LAFHEJ LOIC

Practice freelance d'architecture senior sur plateformes critiques : Cloud hybride, IA agentique, sécurité régulée, gouvernance data. Clients principaux : RATPCAP (via ABTEKA, 2025-en cours), Exotec (2025), Crédit Agricole CIB (2024-2025), Emrys La Carte (2023-2024), Pernod Ricard (2019-2023). R&D propriétaire FINCRYPTO (Nov 2023 → en cours) : Plateforme fintech B2B AI-native multi-tenant sur Oracle Cloud (OKE eu-paris-1, 3 nodes). Architecture event-driven et agentique : • Intelligence Layer : quorum 4-LLM (Claude / OpenAI / Mistral / DeepSeek), 25 agents typés, BPMN escalation • RAG d'entreprise sur Qdrant Vector DB (multi-tenant, embeddings indexés) • LLMOps custom : provider health scoring, cost tracking, 3-way fallback • Audit chain SHA-256 forensic 7 ans • Conformité DORA / BCBS239 / RGPD / AAOIFI Halal / MiCA / EU AI Act • Stack : OCI OKE · Python · Next.js · RabbitMQ · Keycloak · OCI Vault · ArgoCD · Helm · MLflow · Grafana · Prometheus · Loki Approche AI-Augmented Engineering : Claude Code CLI comme moteur d'amplification de productivité d'architecte.

Mission de cadrage Landing Zone AWS multi-comptes pour le groupe de transport public francilien (RATPCAP), via ABTEKA. • Conception architecture cible AWS multi-comptes (Management, Log Archive, Security, Réseau backbone, 3 spokes) avec AWS Control Tower • Architecture hub-spoke Transit Gateway avec inspection FortiGate-VM ATP HA cross-AZ • DNS hybride Route 53 Resolver, intégration on-prem • OIDC fédéré GitLab→AWS (sans clé statique), IAM Identity Center • IaC Terraform : 3 822 LOC, 13 modules réutilisables, 25 stacks • Pipeline GitLab CI 5 stages : validate / plan / security / apply / post-deploy • Audit Prowler multi-frameworks (CIS, AWS FSBP, ANSSI, NIS2, SecNumCloud v3.2) • Conformité ANSSI / NIS2 / SecNumCloud v3.2 / RGPD • 6 programmes : Billettique 290 PAX, Télématique 2000 véhicules, Vidéo embarquée, Géolocalisation, ITS, Maintenance prédictive Stack : AWS · Terraform · GitLab CI · Prowler · FortiGate · IAM Identity Center · Route 53 Resolver · Transit Gateway · CloudWatch · S3

Freelance consulting engagement. • Led cross-team architecture and delivery across Core Platform, Security, Tools and FinOps (~30 people) for large-scale industrial deployments. • Designed and governed a hybrid AWS / on-prem platform supporting distributed customer sites with strong reliability constraints. • Industrialized deployments using Infrastructure as Code (Terraform) and CI/CD pipelines (Jenkins/Git). • Implemented centralized observability (metrics, logs, alerting) using Prometheus, Grafana and Loki, and reinforced SRE practices. • Structured run operations (incident, problem, change, runbooks and post-mortems). Outcomes: >99.9% availability target, ~40% MTTR reduction, 70%+ deployment automation.

Freelance consulting engagement. • Designed governed and auditable hybrid architectures for regulated banking environments. • Implemented event-driven patterns to improve traceability and control of platform and data flows. • Contributed to data governance foundations: data lineage, catalog, MDM and data products. • Embedded regulatory requirements (GDPR/RGPD, DORA, BCBS 239) into platform controls and audit trails. • Supported enterprise architecture trajectory work using TOGAF principles. Outcomes: regulatory-grade architectures and strengthened governance practices.

Freelance consulting engagement. • Acted as senior IT architect supporting the structuring and stabilization of core platforms in a regulated, high-availability context. • Defined target architecture and operational standards covering cloud infrastructure, applications, data flows and security controls. • Supported platform operations and reliability, including incident management, run coordination and continuous improvement. • Contributed to DevOps practices, automation and environment standardization to improve delivery and operational efficiency. • Provided architectural guidance on data flows, integrations and reporting foundations. Outcomes: improved platform stability, clearer architectural ownership, strengthened run and governance practices.

Freelance consulting engagement. • Designed and standardized an Azure data platform (Lakehouse/DWH) across multiple countries. • Implemented ADLS Gen2, Databricks and Azure SQL for scalable and governed data processing. • Structured Power BI reporting on top of the governed platform for IT and business KPIs. • Strengthened data governance through metadata, lineage, data quality controls and MDM initiatives. • Improved run stability and operational maturity through standardization and continuous improvement.

Freelance consulting engagement and company founder role. • Founded and operated a telecom and cloud services company delivering carrier-grade platforms with 24/7 availability requirements. • Designed and operated a high-availability infrastructure across multiple data centers, covering network, compute, storage and security layers. • Built and secured VoIP and data platforms, including SBC architecture, SIP interconnections and traffic segmentation. • Designed network architectures with BGP routing, redundancy and failover mechanisms. • Implemented security controls and monitoring to ensure service continuity and compliance with client SLAs. • Industrialized service delivery and operations, including monitoring, incident management and capacity planning. Outcomes: zero major security incidents, high service availability, stable 24/7 operations.