Florent CARRÉ

Innovative and results-driven professional with extensive experience delivering cloud-native solutions, optimizing infrastructure, and driving digital transformation for clients worldwide. Adept at navigating complex environments to design, build, and manage scalable, secure, and cost-efficient systems. - Reduced Azure development and staging costs by 75% and production costs by 30% - Migrated legacy deployments to containerized architectures, enhancing scalability and performance - Designed Kubernetes-based SaaS platforms for multi-cloud and on-premise environments - Created CLI tools in Rust and automation scripts in Go for streamlined processes - Built and optimized CI/CD pipelines using Jenkins, Bitbucket, GitLab, and ArgoCD - Developed ephemeral AWS testing environments to enhance testing efficiency - Deployed Zero Trust architecture with Cloudflare, contributed to achieving ISO 27001 compliance, and automated vulnerability detection - Hardened infrastructure using Ansible, Terraform, MDM, RBAC, and OpenSCAP, ensuring compliance with GDPR/LGPD standards and others - Designed high-performance REST APIs in Rust and Python, implemented GDPR-compliant data processing solutions using Kafka and MinIO, and fine-tuned PostgreSQL for optimized performance - Implemented observability solutions with Grafana Stack (Loki, Tempo, Mimir) and custom PRTG sensors - Authored Grafana dashboards for enhanced observability - Managed hybrid infrastructures on AWS, Azure, Oracle Cloud, DigitalOcean and on-premise - Orchestrated workloads using Kubernetes and Nomad - Technologies used (limited list): Amazon Linux, Amazon Web Services, Ansible, Azure, Azure DevOps, Bitbucket, Buildah, CentOS, Cloudflare, Debian, Docker, GitHub, Grafana, GraphQL, Haskell, Istio, Kubernetes, KVM, MongoDB Atlas, Nginx, OpenSCAP, Oracle Cloud, Oracle Linux, Podman, PostgreSQL, Python, RBAC, Red Hat Enterprise Linux, rtapi, Terraform, Travis-CI, Xen

- Managed and optimized internal and client environments on Amazon Web Services (AWS), leveraging services such as ALB, EC2, ECR, ECS, NLB, RDS, and CloudFormation to ensure scalable and reliable infrastructure - Contributed to the internal solution managing entire SaaS environments on AWS - Contributed to the development of Kubepak, focusing on both core functionalities and packages, and Generix-specific packages - Developed and maintained pipelines using Bitbucket and Jenkins - Implemented automated security tests during CI/CD to detect CVEs - Developed automation scripts to create ephemeral AWS environments for automated testing, enhancing testing efficiency - Crafted a Go-based tool to automate the configuration of HashiCorp Vault, including OIDC, PKI, and other essential components - Designed and developed custom sensors for PRTG - Set up comprehensive audit, monitoring, and observability solutions for QA environments using the Grafana Stack (Grafana, Loki, Mimir, Tempo), Grafana Agent, and Wazuh - Contributed to ISO 27001 compliance, ensuring information security standards - Co-designed and co-implemented the infrastructure for the new SaaS platform based on Kubernetes, tailored for both Azure and on-premise environments - Co-designed and co-implemented a Kubernetes operator for software based on an internal framework, enhancing operational efficiency - Designed and debugged Grafana dashboards - Deployed Azure Kubernetes clusters with Cilium in BYO (Bring Your Own) CNI mode, cluster mesh, and replaced kube-proxy, ensuring optimal network performance and security

Skills: Shell Scripting · Git · Linux · Configuration Management · Scripting · Script Shell · Containerization · Information Technology · DevOps

Client : Streaming company (live and vod) Enhanced configuration management using Ansible

Confidential Trademark Number (INPI) : 4329456

Client : French cloud provider using OpenStack Public Key Infrastructure (internal PKI) : - evaluating existing solutions and choice the right solution related to requirements - contributing to chosen solution : changes in master branches (repository on GitHub) - build automated install script for emergency install (disaster recovery) Responsible for monitoring and testing of vulnerabilities (Meltdown/Spectre) and work on infrastructure reboot Scan for unexpected settings (sysctl) and incorporate changes into configuration management Install and configure NetApp Harvest & help teams using it Ensure operational maintenance tasks : Linux infrastructures and BMCs (iDRACs and different firmware) Automation using Ansible and Chef Work with other teams (IAAS, SDN . . . ) on transverse subjects Agile framework : SCRUM

Linux system and network administration Firewall and VPN management Automation with Ansible and Python Search and resolve all problems identified by OpenVAS IP address management DNS management Security system (badge) management Building weathermap using Observium More detail during a face-to-face

Working on ads infrastructure (no downtime authorized) Woking on all other insfratructures when needed Automation using SaltStack More detail during a face-to-face

Certified personal health data hosting provider User support Fully managed environment Technologies used (partial list): Database Management System : - MariaDB - MySQL - Percona - PostgreSQL Email server : Postfix Firewall : - iptables - Juniper (SSG) - pfSense HTTP accelerator : Varnish Languages : - Python - Shell scripting Operating system : - Debian - CentOS - Red Hat Enterprise Linux - Windows 10 - Windows Server 2003 - Windows Server 2008 - Windows Server 2012 Virtualization : VMware Web server : - Apache HTTP Server - Apache Tomcat - Nginx

Partial remote Technologies used (partial list) : - Ingenico Desk/5000 (HTML/CSS/JS) - NodeJS - Python - Shell scripting - Swift (on GNU/Linux, macOS and iOS)

Full remote Optimizing PHP/MySQL platform Writing fail2ban rules depending on the needs Writing shell script to improve tasks (very specific) with Apache2 Settings on the kernel and firewall Information and choice on some applications

Full remote Build infrastructure (Debian based) Writing fail2ban rules depending on the needs Settings on the kernel and firewall Information and choice on server hardware and some applications (ACID for DBMS and more)

Full remote Trusted Platform : Backup as a Service Storage using Self-Encrypting Drives (FIPS 140-2) Protection forms with reCaptcha Installation of operating systems Debian GNU / Linux and Scientific Linux via KVMoIP (KVM over IP) for installation LUKS PKI Implementation of SSL VPN Sharing of SSL Port (TCP 443) Compilation of custom Linux kernel Settings on the kernel, firewall and routing Monitoring via Shinken Developments: - IPN (Instant Payment Notification) for PayPal and AlertPay - Several shell scripts using arguments - Request Features with sorting columns Title and Status

Inventory of purchased hardware (scientific and computer) by the funds of the university in different laboratories. Technology : Excel

Writing special technical clauses Update Active Directory and Exchange Economic research for telephony (based on the open source) and the Internet Search for replacing the intranet business by an open source solution Inventory and maintenance of IT equipment (GLPI & OCS Inventory / FusionInventory) User support Technologies : Microsoft SQL Server, Windows XP, Windows Server 2003 & 2003 R2, Active Directory, Exchange, HyperFile, MySQL, IIS, Apache Tomcat, Oracle

Writing special technical clauses Update Active Directory and Exchange Economic research for telephony (based on the open source) and the Internet Search for replacing the intranet business by an open source solution Inventory and maintenance of IT equipment (GLPI & OCS Inventory / FusionInventory) User support Technologies : Microsoft SQL Server, Windows XP, Windows Server 2003 & 2003 R2, Active Directory, Exchange, HyperFile, MySQL, IIS, Apache Tomcat, Oracle