Mohamed Ghenaim

AWS Cloud Architect — Foundation Team Designed and deployed critical AWS building blocks for a platform migration, delivering reusable Terraform modules consumed by DevOps teams. • Hybrid multi-cloud DNS: Route 53 / Direct Connect / PowerDNS with centralized governance via AWS Organizations & RAM • Managed PKI: two-tier CA hierarchy via AWS PCA + automatic ACM renewal • Cost reduction: 60% EC2 savings through serverless scheduling policy • CI/CD platform: Terraform module for deploying a GitLab Runner fleet on EC2 (manager/worker architecture with AWS Fleeting plugin for autoscaling) + custom Debian AMI via Packer • IaC: catalog of 6 reusable Terraform modules (gitlab-runner, pki-certificate, dns-record, ecr, codeartifact) • SRE: rebuilt GitLab Runners after major incident, ensuring deployment continuity

Infrastructure Kubernetes GitOps Conception et administration d'un cluster K3s de production sur Hetzner (+20 services : IA, Automation, DBs). Réalisations clés : • GitOps & IaC : Provisioning via Terraform (création de modules génériques) et Ansible. Gestion du cycle de vie applicatif via ArgoCD et Helmfile. • Sécurité & Réseau (Zero Trust) : Implémentation de Cilium (CNI), Linkerd (Service Mesh mTLS) et gestion sécurisée des secrets (SOPS, External Secrets, Infisical). • Storage & Résilience : Stockage distribué Longhorn avec stratégies de backup S3 automatisées. Stack : Kubernetes, Terraform, ArgoCD, Cilium, Linkerd, Longhorn, SOPS.

AWS DevOps Production Engineer — Cloud Native BU L3 Build & Run support across 12 AWS multi-account clients (80% Run / 20% Build). Night on-call duty. Designing and deploying new application stacks. • ECS stack deployment: Docker PHP images, full AWS service configuration, RDS + HashiCorp Vault secrets management • Monitoring: Splunk/OpenTelemetry integration on AWS (EC2 & ECS agents) • Patch management: migrated AMIs from Ubuntu to Debian, updated GitLab Runners & docker-machine • Automation: Ansible playbooks for application deployment on EC2 instances

Linux DevOps Production Engineer — "Service Commun Portail" Team L3 Build & Run support for Orange Portal and URL redirection services. Production deployment automation and developer support during releases. • Migrated high-traffic URL redirection service from Ubuntu 14.04 to 18.04 (Apache config, IP addressing, Ansible automation) • CI/CD: built reusable GitLab CI/CD pipeline templates shared across all SI teams • Kubernetes: migrated internal web service (Ingress, Helm, deployments, Kibana logging) • CloudFoundry: migrated URL alias service to private cloud (orgs, spaces, security rules, network routes, GitLab CI/CD pipelines) • Monitoring: configured Xymon probes for OpenStack Swift/Keystone platform health checks • Docker Swarm: migrated DAM application (Nuxeo plugin), optimized Dockerfiles, automated deployment pipelines

Linux Infrastructure Production Engineer — CSI/LINUX Team Build & Run for Linux infrastructure. System administration, application configuration, and service continuity. • ELK cluster: deployed and maintained ElasticSearch, Logstash/Kibana (Docker Swarm), Kafka/Zookeeper • CI/CD automation: Rundeck jobs (Ansible playbook execution, user ACL management), Ansible playbook creation/optimization • Docker: created Docker Swarm cluster for ELK stack and container administration • ITSM: Ansible playbook for FusionInventory agent deployment (GLPI) • Red Hat: Satellite channel management, Identity Manager installation & configuration