resume-en.json

{
  "basics": {
    "name": "Mathieu CARBONNEAUX OSUAGWU",
    "label": "Senior Infrastructure Solutions Architect",
    "photo": "https://www.ch2o.info/en/about/photocv.jpg",
    "picture": "https://www.ch2o.info/en/about/photocv.jpg",
    "image": "https://www.ch2o.info/en/about/photocv.jpg",
    "website": "https://www.ch2o.info",
    "summary": "Passionate about IT since I was very young, I started programming at the age of 12 (logo, basic, Z80 assembler, 680x0, C/C++). \n\nI initially trained in electronics, industrial IT and then in management IT (client/server programming, network, system, database and network writing), which gave me a global vision of IT from hardware to software. \n\nWith nearly 30 years (1997) of professional experience, where I have alternately held the roles of application developer, database administrator, system engineer, network engineer, security engineer, middleware expert, and ended up as a Solutions Architect, in a wide variety of business and technical applications. I am what you call a multi-potential. \n\nAnd I always manage the architecture, operation, implementation and design aspects in parallel (Architect and Devops). \n\nCurrently I participate in almost all of SFR SI's infrastructure architecture orientations. \n\nParticularly experienced in distributed client/server architecture, I know more than 10 programming languages, especially the Java ecosystem, I have worked on almost all j2ee type application servers and everything that goes around it. \n\nI have very strong experience in SSO and IAM technologies. \n\nA long experience in middleware (MFT/MOM/API GW). \nA long experience in web hosting security infrastructure (Reverse Proxy, Waf, Firewall). \n\nWe have currently started to develop Kubernetes operators for our middleware industrialization needs. Always interested in new technologies, I love experimenting with new concepts. \n\nAlways interested in learning new things. My latest personal passion is the Internet of Things (I'm going back to my origins as an industrial computer scientist) and also Machine learning…",
    "rental": {
      "city": "Paris",
      "countryCode": "FR",
      "region": "Îles de France"
    },
    "profiles": [
      {
        "network": "Home Page",
        "username": "My Personal Page",
        "url": "https://www.ch2o.info"
      },
      {
        "network": "Github",
        "username": "My Github",
        "url": "https://github.com/mcarbonneaux"
      },
      {
        "network": "Github",
        "username": "My Open Source Projects",
        "url": "https://github.com/ZenProjects"
      },
      {
        "network": "Linkedin",
        "username": "My Linkedin",
        "url": "https://www.linkedin.com/in/mcarbonneaux/"
      }
    ]
  },
  "work": [
    {
      "company": "SFR",
      "rental": "",
      "description": "",
      "position": "Monitoring Tools Expert",
      "website": "www.sfr.com",
      "startDate": "2014",
      "endDate": "",
      "summary": "I introduced Zabbix to SFR to replace Cacti for monitoring network equipment in SNMP.\n\nI had Zabbix develop for SFR the low level discovery, the provisioning APIs and the JMX proxy (roughly v2.3).\n\nThen around 2017 I participated in the switch of monitoring tools to prometheus/thanos/grafana.\n\nThen the massive use of ELK for storing hosting infrastructure logs.\n\nSince 2020 I have set up a Clickhouse data well (much more efficient than ELK), coupled with Kafka (for the feed) and grafana for data visualization. Since then we have stored all the logs in clickhouse, i.e. more than 300 TB of data (compressed into 35 TB).",
      "highlights": [
        ""
      ]
    },
    {
      "company": "SFR",
      "rental": "",
      "description": "",
      "position": "Infrastructure Solutions Architect",
      "website": "www.sfr.com",
      "startDate": "2010",
      "endDate": "",
