iheb sidhom

Zabbix Migration Project Context: Upgraded Zabbix from version 6 to version 7 to leverage new features introduced in v7, ensuring uninterrupted service throughout the migration. • Implemented Zabbix migration using a Blue‑Green Deployment strategy to upgrade with minimal downtime. • Developed a GitLab CI pipeline to automate resource creation and Route53 DNS switching between versions. • Created Ansible roles for Zabbix frontend, backend, proxy, and collector; integrated in userdata scripts. • Designed and deployed a full VPC architecture including subnets, routing, and security tailored to project needs. • Enabled private networking using Transit Gateway and VPC Endpoints for secure service communication. • Used Packer to generate AMIs with pre‑installed Ansible roles for faster provisioning. • Refactored infrastructure code to a modular Terraform setup for scalability and reusability. • Managed state transitions and aligned infrastructure with terraform import to updated remote state files. • Integrated SAML SSO for secure access to Zabbix dashboard. • Automated provisioning and Ansible execution via userdata scripts. • Authored PAP templates to standardize migration documentation and procedure. • Built reusable CI/CD, Ansible, and Terraform modules compatible with Dev, Int, and Prod environments. • Migrated RDS databases for compatibility and performance with the latest Zabbix version. Splunk Migration Project Context: Upgraded Splunk from version 7 to version 9 to leverage new features introduced in v9, ensuring uninterrupted service throughout the migration. • Migrated Splunk to a new VPC module to improve resource isolation and maintainability. • Upgraded Splunk EC2 instances to version 9.X for better performance and feature support. • Refactored infrastructure by splitting Terraform states for clearer resource ownership and modularity. • Refactored code using new reusable Terraform modules for AWS resources to enhance maintainability. • Managed Terraform state by performing terraform import and targeted deletions to synchronize with existing AWS infrastructure. • Implemented a new CI/CD pipeline to orchestrate and manage distinct stages of infrastructure deployment and updates. Tools: Terraform, Ansible, Packer, GitLab CI AWS Services: EC2, ASG, ALB, Route53, RDS, S3, ACM, SNS, VPC, SG.

CAESAR Project Project Context: CAESAR is a project built from scratch to provide the data team with the infrastructure needed to analyze insurance‑related data efficiently and securely. • A project built entirely on AWS, fully automated using Terraform, GitLab CI, and Ansible playbooks. • Implemented SageMaker Notebook Instances with lifecycle configurations and auto‑stop scripts for ML model training. • Provisioned and managed S3 Buckets with encryption, lifecycle policies, and fine‑grained bucket policies. • Configured Route53 Hosted Zones, DNS records, Application Load Balancers, and Lambda Target Groups. • Defined Security Groups per resource with specific inbound/outbound traffic rules. • Integrated AWS Secrets Manager with HashiCorp Vault for secure secret management. • Set up RDS PostgreSQL with automated backups, restoration, and Athena integration using Lambda PostgreSQL connectors. • Monitored RDS health using CloudWatch Metrics and RDS Event Subscriptions. • Developed Lambda Functions using both ZIP packages and Docker images from ECR; triggered by S3, SQS, and ALB events. • Built data workflows using AWS Glue: jobs, crawlers, connections to RDS and Snowflake, and Data Catalog integration. • Automated RDS Secret Rotation using AWS Secrets Manager and custom Lambda functions. • Created IAM roles with custom policies to enforce least privilege access for development teams. • Configured CloudHSM with key aliases to encrypt AWS resources securely. AWS Services: ALB, Route53, SageMaker,

MIELE Project Project Context: MIELE is an IoT project in the home appliances sector, designed to calculate calorie intake and body needs using data collected from a smart refrigerator. • Provided support in architecture, platform, CI/CD, and security for a large‑scale cloud‑native project. • Leveraged tools like Terraform and Terragrunt to provision and manage cloud infrastructure. • Worked daily on a production‑grade, self‑hosted Kubernetes infrastructure on Azure. • Built and deployed Docker‑based applications using Kubernetes‑native CI/CD pipelines. • Deployed and debugged cloud‑based services across the DevOps lifecycle using best practices. • Ensured infrastructure performance, availability, and resilience in real‑world business scenarios. • Configured virtual machines using Ansible for consistent and repeatable infrastructure setups. • Developed infrastructure pipelines using Azure DevOps to automate resource provisioning and configuration. Tech Stack: Terraform, Terragrunt, Azure, Azure DevOps, Kubernetes, HELM. BMW Project Project Context: BMW is an IoT project aimed at providing solar energy management and monitoring solutions for BMW manufacturing. • Maintained and operated Kubernetes clusters using GitOps principles and tools like FluxCD. • Implemented GitOps workflows by managing infrastructure and application deployment configurations entirely through version‑controlled Git repositories. • Defined and versioned infrastructure as code using Terraform for repeatable and consistent cloud provisioning. • Designed and implemented CI/CD pipelines using Tekton CI and FluxCD to automate deployment of Kubernetes components. • Used Azure DevOps pipelines to build, test, and deploy infrastructure code changes across multiple environments. Tech Stack: Terraform, Azure, Azure DevOps, GitOps, FluxCD, Tekton CI, Kubernetes, HELM.