
Younes Djebbouri
Senior Architect & DevOps Engineer
Salaire / Taux journalier
Freelance
Expertises
À propos
Introduction
Architect & DevOps Engineer with 6+ years of expertise in Azure cloud-native solutions and hybrid infrastructure. Delivered €335K+ in cumulative cost savings through FinOps optimization, architected secure AKS clusters, and automated complex deployments with Terraform across enterprise environments. Specialized in Kubernetes, Azure architecture, and ML/AI platform enablement—transforming infrastructure into scalable, resilient, and cost-efficient solutions.
Expérience de travail
ARCHITECT & DEVOPS ENGINEER
ACC
sept. 2024 - Présent
2 ans 2 mois
– Architecture & Solution Design: Led technical architecture and solution analysis for multiple cloud-native initiatives. Authored comprehensive Technical Architecture Documents (DAT), evaluating trade-offs across scalability, security, cost, and maintainability to guide design decisions – Cluster AKS Deployment: Designed and deployed a private AKS cluster integrated into a new Landing Zone within a Hub-and-Spoke architecture, leveraging API Server VNet Integration for secure and isolated communications – Infrastructure Automation: Automated deployments using Terraform with internally developed modules tailored to project requirements, adhering to best practices for modularity, scalability, and reusability. – Azure Arc Integration: Implemented an on-premises AKS cluster leveraging Nutanix Kubernetes Engine as the infrastructure solution, integrated with Azure Arc for unified management across hybrid environments. – API Management & Integration: Designed and implemented Azure API Management (APIM) solutions to expose internal and external APIs securely, including authentication, throttling, monitoring, and developer portal enablement. – Data Integration: Developed and optimized ETL pipelines with Azure Data Factory, leveraging Integration Runtimes for secure connectivity with on-premises OT systems and ensuring seamless data ingestion into Azure – Databricks Hybrid Platform: Designed and implemented a hybrid Databricks architecture with a private cluster for critical workloads and public workspaces for development and testing, enabling collaborative data processing and analytics – Monitoring and Performance Testing: Deployed advanced monitoring solutions using Azure Monitor and Log Analytics to analyze Kubernetes logs and workload metrics. Conducted performance tests to validate cluster resilience, scalability, and network efficiency – AI Platform Enablement: Contributed to the design and integration of AI platforms (Azure AI Foundry), supporting data science and machine learning use cases through secure, scalable cloud-native architectures. – ML Platform Enablement: Collaborated with data teams to design a Machine Learning Platform using Databricks, integrating ETL pipelines, analytics workflows, and machine learning tools – FinOps & Cost Optimization: Identified and implemented cost-saving measures across the Azure infrastructure, including right-sizing resources, eliminating idle workloads, and leveraging Reserved Instances, resulting in annual savings of over €85,000 – Security Compliance: Reduced Azure Security Score by implementing Azure Policy and Managed Identities, ensuring compliance with best practices and corporate standards
DEVOPS ENGINEER
INRAE
sept. 2023 - sept. 2024
1 an 1 mois
– Spearheaded the migration of Nextcloud to a Kubernetes cloud environment, significantly improving operational agility, scalability, and resilience. – Customized the Nextcloud UI through advanced patch development to optimize user interaction and experience. – Led cloud infrastructure management using Terraform (Infrastructure as Code), ensuring seamless provisioning and management of resources. – Developed highly optimized custom Docker images, driving a major initiative to containerize legacy infrastructure, resulting in improved deployment speed and system performance. – Orchestrated Kubernetes deployments using Helm, streamlining the lifecycle management of containerized applications across multiple environments. – Provided expert administration of RHEL infrastructure, implementing Docker-based container management, MaxScale/MariaDB database optimization, and monitoring through advanced Grafana/ELK stacks. – Automated the entire RHEL migration process from version 7 to 8 using Ansible, reducing manual efforts and enhancing operational efficiency. – Designed robust Python and Shell scripting solutions for task automation, integrated with Rundeck to automate complex workflows. – Managed large-scale AWS S3 bucket ecosystems, implementing best practices for data integrity, availability, and security across the organization. – Delivered high-level N3 support, resolving complex incidents and providing technical leadership across multiple teams. – Conducted comprehensive server performance optimization (HAProxy, Apache, databases), scaling the architecture to support high user traffic. – Implemented CI/CD pipelines using GitLab CI, accelerating development cycles and ensuring rapid, high-quality code releases. – Executed performance and load testing (JMeter, Locust), ensuring application scalability and stability under heavy traffic. – Leveraged AWS services (EC2, S3, EKS, RDS, Route 53, IAM) for robust, scalable cloud solutions.