      "summary": "Standardization and Orientation for SOA.\n\nStandardization of the uses of SOAP and Rest.\n\nArchitect of the Web hosting platform.\n\nParticipation in the definition of network standards for the implementation of our new Datacenters.\n\nRefactoring of major SFR projects: V&S, BIOS, SIGC... \n\nStandardization of the use of programming languages.\n\nEvangelization of the use of Open Source to monitor production.\n\nEvangelization of the use of SNMP to monitor network equipment.\n\nEvangelization of the use of Linux instead of proprietary Unix.\n\nEvangelization of the use of Virtualization.\n\nOpen Source Evangelization.\n\nIn 2020 I set up a security data lake for all SFR IS security logs (FW, Router, Switch, Reverse proxy, VPN, etc.) based on a Clickhouse cluster and powered by Kafka.\n\nIn 2023 I set up the SFR Google Cloud Platform landing zone, the implementation of a dedicated connection adduction with GCP, and the SSO connection with our keycloak. As part of this project, I supported the teams in the implementation and design of the Landing Zone, in particular on the design aspects of our MLOps platform.\n\nIn parallel with the Landing Zone, I set up the connection to the salesforces SSO with our Keycloak SSO.\n\nI am currently training on artificial intelligence, to set up anti-ddos mechanisms on our web hosting infrastructure based on artificial intelligence. I set up a security data lake (more than 300 TB of data) to prepare for this work.\n",
      "highlights": [
        "SOA",
        "API Gateway",
        "Programming language",
        "Infrastructure",
        "Open Source",
        "Monitoring",
        "Virtualization",
        "Data Lake",
        "Machine Learning",
        "Load Balancing",
        "Networks",
        "UML/Merise",
        "Agil Method",
        "CI/CD",
        "Container architecture",
        "Architecture Normalization",
        "OS and Middleware",
        "DBMS/NoSql",
        "SSO/IAM",
        "Automation"
      ]
    },
    {
      "company": "SFR",
      "rental": "",
      "description": "",
      "position": "SOA Expert – API Gateway",
      "website": "www.sfr.com",
      "startDate": "2006",
      "endDate": "",
      "summary": "I designed and developed the SFR Gateway API (and also participated in the evangelization of SOA at SFR), based on IBM DataPower.\n\nIn 2014, Redevelopment of the SOAP Gateway API on an open source solution (Apache/mod_perl) and in-house development.\n\nIn 2015, development of the evolution of the SOAP Gateway API to also support Rest.\n\nIn 2017, redevelopment of the Gateway API on a completely event-driven technology (Zeus Traffic Manager).\n",
      "highlights": [
        "SOAP",
        "Rest",
        "API Gateway",
        "Event Model",
        "Oauth"
      ]
    },
    {
      "company": "SFR",
      "rental": "",
      "description": "",
      "position": "Directory and IAM Expert (SSO)",
      "website": "www.sfr.com",
      "startDate": "2006",
      "endDate": "",
      "summary": "At the same time, I had to take charge of the engineering of SFR's LDAP Directories (Netscape Directory Server, then iPlanet, then Oracle, then Fedora Directory Server).\n\nLater in 2010 I set up the first SFR SSO based on siteminder. Then we redeveloped our specific solution at SFR instead of siteminder with the use of a certificate on the workstation as a second authentication factor (Arcot).\n\nIn 2020 I set up a solution based on the SAML2 Standard and OpenId Connect, with keycloak.\n",
      "highlights": [
        "SSO",
        "IAM",
        "LDAP Directory",
        "SiteMinder",
        "Arcot",
        "Keycloak",
        "Netscape Directory Server (iplanet, sun, oracle, fedora)",
        "SAML2",
        "OpenId Connect"
      ]
    },
    {
      "company": "SFR",
      "rental": "",
      "description": "",
      "position": "Web Hosting Infrastructure and Networks Expert",
      "website": "www.sfr.com",
      "startDate": "2005",
      "endDate": "",
