Mohamed SAIDI

Within the Service Catalog squad at CMA CGM, the objective is to build a platform (service catalog) guaranteeing a clickops approach in order to facilitate the deployment of various cloud services. catalog) that guarantees a clickops approach to facilitate the deployment of different cloud services for various end-users. ● Interactive template configuration to facilitate the task of creating stacks for users with cycloid ● Development of an API with FastAPI to streamline access to AWS resources and services. ● Use of Packer to create and configure AMI golden images that comply with CMA compliances, ready to be used and deployed in various environments. ● Development of a Renovate bot to reduce the cognitive load when maintaining Terraform Terraform modules and providers, as well as Python and npm dependencies. ● Improved code quality by writing unit tests with Pytest, guaranteeing better reliability reliability, maintainability and rapid bug detection. ● Building and deploying a clear, maintainable documentation portal with MkDocs. ● Design, packaging and deployment of various applications on the Kubernetes cluster (EKS), using Docker for containerization and Helm to manage deployment deployment charters. ● Using Prometheus and Grafana to monitor and analyze key performance indicators (KPIs) of different applications, creating dashboards and alerts to ensure the smooth and provide useful information for decision-making. ● Set up automated DevToProd pipelines as part of CI/CD. ● Automate end-to-end builds of various stacks proposed for end users via Terraform. ● Simplified deployment, configuration and management of the platform infrastructure with ansible, python and shell. ● Providing support and documentation (technical and functional) for the use of the platform to ensure adoption and ease of use by other teams. Technical environment : Terraform, Cycloid, Concourse CI, AWS, Ansible, Nginx, VAULT, Gitlab CI, Python, Packer, Prometheus, Grafana.

Clients: Stellantis - Bpifrance - Administration of platforms hosted on the AWS Public Cloud & managing DevOps chains. - Implement FinOps best practices within the AWS environments. - Creation of scalable, highly available, secure and resilient infrastructures on AWS and Kubernetes. - Configure Traffic routing on EKS using Nginx Ingress. - Provisioning of Infrastructure as code (IAC) using AWS Cloudformation and Terraform. - Implementation of monitoring, dashboards, logs, metrics and alerting with Datadog and AWS Cloudwatch. - Creation of CI/CD pipelines with Jenkins and FluxCD to accelerate and secure production deployments. - Reinforce the compliance layer on kubernetes clusters using kyverno. - Integrated HashiCorp Vault with Jenkins, fortifying security measures by safeguarding sensitive information and enhancing overall credential management in the CI/CD pipelines. - Streamline Infrastructure deployments using Atlantis and Infracost. - Configuring and maintaining Apache and Nginx servers. - Creation of Data Synchronization jobs on different AWS storage services (EFS, S3) with AWS DataSync. - Implementation of security practices at every stage of the development lifecycle. - Deployment and management of Swagger RESTful APIs on AWS API GATEWAY. - Task automation and configuration management with Ansible, Python and Bash. - Deploying Web Applications Using AWS Elastic Beanstalk. - Implemented automated dependency management using Renovate, ensuring timely updates and enhanced project stability by systematically addressing outdated libraries and packages. - Automate the creation, packaging, configuration, and deployment of Kubernetes applications with Helm. Technical Environment : Kubernetes, Terraform, Jenkins, Datadog, AWS, Docker, Helm, FluxCD, Ansible, Atlas MongoDB, Nginx, Vault , Swagger, Gitlab, Linux, SonarQube, Python.

Tasks: - Setting up a private gitlab instance. - Configuration of keycloak for authentication to Gitlab. - Development of bash and Python scripts for internal projects. - Automation of deployment processes and destruction of preprod infrastructure (cost optimization). - Management and Optimization of the EKS cluster (Architecture, Price, Scalability, HA, …). - Write technical and functional documentation. - Injection of Dast/Sast security layers to the existing CI/CD pipelines. - Setup a Log management system using FELK stack. - Implementation of a solution for monitoring and measuring the performance of the kubernetes cluster. - Configure Databases Backups with kubernetes cronjobs. - Implementation of a GitOps solution (GitlabCi / ArgoCD / Sealed Secrets). Technical Environment : Gitlab CI/CD, ArgoCD , Kubernetes , Helm , Terraform, Keycloak , Python , Shell , Prometheus, Grafana , Filebeat , AlertManager , ELK stack.