Paul Baudrier

Overview: Open-source web platform (my-devops-lab.com) enabling DevOps teams to visually assemble their technical stack (CI/CD, Cloud, Monitoring, IaC, Security) and generate a complete end-to-end workflow. Roles & Responsibilities: – [Front-End] Interactive workflow builder (drag & drop), UI component architecture, stack visualization interface (Next.js, React, TypeScript) – [Back-End] API design, data layer, tool catalog management and persistence – [Infrastructure] Platform architecture design; DevOps tooling catalog (12 categories, 60+ tools); functional domain classification (CI/CD, IaC, Cloud, Monitoring, Security); technical documentation per tool (use cases, strengths, limitations)

Overview: Deploying a Jellyfin streaming platform on a NAS server, allowing more than 80 users to watch series, movies, and anime from multiple devices (web browser, smartphone, smart TV). Key Contributions: – Installed TrueNAS on a custom NAS – Deployed Portainer to manage Docker containers (Docker, Portainer) – Mounted storage disks (6 TB) – Deployed Docker Compose stack including Jellyfin, Sonarr, Radarr, Jackett, and Deluge images – Implemented container monitoring and observability (Prometheus, Grafana, OpenTelemetry) – Exposed services through a domain name using reverse proxy (Traefik, AWS Route 53)

Non-profit co-founded to support teenagers and young adults from Paris 15th district through three activity pillars: sports, arts, and gastronomy. – Co-founded the association: legal structuring and bylaws drafting – Established first strategic partnerships (Novaxia, Credit Mutuel) – Presented the association to public institutions and partners to secure funding (City Hall, Department Council, Ministry of Youth and Sports) – Organized institutional visits (National Assembly) for youth participants – Co-led sports workshops for middle-school students

My Mission: BIS Europe scope takeover - AWS & GCP architecture redesign - SRE & L2 team leadership - Automation - Monitoring Key Responsibilities: – Lead Architect for BIS Europe cloud initiatives – Managed SRE teams (France) and L2 teams (India) – Contributed to the group AWS Landing Zone and to the creation of the group GCP Landing Zone – Infrastructure redesign: migration from CloudFormation to Terraform (web, back-end, API) – Designed an international AWS scheduler architecture (EventBridge Scheduler + Ansible automation across 2,000+ AWS accounts) – Led migration from Google Apigee to Apigee X – Delivered Vault POC for European Business Lines: designed the Vault architecture on Kubernetes, deployed via Helm and ArgoCD, covering access management, secret scoping, and AWS assume-role connectivity across Business Lines – Automated ServiceNow workflows (DMD, requests, CI/CD integration) – Designed, standardized, and maintained Terraform/OpenTofu modules on the internal registry, with strong quality, reusability, and multi-team governance requirements – Industrialized the IaC module CI/CD pipeline (validation, linting, testing, documentation generation, automated publishing) to ensure reproducible and auditable releases – Designed and delivered a reusable semantic-release module (Conventional Commits, automated changelog, semantic versioning, Git tagging) consumable by all teams to standardize application lifecycle version governance across the group – Led FinOps initiatives on AWS environments: workload rightsizing, cost and anomaly alerting, migration to optimized instance families, and commitment strategy through Reserved Instances / Savings Plans – Built Grafana dashboards to track CI/CD runners, complementing Splunk observability – Migrated ElasticSearch clusters to OpenSearch – Reworked Packer templates to the latest standards (HCL, plugin-based architecture) – produced multi-region AWS golden AMIs with CIS hardening, vulnerability scanning (Trivy), and automated publishing through GitLab CI/CD – Worked with Agile Scrum methodology (Jira) – Produced technical architecture documentation (HLD/LLD equivalents, runbooks) – Trained delivery and operations teams – Overhauled the Disaster Recovery Plan (DRP) for the Europe scope: audited the existing inadequate plan, redesigned all procedures and architecture from scratch, and led DRP exercises across Business Lines