      "summary": "Then I had to manage the SFR web hosting infrastructure, first on Iplanet Web Server under Solaris, then on Apache under Linux (for which I designed the first base). I then participated in the implementation of reverse proxy and Load Balancer infrastructures in front of web servers, such as Deny All, Zeus ZXTM (currently owned by ivanti), F5, Alteon...\n\nOn this occasion I started working in the network teams that take care of the Switch, Firewall, Router (BGP), VPN and Proxy of the SFR IS.\n\nIn 2021 I designed a new hosting architecture based on kubernetes (Talos/Cilium), haproxy, and an internal operator to manage SFR hosting in an industrial manner.\n",
      "highlights": [
        "Reverse Proxy",
        "Load Balancers",
        "Tatlos",
        "Cilium",
        "Kubernetes",
        "Deny All",
        "Zeus ZXTM",
        "F5",
        "Alteon",
        "Apache HTTPD",
        "Iplanet Web Server",
        "HAProxy"
      ]
    },
    {
      "company": "SFR",
      "rental": "",
      "description": "",
      "position": "Expert Unix Aix and Linux",
      "website": "www.sfr.com",
      "startDate": "2004",
      "endDate": "",
      "summary": "At the same time, I also provided engineering for the Unix AIX and Linux systems (I was the one who introduced Linux into the SFR IS) (industrialization, construction of installation masters, software packaging). I collaborated with my colleagues on Solaris and HP-UX on software packaging.\n\nIn 2006, I participated in the evangelization of virtualization and the generalization of the use of Linux operating systems (instead of Unix Solaris/Aix/HP UX) and virtualized Windows within the SFR IS.\n\nThen in 2020, I participated in the evangelization of containers and Kubernetes.\n",
      "highlights": [
        "Aix",
        "Linux",
        "Docker",
        "Kubernetes",
        "HP-UX",
        "Solaris",
        "Packages: rpm, LPP, SD, pkg, msi",
        "OS Installation: Kickstart, Autoyast, NIM, VMware Templating, Foreman, sysprep",
        "TFTP/DHCP/Bootp/PXE"
      ]
    },
    {
      "company": "SFR",
      "rental": "",
      "description": "",
      "position": "OLTP Technical Expert Tuxedo, IBM TXseries/Encina and MOM IBM MQseries",
      "website": "www.sfr.com",
      "startDate": "2003-04-01",
      "endDate": "",
      "summary": "I first worked as a transactional system expert, I provided engineering, administration and support for SFR's transactional platforms (Tuxedo and Encina). As a result, I also worked a lot with database administrators (Informix, Oracle), as well as on IBM MQseries, due to the strong link between transactional database and MQSeries (which is transactional) and OLTP (two-phase commit protocol XA).\n\nIn 2017 I participated in the construction of our Kafka infrastructure (MOM Pub/Sub).\n",
      "highlights": [
        "TXSeries/Encina",
        "Tuxedo",
        "MQseries",
        "Kafka",
        "MOM",
        "OLTP"
      ]
    },
    {
      "company": "ATOS Origin",
      "position": "Infrastructure Engineer",
      "website": "https://atos.net/en/",
      "startDate": "2001-01-01",
      "endDate": "2003-03-31",
      "summary": "Infrastructure Architect on SFR web hosting.",
      "highlights": [
        "Encina L3/4 Transactional System Support",
        "Outsourcing of the Bouygues 6th Sense wap portal",
        "Technical migration from Informix to Oracle, Encina to Txseries",
        "SOA Standardization",
        "Refactoring of major SFR projects: BIOS, V&S"
      ]
    },
    {
      "company": "Adesium",
      "position": "Software Engineer",
      "website": "https://web.archive.org/web/20120806163600/http://www.adesium.com/",
      "startDate": "1998-01-01",
      "endDate": "2000-12-31",
      "summary": "Software Development.",
      "highlights": [
        "Encina Transactional System Level 3/4 Technical Support",
        "Evolution of the SRPP project (Prepaid payment system)",
        "Evolution of the SIMP project (Bank card payment system)",
        "Support for the CSP code migration project to Visual Age",
