Baakey Dow

Staff Platform Engineer | AWS · DevSecOps · GenAI

Salary / Daily rate

Paris, France

Mobility: Nantes, Lyon, ...

Freelance

Can come onsite

Skills

AWSDevOps EngineerTerraformSoftware EngineerData EngineeringTest Driven DevelopmentLLMs / Large language modelsHexagonal ArchitectureBackend DevelopmentSoftware CraftsmanshipMicroservicesNestRedisETLAIMongoDBDevOpsRustGolangPythonDomain Driven DesignDynamoDBKafkaAWS LambdaDatadogClean ArchitectureAmazon RedshiftBackend DeveloperTech LeadEvent Driven ArchitectureSpring BootGoogle Cloud PlatformData EngineerSnowflakeDockerRESTful APIsELK StackGitHubAzure ADPostgreSQLJenkinsSolutions ArchitectTypescriptAmazon EC2GrafanaCloud ArchitectFullstack DeveloperAnsibleEntra IDRabbitMQ

Languages

French (Native)English (Fluent)

About me

Intro

Staff Platform Engineer, 10+ years, Production GenAI infrastructure => - MCP/A2A agent platforms - enterprise data gateways - security - observability - IaC (Terraform, CDKTF) - AWS, Azure, GCP Currently => Criteo's AIX Platform (Domain Gateways, Sovereign AI) 4 MCP servers in PROD, 76+ tools, 451+ users, 0 errors on 5 400+ invocations, 9 ADR authored. Previously => 4 regulated GenAI platforms at Sanofi (300+ PR, 91 % merge rate). OAuth 2.1, OBO, OpenTelemetry, Bedrock. LangChain, RAG, Python.

Links

Work experience

Senior Software Engineer / Staff Platform Engineer / GenAI Platform

CriteoFreelance

Feb 2026 - Present

9 months

Paris, France

Identified an enterprise data gap for AI agents, designed the AIX Platform and drove its adoption as the Domain Gateways layer of Criteo's Sovereign AI initiative (Domains-Driven AI architecture). Sole technical lead on a 3-person core team. Authored 9 ADRs (architecture, security, vendor evaluations). MCP Platform • 4 servers, 76+ tools, 451 active users, 5,400+ invocations at 0% error rate during the measured window • Consumed by SAI/Agentfabric, Claude Code, Dust and Glean (~1,100 downstream users) • Shipped in 3 weeks (24 tools at launch, 76+ today), infra cost ~$3-5K/year (HTTP/KEDA autoscaling) Microsoft MCP server (47 tools) • Full Excel automation (workbook creation, formulas, charts, tables) • PowerPoint generation with hexagonal architecture (8 Criteo brand templates, OOXML manipulation) • SharePoint search and OneDrive file lifecycle (create, rename, delete, PDF conversion) Dust MCP server => meta-agent orchestration • Enables AI agents to programmatically create, configure and monitor other agents • Dynamic tool attachment, feedback-driven optimization, recursive delegation across Dust, Glean and SAI/Agentfabric @criteo/mcp-core • Shared library delivering ~80% code reuse => new server = 13-line bootstrap + 40-60 lines per tool • JWT validation, OBO client, OAuth proxy (RFC 8693), OpenTelemetry and JSON Schema tool contracts Identity and security • End-to-end identity propagation across 3 agent modes: autonomous (client credentials), on-behalf-of-user (OBO for Microsoft Graph, per-user OAuth for Zoom) and embedded (app identity) • Zoom build-vs-buy evaluation: deprecated custom server in favor of Zoom's 3 official MCP servers (18 tools), eliminating an entire deployment • GDPR/AI Act/French Labour Code (CSE consultation, art. L2312-38) analysis for Zoom transcription auto-logging • TypeScript vs MuleSoft technical evaluation for ARB (~380 lines TS vs 975 lines XML); integrated MuleSoft Flex Gateway as API governance layer Infrastructure and observability • Deployed to Azure Container Apps (DEV + PROD) via Terraform, 35 Azure resources across 2 subscriptions • 24-panel Azure Monitor workbook (per-user invocations, P50/P95/P99 latency, OBO token exchange, error forensics) auto-provisioned via Terraform • 10+ semantic-versioned releases (v0.1.0 → v0.10.2) in 4 months, cross-team coordination (Platform, EUS, Security, Architecture) Stack: TypeScript, Hono, MCP Protocol, Azure (Container Apps, Entra ID, Key Vault, ACR), Terraform, MuleSoft Flex Gateway, OpenTelemetry, Docker, Turborepo

