Abdellah – Kubernetes, Linux, Ceph

Design and operation of a self-service container platform used by internal development teams to provision secure, monitored environments on demand. The product delivers Kubernetes-as-a-Service (hosted control planes via Kamaji, Helm-managed resources, Network Policies, and centralized Thanos/Prometheus monitoring) alongside a Namespace-as-a-Service offering on OpenShift (self-service namespace provisioning and resource quotas), plus bare-metal OpenShift deployments

• Managed a fleet of 750 Kubernetes clusters • Designed and implemented a Kubernetes-as-a-Service platform (v2) • Used Kamaji for provisioning hosted control planes • Developed Helm charts to manage control plane resources • Implemented Network Policies to secure the control plane • Developed an API proxy in Go (Golang) • Deployed centralized Kubernetes monitoring with Thanos and Prometheus • Integrated Alerta for centralized alerting • Evaluated Kubernetes Gateway API solutions • Led the architectural design and technical decisions for a Namespace-as-a-Service offering on OpenShift • Developed an API for provisioning namespaces, resource quotas, and associated resources • Created the product's automation workflows • Deployed OpenShift clusters on bare metal via ABI (Agent-Based Installer) • Migrated Kubernetes clusters to a containerized version of Illumio • Deployed a Consul service mesh across Kubernetes clusters

A leading provider of open-source cloud technologies, empowering businesses with scalable and efficient solutions. The company's expertise lies in leveraging open-source software and cloud platforms to drive growth, innovation, and cost optimization.

• Provided L3 support for Kubernetes and OpenStack environments. • Deployed and managed MAAS for bare-metal provisioning. • Designed and implemented a custom Kubernetes platform using Suse Rancher. • Configured Cilium with BGP for cluster networking. • Established a Ceph storage cluster using Cephadm. • Automated bare-metal provisioning using OpenStack Ironic. • Set up a high-availability OpenStack cluster using Kolla-Ansible. • Managed a Ceph storage cluster via cephadm. • Implemented Teleport and automated virtual machine onboarding using Ansible. • Launched centralized monitoring using VictoriaMetrics. • Set up a centralized logging infrastructure with Loki and Vector. • Developed CLI tools in Python for migrating VMs between OVH and OpenStack platforms. • Administered a private GitLab server. • Created Kubernetes clusters using ClusterAPI. • Transferred applications from GCP to on-premises Kubernetes clusters. • Shifted applications from Kubernetes to AWS ECS Fargate. • Provisioned and managed infrastructure on DigitalOcean with Terraform and ArgoCD. • Established an OpenSearch cluster. • Created CI/CD pipelines via GitHub Actions.

Design of an on-premise virtualization platform to replace an existing AWS deployment, hosting the customer's production applications across two datacenters. Built on Proxmox with a Ceph storage cluster and made highly available through Ansible-automated HAProxy/Keepalived, PostgreSQL replication (repmgr) with pgBackRest backups and WAL archiving, and automated TLS certificate renewal. The role implied an end-to-end delivery, from hardware procurement to application migration, with level-3 support.

• Installation and configuration of a platform spread across 2 datacenters • Deployment of a Ceph cluster • End-to-end project management, from equipment procurement to application migration from AWS • Development of Ansible playbooks to automate: HAProxy and Keepalived configuration (high availability), user management on VMs, PostgreSQL configuration with pgBackRest (backups and WAL archiving), repmgr configuration for inter-site replication • Development of scripts for automatic TLS certificate renewal via Certbot • Level 3 (N3) support: Proxmox, Linux, PostgreSQL

Site Reliability Engineering mission focused on defining and implementing a backup strategy, upgrading and managing Hardware Security Modules (HSMs), supporting developers in resolving performance issues, and deploying a monitoring and alerting stack with Grafana, Prometheus and Alertmanager

• Defined and implemented a backup strategy.
• Designed a multi-site architecture for the new on-premises data center.
• Managed custom GitHub runners with layer caching and resource optimization.
• Deployed a monitoring solution using Grafana, Prometheus, and Alertmanager.
• Maintained logging and monitoring platforms.
• Improved existing Kubernetes deployments.
• Upgraded different Terraform modules.
• Performed a performance test on Thanos.

A specialized French technology company focused on open-source cloud infrastructure.

• Established a federated logging infrastructure using Fluentd and Elasticsearch. • Provided N3 support for OpenStack and Kubernetes. • Deployed and managed OpenStack platforms using Kolla-Ansible. • Migrated client Kubernetes managed services to Flux. • Developed an Alertmanager webhook using Python. • Produced CI/CD workflows using Tekton and ArgoCD. • Designed and managed homemade Helm charts. • Deployed OpenDistro on Kubernetes with Keycloak.

Build-out of an OpenShift-based delivery platform for internal teams. Deployed OpenShift clusters and ArgoCD in non-privileged mode, developed a custom OpenShift operator to automate Network Policies and Resource Quotas, and set up CI/CD pipelines with Tekton, centralized logging with OpenDistro for Elasticsearch, and identity and access management with Keycloak.

• Set up OpenShift clusters • Established ArgoCD in non-privileged mode • Developed an OpenShift operator for automated management of Network Policies and Resource Quotas • Designed and implemented CI/CD pipelines with Tekton • Deployed and configured OpenDistro for Elasticsearch on OpenShift • Implemented and configured Keycloak (identity and access management)