Jocelyn. Fontaine

Led AWS architecture initiatives for applications and Landing Zone, in coordination with the Infra Lead Architect for Solvay (chemical manufacturing) • Piloting AWS architectures for Solvay applications and Landing Zone with definition and design of solutions • Providing High Level Designs for AWS-hosted projects and constant review of AWS environment documentation • AWS platform leadership in coordination with Solvay Infra Lead Architect with responsibility for changes (guidance of Operators) • Collaboration and guidance of Infrastructure Cloud Engineers • Deep understanding of core AWS services (IAM, EC2, S3, Backup, Network) with contributions to increase robustness and security • Collaboration with FinOps team for cost control and reduction across AWS and Azure Technologies: AWS (IAM, EC2, S3, Backup, Network), Azure, Jenkins, Terraform

Assist and support Cegid's Cloud team (software development) in implementation of AWS platform with Tech Lead and Consulting Advisor role for AWS and DevOps topics. • Design and implementation of AWS Landing Zone for enterprise cloud foundation • Support and guidance for migration of Cegid applications to AWS • Design and implementation of CI/CD chains for dedicated AWS pipelines • Tech Lead and consulting on AWS and DevOps best practices for Cloud team • FinOps support for cost optimization including Saving Plans, BYOL, and data consumption analysis Technologies: AWS (IAM, Cloud WAN, Transit Gateway, Direct Connect), Terraform, Checkpoint Firewall, Azure DevOps, JFrog, Dynatrace

Led implementation of data security strategy and platform architecture review for Moodwork (HR Tech startup specializing in workplace mental health and employee well-being) • Led implementation of robust data segregation strategy for secure data isolation across applications handling sensitive employee mental health data • Designed and implemented application-level data encryption for enhanced data protection and compliance • Designed and architected critical EKS platform review for platform optimization, security assessment and scalability • Enhanced overall platform security posture through architecture recommendations and security best practices TECHNOLOGIES: AWS (EKS, KMS), Kubernetes, Terraform, Java

Assist and support Infrastructure team to build and improve its AWS platform for SMEG (Monaco) • Designed and implemented Landing Zone for SMEG with AWS IAM, VPN, Transit Gateway, Config Rules and comprehensive security framework • Designed EKS/RDS patterns for hosting SMEG applications with Kubernetes orchestration • Designed and implemented VDI solution for DevOps teams using AWS Workspaces • Designed and implemented strategy to secure all public endpoints using AWS WAF, CloudFront, Web ACLs, ALB and API Gateway • Designed and implemented Private Certification Authority (AWS PCA) and Private Hosting Zone for internal service discovery • Designed and implemented resilient and scalable GitLab architecture on AWS • Supported adoption of Infrastructure as Code across AWS deployments using Terraform and GitLab CI/CD • Designed and implemented comprehensive backup and restore strategy for all cloud resources • Provided FinOps support with best practices implementation and cost optimization Technologies: AWS (IAM, VPC, Transit Gateway, EKS, EC2, RDS, S3, AWS Backup, WAF, CloudFront, PCA, Workspaces), Kubernetes, Terraform, GitLab

Mission realized for Monaco Government, defining, designing, implementing and deploying a comprehensive Data Platform for government operations. • Defined, designed, implemented and deployed Data Platform for Monaco Government with enterprise-grade infrastructure • Designed and implemented Landing Zone of the Data Platform including Identity Baseline, Transit Gateway, Site-to-Site VPN, Client VPN and core networking components • Designed and implemented architecture for Terraform Enterprise with state management and governance • Designed and implemented architecture for Vault Enterprise for secrets management and encryption • Designed and implemented Keycloak architecture for SSO integration across Landing Zone (SAML & OIDC protocols) • Designed and implemented Public Key Infrastructure based on Vault for certificate lifecycle management TECHNOLOGIES: AWS (EC2, RDS, Route 53, ACM, KMS, ECS), Terraform, Vault, GitLab, Keycloak, SSO (SAML, OIDC)

