Bahaeddine BOUKHZAR

Three consecutive roles within the same Cloud & Platform organization, evolving from cloud migration to Kubernetes platform engineering and Software Factory platform ownership. * Software Factory Platform Engineer — Nov 2024 – Present (Current) • Operate and evolve the Software Factory’s GKE platform on Google Cloud, managing Kubernetes infrastructure and platform services to ensure reliability, scalability and operational efficiency. • Own and evolve Renault Group's Software Factory platform, including GitLab, Artifactory and SonarQube. • Led the migration of GitLab from AWS to Google Cloud Platform. • Design Private Service Connect architectures for secure cross-project service connectivity on GCP. • Build Cloud Run and Cloud Functions automation to streamline platform operations. • Drove continuous platform modernization by migrating GCP resource management from Terraform to Config Connector and transitioning the Software Factory ingress from NGINX Ingress Controller to Envoy Gateway ahead of end of support. Technologies: GCP, AWS, GKE, Kubernetes, Docker, Helm, GitLab, Terraform, Ansible, GRIT, GitLab Runner, GitLab CI, kaniko, Artifactory, SonarQube, Private Service Connect (PSC), Cloud Run, Cloud Functions, Config Connector, Envoy Gateway, Python, Go * Kubernetes Platform Engineer — Jan 2022 – Oct 2024 • Designed, built and operated Renault's shared Kubernetes platform on GKE, serving product and development teams across the organization. • Automated GKE cluster and platform provisioning using Terraform and Config Connector, with Argo CD for GitOps-based delivery. • Provided and maintained reusable platform capabilities for observability, security, secrets management, networking, backup and application delivery. • Maintained and evolved the Helm charts used to deploy and manage the core Kubernetes platform components in a standardized way. • Supported development teams by enabling the tools, services and Kubernetes capabilities required to run their workloads on the platform. Technologies: Kubernetes, GKE, GCP, Docker, Helm, Terraform, Argo CD, GitOps, kaniko, Config Connector, Prometheus, Grafana, Alertmanager, cert-manager, External Secrets, Crossplane, Dex, Dynatrace, Envoy Gateway, Velero, Python * Cloud Migration Engineer — Dec 2018 – Dec 2021 • Migrated 1,000+ applications from on-premises environments to GCP and GKE as part of Renault's cloud transformation. • Industrialized application migrations through automated infrastructure provisioning and delivery using Terraform, GitLab CI, Docker and Helm. • Supported application teams in containerizing and re-architecting workloads according to cloud-native principles. • Contributed to production-ready, multi-tenant Kubernetes architectures supporting migrated workloads. Technologies: GCP, GKE, Docker, Helm, Kubernetes, Terraform, GitLab CI, GitLab Runner, Kaniko, Argo CD, Jenkins, Bash, Python, Vault

• Built a CI pipeline (Jenkins, Nexus, Docker, Vagrant, Maven/Gradle) for embedded payment-terminal software. • Automated migration of Java, Python and C projects to Bitbucket. • Moved the Ingenico Build System from Vagrant to Docker. Technologies: Jenkins, Nexus, Docker, Vagrant, Maven, Gradle, Java, Python, C, Bitbucket

• Automated deployment of the Dauphine EBX solution with shell scripts and a versioned Docker image. • Wrote an Ansible playbook to install and configure Oracle DB on RedHat. Technologies: Shell, Docker, Ansible, Oracle DB, Red Hat

• Administered Orange Infra RedHat platforms and led the 2017 roadmap delivery. • Ran on-site workshops and acceptance tests with Orange subsidiaries. Technologies: Red Hat, Linux, Docker, Shell

• Provided technical support to customers via phone, live chat, and helpdesk ticketing system. • Managed web hosting accounts, server migrations, domain names, and DNS configurations. • Installed, troubleshot, and optimized CMS platforms such as WordPress, Drupal, and Joomla. • Monitored server performance and administered hosting environments using WHM, cPanel, and Plesk.

This final-year project was carried out at Orange Tunisia. It focused on the design and implementation of a platform to support a Security Operations Center (SOC). The SOC is based on a security monitoring system that collects events from various security devices and software in order to detect threats and address certain vulnerabilities. This type of system is known as a SIEM (Security Information and Event Management) system. The main objective of the internship was to implement a solution capable of managing information system events, collecting and analyzing logs, generating reports on the status of network machines, and triggering alerts in the event of a security incident. The project was also supported by technical guideline documents describing the different technical tasks and implementation steps.

• Designed and implemented a dedicated network architecture for an Attack/Defense cybersecurity challenge, including Cisco Catalyst 3560X switch configuration and server administration. • Administered a dedicated DELL PowerEdge 1950 server and deployed a VMware ESXi hypervisor. • Conducted practical cybersecurity workshops on Social Engineering, local network security, Man-in-the-Middle attacks, and session cookie hijacking using Metasploit, Ettercap, Arpoisoning, and Wireshark. • Participated in penetration testing, security auditing, and Capture the Flag (CTF) cybersecurity challenges.

• Implemented an open-source solution on dedicated security appliances (Stonesoft Appliance). • Worked on the configuration and integration of security solutions within the existing infrastructure.