Senior Software Engineer / Staff Platform Engineer / GenAI Platform

SanofiFreelance

Apr 2024 - Feb 2026

1 year 11 months

Paris, France

Top contributeur de l'org GenAI Platform (300+ PR sur 15 repositories, 91 % de merge rate). 4 plateformes GenAI enterprise + 1 système de workflows IA développeur livrés en environnement pharma régulé. Enterprise Multi-Agent AI Gateway • Orchestration multi-agents en factory pattern (Bedrock, A2A Protocol avec parsing des agent cards et caching OAuth, REST, Flowise), SSE streaming 15 min (7,5x le timeout standard) • WAF v2 (SQLi, XSS, rate limiting), authentification 6 couches (Azure AD → JWT → OBO → API key → RBAC → ownership), pipeline PII bidirectionnel • Audit trails immuables DynamoDB (TTL 90 j, 3 GSI pour investigation forensique), publication SIEM via EventBridge • Observabilité 99,9 % sur 127+ Lambda (OpenTelemetry + Weave/W&B + Datadog) Pipeline de données non structurées (Python) • Step Functions 5 étapes déterministes (Partition → Extract → Chunk → Metadata → Vectorize), inférence multi-modèle Bedrock (Claude, Nova, Llama, Mistral, DeepSeek) • Pinecone + KMS à contexte cryptographique pour l'isolation tenant, évaluation LLM offline (Weave/W&B) • Remédiation proactive de 4 CVE critiques (pdfminer, torch, langchain-core, marshmallow) Context Manager Platform (10 000+ docs/mois) • Principal contributeur : dashboard CMS React 19 (TanStack Query, drag-drop, timeline temps réel, design system Sanofi) • Chiffrement KMS avec séparation des responsabilités (CMS chiffre, pipeline déchiffre via rôles IAM distincts), RBAC 3 niveaux Azure EntraID, validation Zod exhaustive • BYODS (Bring Your Own Data Source) avec ingestion event-driven S3, onboarding client −92 % (2 semaines → 4 heures) • Migration CDKTF en 6+ stacks modulaires (Base, DB, IAM, UDP, API, Event), déploiement indépendant avec state remote DynamoDB GenAIR + DocFactory + Platform Engineering • Pipeline event-driven (SNS/SQS/Step Functions, DLQ retry, zéro perte), transformation monorepo Turborepo (443 fichiers, 27K+ lignes) • Upgrade Redis (correctif CVE CVSS 10.0, +72 % de throughput, −71 % en P99), provisioning SageMaker Studio pour 50+ développeurs • 500+ tests automatisés (85 % de couverture), CI/CD smart (détection path-based, semantic versioning, promotion tag-based GitOps) Workflows IA développeur + Plugin Marketplace • 7 agents spécialisés avec quality gate obligatoire (frontend, backend-auditor, API-auditor, devops, quality-tester, UI-designer, Atlassian) • 6 serveurs MCP intégrés (GitHub, Atlassian, Confluence, Terraform, Figma, Playwright) avec auth token-based • Agents sécurité : détection de secrets, SQLi, failles de validation d'input ; agent IaC (Checkov, KMS, IAM least-privilege) • claude-box (CLI conteneurisée AWS Bedrock) + marketplace de plugins avec context engineering (~30k tokens économisés/interaction) Stack: TypeScript, Python, React 19, NestJS, Hono, GraphQL, FastAPI, AWS (Lambda, Step Functions, SageMaker, Bedrock, DynamoDB, SNS, SQS, S3, KMS, WAF, EventBridge), Terraform/CDKTF, Pinecone, OpenTelemetry, Docker

Backend Developer / DevOps

VeepeeFreelance

May 2022 - Nov 2022

7 months

Paris, France

• Maintained mission-critical PIM platform serving 500+ product teams with 99.9% uptime during peak traffic • Led modernization initiative migrating Node.js 12->16, Yarn 1->3, Lerna 2->5, reducing build times by 25% and eliminating 47 security vulnerabilities • Delivered comprehensive technical documentation enabling 3x faster onboarding for new team members.

Software Engineer

Madbox

Jan 2020 - Feb 2022

2 years 2 months

Paris, France

• Built ROI optimization platform for mobile ad campaigns (AppLovin, Vungle, IronSource, Unity Ads), enabling data-driven ROAS decisions across $10M+ annual ad spend • Developed 10+ API integration SDKs (TikTok, Facebook, Snapchat, AdMob, Mintegral) for authentication, reporting, and advertisement operations • Led migration to Lerna monorepo architecture and Redux -> Context API refactoring, improving developer productivity by 30% • Orchestrated backend data migration from Redshift to BigQuery, reducing query costs by 40%

Senior DevOps/Java/TypeScript Engineer

Exalead / 3DS

Jan 2019 - Jan 2020

1 year 1 month

Paris, France

• Bootstrapped enterprise BI application (Google Data Studio alternative) with CAS/LDAP Spring Security authentication • Designed dynamic plugin infrastructure using webpack for runtime JavaScript bundle loading • Led CI/CD implementation (Docker, GitLab runners, Maven), reducing deployment time by 60%

PHP/Node.js Engineer

Netvibes / 3DS

Jan 2017 - Jan 2019

2 years 1 month

Paris, France

• OAuth integrations for 4 major platforms (Dropbox, Twitter, Google Drive, Instagram) • WYSIWYG text editor in React with rich formatting capabilities • Dropbox API v1 -> v2 migration ensuring zero downtime. • Add new features, enhance existing functionalities, and initiate new projects. • Identify integration points with existing internal and external systems to facilitate seamless data exchange and interoperability between systems. • Ensure applications are robust, well-structured, and adhere to industry best practices and coding standards. • Implement measures to guarantee the reliability and scalability of the developed applications, allowing them to handle increased user loads and adapt to future growth requirements.


Education

---------

BTEC First Diploma, Graphic and Printing Equipment Operator, General Production

---------

BTEC National Diploma, Graphic Communications

Faculté Jean-Monnet - Université Paris-Sud

42 Paris

Bachelor of Science (BSc), IT

Université Côte d'Azur

Bachelor of Science (BSc), Economics

Portfolio

SenIntel

The best place to find your next move

© 2026. All Rights Reserved.