Fouad KHERFI

– ELK Fleet server architecture, installation, configuration and monitoring – ELK Stack (Elasticsearch/Kibana) Single Sign-On (SSO) via SAML 2.0 and OpenID Connect (OIDC) – Integrated enterprise applications with centralized Identity Providers such as Azure Active Directory – Designed, deployed, and operated a large-scale Elastic Stack 8.17 platform across ~98 Linux nodes (including 3 master nodes), supporting production workloads with high availability and fault tolerance. – Implemented monitoring and observability for integration pipelines using Elastic Stack. – Technical lead for cross-system integrations involving multiple stakeholders – Implemented FinOps practices to monitor, analyze, and optimize infrastructure and observability platform costs across production environments. – Built cost visibility dashboards (storage, compute, ingestion volume, retention) to provide engineering teams with clear usage attribution and spending trends. – Performed capacity planning and right-sizing of Elasticsearch clusters (CPU/RAM/disk tiers) based on real workload metrics, reducing over-provisioning. – Optimized data lifecycle management (hot/warm tiers, index retention, ILM policies) to control storage growth while maintaining performance and compliance. – Implemented centralized observability architecture (logs, metrics, traces) using Elasticsearch, Kibana, Fleet Server, Elastic Agents, and Elastic APM for multiple applications (ERP HRMS, .NET and PHP/WordPress behind Nginx). – Managed high-volume data ingestion pipelines (~30 TB/day) via Logstash, including pipeline optimization, memory tuning (40 GB JVM), redundancy configuration, and throughput monitoring. – Architected and maintained Fleet Server infrastructure and automated Elastic Agent enrollment, lifecycle management, and policy orchestration. – Built Infrastructure as Code using Terraform and Ansible for consistent provisioning, configuration management, and deployment of Elastic components. – Automated certificate lifecycle management for Elasticsearch (http.p12, transport.p12), Fleet Server, and Elastic Agents, including: – Secure certificate generation and renewal – Automated keystore password rotation – Backup and rollback procedures for certificates, configurations, and keystores – Zero-downtime certificate replacement across all nodes – Implemented automated keystore updates on all Elasticsearch servers (elasticsearch-keystore) to securely manage sensitive parameters at scale. – Security artifacts (certificates, keystores) – Integrated Elastic APM Server with Fleet for distributed tracing and performance monitoring of microservices and web applications. – Configured HAProxy and Nginx for traffic routing, load balancing, and secure exposure of Elastic services. – Performed cluster health management: – Shard allocation tuning – Disk watermark handling – Hot/warm data tiering – Capacity planning – Node replacement and rolling upgrades – Led incident response and troubleshooting for production issues (cluster degradation, ingestion bottlenecks, node failures, certificate expiration), including root cause analysis and post-incident improvements. – Defined monitoring and alerting strategies for Elasticsearch infrastructure, JVM, disk I/O, ingestion latency, and agent health. – Participated in architectural decisions for scalability, resilience, and security of observability platforms. – Developed operational runbooks and documentation for deployment, upgrades, disaster recovery, and maintenance procedures. – Collaborated with application teams to onboard services into Elastic APM and centralized logging.

