Mouad EL BAKKALI

– Designed and deployed a hybrid Kafka platform combining on-premises self-managed Kafka with Confluent Cloud (SaaS) to support cross-entity business use cases in a regulated insurance financial environment. – Defined integration standards, including AVRO schema management, centralized schema registry, topic naming conventions, and security policies (BYOK encryption, RBAC, ACLs, PrivateLink). – Implemented Kafka architectural patterns such as multi-tenancy, dynamic routing, event lifecycle governance, and topic design best practices. – Led technical workstreams around CI/CD automation, observability (monitoring/logging), platform support (L1/L2), in close collaboration with infrastructure, networking, cloud, and security teams. – Acted as Kafka SME for project teams: architecture validation, Kafka onboarding, support to developers and integrators, and assistance with Kafka artifacts and boosters

– Defined the technical architecture: Designed and documented technical choices and integration models for Confluent Community Kafka and Apache NiFi. – Full containerized installation and configuration: Deployed the Confluent Kafka Platform (KRaft, Broker, Schema Registry, Kafka Connect) across INT, PPROD, and PROD environments. – Monitoring and control tools: Implemented Datadog, akhq, kcat, and Portainer. – Documentation and training: Produced initialization guides and best practice handbooks for Admin, Dev, Ops, and Analyst teams. – Industrialization and governance: Established CI/CD pipelines, created a User Club, and defined a RACI model. – Kafka accelerators: Developed Consumer, Producer, and Streams accelerators to standardize practices.

– Defined the technical and functional architecture: Identified suitable EDA patterns, leveraging lessons learned from similar projects. – Analyzed the current architecture and developed the roadmap: Designed a migration path towards the target architecture, taking SGDBF's specific non-technical requirements into account. – Alignment with the Design Authority: Ensured architectural decisions are consistent with the overall transformation program objectives. – Produced the platform architecture dossier: – EDA architecture principles, selection of key patterns, physical and logical guidelines. – Deployment and security architecture. – Definition of the target and transitional architectures.

– Study, Framing, and Assistance in Selecting the Data Streaming Solution – Definition of the Platform's Architectural Choices (Integration Patterns, Tools, DevSecOps, CI/CD, PaaS/IaaS Practices, GCP/Azure Landing Zone Integration) – Inclusion of Observability, Security, and Audit Log Features for Enhanced Monitoring and Compliance – Establishing the Foundations of EDA and Data Streaming Capabilities through an EDA Center of Enablement – Management of the Data Streaming Center of Excellence / Enablement Service Center (6 People) – Enabler & Accelerator for Development & Code

– Conducted a multi-level audit of the existing landscape covering ESB (TIBCO BW5), ETL (Talend), API Management (Apigee, CA Broadcom), file transfers (SFTP, CFT), and point-to-point exchanges. – Led the target architecture study for a new cloud-ready integration platform aligned with modern standards (microservices, EDA, centralized monitoring). – Defined a progressive migration roadmap towards a service- and event-driven architecture integrated with BNP RE's cloud environment. – Provided recommendations on core components (Kafka, Spring Boot, APIM, monitoring), their integration, sizing, and implementation patterns (replay, monitoring, secure data flows). – Developed a comprehensive roadmap: flow breakdown, migration criteria, identification of pain points, and modernization levers with high ROI. – Presented a technical and functional monitoring solution based on event aggregation to ensure end-to-end traceability.

– Design data platform architecture and data integration patterns to support all business use cases (batch, real time, On Premise, cloud native, ...) – Understand business teams inquiries to manage and handle onboarding workflow – In coordination with delivery managers, support and manage business tribe leaders to onboard internal and external applications (SAP 4/H, Tibco, Software providers, ...) – Design and build generic microservice templates for data flow orchestration – Manage and coordinate workload between internal and external teams (Data Engineers, Data Analysts, DevOps Engineers) – In collaboration with Global IT and Master Data teams, plan & execute other countries onboarding – Documentation: – Data Governance (catalog, description, flows, source, target, ...) – Integration Patterns Guidebook (ingest, publish, subscribe, routing, ...) – EDA Developer Guidebook (EDA Patterns, connectivity, authentication, ...)

– Led the analysis of use cases identified by Louis Vuitton, leveraging experience from similar projects to identify and implement Event Driven Architecture (EDA) patterns for a new platform. – Conducted a comprehensive evaluation of Louis Vuitton's existing architecture and developed a roadmap to achieve the target architecture for the transformation program. – Incorporated non-technical decisions from Louis Vuitton into the project plan, ensuring alignment with their specific requirements and constraints. – Aligned the project with the principles of the Design Authority, ensuring that all architectural decisions supported overarching design and business goals. – Developed a detailed technical and functional architecture dossier for the platform, which included: – Principles of EDA architecture (key/macro patterns, physical and logical architecture orientations, industrialization pipelines, governance, and security) – Strategic roadmap towards the target architecture.