Mission realized for Vallourec (premium tubular solutions leader serving energy markets), assessing AWS cost and usage optimization strategy for operations in Brazil and US. • Conducted comprehensive AWS cost and usage assessment for Vallourec operations across Brazil and US regions • Assessed AWS applications across Vallourec's infrastructure footprint with identification of cost optimization opportunities • Elaborated AWS usage optimization strategy and recommendations for cost reduction and operational efficiency Technology: AWS

Supporting Safran Cabin and Safran Group (aerospace and aviation components manufacturing) in building their Data Platforms on AWS ✈️☁️🏗️ - Provided solution architecture support for Data Platform construction across Safran Cabin and Safran Group on AWS infrastructure Technologies : AWS

Architecture and implementation of Customer Line Execution System (CLES) with AWS and Foundry/Skywise platform integration for Airbus (global aerospace and defense leader) • Designed the CLES data model for Customer Line Execution System with architecture aligned to Skywise platform (Foundry) requirements • Designed and implemented ingestion pipeline proof of concept between Skywise platform (Foundry) and CLES application on AWS infrastructure • Designed and built data pipeline for CLES Dataset in Skywise for centralized data management and analytics • Architected end-to-end AWS solution leveraging Glue, S3, RDS with event-driven ingestion via Lambda and EventBridge • Implemented infrastructure-as-code using Terraform for reproducible and scalable AWS deployments TECHNOLOGIES: AWS (Glue, S3, IAM, RDS, CloudWatch, EventBridge, Lambda, SQS), Terraform, GitHub, Python, Foundry, Skywise

Design, implementation and deployment of a sovereign cloud infrastructure for Monaco Government and its critical operators (OIV), establishing secure, autonomous cloud capabilities independent of external infrastructure. • Defined, designed, implemented and deployed sovereign cloud infrastructure for Monaco Government with autonomous hosting and control capabilities • Realized proof of concept for Cloud Management Platform (CMP) and comprehensive monitoring solution • Deployed dedicated infrastructure for Monaco Cloud Website with security hardening and public accessibility • Implemented Landing Zone architecture for customer isolation and compliance with sovereign requirements • Designed and developed : infrastructure solutions for controlling and monitoring customer hosting zones, core foundation of hosting infrastructure with redundancy and high availability, monitoring solution for Core Operator teams with real-time visibility and alerting • Defined and implemented Public Key Infrastructure (PKI) solution for managing internal Certificate Authorities • Defined comprehensive security model aligned with internal operational needs and compliance requirements • Realized proof of concept for identity federation between AWS IAM and VMware Identity Manager (Workspace One Access) TECHNOLOGIES: AWS (Outpost, Organizations, Config Rules, EKS, ECS, Kubernetes, SSO, RDS, Kinesis, EC2, ALB, Route53, CloudFront, WAF), Terraform Enterprise, Vault, GitLab, CloudBolt, Ansible, Grafana, InfluxDB, Prometheus

Design, security hardening and implementation of the META1 Solution for Roche Diagnostics Europe (world leader in in-vitro diagnostics), transitioning from proof of concept to production-ready state with comprehensive security alignment and CI/CD automation . • Designed META1 Solution architecture from proof of concept to production implementation with security-first approach • Improved and hardened security posture of the solution with comprehensive threat assessment and remediation • Aligned solution architecture and security practices with Roche Security Standards and compliance requirements • Designed and implemented CI/CD pipeline for automated testing, building, and deployment workflows • Architected AWS infrastructure leveraging Route53, CloudFront, Cognito, AppSync, DynamoDB, Elasticsearch for scalable digital experience • Implemented encryption at rest with KMS and CMK for sensitive data protection • Integrated observability and monitoring solutions (CloudWatch, Sumo Logic) with security monitoring (Dome9) • Established API Gateway and SES integration for secure external communications TECHNOLOGIES: AWS (Route53, CloudFront, Cognito, Amplify Framework, AppSync, CMK, KMS, S3, IAM, API Gateway, DynamoDB, Elasticsearch, CloudWatch, SES, CodeBuild, CodePipeline), Sumologic, Dome9, GitLab