– ELK agents Beats architecture, installation, configuration and monitoring – Elasticsearch (architecture, installation, configuration and administration) – Elasticsearch upgrade (installation, reindex, optimisation, monitoring) – Elasticsearch Cluster (installation,optimisation, monitoring & administration) using XLDeploy – ReadonlyREST installation patching (Elastic & Kibana) – Logstash installation and configuration – POC on KAFKA to replace Tipco rendez-vous – Cloud architecture and security SSH, OpenPGP, PKI, OpenLDAP SSO – Functional & Technical Documentation – Server refresh & migration for Histo infrastructure – Implementation of WEC (Windows Event Collector) – Components administration: System Linux, Oracle Database, Weblogic PIA Tuxedo, Process Scheduler, monitoring – VPN and networking administration – Solution management – IT coordination between DBA, network, System and Dev teams. – Support & Investigation – Project Meeting participation – Investigation and troubleshooting of Python scripted program to automat Histo trading requests Regex, watchdog, Bloomberg framworks – Composer Axway migration from 2.3 to 2.4 move to VCS, Financial study architecture design to be secure by design. – Components administration: System Linux, Oracle Database, Weblogic PIA Tuxedo, Process Scheduler. – Peoplesoft SOFI infrastructure Migration from exalogic to VCS, study POC & terraform creation & move to vcs. – IT coordination between DBA, network, System and PeopleSoft teams. – Investigation – Project Meeting participation – Exadata implementation study – Technical test after migration and upgrades – Investigation and troubleshooting with PeopleSoft functional teams – Incident Management with Oracle Support editor – PeopleSoft Single Sign-On (SSO) between portals – EXADATA & EXALOGIC PeopleSoft migration study – ELK agents Beats architecture, installation, configuration and monitoring on all peoplesoft infrastructure & servers – Elasticsearch (architecture, installation, configuration and administration) for the new migrated infrastructure – Elasticsearch upgrade (installation, reindex, optimisation, monitoring)

– Dovecot Architecture Secure IMAP server Mail – Servers sizing for DEV, UAT and production – HAproxy Architecture in front of the dovecot – Capacity planning of system infrastructures – Cloud Architecture and infrastructure design – Virtualization Vmware, Openstack KVM, qemu – Product backlog Management – Resilience strategy, procedures and tools for monitoring the performance of system infrastructures – Technical documentation and procedures – product progress evaluation – Data visualization Kibana – Terraform Infrastructure as code

– Exadata peoplesoft database administration – Elasticsearch, Kibana, Filebeat, Metricbeat Expert – New devops / cloud / architecture implementation – SSO Kerberos keytab creation and application implementation – Certificate and keystore management PKI, P12, JKS... – Apache, NGINX, Haproxy SSL Certificate and TLS 1.2 migration – DATA security classification, data encryption Certificate-based encryption – Cloud Architecture and Migration – Data Management using big data tools Elasticsearch, python – ELK monitoring, FileBeat, MetricBeat, PacketBeat, WinlogBeat – KIBANA Dashboard – Application administration in DevOps and Big Data mode (Jenkins, Ansible, shell) – PeopleSoft Data Management System – PeopleTools Upgrade from 8.52.14 to 8.57.07 – Data instances management – Integration of IBM MQSeries and PeopleSoft – Instant payment solution integration – JBoss and IHS Cloud configuration – Project Meeting participation – Analysis and troubleshooting of production and pre-production environments – Technical test after migration and upgrades – Investigation and troubleshooting with PeopleSoft functional teams – Incident Management with Oracle Support – Data Management using bigdata tools Elasticsearch, python

– Oracle Cloud migration POC – Orchestrated the end-to-end migration of VMs using VMware vMotion, ensuring zero business downtime for critical financial CRM & HR applications. – Collaborated with Lead Architects and Product Owners to design the "Landing Zone" for local strategic Data Centers, focusing on resilience and scalability. – Spearheaded dependency mapping via ServiceNow Discovery to identify hidden application links, reducing migration risks by 30% – Coordinated with Security teams to facilitate infrastructure pentests and ensure compliance. – Oracle VM Manager Virtualisation – Elasticsearch Administration & Architecture for PeopleSoft – Oracle PeopleSoft PeopleTools Upgrade from 8.54 to 8.56 – Application upgrade from 9.1 to 9.2 HRMS & FSCM – Instances management: from scratch installation, refresh by clone or RMAN restore (Oracle + PeopleSoft) – Big ip F5 load balancing configuration (Dassault Private datacenter) – System Linux patch application – Oracle Database patch application – Monitoring, Alarming – Analysis and troubleshooting of production and post-production environments – Application maintenance TMA – Data maintenance TMD – Technical test after migration and upgrades – Investigation and troubleshooting with functional teams – Incident Management with Oracle Support editor

