resume.json

{
  "basics": {
    "name": "Mathieu CARBONNEAUX",
    "label": "Infrastructure IT Devops / Solutions Architect",
    "photo": "https://www.ch2o.info/wp-content/uploads/2017/03/photocv-1x1.jpg",
    "picture": "https://www.ch2o.info/wp-content/uploads/2017/03/photocv-1x1.jpg",
    "image": "https://www.ch2o.info/wp-content/uploads/2017/03/photocv-1x1.jpg",
    "website": "https://www.ch2o.info",
    "summary": "Passionate about computers since my youngness, I started programming when i was 12 years old (logo, basic, Z80 assembler, 680x0, C/C++). </br></br>I followed training initially focused on electronics, industrial IT then on management IT (client/server programming, network, system, database and network wriring), which gave me a global vision of computing from hardware to software. </br></br>With more than 27 years (1997) of professional experience, where I alternately had the roles of application developer, database administrator, system engineer, network engineer, security engineer, middleware expert, to end up doing the Solutions Architect, in a wide variety of business and technical applications. I am what so we call a multi-potential. </br></br>And i always managing the architecture, operations, implementation and design aspect in parallel (Architect and Devops). </br></br>Currently I participate in almost all of SFR SI's infrastructure architecture orientations. </br></br>Particularly experienced in distributed client/server architecture, I know more than 10 programming languages, more particularly the Java ecosystem, I have worked on almost all j2ee type application servers and everything that goes around. </br></br>I've very strong experience in SSO and IAM technologies. </br></br>A long experience with middleware (MFT/MOM/API GW). \nA long experience to Web Hosting Security Infrastructure (Reverse Proxy, Waf, Firewall).</br></br>At the moment we have started to develop Kubernetes operators for our middleware industrialization needs. Always interested in new technologies, I love experimenting with new concepts. </br></br>Always interested in learning new things. My latest personal passion is the Internet of Things (I return to my origins as an industrial computer scientist) and also Machine learning…",
    "location": {
      "city": "Paris",
      "countryCode": "FR",
      "region": "Îles de France"
    },
    "profiles": [
      {
        "network": "Github",
        "username": "Mathieu CARBONNEAUX - Projects",
        "url": "https://github.com/ZenProjects"
      },
      {
        "network": "Linkedin",
        "username": "Mathieu CARBONNEAUX",
        "url": "https://www.linkedin.com/in/mcarbonneaux/"
      }
    ]
  },
  "work": [
    {
      "company": "SFR",
      "position": "Infrastructure IT Devops / Senior Solutions Architect",
      "website": "http://www.sfr.com",
      "startDate": "2003-04-01",
      "summary": "I first worked as a transactional system expert, I ensured the engineering and administration and support of SFR's transactional platforms (Tuxedo and Encina). As a result, I also worked a lot with database administrators (Informix, Oracle).</br></br>I also worked as a MOM and IBM MQSeries expert.</br></br>At the same time, I also ensured the engineering of unix AIX and Linux systems (it was me who introduced Linux to SFR's IS) (industrialization, construction of installation masters, packaging). I collaborated with my colleagues on Solaris and HP-UX.</br></br>Then I had to manage SFR's web hosting infrastructure, first on Iplanet Web Server on Solaris, then on Apache under Linux. Then I participated in the implementation of reverse proxy and Load Balancer infrastructure in front of Web servers, such as Deny All, Zeus ZXTM (currently owned by ivanti), F5, alteon...</br></br>On this occasion I started working in the network teams that take care of Switch, Firewall, Router (BGP), VPN and Proxy of the SFR IS.</br></br>At the same time I had to take charge of the engineering of SFR's LDAP Directories (Netscape Directory Server, then iPlanet, then Oracle, then Fedora Directory Server).</br></br>I designed and developed the SFR gateway API (and also participated in the evangelization of SOA at SFR), initially based on IBM DataPower then based on opensource solution (Apache/mod_perl) and home development.</br></br>Afterwards I set up the first SFR SSO based on siteminder. Then we redeveloped our specific solution at SFR instead of siteminder with the use of certificate on the workstation as a second authentication factor. And recently I implemented a solution based on Standard SAML2 and OpenId Connect, with keycloak.</br></br>I participated in the construction of our Kafka infrastructure (MOM Pub/Sub).