capifony, Gatling, Apache Solr, Behat, PHPUnit
11/2011 – 09/2014FIXED-PRICE PROJECTS
Software architect — Symfony expert
Contribution: Created and maintained the Sfynx content management framework, the backbone of some fifteen delivered platforms.
- Designed, architected and developed the Sfynx CMF.
- Acted as technical lead: architecture, code, quality and performance audits, UML modelling, costing and pre-sales.
- Delivered 1001mariages.com, lamelee.com, shopping.mappy.com, france5.fr/mlm, sicap.com, digital-store.fr and guide-accorhotels.com among others.
Symfony 2, Doctrine, Sfynx CMF, MySQL, Jenkins, Phing, Capifony, Git
09/2009 – 05/2011TRINGA MUSIQUES & DÉVELOPPEMENT
Coordinator, architect and lead developer · Team: Paris–Dakar team
Contribution: Delivered the platforms of a European project that gave rise to AfricafilmsTV and created more than ten jobs in Dakar.
- Architected the multimedia platforms selling African music and film online, back office and front office.
- Recruited, trained and led the Dakar development team.
- Coordinated the Paris delivery side and the Senegalese business side.
- Delivered africafilms.tv, africafetetalents.org and mobicine.org.
PHP 5.3, Zend Framework 1, ExtJS, jQuery, ActionScript 3, SVN, Redmine
05/2002 – 07/2011PI-GROUPE
Founder and chairman — business analyst engineer
Contribution: Founded and ran the company for nine years, driving methodological standardisation and research work.
- Defined the documentation and coding standards, the development approach and the document lifecycle.
- Designed a project analysis process built on UML, with its modelling stereotypes.
- Built two in-house frameworks for producing object-oriented software on the MVC model, one on PEAR, the other on Zend.
- Ran technology watch, comparative framework studies, and corrective and evolutive maintenance.
Zend, PEAR, MVC, OOP, PDO, UML