– Oracle Exadata Architecture – Cloud architecture and security SSH, OpenPGP, PKI, OpenLDAP SSO – Functional & Technical Documentation – Designed and implemented enterprise system integrations using REST APIs SOAP, and event-driven architectures – Enabling PeopleSoft SOAP web service – Data synchronization workflows between business applications – Implemented data mapping and transformation between heterogeneous systems – Acted as technical lead for cross-system integrations involving multiple stakeholders. – Coordinated with HR, security, and IT teams to design and implement integration solutions. – Provided technical guidance on integration architecture and identity management. – Led technical workshops to define integration requirements and system connectivity. – Ensured consistency of master data across multiple enterprise platforms. – Technical Architecture & administration – Components administration: System Linux, Oracle Database, Weblogic PIA Tuxedo, Process Scheduler. – Database Upgrade from 9i to 11gR2 – VPN and networking administration – Solution management – Instances management: from scratch installation, refresh by clone or RMAN restore (Oracle) – IT coordination between DBA, network, System and PeopleSoft teams. – Investigation – Project Meeting participation – Exadata implementation study – Technical test after migration and upgrades – Investigation and troubleshooting with PeopleSoft functional teams – Incident Management with Oracle Support editor – PeopleSoft Single Sign-On (SSO) between portals – EXADATA & EXALOGIC PeopleSoft migration study – POC study search Solr vs Elasticsearch vs Oracle Search SES

– Functional & Technical Documentation – Maintain and day to day administration of Peoplesoft Technical Environments development, test and production – PeopleSoft instances management: from scratch installation, refresh by clone or RMAN restore (Oracle + PeopleSoft) – PeopleSoft development migration workflow from dev to prod using STAT – Upgrades PeopleTools PeopleSoft – Monitoring, Alarming – IT coordination between DBA, network, System and PeopleSoft teams. – Investigation – Project Meeting participation – Analysis and troubleshooting of production and post-production environments – Application maintenance TMA – Data maintenance TMD – Technical test after migration and upgrades – Investigation and troubleshooting with PeopleSoft functional teams – Incident Management with Oracle Support editor – POC study search by Solr Apache

– Coordination between the Development Team in India and network, system and DBA in France. – Oracle Fusion Middleware installation WebLogic Server, SOA Suite, Identity Management, Business Intelligence, HTTP Server, Web Services, Data Integrator – Participation in the project committee – Communication during production incident. – Participation in the investigations of PeopleSoft errors – Participation in the preparation of development work and Oracle Bundle – Update the matrix network architecture flow between PeopleSoft and other environments. – Establishment of a file, which contains all the information config files appserv.cfg application servers all instances Steria HCM – E-recruitment architectures for production and other instances. – ER Diagram Installation for HCM 9.1 using Oracle Support and Change Assistant. – Development of Dashboard PeopleSoft page lets for management. – New module PeopleSoft Development to manage peoplesoft Security and audit for all sensitive objects, records, pages permissions lists and roles. – Technical Support PeopleSoft HCM 9.1 – Participated in on-call rotation and liaised with HRIS production support team for ticket resolution. – Participated in Fusion OBIEE 11g integration with PeopleSoft.

– The aim was to setup a private cloud based architecture

– Customer business needs translation – Met with clients and worked with cross-functional teams to develop effective business solutions. – Information system and software solution architecture. – Software solution implementation, administration and monitoring – IT management – Pre-Sales: Software demonstration and presentation – Functional & Technical specifications – Implementation of HR and payroll software solution – End user formation – Post-sale tasks – Change management

– Pre-Sales: Software demonstration and presentation – Audit of the existing IT infrastructure – Needs assessment and analysis (Specifications and Workshops) – Support post-sale: the corrective and scalable support – Change management – Management, administration and monitoring of It infrastructure. – Deployment, installation and maintenance of information systems – Virtualizations, network & system architecture – Setup and Installation of software solutions: Sage, Ciel, Act, PeopleSoft