        "Evolution of the KART project (GSM Ticket System recipe tool)",
        "Development in C++/Java"
      ]
    }
  ],
  "education": [
    {
      "institution": "ICEP (Institut comtois d’enseignement polytechnique)",
      "area": "Computer science",
      "studyType": "TRIO (Computer Network Technology and Organization) (Bachelor of Science)",
      "startDate": "1995",
      "endDate": "1996"
    },
    {
      "institution": "ICEP (Institut comtois d’enseignement polytechnique)",
      "area": "Computer science",
      "studyType": "Industrial IT BTS (BTEC Higher National Diploma/12th Grade)",
      "startDate": "1990",
      "endDate": "1994"
    },
    {
      "institution": "Lycée Pasteur (Dole/Jura)",
      "area": "Electronics",
      "studyType": "Baccalaureate F2 - Electronics (Business and Technology Education Council National Diploma)",
      "endDate": "1989",
      "startDate": "1987"
    }
  ],
  "skills": [
    {
      "name": "Architecture",
      "level": "Expert",
      "keywords": [
        "Standardization and Orientation for SOA at SFR",
        "Standardization of SOAP and Rest usage at SFR",
        "Architect of the SFR web hosting platform",
        "Definition of network standards for implementing our new Datacenters",
        "Refactoring of major SFR projects: V&S, BIOS, SIGC…",
        "Standardization of the use of programming languages",
        "Evangelizing the use of Open Source to monitor production",
        "Evangelization of the use of SNMP to monitor network equipment",
        "Evangelization of the use of Linux instead of proprietary Unix",
        "Evangelization of the use of Virtualization",
        "Open Source Evangelization",
        "UML/Merise (MCD/MPD)",
        "SSO/IAM Standardization",
        "Support for projects on the use of Infrastructures",
        "Agile Methods: Kanban, Scrum",
        "Evangelization of the use of the use of CI/CD principles",
        "Standardization of Cloud Infrastructures"
      ]
    },
    {
      "name": "Middleware & SOA",
      "level": "Expert",
      "keywords": [
        "JEE App. Server",
        "MOM",
        "Web Server",
        "Transaction Processing App.Server",
        "Ldap Directory Server",
        "File Monitor gateway",
        "Tomcat",
        "JBoss",
        "Websphere",
        "Weblogic",
        "MQSeries",
        "Apache",
        "Nginx",
        "Oracle iPlanet Web Server",
        "TXSeries/Encina",
        "Tuxedo",
        "Oracle Directory Server",
        "389 Directory Server",
        "OpenLdap",
        "OpenDS/DJ",
        "Axway/XFB",
        "CFT",
        "proftpd",
        "SOAP",
        "Rest",
        "gRPC/protobuf",
        "ESB",
        "Service Mesh",
        "API Gateway"
      ]
    },
    {
      "name": "SSO/IAM",
      "level": "Expert",
      "keywords": [
        "SSO",
        "SAML2",
        "OpenID Connect",
        "Keycloak",
        "SiteMinder",
        "Arcot",
        "Oauth",
        "CA Advanced authentication",
        "ADFS",
        "OCRA",
        "HOTP",
        "FIDO key (yubikey)",
        "Webauthn",
        "Passkey",
        "LDAP",
        "Radius",
        "OpenAM"
      ]
    },
    {
      "name": "Networks & Security",
      "level": "Expert",
      "keywords": [
        "Reverse proxy & Load balancer",
        "Firewall",
        "Router",
        "BGP",
        "Load Balancing Direct Server Return",
        "eBPF and XDP",
        "Checkpoint",
        "Cisco fwsm",
        "Linux NetFilter",
        "BSD pf",
        "Ivanti/Pulse/Brocade/Zeus vTM",
        "F5",
        "HAProxy",
        "Apache",
        "Sent",
        "Nginx",
        "SquidCache",
        "rWeb Deny ALL",
        "Brocade vTM WAF",
        "Alteon",
        "DPDK",
        "vpp.io",
        "VXLAN",
        "SDN",
        "SD WAN",
        "K8S Overlays (CNI)"
      ]
    },
    {
      "name": "Continuous Integration Platform (PIC) and Gitops",
      "level": "Expert",
      "keywords": [
        "Github",