ARCHITECT & DEVOPS ENGINEER
CITEGESTION - Projet MUSE
mai 2023 - sept. 2023
5 mois
– Infrastructure Architecture & Segmentation: Designed and segmented Azure infrastructure to meet scalability, security, and availability requirements. Leveraged Terraform to enforce infrastructure consistency across all environments – Custom Terraform Module Development: Engineered reusable Terraform modules aligned with internal architecture standards, significantly reducing deployment times and improving infrastructure maintainability – Azure DevOps Automation: Automated key Azure DevOps workflows (Terraform import/plan/apply), reducing manual operations, minimizing human error, and accelerating infrastructure delivery cycles – Training & IaC Enablement: Delivered in-house training on Terraform and Infrastructure as Code principles, promoting knowledge sharing and building long-term capability across engineering teams – Incident Management & Support Coordination: Served as technical lead for major production incidents in Azure, engaging directly with Microsoft support to resolve high-impact issues affecting business continuity – Disaster Recovery Modernization: Audited and redefined the Disaster Recovery Plan (DRP), implementing cost-efficient, resilient cloud-based recovery strategies using Azure Backup, Site Recovery, and availability zones – FinOps & Cost Optimization: Drove FinOps initiatives across the Azure estate, identifying and eliminating unused or overprovisioned resources, applying reserved instances, and aligning capacity with demand-achieving significant operational savings and improving budget forecasting – Stakeholder Collaboration & Solution Delivery: Worked closely with business and IT stakeholders to translate complex business requirements into scalable, cost-effective Azure architectures – High Performance Computing (HPC) Enablement on Azure: Designed and supported compute-intensive workloads on Azure, leveraging high-performance VM families (compute and memory optimized) to support data processing, analytics, and others workloads. – Secure Hybrid Compute Architecture: Architected hybrid compute solutions connecting on-premise high-throughput systems to Azure services through private networking, ensuring low-latency and secure data exchanges for compute-heavy workflows. – Cloud Optimization Roadmap: Designed and executed an infrastructure optimization roadmap focused on resilience, operational efficiency, and cost control-ensuring sustainability and long-term value of the cloud platform
ARCHITECT & DEVOPS ENGINEER
SNCF
juin 2020 - juin 2023
3 ans 1 mois
– Cloud Architecture & Technical Documentation: Architected scalable, secure Azure-based solutions leveraging both PaaS and IaaS services. Conducted in-depth solution studies and authored Technical Architecture Documents (DAT) to validate technical decisions and ensure alignment with business needs. – Infrastructure Automation: Automated infrastructure provisioning and application deployments using Terraform, applying modular, reusable templates that optimized resource usage and deployment velocity across environments. – Disaster & Business Continuity Planning: Led the design and implementation of multi-region Disaster Recovery (DRP) and Business Continuity (BCP) strategies for both IaaS and PaaS workloads, ensuring high availability, data resilience, and RTO/RPO compliance. – Citrix to VDI Migration: Managed the full migration from Citrix to Azure Virtual Desktop (AVD/VDI), including solution assessment, DAT preparation, user profiling strategy, and resource cost modeling, significantly reducing complexity and operational overhead. – FinOps & Cost Optimization: Spearheaded a FinOps initiative that resulted in annual savings of over €250K by optimizing reserved instance usage, eliminating idle resources, rightsizing VMs, and enforcing tagging/governance policies for cost visibility. – Monitoring & Incident Response: Developed advanced KQL queries for Azure Monitor and Log Analytics, drastically improving the accuracy and speed of incident detection and root cause analysis in production environments. – CI/CD & AKS Lifecycle Management: Led CI/CD pipeline design and operations using Jenkins and Azure DevOps, managing container-based deployments on AKS. Improved release cadence and reduced rollbacks through test automation and canary deployments. – Governance & Security Compliance: Defined and enforced Azure governance controls including Network Security Groups (NSG), Role-Based Access Control (RBAC), policies, and budget alerts to ensure security compliance and operational efficiency – Legacy Modernization & Cloud Migration: Orchestrated the migration of legacy applications to Azure, re-architecting where necessary for performance and cost-efficiency, and ensuring zero-downtime cutovers. – API Management: Designed and deployed Azure API Management (APIM) solutions, securing APIs exposed to internal consumers and external partners while enabling throttling, analytics, and developer portal capabilities. – Security Collaboration & Hardening: Worked closely with cybersecurity teams to enhance Azure environment security, conducting regular penetration testing, vulnerability scanning, and implementing remediation plans across cloud resources.
