Ewen BARA

DevOps Engineer / Infomaniak Network SA

Technical Architect / Orange France

• Data Repository Redesign

  • Audit of the existing system (Univention Corporate Server)
  • Study of alternative solutions
  • Creation of prototypes
  • Definition of the migration strategy

• Transformation of SOAP APIs to REST APIs compliant with TMF standards

• Support for technical teams

  • Recommendations on configurations
  • Development of action plans

• Participation in defining architectural principles and guidelines

Security Architect / Orange France

• Support for project teams

  • Advice on functional and technical enhancements
  • Recommendation of architectures adapted to business and technical needs
  • Monitoring of vulnerabilities identified during security audits
  • Validation of network flow opening requests
  • Definition of technical solutions in response to security alerts and requirements

• Implementation of Solutions Developed by the DevSecOps Team

  • Support for teams in adopting solutions developed by the DevSecOps team
  • Knowledge sharing and dissemination of best practices
  • Assistance with integrating solutions into CI/CD pipelines

• Cybersecurity Monitoring

  • Monitoring of vulnerabilities, threats, and security best practices

• Technology Monitoring

  • Identification and evaluation of new technologies and evolving architecture and development practices

DevSecOps Architect / Niji

DevOps Engineer / Orange Cloud for Business

• Maintain operational condition

• Redesign of Terraform and Ansible projects to make them usable

  • Code factorization by creating modules for Terraform and roles then collections for Ansible
  • Implementation of an Ansible testing strategy via Molecule and ansible-test
  • Standardization of practices and establishment of best practices
  • Tools update

• Setting up a Gitflow

  • Defining processes to follow
  • Configuring of Gitlab groups and projects
  • Creating Gitlab-CI templates

• Response to customer change requests

  • Study of needs
  • Architecture proposal and implementation
  • Recommendation about the state of the platform and the desired target

IAM Engineer / Adeo

• Oracle LDAP Directory Migration to IBM

  • Target Architecture Design
  • Migration Strategy Definition
  • IBM Solution Deployment
  • Data Synchronization via IBM Security Directory Integrator

IAM Engineer / Decathlon

• Platform Management

  • Deployment and orchestration of cloud infrastructures on AWS via Terraform:
    • Development of reusable modules for provisioning EC2 instances, configuring security groups, and managing load balancing (ELB, F5).
    • Impact analysis and review of sub-modules during updates
    • Advanced management of state files (tfstate) during major updates
  • Automation of service configuration via Puppet modules
  • Administration and maintenance of the system platform (RHEL 6 and 7)

• Scripting (Bash, PHP, Perl)

  • Writing scripts for specific transformation needs
  • Development, debugging, and maintenance of web applications (PHP, Symfony, and Zend)
  • Code review and continuous integration during releases
  • API design and implementation

• Tool maintenance and operation

  • Administration of LDAP servers (PingDirectory)
  • Management of centralized authentication services (PingFederate, SAML, OAuth2)

DevOps et free software engineer / Consort NT

Linux System Adminitrator / Scalair

• Platform Deployment and Administration

  • Design of reference architectures based on libre solutions (Web stack: Apache, NGINX, PHP, Tomcat, HAProxy; Database stack: MySQL, MariaDB, PostgreSQL)
  • Gathering requirements, followed by a phase of adapting the standard model to the specific needs of the client

• Design and Evolution of Shared Services

  • Implementation and maintenance of centralized authentication
  • Design and administration of SSH bastion hosts for secure access management
  • Management and optimization of automated backups
  • Implementation of monitoring tools (system and application metrics), configuration of alerts

System and Network Administrator / Unis

• Maintaining Operational Condition of Systems

  • Incident handling until resolution
  • Improvement of monitoring rules
  • Implementation of automated remediation mechanisms

• Network Transformation to Meet New Needs

  • Gathering and analyzing constraints and concerns
  • Selection and ordering of hardware (Cisco ASA, Catalyst switches, Cisco Aironet)
  • Installation and configuration of hardware

• Security Audit

  • Inventory of assets (services, processes, software, hardware, etc.), including:
    • CI/CD pipelines (Jenkins, SonarQube, Nexus)
    • IAM systems (Active Directory, SSO)
    • Web services (Apache, Tomcat)
  • Identification of non-conformities
  • Corrective action plan:
    • Upgrade of services to be retained
    • Decommissioning of obsolete services

• Study and Implementation of Remote Access

  • Comparison of market solutions
  • Testing of solutions Selected solutions
  • Deployment of validated solutions
    • Secure site-to-site connections via IPSec
    • Mobile access for users via OpenVPN

Production tools developer / Byook

• Evolution of existing tools

  • Upgrade from Qt4 to Qt5
  • Porting tools to make them cross platform
    • OS: Windows, Mac et Linux
    • Langage: C/C++

• **Bug fixes

  • Collection of bug reports
  • Reproduction and analysis of behavior
  • Code correction and validation with the reporter

• Development of an internal SDK

  • Code factoring into the SDK
  • Integration into applications