Professional Summary
DevOps engineer and IT architect with nearly 20 years in Linux systems, infrastructure and automation. I build and run the Kubernetes platform behind mission-critical communications systems at Airbus, across online and fully air-gapped deployments, and I write the architecture studies behind it: geo-redundancy, multi-network, gateway migration, platform sizing, etc. Earlier I led a small team turning an in-house speech-to-text system into a product deployable inside banking trading rooms.
Technical Skills
- Kubernetes and containers: Kubernetes OpenShift Kubespray Helm containerd Docker Calico MetalLB Kong kgateway cert-manager CSI Velero
- Infrastructure as Code and CI/CD: Ansible Terraform GitLab CI Git
- Observability: Prometheus Grafana Loki Thanos Alertmanager Zabbix
- AI and LLM platforms: vLLM Ollama LiteLLM Open WebUI
- Virtualization and cloud: Proxmox VMware vSphere and ESXi OpenStack KVM LXC OVH AWS GCP Azure Scaleway
- Storage and backup: Ceph TrueNAS NFS S3 Bacula Rsync
- Networking and load balancing: TCP/IP VLAN DNS DHCP PXE HAProxy Keepalived Nginx Cloudflare
- Security, identity and PKI: Keycloak Step CA WireGuard OpenVPN pfSense OPNsense iptables Greenbone ZAP
- Linux: Debian Ubuntu Red Hat CentOS FreeBSD
- Scripting: Bash Python PHP
- Databases: PostgreSQL MariaDB / MySQL
- HPC: Slurm OpenMPI InfiniBand
Work Experience
Senior DevOps Engineer – Airbus / Public Safety and Security
April 2022 – Present
- Tech lead on Kubernetes and infrastructure subjects. Own the Ansible and Kubespray stack that builds every cluster, across online and fully air-gapped deployment models.
- Design and deliver geo-redundancy across customer programmes.
- Contribute to the solution architecture backlog and work with the lead system architect on transversal topics.
- Run the Kubernetes, storage and hypervisor layers of the integration lab, automated with Ansible rather than operated by hand.
- Built a hypervisor sandbox (Proxmox on Ceph, ESXi, OpenStack) to evaluate virtualisation alternatives ahead of licensing changes.
- Own the Kubernetes platform engineering documentation: what is supported, the validated platforms, storages, components and topologies, and what is committed to customers.
- Run fleet-wide audits that surface configuration and security defects before they are reported.
- Led the Kubernetes CI/CD, guiding the engineer who developed the pipelines: multi-deployment validation, light end-to-end testing, and an inventory generator.
- Evaluate suppliers and products: designed the benchmark comparing AI coding agents on task completion, autonomy, tool use and safety, and assess an LLM vendor for use on internal GPU infrastructure or as SaaS.
- Built and run an internal GPU platform providing self-service inference.
- Train and onboard colleagues: Terraform and Kubernetes labs, AI tooling sessions with the written material and tests to go with them, and code review across teams.
Kubernetes Kubespray Ansible Terraform Helm GitLab CI containerd Calico Kong kgateway cert-manager MetalLB CSI (NFS, vSphere, Cinder, S3) Velero Ceph Prometheus Grafana Loki Thanos Zabbix Proxmox VMware vSphere and ESXi OpenStack OVH TrueNAS Step CA
Senior Linux Administrator / DevOps Engineer / Team leader – Bertin IT
March 2018 – March 2022
- Led the team that turned an in-house speech-to-text system into a turnkey product installable in high-security environments such as banking trading rooms.
- Built the product's application stack, distributed as packages, and a complete CI/CD pipeline adopted as the reference by other products.
- Designed, deployed and ran the infrastructure for both SaaS and on-premise offerings, along with internal infrastructure and suppliers.
- Installed and qualified the product at customer sites, wrote the installation procedures and trained customers on administration.
- Owned service levels: indicators, incident and request tracking, operational reporting and process improvement.
- Managed the team (organisation, objectives, skills development) and took part in pre-sales, project delivery and cost reduction.
GitLab CI Terraform Ansible Proxmox Docker Zabbix Grafana WireGuard LAMP / LEMP
IT manager – Sat-Ocean
January 2016 – October 2017
- Set the IT strategy and ran the information system: architecture recommendations, business projects, suppliers, user support and training.
- Built and ran HPC clusters of 10 to 16 nodes (Ubuntu, OpenMPI, NUMA) for Hycom and Matlab workloads, over InfiniBand and Ethernet across 4 racks.
- Operated a 300 TB NFS storage server (RAID 60, multipath, replication) and highly available services with Keepalived, HAProxy and Nginx.
OpenMPI InfiniBand NFS Proxmox Ansible Docker HAProxy Keepalived Zabbix OpenVPN
System and network administrator – Serveur-Express
October 2010 – November 2015
Level 3 incident resolution and 24/7 on-call for a hosting provider; client projects from needs analysis through build and run; pre-sales. Hosting stacks on Proxmox with LAMP/LEMP, Nginx, Keepalived, Postfix and Bind.
System and network administrator – Agarik
January 2009 – October 2010
Level 2 incident resolution, maintenance and 24/7 supervision in rotating shifts for a managed hosting provider, on LAMP stacks, VMware, mail and DNS services.
Entrepreneur
December 2005 – May 2017
Ran my own IT company with more than 300 customers, one third small businesses and two thirds individuals: IT outsourcing, hosting on Proxmox, website development and hardware sales.
Certifications
Education
BTS Informatique de gestion, option ARLE (business computing, networks and administration) – 2005