Frédérick Pop

As a member of the team in charge of IT infrastructure, I took over my previous role in the company to modernise the IS. Notorious projects : ▪ Implementation of TheForeman for Linux server lifecycle management ▪ Migration of CentOS 6 & 7 to Rocky Linux 8 ▪ Migration of Atlassian Bamboo & Bitbucket to GitLab + CICD setup ▪ Setting up a Wallix Bastion for SSH and RDP access ▪ Migration of Centreon CE 22.10 to version EE 23.10 ▪ Setting up Nutanix Kubernetes Platform + Nutanix Enterprise AI Technical stack : ▪ OS : o CentOS 6,7 & Rocky Linux 8 o Windows Server 2016 and 2022 ▪ Security : o Firewall : Stormshield, Sophos o VPN : Sophos ▪ Hyperconverged physical servers and virtualization : o Nutanix ▪ Storage & Backup : o NAS QNAP o Backup Veeam

On assignment for a client in the insurance sector, as part of the team in charge of the IS foundation, I took part in various infrastructure projects as well as business projects. Notorious projects : ▪ Implementation of TheForeman for RedHat lifecycle management ▪ Implementation of Vadesecure Cloud to secure email flows ▪ Implementation a Wallix Bastion with automation of certain operations with Ansible ▪ Migration and update of a Symantec Protection Engine instance ▪ Participation in a server room outsourcing project, feasibility study, drafting of specifications and analysis of responses to the invitation to tender ▪ Update and migration of internal DNS Technical stack : ▪ OS : o RedHat Entreprise Linux 6,7,8 o Windows Server 2012 and 2016 ▪ Security : o WAF : F5 BIG IP o Firewall : Stormshield, Palo Alto o VPN : Palo Alto Global Protect ▪ Networks : o LAN : Cisco o SAN : Brocade ▪ Virtualisation : o VMWare vSphere 6 and 7 o VMWare ESXi ▪ Storage : o IBM Hyperswap ▪ Physical servers : o Cisco UCS

As a member of the team in charge of Linux environments, I was involved in integrating new customers or upgrading existing systems, as well as production maintenance. Linux Administration (+1500 RHEL 7 servers) : ▪ Management : Red Hat Satellite 6 ▪ IAM : Red Hat Identity Management ▪ Automation & orchestration : Red Hat Ansible Tower ▪ Services : Postfix, named, rsyslog, dnsmasq, sshd … ▪ Security : ACLs, SELinux, openscap, LUKS ▪ Container orchestration : Red Hat Openshift 3, Kubernetes ▪ Cluster : Veritas Cluster Server Applications administration : ▪ Mail : Clearswift Secure Email Gateway ▪ File sharing : WingFTP, vsftpd ▪ Web Services : Apache, Nginx, Squid Support level 3 : ▪ Implementation and integration of new customers ▪ Upgrading of existing customer or in-house infrastructures ▪ Consultancy for specific customer requirements Support level 2 : ▪ Management of security incidents, changes, problems and patches

As a member of the team in charge of IT infrastructure, I started by helping to put the solution sold by the company into production. I then worked on the internal infrastructure, in particular migrating production in-house and upgrading the development and testing environment. Linux infrastructure administration (+200 CentOs 6 and 7 servers) : ▪ Firewall : Iptables ▪ Loadbalancing, failover : HAProxy, Keepalived ▪ Services : Postfix, rsyslog, IPA, Spacewalk, NFS ▪ Security : ACLs, SELinux Databases administration (SQL and NoSQL) : ▪ SGBD : MariaDB 10, MongoDB ▪ Cluster and HA : Maxscale 1 and 2, Galera Cluster ▪ Indices : SolR ▪ Monitoring : Monyog ▪ Tuning : MysqlTuner Applicative servers administration : ▪ Front : Apache, Nginx ▪ Back : Tomcat, Jetty, Vertx, RabbitMQ Infrastructure monitoring with Centreon Development tools administration : ▪ Jira ▪ Bitbucket ▪ Bamboo VMWare Administration Support level 2

- Backup management: daily checks of the backups made and any restarts if there are errors, restoration tests, launch of restorations (via NetBackup, BackupExec from Symantec) - Carrying out regular checks on systems (hardware and software), available storage space, the network and applications to ensure that systems and applications are available (via Nagios) - Physically check the server rooms - Resolve identified incidents, contacting either internal teams or external service providers external service providers: network incidents, hardware replacement (hard disk, specific printer, etc.) - Checking antivirus updates on servers / PCs / MACs / laptops - Providing 2nd level support (server problems, printers not responding on the network, etc.) - Participate in the implementation of certain technical projects (secure printing, CMC, Nagios) - Racking/Deracking servers - Participating in monitoring the copier/printer and UPS fleet - Assisting the WAWI Centre during peaks in activity (participation in the deployment of applications, etc.)

Set up a test lab to study the implementation of Microsoft Lync : - Study of the product and its various versions, sizing of the necessary infrastructure, estimation of the number of licences required - Creation of a test domain - Deployment of a test infrastructure (virtual and physical) - Deployment of an Exchange 2013 server and a Lync 2013 server - Testing functionalities restricted to the IT team Participating in infrastructure maintenance: - Racking/unracking servers - Supervision