SRE (Site Reliability Engineer)
G7 TAXI
janv. 2020 - juin 2020
6 mois
– Ensured high system reliability by overseeing cloud infrastructure performance and availability, leveraging AWS and Azure services to maintain optimal uptime. – Managed incident response and troubleshooting through JIRA, proactively identifying and resolving production issues to ensure uninterrupted service delivery. – Implemented monitoring solutions using Datadog and Centreon, setting up detailed alerts and dashboards to improve system observability and enable rapid response to anomalies. – Streamlined cloud infrastructure management by automating routine tasks and infrastructure provisioning using Terraform and Ansible, reducing manual intervention and improving operational efficiency. – Led performance tuning and capacity planning, configuring HAProxy for load balancing and optimizing system performance under varying workloads. – Collaborated with development teams to optimize CI/CD pipelines (Docker, Jenkins), integrating automated testing and deployment processes that improved application reliability and reduced deployment times. – Enhanced system security by implementing Azure AD access control policies and encryption standards, ensuring compliance with organizational security protocols. – Proactively identified performance bottlenecks and conducted root cause analysis, using custom scripting (Python, PowerShell) to automate diagnostics and optimize system response times. – Contributed to incident post-mortems, identifying key improvement areas and documenting lessons learned to refine SRE processes and prevent recurrence of major issues. – Maintained containerized environments using Docker, optimizing application deployment and resource usage across multiple cloud platforms (AWS, Azure)
Cloud Administrator
TECHNIPFMC
juin 2019 - déc. 2019
7 mois
– Managed O365 licenses – Handled various tickets on SNOW – Managed the company's Active Directory (Azure) – Resolved various incidents (network, AD, Docker, etc.) – Managed access rights – Used Microsoft Intune for application management and deployment – Ensured quality assurance and business continuity – Followed IT best practices/ITIL framework – Managed Kubernetes clusters with RANCHER – Created, configured, and managed clusters on Azure and GCP – Created High Availability clusters on-premise with Ansible + Kubernetes + Vagrant + HAProxy – Used Git (GitLab & GitLab CI) – Created and configured CI/CD Pipelines for testing (Jenkins, Kubernetes, PostgreSQL databases, Kubernetes, Ansible, Terraform, GitLab, Vagrant) – MONITORING WITH PROMETHEUS/GRAFANA – IaC with (Terraform, Ansible) – Environment: Linux & Windows
Technical Support Coordinator
SERVIER FRANCE
janv. 2018 - mai 2019
1 an 5 mois
– Handled N1 and N2 incidents (ServiceNow) – Contributed to migration projects from Windows 7 to Windows 10 (SCCM), Office 365, and Azure – Used Microsoft Intune for application management and deployment – Initiated into Microsoft Azure Cloud (AZ-900 and AZ-103) – Wrote technical documents – Used virtualization for assistance and IT troubleshooting – Installed and configured a network service – Installed and configured Office 365
Formation
–
Bachelor's, Telecommunications and Networks
2017 - 2018
1 an 1 mois
Licences et certifications
eJPT (Junior Penetration Tester) Certification
Délivré le : janv. 2024
Terraform Associate Certification
Délivré le : janv. 2024
AZ-500 Certification: Azure Security Engineer Associate
Délivré le : janv. 2024
AZ-305 Certification: Azure Solutions Architect Expert
Délivré le : janv. 2024
AZ-104 Certification: Azure Administrator Associate
Délivré le : janv. 2021