Risk assessments and implementation of AWS Foundation Assurance Plan for AXA Group Operation (international insurance and asset management company). • Risk assessments of AXA services and applications hosted on AWS • Implemented AWS Foundation Assurance Plan for AXA Group TECHNOLOGIES: AWS

Solution architecture and implementation of dedicated operations infrastructure for NavBlue, Airbus' flight operations software subsidiary, designing and deploying AWS-based Kubernetes platform for flight operations applications. • Defined and designed dedicated operations solutions for Ops Team of NavBlue • Realized proof of concept to validate operations solutions architecture and feasibility • Designed architecture and infrastructure for NavBlue applications based on AWS EKS (Kubernetes) • Implemented Infrastructure as Code with Terraform to automate operations solutions and deployment for each new EKS environment • Supported Ops Team to adopt and operationalize solutions • Wrote comprehensive architecture documentation TECHNOLOGIES: Terraform, AWS (EKS, EC2, VPC, RDS, Lambda, Route53, ELB), Kubernetes, Grafana, Prometheus, Dashboard K8s, Jenkins

Definition and implementation of comprehensive cloud security strategy for Air France-KLM hybrid cloud infrastructure across AWS and Azure platforms, establishing security best practices, architecture patterns and compliance alignment for multi-cloud environment. • Promoted and supported cloud strategies and security concepts to Air France-KLM stakeholders • Defined comprehensive security best practices for hybrid cloud deployment on AWS and Azure • Proposed target architecture designs aligned with security best practices and Air France-KLM compliance requirements • Aligned architecture with Air France-KLM group technologies and customer requirements • Defined security design patterns for consistent implementation across platforms • Implemented validated designed security solutions in production environments • Established security best practices with setup and configuration • Implemented continuous service transition with 24x7 operations teams • Supported current and next proof of concept environments with security hardening • Supported multiple RFP initiatives (IDaaS and CASB) according to security best practices TECHNOLOGIES: AWS, Azure, Hybrid Cloud, Security Architecture, IDaaS, CASB

Technical design and architecture of new solutions and infrastructure for Airbus, translating functional requirements and business service levels into technical specifications aligned with enterprise standards, security policies and operational constraints. • Led and performed technical design of new solutions and infrastructure according to functional architecture and business service level requirements • Aligned technical architecture with Airbus standard middleware components (VAX/VMS, MS SQL, DB2, AIX, Websphere, Apache Tomcat, Oracle, Windows Server) • Aligned technical architecture with security policies and operational constraints • Defined infrastructure components (IaaS, PaaS, storage, network) in line with Airbus standards • Designed high availability infrastructure with redundancy where required • Conducted technical architecture workshops and knowledge transfer on software solutions • Estimated infrastructure deployment costs including hardware, software, operations and design • Proposed and evaluated multiple architecture scenarios with pros/cons analysis and associated budget impact • Conducted validation meetings with project, security and operations teams TECHNOLOGIES: J2EE, .NET, LDAP, Unix, Solaris, Windows, Apache, Tomcat, Websphere, Siteminder, Kerberos, Windchill, AIX/Solaris, Linux/Unix, VMS, ESX, Active Directory, PaaS, IaaS, Grid Computing, LSF

Technical support and software evolution of ADOC Manager V3.1 project for Airbus, focusing on document management system modernization with bulk import/export capabilities and infrastructure upgrades • Provided technical support for ADOC Manager V3.1 project with focus on software architecture and application evolution • Analyzed and designed bulk import and export prototype for SGML documents on ADOC Manager V3 • Analyzed software architecture for application handover and knowledge transfer • Designed and implemented application evolutions with updated indexation system • Wrote technical specifications for infrastructure and software architecture updates • Updated application technical stack including JRE, JDK, Spring, Hibernate and Tomcat components • Deployed development and production environments with proper configuration and validation TECHNOLOGIES: Java 6, J2EE 5, Hibernate, JBoss, JBoss Cache, VMware, Spring 2.0, Tomcat 5.5, Oracle 11g, Linux RH 5.4, Eclipse 3.4, XML/SGML, Ant, Maven, JMS, ApacheMQ

