Ahmed FOURTI

Stack/Tools: AWS, Terraform, Cloudformation, Kubernetes, ArgoCD, Gitlab Gouvernance Cloud - AWS Landing Zone avec Control Tower: o Sécurité : ▪ Gestion IAM & SSO ▪ Mise en place d’un SOC sur AWS en utilisant différents services tels que CloudTrails, GuardDuty, SecurityHub, Kibana, ElasticSearch, ▪ Intégration de Dynatrace dans le SOC (projet en cours) ▪ Vulnerability assessment avec AWS Inspector ▪ Mise en place d’une politique de sécurité “Least Privilege Access” ▪ Mise en place de OneTimeAccess ▪ Audit et benchmarking des cluster Kubernetes ▪ Mise en place de chaine CI/CD avec SAST et DAST pour les scans de vulnerabilités (Trivy, OWASP ZAP, GitLeaks...etc) ▪ Automatisation des tâches liées à la gouvernance. o Compliance : ▪ CloudCustodian, ▪ AWS Config ▪ Gouvernance Data o Déploiement nouveaux comptes AWS avec AWS AFT (80~ comptes) o Suivi FinOPS Migration des applications vers AWS Mise en place ArgoCD Veille technologique, POC et MVP

Stack/Tools: NodeJs, React, MongoDB, AWS, GCP, ECS, Kubernetes, ELK, Grafana, Prometheus, Terraform, Terragrunt, Ansible, Packer, Docker, Jenkins... Acting as a DevOps Lead Tech and Cloud Architect, I am working closely with different people...developers, coaches, delivery managers, security team, network team, on premise's team etc.. At Kering I have the opportunity to help people to build their applications (15+ apps) which makes me working on multiple tasks at different level as : Cloud architecture design, automation and deployment (IAS, PAAS, Ansible, Kubernetes, Helm, Docker, Terraform...) Implementation from scratch of the CI/CD from development to production using Packer, Docker, Jenkins, Kubernetes, Terraform, AWS, Nodejs...etc Implementation from scratch of the logging and monitoring tools using ELK Stack and Grafana/Prometheus I also implemented the whole service catalogue inside our core team which consists of MongoDB, Kafka, ELK, Grafana, Sonar, Jenkins....and still going on ! I am also helping all kind of users (managers, developers, testers...etc) to start working with AWS by providing some micro training (about 1h) to understand some basics as VPC, Subnets, ALB, ECS...etc I am also making the bridge between the on premise's team and the developers to make things clear and understandable from both sides and to link cloud applications with legacy applications.

As Lead DevOps Cloud, I am in charge of designing and building infrastructures (IaaS, PaaS). I help the client to choose the right solution while taking into consideration the existing infrastructure, the need and of course costs. All infrastructures are built on AWS using tools like Terraform, Ansible, Packer Git, KOPS (for Kubernetes on AWS). Versioning infrastructure makes it reusable, scalable and easily shareable among different teams. We are on charge of monitoring using DataDog and Zabbix. While implementing infrastructure, I was also in charge of some other components such as Docker, Jenkins, Rundeck, Apache, Nginx, MongoDB, ElasticSearch, Logstash, Kibana, FluentD, Grafana, HaProxy, Varnish, MySQL...etc

Hired as a Linux System Engineer, I am also acting as a Technical Lead to implement the appropriate infrastructure to handle Wynd Solutions : API, MarketPlaces, BackOffice..etc. The environment is : 100% Linux with Symfony (PHP) Technical Skills : Systems & Virtualization: Debian, Ubuntu, Centos Proxmox, LibVirt, Docker (Swarm) Storage : NetApp, LVM, GlusterFs, Ceph Web : Apache, Nginx, PHP-FPM, PHP Load-Balancer : HAProxy, Keepalived, LVS (Linux Virtual Server), Pounds Database : Mysql (MariaDB, Percona, XtRaDB) Redis, MongoDB, ElasticSearch, Memecached... Cache : Varnish, X-Cache & OPcache (for PHP) Monitoring : Zabbix, Munnin, Grafana, Kibana Automation : Ansible, Puppet & Rundeck Versionning tool : Git & Git Lab Scripting : Shell, Python Other : FTPS, SFTP, Bacula.. Projects : Implementation of the whole stack at Wynd with Puppet: Haproxy as frontend to handle the SSL Multiple Web-Server Backend (Apache & Centos) Percona Cluster with 3 instances and backup plan Cluster of Redis used to handle sessions and MySQL cache Cluster of RabbitMQ as broker to handles messages Cluster of ElasticSearch used to index the MySQL database. ELK Stack to centralize the logs with different index: recette, preproduction and production environnement Zabbix to monitor the whole stack Implementation of Docker Swarm with Traefik as proxy to allow developers to easily deploy stacks : Web, Database, ES, Redis...etc

I joined the operating team of Traveldoo in Feb 2015 as Administrator System & Network Security. The operating team is in charge of multiple tasks: 50% Administration of the production plateform : System : Install & Configure systems (Linux & Windows), Monitoring, Backups (systems and databases)....etc Network : Install & Configure new equipements (switchs and firewalls) : Cisco, Juniper, Packet Filter, Pfsense Secuirty : Keep tracking vulnerabilities, keep up to date all systems and softwares to be compliant with PCI-DSS 30% Project Management Monitoring : ELK setup (ElasticSearch, Logstash & Kibana) Platfeform migration : Windows > Linux : Java, Tomcat, FTP Server... Transparent Proxy Setup SSH Dual Authentication + Bastion setup Keep all technical documents up to date for PCI-DSS audit (once a year) 20% daily user support Internal Support Technical Skills: Systems: Windows Servers, Kali, Debian, Oracle Linux…etc. Web server: Tomcat, Proxy, Nginx Firewall: Juniper, Packet Filter & PFsense Switch: Cisco Virtualization: VMware, Xenserver, Docker Security: OpenVAS, Kali, WebScan, PCI-DSS Audit Scripting: Bash, VBS & Batch Feed administration : FTPS, SFTP, FTP, CFT Databases: MySQL, Oracle, MongoDB, ElasticSearch Versioning tool: GIT, GITlab Monitoring / Inventory tool: Eyes of Network, Stack ELK (Logstash, ElasticSearch, Kiabana), GLPI Some developer knowledge: JAVA (Spring STS Framework) and PHP (Symfony2)

Daily Support for users : HQ & Europe Servers Administration (Physicals and Virtuals) : DNS, DHCP, Active Directory, Printers Thin Clients, Laptops and Desktops Administration Backups Administration : Backup Exec, Puredisk, BackupPC Network Administration : Vlans, Configuration Backup, Cisco Configuration WIFI Administration : AeroHive Manager Systems and Network Monitoring : Nagios, GLPI Scripting : VBS & Batch

Daily Support for users Server Administration Switchs Administration level 1 Inventory Management Web Site Administration Suppliers Management : contracts negociation Printers Management