        "Gitlab",
        "Gitea",
        "Drone",
        "Argoscd",
        "Fluxcd",
        "Git",
        "SVN",
        "CVS",
        "Act"
      ]
    },
    {
      "name": "Development language",
      "level": "Expert",
      "keywords": [
        "Java",
        "C#",
        "C/C++",
        "PHP",
        "GO",
        "Shell (bash/ksh/perl/awk)",
        "Rust (beginner)",
        "Assembly language: z80, esp32, 680xx, x86 64, pic, hp saturn",
        "Javascript",
        "TCL (used in encine/websphere and F5)",
        "Python",
        "Jetbrain Studios: InteliJ, PHPStorm, Resharper, Clion, Rider, GoLand",
        "VS Code",
        "Gnu Compiler suite",
        "Visual Studio"
      ]
    },
    {
      "name": "Containers",
      "level": "Advanced",
      "keywords": [
        "Kubernetes",
        "Dockers",
        "Cillium",
        "Flanel",
        "Docker Compose",
        "CRI-0",
        "Containerd",
        "Talos"
      ]
    },
    {
      "name": "Operating system",
      "level": "Advanced",
      "keywords": [
        "Technical Support and Software Packaging",
        "RPM on Linux Suse/Redhat",
        "LPP on AIX",
        "SD on HP-UX",
        "pkg on Solaris",
        "msi on windows",
        "sysprep on windows",
        "Kickstart on RedHat/Centos",
        "Autoyast on Suse linux",
        "NIM on AIX",
        "VMware Templating",
        "Foreman",
        "TFTP/DHCP/Bootp/PXE",
        "Linux RHEL/Suse/Ubuntu/Debian/Alpine",
        "AIX",
        "HP-UX",
        "Solaris"
      ]
    },
    {
      "name": "Open Source Monitoring",
      "level": "Advanced",
      "keywords": [
        "Zabbix",
        "Prometheus",
        "Elasticsearch/Kibana",
        "Clickhouse/Open Telemetry",
        "Nagios",
        "Grafana",
        ""
      ]
    },
    {
      "name": "Automation",
      "level": "Advanced",
      "keywords": [
        "Ansible",
        "Awx/Tower",
        "Terraform/opentf",
        "Gitlab CI",
        "Github actions",
        "Travis-CI",
        "Circle-CI",
        "Drone",
        "Gitea act"
      ]
    },
    {
      "name": "DBMS",
      "level": "Intermediate",
      "keywords": [
        "Database administration",
        "Database software packaging",
        "Development support",
        "Oracle",
        "Mysql",
        "Postgresql",
        "Informix",
        "ClickHouse"
      ]
    },
    {
      "name": "NoSQL",
      "level": "Intermediate",
      "keywords": [
        "Memcached+MCRouter",
        "Apache Ignite",
        "Infinispan",
        "DB Layer",
        "Redis",
        "MongoDB"
      ]
    },
    {
      "name": "Cloud",
      "level": "Beginner",
      "keywords": [
        "Landing Zone",
        "Network DC interconnect",
        "IAM",
        "GCP",
        "AWS"
      ]
    }
  ],
  "languages": [
    {
      "language": "English",
      "fluency": "CECR B1/B2"
    },
    {
      "language": "Spanish",
      "fluency": "CECR A2/B1"
    }
  ],
  "interests": [
    {
      "name": "Wildlife",
      "keywords": [
        "Kayak",
        "Canyoning",
        "Climbing",
        "Treking"
      ]
    },
    {
      "name": "Computer",
      "keywords": [
        "Open Source",
        "Iot",
        "Video game",
        "Electronic"
      ]
    }
  ],
  "projects": [
    {
      "name": "ZenProjects",
      "description": "My different open source projects",
      "highlights": [
        "Zabbix PHP Module",
        "Apache Authmemcookie Module",
        "Apache Status Text Module",
        "Apache chroot Module",
        "Apache Proxy FastCGI Module (experimental project)",
        "PHP SPF extension",
        "Chromium Web Page Screensaver",
        "phpSMTPd (experimental project)",
        "Javascript OCRA implementation"
      ],
      "keywords": [],
      "startDate": "",
      "endDate": "",
      "website": "https://github.com/ZenProjects",
      "roles": [],
      "entity": "",
      "kind": ""
    }
  ],
  "meta": {
    "theme": "kendall"
  }
}