Definition of infrastructure architecture for Corporate Functions and Security Solutions . Lead and perform the technical design of the new solution & inftrastucture according to the functional architecture and Business Service level Requirements using Airbus technology standard and infrastructure component : • Align technical architecture with Airbus standard middleware component • Align technical architecture with security policy • Align technical architecture with operational constraints • Define infrastructure component (server, storage, network…) in line with Airbus Standard • Design high availability infrastructure if required • Provide technical knowledge on software solution • Conduct technical architecture workshops • Estimate Infrastructure deployment costs for each project concerning Hardware, Software, Operations, Design, etc. Propose and evaluate architecture scenarios with pros /cons analysis and associated budget Conduct potential working and validation meetings with project, security and operation team … Technical Environment: J2EE, .NET, LDAP, Unix, Solaris, Windows, Apache, Tomcat, Websphere 6, Siteminder, Kerberos, Security, AIX/Solaris, Lunix/Unix, Windows, Active Directory, etc.

IT architecture and functional design activities for Airbus France across multiple engineering departments, validating application solution architectures and ensuring conformity with Airbus standard infrastructure, integration rules and security policies. • Engaged in multiple projects across engineering departments with responsibility for validating application solution architectures and ensuring consistency with Airbus standards • Ensured conformity of solution architectures based on standard infrastructure, integration rules, security policies and IT department software standards • Advised and supported projects in design phase providing technical expertise and software specialization based on technologies and solutions • Conducted technical architecture workshops establishing technical models and architectural patterns • Drafted and validated architecture records with comprehensive documentation and compliance verification • Provided technical support during preliminary phases and RFI/RFP processes with recommendation and evaluation TECHNOLOGIES: J2EE 1.4 and 5, Hibernate, Struts, Spring, .NET, LDAP, Unix, Solaris, Windows, Apache, Tomcat, Websphere 6, Siteminder, Kerberos, Alfresco

IT architecture and design for GFI Informatique (European IT services leader), with responsibility for platform design across Toulouse agency projects, technical support to projects, and creation and management of the technical department. • Designed platforms for projects of the Toulouse agency • Provided technical support to projects during design and implementation phases • Created and managed the technical department of the GFI Toulouse agency TECHNOLOGIES: J2EE, PHP, LemonLDAP, Oracle

Technical management and architecture responsibilities for E-Technician application at Orange (global telecommunications group), a field application enabling technicians to monitor activity through front-office (PDA/WAP) and back-office (web access) interfaces. • Led technical exploitation of E-Technician application serving field technicians for activity monitoring across multiple devices • Managed budgeting and development of updates including batch processing, Java components (Servlet, JSP) and bug fixing with version control • Served as technical focal point for operations integration, monitoring and bug tracking • Organized technical and operational environments with configuration and deployment management • Drafted and validated operational documentation including installation logs, backup logs and supervision logs • Drafted and validated technical documentation including architecture records, naming handbooks, metrology specifications, flow specifications and server specifications • Coordinated between development, operations and field teams for continuous service delivery TECHNOLOGIES: Windows CE, IE 5.5, RedHat Linux 2.1, J2EE 1.4.2, JSP, XML/XSL (Xalan 2.4.1, Xerces 2.1), AXIS, WAP 1.1, Web Services, Jolt/Tuxedo 8.0, Oracle 9i, JMS, MQ-Series 5.3, Jonah 4.6, Apache 1.3.27, JavaMail, CFT 2.3, $Universe 5

Junior Project Manager role for ANPE (French National Employment Agency), managing the DIANE web application project within the Department of Computer Science with focus on production monitoring and ISO 9001 compliance. • Provided project management for DIANE web application development and deployment • Monitored development activities and transition to production environments • Ensured compliance with ISO 9001 quality standards in collaboration with Quality Department • Coordinated between development team and quality assurance for production readiness TECHNOLOGIES: Windows 2000 Server, IIS 5, ASP 3.0, VBScript, JavaScript, XML, HTML, SQL Server 7.0, SQL Server 2000, Oracle 8i, FrontPage