Yiadh TLIJANI

Context: Migrating legacy applications to cloud-native solutions and deployment on hybrid and multi-cloud infrastructures. ----- CLOUD-NATIVE MIGRATION -------------------- • Contributed to migrating 70+ legacy applications to Kubernetes and OpenShift platforms. • Assisted in transitioning from a single-AZ/region architecture to a multi-AZ/multi-region solution. • Developed operators and Helm Charts for deploying applications on Kubernetes/OpenShift. • Coordinated cloud-native initiatives for teams in Europe, India, and the United States. • Wrote a Security Concept validating system architecture, data security, access controls, and compliance. ----- CRITICAL INFRASTRUCTURES MANAGEMENT -------------------- • Ensured periodic updates of 10 Kubernetes/OpenShift clusters without service disruption. • Managed compute, network, security, and storage resources in private and public clouds. • Managed +50 Debian/Ubuntu servers hosting MySQL, ElasticSearch and HDFS clusters. ----- CI/CD & AUTOMATION -------------------- • Automated application deployment and management on Kubernetes/OpenShift using GitOps pipelines. • Implemented automated security scans (SAST/SCA) in Jenkins/GitHub Actions pipelines. • Automated infrastructure creation and configuration with Terraform/Ansible/Chef. ----- MONITORING & OBSERVABILITY -------------------- • Deployed and maintained monitoring and alerting systems with Prometheus/Grafana. • Designed 15+ Grafana dashboards and 50+ alert rules aligned with business SLOs. • Deployed and maintained centralized log collection solutions using the Elasticsearch stack. • Implemented proactive threat detection with Falco (intrusions, privilege escalations). ----- SECURITY & COMPLIANCE -------------------- • Strengthened K8s and OpenShift clusters security by implementing RBAC, policies, admission controllers. • Centralized secret management via Vault and automated SSL/TLS certificates with Cert-Manager. • Integrated Istio to ensure mTLS, observability, and traffic management between microservices. • Implemented Wazuh for automated CVE scanning, triggering alerts and ticketing on Jira/ServiceNow. ----- FINOPS -------------------- • Modeled future needs through historical metric analysis (Prometheus/Grafana). • Implemented intelligent autoscaling solutions for microservices and infrastructures. ----- SUPPORT -------------------- • Provided L1/L2/L3 support and participated to 24/7 on-call duties • Developed and implemented auto-remediation mechanisms and remediation plans. • Contributed to continuous improvement of service quality. ----- COLLABORATION -------------------- • Provided trainings and support to development teams on Kubernetes/OpenShift. • Shared expertise and formalized technological watch through internal presentations. • Maintained comprehensive documentation of architecture, processes, and procedures. ----- TECHNICAL ENVIRONMENT -------------------- Kubernetes, Openshift, Helm, Istio/Kiali, Ansible/Tower, Chef, Terraform, ArgoCD, Jenkins, Rundeck, Vault, Elasticsearch/kibana, Prometheus/Grafana, Falco, OPA/Gatekeeper, Trivy, kubesec, kubebench, Checkmarx, JFrog Artifactory, MySQL/Percona, AWS, SAP Converged Cloud, GitHub, Atlassian Suite (Jira, Confluence), ServiceNow, Python

CONTEXT: Supporting a development team in the process of managing and modernizing products. ----- CRITICAL INFRASTRUCTURE MANAGEMENT -------------------- • Deployed and monitored 30+ applications across 4 OpenShift clusters of 36 nodes. • Managed +120 RedHat/RHEL servers hosting the MapR platform. ----- CI/CD & AUTOMATION -------------------- • Automated infrastructure management with Ansible/Tower, Terraform, and Puppet. • Integrated SCA/SAST tools into continuous integration and deployment workflows. ----- SECURITY & COMPLIANCE -------------------- • Contributed to PCI-DSS certification for an environment hosting payment data. • Redacting a Security Concept for the cloud infrastructure (architecture, security, compliance, etc.). ----- MONITORING & OBSERVABILITY -------------------- • Designed 10+ Grafana dashboards and 30+ alert rules aligned with business SLOs. ----- SUPPORT & ON-CALL -------------------- • Provided L1/L2/L3 support and participated to 24/7 on-call duties. ----- COLLABORATION -------------------- • Wrote and maintained technical documentation (internal and client-facing). • Collaborated with development teams to integrate DevSecOps best practices. • Streamlined communication and processes between developers, Ops, SRE, and security teams. ----- TECHNICAL ENVIRONMENT -------------------- Openshift, Kubernetes, Rancher/RKE2, GCP, Helm, Puppet, Ansible, AWX, Molecule, Puppet, Terraform, Jenkins, Prometheus/Grafana, Elasticsearch/Kibana, MapR ecosystem, JFrog Artifactory, Bash scripting, Python

𝐓𝐡𝐞𝐃𝐞𝐯𝐎𝐩𝐬𝐁𝐨𝐨𝐭𝐜𝐚𝐦𝐩.𝐜𝐨𝐦 is an Ad-Free Blog aimed at providing tutorials, reference architectures and hands-on training in DevOps and Automation Technologies.

I worked as a software developer, within an annual academic project, on an european project called CLARUS. CLARUS aims at assuring a secure exchange of sensitive information between clients via non trusted third party servers (such as the Cloud). In this project, we implemented a secure searchable encryption scheme that enables keyword search over data encrypted with different keys. The scheme is practical and was designed to be included in a new system for protecting data confidentiality in client-server applications against attacks on the server. This encryption scheme allows the users to encrypt their data before outsourcing to the cloud, and searching over it without decrypting it in the server side. ➤ Responsibilities: Starting from a limited search ability (simple keyword search), my added values were: ● Improving the user search ability: numeric and alphabetic range queries; complex queries containg overlapping parentheses using advanced data structures (Tree, graphs) ● Development of sql queries interpreter supporting logical/numeric operators, overlapping parenthensis ● Development of a search user defined function UDF inside PostgreSQL based on a Java application using a free add-on module called PL/Java. ● Benchmarking & Performance evaluation ➟ Tools & Technologies: Java, PL/Java, PostgreSQL, MySQL, Cloud Computing, J2EE For further information, check the project website: http://www.clarussecure.eu/

Contribution to design and development of a distributed and scalable RCA (Root Cause Analysis) system in the scope of an experimental cloud infrastructure based on OpenStack to identify the origin of different type of failures in a multi-tenant cloud infrastructure. ➤ Responsibilities: ● Conception and development of stimulation components in the RCA sandbox. ● Conception and development of an interactive dashboard controlling all the sandbox components. ● Conception and development of an analytic tool aiming at identifying the correlation rules between the alerts and the metrics. ● Development of a prospective analysis helping the RCA users getting advantages of the RCA. ● Design and develop new backend features ● Write tools and scripts to provide automation and self-service solutions ● Implement, maintain, and improve application/system monitoring to help identify key performance metrics ➟ Tools & Technologies: OpenStack,analytics platforms (Spark & SparkSQL), Statistical modeling, configuration management tool (Ansible), Python & Shell scripting, Scala, Javascript, NodeJS.