Léa Nagy

Designed and operated the company's secure cloud platform and ISO 27001 security program, enabling the organization to reach certification while embedding security directly into engineering workflows. Cloud Platform & Security Architecture – Designed secure cloud architectures aligned with ISO 27001 Annex A controls – Implemented identity, access, logging and monitoring across AWS and GCP environments – Defined infrastructure security patterns and governance for production environments Infrastructure Engineering – Led infrastructure cleanup and modernization through Infrastructure as Code – Improved resilience and maintainability of cloud environments – Integrated security controls into infrastructure and CI/CD pipelines ISO 27001 Implementation – Designed and implemented the company's ISMS from scratch – Built and maintained the risk register, risk treatment plan and Statement of Applicability – Authored core security policies, procedures and governance documentation Audit Preparation & Certification – Mapped ISO 27001 controls to real DevOps and cloud practices – Coordinated evidence collection and remediation for security audits – Successfully supported the company through ISO 27001 certification Security Operations – Managed Google Workspace security and administration for the entire organization

BUILD & RUN In production – CI/CD with GitHub Actions, CloudFormation — 30% developer time savings – GCP/AWS/GitHub access rights management and overall infrastructure security improvement – Git best practices and access rights management – MongoDB database management – Python/Shell scripting and tooling, deployments, BigQuery import/export, Cloud Functions, SNS, SQS... – AWS/GCP infrastructure management and creation compliant with HDS standards (Health Data Hosting) – Cybersecurity documentation, procedures for HDS and FDA compliance – Cybersecurity audit passed with HAS (Haute Autorité de Santé / French Health Authority) – Cybersecurity awareness across team – Creation and improvement of monitoring, alerting, and log management with Datadog, GCP Cloud Logs, AWS CloudWatch – Peer recruitment – Cooperation with Dev, Medical, and QRA teams – End-to-end project management from infrastructure creation to FDA compliance (Roadmap through infrastructure setup)

RUN cloud native – Management of Kubernetes clusters in production – Containerization and creation of images for all application components via Docker, their integration into the registry, and verification with Xray – Creation and maintenance of Ansible playbooks – Setup and creation of monitoring, dashboards, and alerts with Prometheus/Grafana across the entire Crédit Agricole infrastructure – Log management with ElasticSearch – Falco POC – Pulumi POC – Industrialization of Ubuntu 18 → 20 version migration across the entire infrastructure

RUN on premise – Management of Linux environments (Debian 6 to 9) in production – Configuration of dedicated machines based on client requirements – Setup of Puppet and Terraform jobs and multi-machine deployments – Configuration and troubleshooting of MariaDB, PostgreSQL, and Oracle databases – Log management with ElasticSearch and Kibana – Management of GCP and GKE components (debugging, cluster creation, and tooling) – F5 BIG-IP debugging – Kubernetes cluster management – Bash automation scripts – Creation of an SSL certificate renewal tool for all platforms using Certbot

– Development of a backoffice application in Golang – Setup of Kubernetes components with Helm, chart creation, and infrastructure management – ElasticSearch learning and implementation – Setup and creation of dashboards and alerts with Prometheus/Grafana – CI/CD pipeline creation with GitLab CI/CD

– Prioriser les items dans le Backlog Product – Création d'User Stories – Recueil de feedback client – Conseils – Conduite de réunions – Résolution de problèmes – Répartition des tâches en fonction des compétences des développeurs