– Deployed Consul Service Mesh to improve security of Kafka microservices across Kubernetes and VMs – Enhanced security by enabling ACLs and service intentions between services – Automated the setup of Consul Service Mesh and the activation of ACLs and intentions across services – Implemented Prometheus for metrics collection by configuring Kafka Exporter, Prometheus Server, and Prometheus Adapter to gather autoscaling-relevant metrics – Integrated these metrics with Kubernetes Event-driven Autoscaling (KEDA), Horizontal Pod Autoscaler (HPA) to enable real-time autoscaling of Kafka consumers and microservices – Developed a shell script to automate the Kafka autoscaling process – Integrated the solution into the CI/CD pipeline using Ansible

– Setting up technical stack (Grafana, AlertManager, Prometheus, Exporters (Kafka_lag_exporter, node_exporter, ...) – Setting up and automation through Ansible scripts of advanced Kafka Topic definition strategies (retention, compaction, ...) – Monitoring dashboards (Nodes, Kafka Apps and Kafka Brokers) and alerting mechanisms – Support and define remote access to monitoring platform processes – Definition of intervention methods through the incident management process, the list of operating actions and intervention procedures for the different types of alert

– With the Architecture committee, design and build the multi-cloud data integration platform – Providing advice and support to initialize business project with Kafka Platform – Support business program implementation, training and onboarding – Providing Business continuity plan and Disaster recovery plan recommendations for Multi Availability Zones Clusters – Providing data replication and compression strategy for HA and data storage optimization – Multi Cluster deployment – Kafka administration tools and scripts – Deployment and configuration automation with Ansible roles and playbooks – Terraform modules, Ansible roles and playbooks – Mirror Maker deployment for data mirroring and synchronization between Datacenters – Setup HTTP data transfer through Kafka Connect and Kafka REST Proxy – Design the Data security and governance layer for data access and rights management (ACL) – Design and setup data monitoring layer: – Monitoring and notifications stack (Prometheus, AlertManager, Grafana, Traefic) – Prometheus exporters for data monitoring (cluster Nodes, JMX Exporters, Kafka Exporters)

– Direct project management initiatives from conceptualization, R&D through development, implementation and delivery – Implementation of principal functional components: ingest, process and distribute: – Ingestion: the solution supports several data ingestion protocols (JMS, Kafka topics, REST API, FTP polling, batch, ...) – Processing: Data processing is event oriented. Depending on the source and nature of the event collected, NiFi normalization and enrichment processes are applied to prepare transformations, storage and indexing in ElasticSearch cluster. – Access and exploration: Business processes are monitored by the serving and insights layer, which provides standardized data and dashboards to monitor and analyze process instances and inter-application events. – Design of additional features and plugins: Alerts recommendation engine, Apache Atlas governance module, SMTP Notification system, ADFS SSO security – Managing R&D team and different project's phases – Support for deployment and administrators training

– Coordinate project management activities and resources – Proposal and design of technical architecture (Kafka, Connectors, ) – Implementation of integration patterns to collect data (Change Data Capture) and process data (parallel and sequential microservice processing pipelines) – Setup and configure Kafka platform (Confluent Community distribution) – Go to production recommendations (BCP, DRP, HA, Synchronization, ...) – Enable and setup security layer SSL/SASL (kerberos) – Design processing topologies and build event driven Kafka Streams microservices – Design and setup continuous integration and deployment pipelines (docker/kubernetes, maven, nexus, Gitlab CI/CD) – Build Ansible playbooks for Kafka multi environment deployment – Design and setup health check and monitoring tools (JMX Exporters, Prometheus, Grafana)

– Design choices and technical architecture of Data platform – Setup and configure the Kafka cluster and various ecosystem components Zookeeper, Kafka Connect, Schema Registry, Rest Proxy – Design and setup Kafka data access and rights management module (SSL, SASL, ACL) – Design and setup Kafka Connect Source (Debezium) as Change Data Capture distributed system – Design and build event driven Kafka Streams microservices – Design and build CI/CD pipelines (docker, maven, archiva, Gitlab) – Setup monitoring and alerting tools (KafkaHq, Grafana, AlertManager, Prometheus, JMX, node and Kafka Offset exporters) – Establish project planning and delivery millstones

– Pre-sales: POC, technical choices at RFI. Drafting technical and commercial response – Implementation of an open-source and cloud services Data architecture (NiFi, Flume, Kafka, Amazon EMR, Amazon Suite Elastic, ...) – Setup Fast Data streaming layer to feed the DataLake using Apache Kafka. – Design data segregation plan for the different use cases (datamarts) – Design and setup data governance plan to ensure Data protection in accordance with the GDPR – Data traceability via data lineage – Rules for data usage, data retention and data destruction.

– Provide open-source alternative solution to reduce software license costs – Specification of solutions' logical architecture – Setup and build acceptance, preprod and production environment – Migrate and build multiple business processes to proposed technology stack – Proposal, configuration, and implementation of an alternative to existing JMS service – Manage development team

– Implementation of ECM Solution v2.0, new features and ExtJS migration to Angular 2.0 – Implementation of the new BPM and CM Backend with Camel RESTful for Angular services – Manage application development and delivery – Manage technical evolutions for the new hosted technical solution, ensuring high availability (WebSphere DMGR cluster, SQL Server cluster) – Technical specification and logical architecture of the different platform components – Design and build multiple micro-BPM microservices to collect, process and distribute data – Design and build Enterprise Service Bus solution (Camel) to ingest and process online documents – Technical adviser and development manager – Implementation of ESB solution to handle internal and external interaction using multiple patterns: – integration (JMS, REST, SOAP, filesystem), routing, transformation