</br></br>I participated in the evangelization of virtualization and the generalization of the use of Linux operating systems (instead of Unix Solaris/Aix/HP UX) and virtualized Windows within the SFR IS. Then after on containers and Kubernetes.</br></br>Recently I designed a new hosting architecture based on kubernetes (Talos/Cilium), haproxy, and an in-house operator to manage SFR hosting in an industrial manner.</br></br>I set up a security data lake of all the security logs of the SFR IS (FW, Router, Switch, Reverse proxy, VPN, etc.) based on a clickhouse cluster and powered by Kafka.</br></br>One of my latest projects was the implementation of the SFR Google Cloud Platform landing zone, the implementation of a dedicated connection adduction with GCP, and the SSO connection with our keycloak. As part of this project, I supported the teams in the implementation and design of the Landing Zone, particularly on the design aspects of our MLOps platform.</br></br>I also recently worked on the SSO connection of salesforces with our SSO.</br></br>Currently I am training on artificial intelligence, to implement anti-ddos mechanisms based on artificial intelligence. I have implemented a security data lake (more than 300TB of data) to prepare this work.",
      "highlights": [
        "Agil Method: Kanban, Scrum",
        "CI/CD: Github, Gitlab, gitea, drone, Argoscd",
        "Cloud: Building GCP Landing Zone, Implementing GCP Dedicated Interconnection, Connecting the IAM GCP with Keycloak",
        "Container architecture: K8S, Cilium, Containerd, Docker",
        "Network architecture: Routing, BGP, SD WAN, SDN, K8S Overlays, VXLAN, Firewalling, DPDK, XDP&eBPF, Load Balancing, Reverse Proxy",
        "SOA: ESB, SOAP, REST, GRPC/Protobuf, Service Mesh",
        "Architecture Normalization: SOA, J2EE, ESB, Java, C/C++, PHP, Web Hosting, UML, Merise",
        "OS and Midleware Packaging: AIX, HP-UX, Solaris, Linux, Windows, MQSeries, Websphere, Weblogic, JBoss, Tomcat, NodeJS, PHP, Netscape/Sun Directory Server, CFT, Pulse/Brocade/Zeus VTM",
        "SGBD: Oracle, Informix, Mysql, Postgresql, ClickHouse, Mangodb",
        "NoSQL: Memcached, Couchedb, Ignite, Infinispan",
        "SSO: SAMLv2, Oauth, OpenId Connect, Ocra, Keycloak, CA Advanced authentification, Siteminder, ADFS",
        "Server consolidation: Linux/VMWare, Windows/VMWare, AIX, Solaris, HP-UX",
        "Production Automation: Selfcare infrastructure deployement automation"
      ]
    },
    {
      "company": "ATOS Origin",
      "position": "IT Infrastructure Enginer",
      "website": "https://atos.net/en/",
      "startDate": "2001-01-01",
      "endDate": "2003-03-31",
      "summary": "IT Infrastructure Architecture on SFR internal Web Hosting and IT Datacenter.",
      "highlights": [
        "TPS Encina L3/4 Support",
        "Bouygues 6éme sens wap portal externalization",
        "Technical Migration Informix/Oracle, Txseries/Encina",
        "SOA Normalization",
        "Projet IT Solutions Refactoring on SFR Major project : BIOS, V&S"
      ]
    },
    {
      "company": "Adesium",
      "position": "IT Software Enginer",
      "website": "https://web.archive.org/web/20120806163600/http://www.adesium.com/",
      "startDate": "1998-01-01",
      "endDate": "2000-12-31",
      "summary": "IT Software development.",
      "highlights": [
        "TPS Encina L3/4 Support",
        "SRPP (prepaid payement system) project evolution",
        "SIMP (Bank payement system) project evolution",
        "CSP to Visual Age migration",
        "KART (GSM Ticket System recette tool) project evolution",
        "C++/Java Development"
      ]
    }
  ],
  "education": [
    {
      "institution": "ICEP (Institut comtois d’enseignement polytechnique)",
      "area": "Information Technology",
      "studyType": "TRIO (Technique Réseau Informatique et Organisation) (Bachelor of Science)",
      "startDate": "1995",
      "endDate": "1996"
    },
    {
      "institution": "ICEP (Institut comtois d’enseignement polytechnique)",
      "area": "Information Technology",
      "studyType": "BTS Industrial IT (BTEC Higher National Diploma/12th Grade)",
      "startDate": "1990",
      "endDate": "1994"
    },
    {
      "institution": "Lycée Pasteur (Dole/Jura)",
      "area": "Electronic",
      "studyType": "Baccalaureate F2 - Electronic (Business and Technology Education Council National Diploma)",
      "endDate": "1989",
      "startDate": "1987"
    }
  ],
  "skills": [
    {
      "name": "IT architecture",
      "level": "Master",
      "keywords": [
        "SOA normalization and orientation",
        "Nomalization of use SOAP and Rest",
