Kamel Kharrat

Automatisation et industrialisation de l’infrastructure Red Hat d’Orange — cloud privé OpenStack, OpenShift, stockage Ceph et parc RHEL géré via Satellite — dans un environnement télécom à grande échelle. ▪ OpenStack — provisioning automatisé et exploitation (day-2) de Red Hat OpenStack Platform : projets, quotas, réseaux, flavors et images gérés as code, accompagnement des mises à jour et de la montée en charge de la plateforme. ▪ OpenShift — déploiement automatisé et gestion du cycle de vie des clusters OpenShift sur l’infrastructure OpenStack (installation, upgrades, scaling des nœuds, maîtrise des dérives de configuration). ▪ Stockage Ceph — exploitation et automatisation de Red Hat Ceph Storage en backend d’OpenStack (Cinder, Glance, Nova) et d’OpenShift (CSI) : gestion des pools et de la capacité, suivi de santé et troubleshooting. ▪ Satellite & cycle de vie RHEL — gestion du parc RHEL via Red Hat Satellite — content views, lifecycle environments, activation keys, errata et campagnes de patching — pour un parc serveurs homogène, conforme et à jour. ▪ Automatisation — développement de rôles et playbooks Ansible (AAP) réutilisables et idempotents remplaçant les procédures manuelles de provisioning, configuration, durcissement et patching, avec code versionné et validation en CI. ▪ Exploitation & documentation — gestion des incidents et analyses de cause racine sur la plateforme, runbooks et documentation technique, en collaboration avec les équipes infrastructure, réseau et sécurité d’Orange. Environnement technique : Red Hat OpenStack PlaVorm, OpenShik, Red Hat Ceph Storage, Red Hat Satellite, RHEL, Ansible / AAP, Git, CI/CD.

Infrastructure modernisation and industrialisation of OpenShift deployments on a Proxmox foundation. ▪ Migration & virtualisation — led the migration of virtualised environments from VMware vSphere to Proxmox VE: scoping, planning, VM migration and post-migration validation, reducing dependency on proprietary licensing. ▪ OpenShift — deployed and administered OpenShift clusters on Proxmox: installation, network and storage configuration, integration with the existing IT landscape and go-live. ▪ Automation — built reusable Ansible roles for automatic TLS certificate rotation and security hardening, removing recurring manual, error-prone operations. ▪ CI/CD & GitOps — designed, implemented and maintained CI/CD pipelines (Jenkins, Tekton, GitLab CI, Argo CD) in a GitOps approach for automated, versioned and reversible delivery of applications and infrastructure. ▪ Resilience — implemented automated backup of configurations and CI/CD pipelines, ensuring fast recovery in case of incident.

DevSecOps hardening and industrialisation of CI/CD workflows and infrastructure. ▪ Image optimisation — slimmed and hardened container images (multi-stage builds, minimal base images) to reduce the attack surface and speed up build times. ▪ LDAP integration — integrated LDAP / Active Directory authentication to centralise access and identity management. ▪ System hardening — hardened the full infrastructure (CIS best practices, reduced exposed services, system security policies). ▪ DevSecOps — embedded security into the DevOps workflow and CI/CD pipelines: SAST and dependency scans, image scanning, security quality gates (shift-left approach).

Red Hat — clients: GCB Bank, FNB, TDRA · Dubai, UAE (remote) End-client consultant on production OpenShift platforms in the banking and government sectors — multi-datacenter environments with strong security and availability requirements, working Agile with close coordination across infrastructure, security, network, operations and application teams. GCB Bank focus: migrated production environments from Kubernetes to an OpenShift architecture for a major commercial bank, with zero-downtime cutover and full compliance with banking governance. ▪ Architecture & OpenShift — deployed and administered highly available OpenShift clusters across multi-platform environments (OpenStack, VMware vSphere, Nutanix): multi-zone architecture, autoscaling, disaster recovery and cost optimisation, managing the full platform lifecycle (installation, upgrades, patching, scaling). ▪ Kubernetes → OpenShift migration — reworked manifests, enforced Security Context Constraints (non-root accounts), managed Routes and executed a zero-downtime cutover strategy on a banking production scope. ▪ CI/CD & GitOps — designed and maintained CI/CD pipelines (Jenkins, Tekton, GitLab CI, Argo CD) with quality gates and image security scans — moving legacy scripts to an auditable, versioned and reversible API / GitOps chain. ▪ Infrastructure as Code — implemented IaC with Terraform (OpenStack, Nutanix) and Ansible: reproducible provisioning (compute, network, storage), system configuration and patch management. ▪ Security & Governance (DevSecOps) — built centralised multi-cluster management with RHACM, RHACS and Quay (image security at scale, runtime detection, policy enforcement); integrated LDAP / LDAPS with Active Directory, automated group sync and enforced strict RBAC (disabled auto-provisioning). ▪ Certificates & encryption — replaced default TLS certificates, integrated an enterprise PKI, configured proxy trust bundles and service-to-service mTLS; set up storage (CSI, S3-compatible), ETCD encryption, retention policies and validated restore procedures. ▪ Observability — deployed a full stack (Prometheus, Alertmanager, Grafana, Loki): log centralisation, SIEM export (QRadar via Syslog), SLI / SLO definition and meaningful alerting. ▪ ITIL operations — proactive monitoring, incident management, on-call runbooks, root-cause analysis (RCA) and continuous improvement, working closely with Dev and QA teams to reduce manual toil. ▪ Training & enablement — delivered official Red Hat training — RH124 Red Hat System Administration I, RH134 Red Hat System Administration II, RH199 RHCSA Rapid Track and RH294 RHEL Automation with Ansible — plus hands-on workshops for enterprise clients in Europe and North America; complete technical documentation (architecture, procedures, automations).

Deployment and automation of MongoDB Enterprise database platforms in a Red Hat production environment. ▪ Databases — deployed MongoDB replica sets and Ops Manager clusters in a Red Hat production environment, following MongoDB Enterprise best practices (high availability, backups, monitoring). ▪ Automation — fully automated the deployment workflow with Ansible: certificate generation, user access control and system hardening. ▪ Industrialisation — built modular Ansible playbooks for reproducible infrastructure provisioning and database services, with documented procedures.