Aurélien Joga

Introduction to the cloud computing concepts (IaaS/PaaS/SaaS/Serverless) & Terraform. Theoretical & practical teachings geared toward AWS services.

4 distinct roles: • Platform Engineer / Cloud Architect to deploy the Cycloid IdP Cycloid is an Internal Developer Platform (IdP) ; the goal was to deploy this solution to enable self-service consumption of PaaS infrastructure. We were a team of ~8 persons. ◦ Deployment and operations of Cycloid on AWS EKS ◦ Coordination with vendor to, notably, custom implement OIDC federation to integrate with EULogin & solve many bugs I qualified ◦ Development of click-to-deploy infrastructures (“Cycloid stacks”) • DevOps / Cloud Architect on a greenfield information system ; team of 5 business analysts ; 6 developers ; 3 infrastructure. ◦ Deployment and operations on OVH of a “landing zone” and a managed Kubernetes with Terraform, Terragrunt, Helm, Gitlab, Keycloak ◦ CI/CD developments for our Golang/Java developers ◦ Coordination with OVH on product issues & improvement (especially Terraform provider) ◦ Redaction of acceptance plans • DevOps / Systems Engineer to serve IT incident response teams’ capabilities (SOC/CSIRC) ◦ Palo Alto XSOAR monitoring, operations (RHEL) & content development in Python ◦ Development & deployment of an API in Python+AWS Lambda+API Gateway ◦ Various network-related troubleshooting ((un)reliability, performance) ◦ Observability: Dynatrace configuration, Splunk querying/dashboarding ◦ Infrastructure as code (Terraform, Ansible) using Gitlab/Github pipelines • Cloud Architect in DIGIT.D1 ◦ Internal support of move-to-AWS on multiple projects ◦ Assignments go from guiding colleagues to designing, selling to internal stakeholders and implementing complete systems in AWS using Terraform+Gitlab ◦ Infrastructure design, code and costs reviews of subcontractors ◦ Single Sign-On integration / debugging (OIDC / SAMLv2)

• Single-handedly carried the migration of Jira & Confluence to the editor’s SaaS offering ◦ Scheduling, test, troubleshooting with the editor, SSO integration with Office365 and definitive migration. • Office365 administration & hardening (2FA enabling in coordination with ~70 users) • SRE stakeholder for a project around electric vehicle charging ◦ Research & implementation of secure OCPP communication between chargers & central system (Level 2/3, I.e TLS with basic auth or mutual authentication with certificates) ◦ Microsoft Azure cloud developer; use of deployment pipelines with Azure DevOps • Generic Debian Linux sysadmin, updates, mariadb replication troubleshoot, proxmox, OpenVPN...

• Landing zone expansion (transit gateway, shared VPC, ...) • PoC of a factory to deploy AWS Service Catalog applications ◦ Usage of aws-service-catalog-factory and aws-service-catalog-puppet solutions ◦ Products building (Cloudformation, Lambda, IAM policies and roles) ◦ Debug of the toolchain : CodePipeline/CodeBuild/Python • Design contributions to an industrial IoT project • PaaS (Elastic Beanstalk) management, troubleshooting and improvements • Cloud9 configuration to provide actionable secure dev and deployment environments • AWS training and mentorship for internal staff • Incident/compliance troubleshooting • Writing of python scripts to audit compliance

I was within AWS evangelization teams that we could now compare with CCoE. I provided AWS training and mentorship for Veolia's subsidiaries : two in France, one in Italy, two in Brazil. It consisted mostly in co-architecting and deploying their new and/or legacy workloads to AWS of all sizes. • Re-platforming application to PaaS (Elastic Beanstalk), deployment pipeline with AWS CodeCommit / CodePipeline • AWS training and mentorship for subsidiaries : two in France, one in Italy, two in Brazil • Evangelization of Group norms (IT & security policy) & feeding back on-site remarks to the authors • Handling of the social & human aspects of change • Co-architecting AWS platforms (while training) subsidiaries’ IT staff (both for migrating legacy workloads & new applications) • Costing of architectures & migration projects (from 1K€/yr to 1.5M€/year) • Finops follow-up & optimization (optimal resources allocation, tagging) • Connecting people to each other within the organization • Incident/compliance troubleshooting

• Mirantis OpenStack deployment & troubleshooting • Writing of Ansible modules • Implementation of identity federation (SSO) between Keystone & corporate directory via OpenID connect • Lead on metrology / performances troubleshooting on the OpenStack infrastructure • Ceph sizing & tuning • Debian packaging of a network driver with DKMS • Documentation writing

I was at the hosting / managed services subsidiary of Ippon. • Level one to three support for high value customers to whom we manage infrastructures (Linux, nginx, vertx, PostgreSQL, MongoDB, Neo4j) • On call incidents handling • Social and technical handling of demanding / difficult customers • Performances troubleshooting (Storage I/Os, Ceph) • Setup of a deeper metrology collection and exploitation system (Riemann / Graphite / Grafana) • Setup of IPSEC tunnels (StrongSwan, pfsense) • Setup of MongoDB backups with LVM snapshots

The company was a 30-employees SaaS provider spanning four countries. The stack was java+PostgreSQL. • I was responsible for systems & networks • Installed & maintained ~50 physical & ~140 virtual servers • Writing of puppet modules. Made successful push requests upstream in puppet-collectd, puppetlabs-postgresql and others • Testing & QA pipeline for Puppet code with Jenkins (lintian, yaml syntax check) • monitoring & metrology configuration (nagios, collectd, grafana) • Fully automated backups with backuppc ; Postgresql log shipping to enable point-in-time recovery quick RTO. • Responses to security & compliance questionnaires during RFP • Hardware & network troubleshooting • Atlassian Jira & Confluence administrator

• Helped to set up automatic Debian installations for intern needs (PXE / Debian- installer) for our engineering team • PCI-DSS related R&D for Hipay • Developed a script to migrate the fotolog.com pictures from a SAN to Amazon S3 using EC2 instances (near to 3 billions files) • Firmware updates (BIOS, RAID controller, HDD firmware, idrac firmware) • Hardware-related work (racking servers & switches, cabling, configuration, diagnostics)

- Création et mise en ligne de contenu sur l'intranet - HTML / CSS, Macros Excel, conversion vidéo - Rédaction documentation & formation utilisateurs (rédaction, mise en forme, ...)

- Travail en environnement Datacenter (Globalswitch clichy, Equinix PA2, Dtag paris, Iliad datacenter) - Mise en place d'un cacti+weathermap pour le backbone et les ports clients - Installation, dépannage & interventions sur équipements en salles