Marc Bourrel

Intervention sur des environnements critiques avec un objectif clair : fiabiliser la production et réduire les risques opérationnels. 🛠️ Infrastructure & Orchestration - Pilotage et optimisation d’une plateforme conteneurisée multi-environnements (Prod, Recette, Homologation) - Amélioration continue de la stack Docker Swarm permettant de renforcer la stabilité et limiter les incidents en production 📊 Observabilité & Réduction du Time-To-Diagnosis - Conception et déploiement d’un monitoring critique (Grafana / Prometheus / Loki) permettant une détection quasi immédiate des anomalies - Mise en place de dashboards exploitables en temps réel pour améliorer la prise de décision technique - Identification proactive de défaillances (ex : incidents NFS) avant impact utilisateur 🔐 Sécurisation & Résilience des Données - Conception d’un système de backup automatisé garantissant l’intégrité et la disponibilité des données critiques (APIG, Keycloak) - Développement d’une alternative aux dumps MongoDB, plus agile et industrialisable - Durcissement des pipelines CI/CD et mise en place d’une gestion sécurisée des secrets 💡 Conseil & Gouvernance Technique - Participation aux décisions d’architecture avec une approche orientée scalabilité, sécurité et maintenabilité - Force de proposition pour structurer les bonnes pratiques DevOps et réduire la dette technique

On assignment through Squad As a Cloud & DevOps Engineer, I have developed solid expertise in automation, orchestration, and the management of complex environments. 🔹 Advanced Linux: administration, troubleshooting, performance optimization, shell and Python scripting to automate tasks and workflows. 🔹 OpenStack: full tenant management, project creation and configuration, deployment of COTS applications, image and resource management. 🔹 Kubernetes: deployment and operation of containerized applications, namespace and resource management, monitoring/alerting setup, CI/CD integration to automate deployments, scale-out/scale-in procedures, cluster decommissioning and migration, improving workload resilience and security. 🔹 Artifactory: rights and permissions management, cleanup of obsolete artifacts, dependency lifecycle optimization, Docker image build and publication. 🔹 GitLab CI/CD: pipeline design and automation, continuous integration, automated deployments, implementation of DevOps best practices. 🔹 Terraform & Cloud-Init: infrastructure deployment as IaC (virtual machines, networks, storage), integration with Ansible for precise provisioning and configuration. 🔹 Ansible: industrialization and automation of Linux server configuration, centralized management of roles and playbooks, combined with Terraform for full IaC. 🔹 Technical Documentation: writing and maintaining DEX, DAT, PEX, How-to guides, Guidelines & Hints to ensure clear and durable knowledge transfer.

On assignment at Airbus Defense and Space from 05/2025 to 09/2025.

☸️ Kubernetes & VMware Tanzu - Management and administration of Kubernetes clusters via VMware Tanzu (Mission Control, Tanzu Kubernetes Grid, Tanzu Cloud Services). - Deployment automation using Helm and kubectl. - Implementation of scaling strategies (autoscaling) and load balancing (Ingress Controllers, Load Balancer). - Configuration management (ConfigMaps, Secrets) and volume management (Persistent Volumes, Persistent Volume Claims). - Securing applications with RBAC, Network Policies, Service Accounts, and TLS/SSL. - Performance monitoring with Tanzu Observability and Aria for Logs. - Deployment of microservices applications via Kubernetes, Docker, and Helm Charts. - Continuous Integration and Continuous Delivery (CI/CD) with Azure DevOps Pipelines. 🧰 Docker & Docker Swarm - Management and deployment of containerized applications with Docker (Dockerfile, Docker Compose, Docker Swarm). - Securing network configurations and access management with Docker Swarm. - Securing services with Docker Secrets and managing environment variables. ☁️ Azure Cloud Expertise - Setting up resources on Microsoft Azure, including Virtual Machines (VMs), Resource Groups, and Virtual Networks (VNets). - Managing storage accounts, blobs, Azure SQL databases, and Key Vaults for secrets and certificate management. - Deployment automation via Infrastructure as Code (IaC) with Terraform. - Vulnerability management with Azure Security Center and handling CVE (Common Vulnerabilities and Exposures). 🤝 IT Leadership and Management - Coordination of DevOps project priorities, ensuring timely delivery and budget compliance. - Establishing KPIs to measure system performance (availability, response time, deployment success rate). - Managing the technological roadmap and anticipating future IT needs.

🌟 Network Engineering & IT Project Leadership 🔧 Network Design & Segmentation - Expertise in creating and segmenting secure, high-performance networks tailored to organizational needs. 🤝 Leadership & Project Management - Proven ability to manage and deliver IT projects on time and within budget, ensuring alignment with strategic objectives. 📝 Documentation Excellence - Skilled in producing clear and comprehensive technical documentation (DAT, DEX), ensuring seamless knowledge transfer and operational continuity. 💡 Diverse Technological Expertise - Hands-on experience with cutting-edge solutions: StormShield, Cisco Switches, Cisco Access Points, Aruba, and VPN technologies.

🌟 Engeneer/SysAdmin 🎯 Technical Support (Level 1 & 2) - Delivered efficient and proactive incident resolution, ensuring user satisfaction and uninterrupted operations. 💻 IT Asset Management (300+ Devices) - Oversaw and maintained a fleet of over 300 devices, including 35 client workstations, with meticulous and optimized management. - Implemented a secure VPN and advanced network configurations (Cisco, Stormshield). - Successfully interconnected SQUAD with Orange, enabling seamless and reliable communication. 🔍 Audits & Security - Conducted in-depth client audits to identify technological and security improvement opportunities. - Proactively managed vulnerabilities and deployed patches using Bitdefender. 🚀 Network Infrastructure Management & Projects - Supervised network flow rules via Stormshield, ensuring optimal security. - Coordinated a strategic office relocation, including: - Installation of primary and backup fiber connections. - Procurement and setup of critical equipment (rack cabinets, UPS). - Complete network cabling implementation. ☁️ Cloud Management & Automation - Defined and enforced rules in Azure AD/Intune: - Configuration of Microsoft Defender for Endpoint and Windows 10 Update Ring. - Managed Windows server updates, ensuring a secure and high-performing infrastructure. 🛠️ Process Optimization & Documentation - Designed and enhanced internal processes to boost operational efficiency. - Authored clear and detailed procedures to facilitate the adoption of best practices. 🤝 Client Relations & Collaboration - Regularly engaged with clients to understand their needs and deliver tailored solutions. - Pursued self-training on innovative technologies like Docker, maintaining cutting-edge expertise.

During my year of study, I acquired as experiences: - The maintenance of the internal computer park (analysis and diagnosis of Software & Hardware failures thanks to GLPI) - Hardware and software deployment (Windows, Linux operating systems, as well as network configuration) - Server administration (Windows 2012R2, ActiveDirectory, backup, IIS) - Operating systems and messaging (configuration of Windows / Linux systems) - Virtualization (VMware / VirtualBox / VCenter)

One year of training in the field of HelpDesk - GLPI approach - User PC mastering via Microsoft Deploymen Toolkit - Linux approach - Inventory management for users, relationship with suppliers to have continuous peripherals