My Mission: On-Premise to AWS migration - Architecture redesign - Vault implementation - Automation - Monitoring Key Responsibilities: – Designed AWS cloud architecture and migration phases – Planned and implemented migration procedures – Designed high-availability Vault architecture (Terraform) – Implemented Vault assume-role connectivity to AWS accounts (1,400) – Automated Vault access management (Ansible) – Migrated all group secrets from multiple sources (AWS Secrets Manager, KeePass) – Created LDAP groups in Vault (team and personal secret scopes) via Ansible – Migrated Linux fleet management from Puppet to Ansible – Industrialized and automated On-Prem Linux fleet maintenance (Ansible) – Built Grafana dashboards for On-Prem services and server monitoring – Implemented centralized logging (ELK Stack) – Implemented real-time alerting (Prometheus) – Deployed and administered OpenShift platform (multi-node, high-availability cluster) – Configured RBAC on OpenShift / Kubernetes (Roles, RoleBindings, LDAP integration) using least-privilege principles – Containerized and migrated legacy applications to OpenShift using Helm and Kustomize – packaged APIs and back-end services, full chart lifecycle governance (versioning, dependencies), per-environment overlays (dev, staging, prod), and release industrialization through GitLab CI/CD – Worked with Agile Scrum methodology (Jira) – Produced technical architecture documentation (HLD/LLD equivalents, runbooks) – Trained delivery and operations teams – Designed and implemented a Disaster Recovery Plan (DRP) – Automated backup and Vault restart procedures (Ansible)

My Mission: On-Premise to AWS migration - Architecture redesign - Project architecture delivery Key Responsibilities: – Led large-scale migration of critical applications from OVH to AWS – Managed VMs on VMware vSphere (creation, movement, restoration, networking) – Developed Ansible playbooks (Rundeck) – Redesigned Linux server automation (On-Prem and AWS) with Ansible – Delivered IaC infrastructure (Terraform) for 15 projects (Data Lake, Panda, IA Plan, ...) – Contributed to the implementation of the group AWS Landing Zone – Designed and deployed Amazon Workspace / Cognito architecture (Autocad use case) – Designed AI and Autocad project architectures (AWS Workspace) – Deployed iTop (IT management) with Terraform IaC – Built infrastructure for new APIs (Terraform, AWS Lambda) – Implemented Google Apigee for API management – Deployed and managed EKS clusters hosting Docker-based microservices – Migrated On-Prem applications to Docker containers deployed on EKS – Managed Helm charts to simplify and industrialize Kubernetes deployments – Defined and enforced RBAC policies on Kubernetes clusters (namespace and team-level access control) – Implemented Kubernetes observability stack (Prometheus, Grafana) with service availability alerting – Implemented GitHub Actions CI/CD pipelines (IaC, secrets, linter, pull requests, ...) – Automated monitoring onboarding for new resources (Centreon / Ansible) – Implemented centralized monitoring and logging (ELK Stack) – Designed and implemented DRP / BCP – RPO/RTO definition, failover procedures, restore exercises, and on-call runbooks – Industrialized AWS Backup strategy – multi-account plans (PROD, DEV), retention by data classification, and full backup/restore automation via Terraform – End-to-end design and delivery of the group AWS Landing Zone as primary technical owner – Ansible stack (complete industrialization) – multi-account architecture (PROD, DEV, Staging), AWS Organizations, Service Control Policies (SCP), centralized SSO, security baseline (GuardDuty, CloudTrail, AWS Config) – team handover – Industrialized AWS account provisioning via Terraform – SCP enforcement, tagging, Transit Gateway, FinOps governance – FinOps: automated stop/start scheduling for EC2, RDS, and ECS (Terraform) – Industrialized the golden AMI factory with Packer (HCL, latest standards) – reusable templates, multi-account builds, hardening, and CI/CD integration via GitHub Actions – Produced technical architecture documentation (HLD, LLD, runbooks)

Overview: Development of a platform on Polygon MATIC blockchain enabling users to read manga and receive rewards for each reading session. Key Contributions: – Designed Front-Back-Blockchain architecture (CloudCraft) – Built KYC back-end microservice (user verification) – Built Flask API for user authentication and core services – Built ReactJS front-end to present the product – Built dedicated KYC front-end (ReactJS - Ballerine library) – Implemented API unit tests (Pytest) – Delivered Terraform IaC for VPC, Amplify (front-end), Lambda (back-end), networking, and Route 53