Yacine D

Main achievements: • Contributed to designing an Azure Landing Zone using a Hub-and-Spoke network topology to securely host mission-critical workloads, including internet-facing applications, Kubernetes-based microservices, and AI-powered solutions • Implemented DevOps Pipelines and pre-defined, reusable Infrastructure-As-Code templates for provisioning Azure resources • Enforced governance and security standards on resource deployment with Azure Policy • Took advantage of Microsoft Fabric to enable FinOps governance and optimize Azure cloud consumption management • Implemented comprehensive logging solution for collecting operational and security logs. And used Azure Monitor to set up scalable monitoring that proactively addresses major infrastructure incidents • Enabled XDR/EDR protection across Landing Zone resources using Microsoft Defender for Cloud, enabled SIEM/SOAR with Microsoft Sentinel, and integrated incident response with OpenAI model for AI-driven security insights • Designed and deployed AI-Powered solutions leveraging Azure AI Foundry, AI Search (RAG), MCP and LLMs to automate document summarization, log analysis, and intelligent Q&A systems • Performed a global refactoring of .NET-based application, migrating it to a Kubernetes cluster and modernizing its architecture to align it with cloud-native principles of scalability, security, and observability Technology Stack: - Design reference: Microsoft Cloud Adoption Framework, Hub & Spoke - Governance: Azure Policy & initiative, RBAC - Compute: Azure App Service, Function App, Container App - Network: Azure Virtual WAN, Firewall, Virtual Network, DNS Private Resolver, FrontDoor, Azure App Gateway, WAF, DDoS Protection - Monitoring: Azure Monitor, App Insight, Alert, Network Watcher - Containerization: Azure Kubernetes Services, App Gateway for Container - Data Integration & Analytics: Microsoft Fabric, Data Factory, Event Hubs - AI: Microsoft Foundry, AI Search, OpenAI, MCP, Content Safety, Copilot - Security: Defender For Cloud, Sentinel, GitHub Advanced Security, Wiz - DevOps: Azure DevOps (Pipeline, Self-Hosted Agent, Git), GitOps (Flux) - IaC: Terraform, Bicep, Azure Verified Modules, PowerShell, Az Cli, Helm - SAST: Trivy, Chekov, npm-audit, GitHub Advanced Security

Worked for AXA Insurance company as Cloud Solution Architect for leveraging Azure Cloud platform and DevSecOps practices to address various business challenges and building modern Enterprise application. Main achievements: - Contributed to designing Azure based architecture that executes complex insurance actuarial models with Azure Batch and Kubernetes, then aggregates and analyzes the results with Databricks (Delta Lake, Spark) - Leveraged Databricks Lakehouse Platform (Delta Lake, Spark, MLFlow) for building Anti-Money Laundering solution used to comply with LCB/FT regulation - Worked on tuning Databricks performance to accelerate Delta lake operations using partitioning, z-ordering, caching and compaction techniques - Promoted DevSecOps practices (IaC, CI/CD, security scanning, static analysis, monitoring, testing) and tooling such Terraform, Ansible, Azure Devops, SonarQube, Checkmarx Technology Stack: - Compute: App Service, Azure Function, Redis Cache, Azure Kubernetes Services, VM, CycleCloud - Data & Storage: Azure SQL, Cosmos DB, Storage Account - Integration: Service Bus, Stream Analytics, Data Factory, Logic Apps - Data Analytics: Databricks, Apache Spark, MLFlow - Networking: Azure DNS, VNet/subnet, Vnet Peering, Vnet Integration, Private Link - Monitoring: Azure Monitor, Application Insight, Azure Dashboard - Security: Azure AD, PIM, Key Vault, NSG, Application Gateway/WAF, Azure Firewall, Checkmarx, JFrog Security - Devops: Azure Devops Pipelines, Terraform, Ansible, JFrog Artifactory, Powershell, Docker, Sonar, Helm - Development tools: Github, Visual Studio Code, Python

Worked for the one of the Big Four accounting firms as Cloud Architect with the goal of enabling the IT cloud transformation by leveraging Azure Cloud platform and Devops practices. Main achievements: - Contributed to designing an Azure landing Zone and Cloud Governance MVP to establish initial effective practices in term of cost management, security baseline, data residency, resource consistency, identity baseline, and deployment automation - Contributed to defining a cloud migration plan for cross-technology application portfolio based on Hub and Spoke network model - Enhanced the cloud security policy by leveraging RBAC and Azure AD features (SSO, Conditional Access policies, PIM) - Leveraged Azure PaaS & IaaS hosting models for designing cloud architectures that address the challenges of scalability, high availability, resiliency, security and flexibility - Implemented DevSecOps pipelines for modelling a fully automated CI/CD including Infrastructure as code provisioning, security scanning, static analysis, monitoring and testing tasks - Accelerated the Cloud Adoption by providing various guidelines and workshops related to Azure Cloud and DevsecOps practices Technology Stack: - Governance: Azure Policy, Blueprint, Management Group, Cost Management - Compute: App Service, Azure Function, Redis Cache, AKS, VM - Data & Storage: Azure SQL, CosmosDB, Storage Account - Integration: Azure Service Bus, Data Factory, Api Management, Logic Apps - Networking: VNet/subnet, Vnet Peering, Vnet Integration, Private Link, Hybrid Connection - Monitoring: Azure Monitor, Application Insight, Azure Dashboard - Security: Azure AD, Microsoft Identity Platform, PIM, Key Vault, NSG, Application Gateway/WAF, Azure Firewall - Devops tools: Azure Devops Pipelines, Terraform, JFrog Artifactory, Powershell, Docker, Sonar, Checkmarks - Development tools: GIT, Visual Studio, Visual Studio Code - Development Stack: .Net Core, .Net Framework, Java, React, Identity Server, Entity Framework