        "Web hosting platform architectur",
        "Datacenter System Network orientation",
        "Biggest SFR Project refactoring : V&S, BIOS, SIGC...",
        "Language usage normalization",
        "Open Source Monitoring orientation",
        "SNMP on network device generalization",
        "Linux generalization",
        "Virtualization generalization",
        "Open Source generalization",
        "Merise (MCD/MPD)",
        "UML"
      ]
    },
    {
      "name": "Middleware",
      "level": "Master",
      "keywords": [
        "JEE App. Server",
        "MOM",
        "Web Server",
        "Transaction Processing App. Server",
        "Ldap Directory Server",
        "File Monitor gateway",
        "Tomcat",
        "JBoss",
        "Websphere",
        "Weblogic",
        "MQSeries",
        "Apache",
        "Nginx",
        "Oracle iPlanet Web Server",
        "TXSeries/Encina",
        "Tuxedo",
        "Oracle Directory Server",
        "389 Directory Server",
        "OpenLdap",
        "OpenDS/DJ",
        "Axway/XFB",
        "CFT",
        "proftpd"
      ]
    },
    {
      "name": "Network & Security",
      "level": "Master",
      "keywords": [
        "Reverse proxy & Load balancer",
        "Firewall",
        "Identity management",
        "LDAP",
        "Radius",
        "OpenID",
        "SAML",
        "OAUTH",
        "HOTP",
        "OCRA",
        "BGP",
        "Load Balancing Direct Server Return",
        "eBPF and XDP",
        "OpenAM",
        "Siteminder",
        "Keycloak",
        "CA Strong Authentication",
        "Checkpoint",
        "Cisco fwsm",
        "Linux NetFilter",
        "BSD pf",
        "Ivanti/Pulse/Brocade/Zeus vTM",
        "F5",
        "HAProxy",
        "Apache",
        "Envoy",
        "Nginx",
        "SquidCache",
        "rWeb",
        "Brocade vTM WAF",
        "Alteon"
      ]
    },
    {
      "name": "Langage",
      "level": "Master",
      "keywords": [
        "Java",
        "C#",
        "C/C++",
        "PHP",
        "GO",
        "Shell (bash/ksh/perl/awk)",
        "Rust",
        "Assembly language: z80, esp32, 680xx, x86 64, pic, hp saturn",
        "Javascript",
        "TCL (used in encine/websphere and F5)",
        "Basic",
        "Pascal",
        "Python",
        "Ruby (very litle)",
        "Jetbrain Studios: InteliJ, PHPStorm, Resharper, Clion, Rider, GoLand",
        "VS Code",
        "Gnu Compiler suite",
        "Visual Studio"
      ]
    },
    {
      "name": "Operating System",
      "level": "Advanced",
      "keywords": [
        "Support and OS and software Packaging",
        "RPM for Linux Suse/Redhat",
        "LPP for AIX",
        "SD for HP-UX",
        "pkg for Solaris",
        "msi for windows",
        "sysprep for windows",
        "Kickstart for RedHat/Centos",
        "Autoyast for Suse linux",
        "NIM for AIX",
        "VMware Templating",
        "Foreman",
        "TFTP/DHCP/Bootp/PXE"
      ]
    },
    {
      "name": "Open Source Monitoring",
      "level": "Advanced",
      "keywords": [
        "Zabbix",
        "Prometheus",
        "Elasticsearch/Kibana",
        "Nagios",
        "Grafana"
      ]
    },
    {
      "name": "SGBD",
      "level": "intermediate",
      "keywords": [
        "Database Administration",
        "Support and Software Packaging",
        "Development Support",
        "Oracle",
        "Mysql",
        "Postgresql",
        "Informix",
        "ClickHouse"
      ]
    },
    {
      "name": "Container",
      "level": "intermediate",
      "keywords": [
        "Kubernetes",
        "Dockers",
        "Cillium",
        "Flanel",
        "Docker Compose",
        "CRI-0",
        "Containerd"
      ]
    },
    {
      "name": "NoSQL",
      "level": "intermediate",
      "keywords": [
        "Memcached+MCRouter",
        "Apache Ignite",
        "Infinispan",
        "CoucheDB",
        "Redis",
        "MongoDB"
      ]
    },
    {
      "name": "Cloud",
      "level": "beginer",
      "keywords": [
        "Landing Zone",
        "Network DC interconect",
        "IAM",
        "GCP",
        "AWS"
      ]
    }
  ],
  "languages": [
    {
      "language": "English",
      "fluency": "CECR B1/B2"
    },
    {
      "language": "Spanish",
      "fluency": "CECR A2/B1"
    }
  ],
  "interests": [
    {
      "name": "Wildlife",
      "keywords": [
        "Kayak",
        "Canyoning",
        "Climbing",
        "Treking"
      ]
    },
    {
      "name": "Computer",
      "keywords": [
        "Open Source",
        "Iot",
        "Video game",
        "Electronic"
      ]
    }
  ],
  "meta": {
    "theme": "kendall"
  }
}