Worked for the world leader of the Prepaid Corporate Services as an Enterprise Cloud Architect for leveraging Azure Cloud and DevSecOps practices with the objective to address IT business challenges and building modern Enterprise applications. Main achievements: - Contributed to designing an Azure landing Zone at Enterprise scale level and modelling a consistent CI/CD processes based on DevSecOps standard - Contributed to designing Hub & Spoke network model for hosting mission-critical applications that are used by multiple BUs - Took advantage of Azure PaaS for running modern applications that address efficiently the challenges of scalability, availability security and flexibility - Enhanced the cloud security policy by leveraging RBAC and Azure AD (SSO, Conditional access, MFA) -Leveraged Azure Analytics Services (Databricks, Data Lake) for performing fraud and money laundering detection - Contributed to various guidelines and workshops for accelerating the Cloud adoption and DevSecOps practices across multiple BU (France, Portugal, UAE, Romania, UK...) - Leveraged Microservice architectures for building cloud-native applications that address the business of Prepaid corporate services Technology Stack: - Governance: Azure Policy, Blueprint, Management Group - Compute: App Service, Function, Redis Cache, AKS - Data & Storage: Azure SQL, Cosmos DB, Storage Account - Integration: Azure EventHub, Service Bus, Data Factory, APIM, LogicApps - Data Analytics: Azure Databricks, Apache Spark - Networking: VNet, Peering, Service EndPoint, Vnet Integration, Private Link - Monitoring: Azure Monitor, Application Insight, Dashboard, Cost Analysis - Security: Azure AD, Microsoft Identity Platform, Key Vault, NSG, App Gateway/WAF, Firewall, Checkmarx - Devops tools: Azure Devops Pipelines, Terraform, ARM, Powershell, Docker, Sonar - Dev tools: GIT, Visual Studio, VS Code - Development Stack: .Net Core, React, Identity Server, EF, Python

I was hired by ZAGS as Solution architect to extend the R&D CORE team's capabilities to define a new high-level architecture for insurance software built on .Net & Azure Technologies. My main role was to provide high level solutions based on well-known pattern and cloud technologies to improve the overall software architecture. My main achievements: - Defined technical roadmap for the modernization of a legacy group life solution following a Micro-Service approach and cloud PaaS hosting model - Addressed scalability, availability and security challenges of client-facing web applications by using Azure PaaS computing - Reduced time to market by defining a smooth automated deployment process using TFS - Worked closely with integrators to refine the cloud architecture planning and to define the system integration plan based on customer’s requirements and network constraints - Took advantage of TFS capabilities to organize SCRUM development projects and generate work progress reports - Provided guidance for designing and developing cloud-compliant web applications based on best practices in terms of scalability, security, performance and testability - Performed technical assessment of new technologies and third-party libraries to define backend/frontend technology stacks - Involved in the hiring process of IT employees as well as selection of contractors Technology Stack: - Azure Infrastructure: Virtual Machine, VNet, App Service, SQL Database, Redis Cache, Active Directory, Storage, CosmosDB, Service Bus. - Development stack: .Net Core, .Net Framework, WCF, React, Identity Server, Entity Framework, NService Bus - Security: Identity Server, OpenId Connect - Development tools: TFS, GIT, Visual Studio

I was hired by CAST as .Net Software Architect with the objective to provide high level consulting services for major clients and to be technical leader for development team within the software publisher department My main achievements: - Implemented a quality benchmarking solution http://www.appmarq.com based on multi-tiers architecture and hosted in Azure Cloud - Set up a Software factory using Team Foundation Server - Led a several consulting services and audits for various customers (Natixis, Quatrem, BPCE, EDF,…) - Conducted technological surveillance centered on dotnet technologies and TFS Technology Stack: - Infrastructure: Azure, IIS - Development Stack: C#, .Net Framework, ASP MVC, WCF, Entity Framework, - Development environment: TFS, Visual Studio - Data Source: SQL Server, PostgreSQL

I was hired by Novedia as a technical expert of Microsoft .Net technology and a member of .Net skills center providing technical advice and consultancy to clients and management on matters of software architecture, design and development. My main achievements was: - Being a technical leader within several development teams, in which we were in charge of designing and implementing a Dotnet secured extranet and client/server applications. - Assisted clients in the selection of technical solutions based on proof of concept development and strength/weaknesses analysis. - Wrote best practices guidelines. - Conducted various technology watch centered on .Net technologies. - Participated to the Pre-sale activity. Technology Stack: - Development: C#, Net Framework, WCF, Net Framework , EF, Nhibernate, ASP.NET, SilverLight, WPF, SQL Server - Development environment: TFS, Visual Studio, - BI: SSRS, SSIS, SQL SSAS

Within the R&D department, I was brought on to lead a short sized team (5 persons) in charge to improve the product line-up with new tools such as knowledge base, network discovery tool and internal invoicing management tool. My main achievements was: - Supervised entire lifecycle of development project. - Defined a detailed design by using UML. - Wrote internal framework components and new business features. - Mentored a developer team and helped junior developers gain understanding of C# and .NET framework and apply this accordingly. Core Technology Stack: - Development: Framework .Net, C# Asp .Net, ADO .Net, .Net Remoting, Web Services. - Data Source: SQL Server, Oracle.