Jan 2022 – Present
- 🏢 Datacenter Implementation: Led infrastructure deployment for new datacenter, including network architecture design, VM provisioning on Proxmox VE clusters, and DCIM/IPAM implementation using NetBox.
- 🔀 High Availability: Designed and deployed HA load balancing clusters using HAProxy, NGINX, and Keepalived (VRRP) for Layer 4/7 traffic distribution and SSL termination.
- 🔐 Security & PCI-DSS Compliance: Implemented hardened bastion hosts with CLI session recording (tlog/auditd), MFA authentication, and SSH key-only access.
- 🔌 NetBox Plugin Development: Built custom Django plugins for automated Proxmox-to-NetBox VM synchronization with REST API integration and systemd automation.
- 🛠️ Infrastructure as Code: Design and implement infrastructure solutions using Ansible and Terraform.
- 🖥️ Kubernetes: Manage Kubernetes infrastructure on Linux, including ingress configuration, resource optimization, and troubleshooting OOMKill issues.
- 🌐 CI/CD Pipelines: Create and manage GitLab CI/CD build and deployment pipelines.
- 📱 Android Pipelines: Write and modify Android pipelines using Fastlane for seamless delivery.
- 🛡️ Troubleshooting: Diagnose and resolve Kubernetes-related issues and intermittent deployment problems.
- 📈 Monitoring: Deploy and maintain monitoring tools like Prometheus, Grafana, Graylog, Sentry and Zabbix for comprehensive infrastructure insights.
- 🐍 Python Scripting: Develop Zabbix modules with Python to monitor infrastructure performance and availability.
- 📊 BI & Data Platforms: Deploy and maintain Apache Superset, Redash, and Apache NiFi for data analytics and ETL pipelines integrated with ClickHouse.
- 📦 Cluster Management: Deploy and configure ClickHouse clusters integrated with Kafka and Zookeeper for robust data management.
- 🚚 Migration: Migrate containers, PHP, and npm packages to GitLab registry, replacing outdated tools.
- 📋 CRM Administration: Deploy and maintain SuiteCRM with Elasticsearch full-text search and Google Calendar integration.
- 🛡️ Security Compliance: Implement security best practices, coordinate CVE patching (OpenSSH RegreSSHion), and conduct regular vulnerability assessments.
- 🔍 Automation: Develop automation scripts to reduce manual intervention in repetitive tasks.
- ☁️ Cloud Infrastructure: Design scalable cloud solutions leveraging AWS services and following PCI-DSS requirements.
System, Network, and Security Administrator | RAHMOUNE GROUP
Dec 2018 – Jun 2023
- 🔒 Network Security: Maintain system security and implement advanced network protection measures.
- 📊 Performance Optimization: Continuously evaluate and enhance system and network performance.
- 🖥️ User Support: Provide expert training and technical support to users, ensuring efficient use of systems.
- 📋 Maintenance: Perform regular backups, disaster recovery operations, and maintain detailed logs.
- 🛡️ Coordination: Collaborate with vendors and internal teams to ensure seamless procurement and operations.
- 🔍 Problem Solving: Troubleshoot and resolve system-wide issues to maintain operational continuity.
- 📈 Monitoring Tools: Deploy and manage tools such as Zabbix and Nagios to track system performance.
- 📚 Policy Development: Draft IT policies and procedures to improve operational standards.
IT Technician Specialist | OFFICE LINE SARL
Aug 2017 – Dec 2018
- 🔄 System Updates: Ensure systems are up-to-date with the latest upgrades and security patches.
- 🛠️ Hardware & Software Maintenance: Install, configure, and repair computer equipment and software for optimal performance.
- 🌐 Networking: Deploy and manage LAN/WAN networks and associated components.
- 🕵️ Troubleshooting: Identify and resolve system issues to restore functionality quickly and efficiently.
- 💾 Backup Management: Perform regular data backups and recovery operations to safeguard critical information.
- 🛡️ Endpoint Security: Deploy and maintain endpoint protection systems to ensure secure operations.
IT Technician Specialist | SOFICLEF SARL
Dec 2016 – Apr 2017
- 🤝 User Support: Address user inquiries and provide training for effective hardware and software usage.
- 🛠️ System Maintenance: Perform diagnostics and minor repairs to ensure system reliability.
- 🗂️ Documentation: Develop and maintain detailed records of system operations and repairs.
- 💡 Training: Create and deliver workshops to educate users on best practices for system usage.
-
Vocational Diploma, Computer Systems Maintenance Vocational Institute Abdelhak-Benhamouda, Boumerdes, Algeria Mar 2013 – Oct 2015
-
Materials Science (Some Courses) University of Science and Technology Houari Boumediene Sep 2012 – Jul 2013
- CCNA Cybersecurity Operations (Mar 2020)
- Cisco Certified Network Associate CyberOps (CCNA) (Oct 2020)
- Cisco Certified Network Associate Security (CCNA) (Nov 2020)
- Sophos EDR Certified Admin (Jul 2021)
- Sophos XDR Certified Admin (Jul 2021)
- Fortinet NSE1/NSE2/NSE3 Certified Associate (Nov 2021)
- Docker/Kubernetes/Rancher 🐳
- CI/CD Pipelines (GitLab) 🚀
- Infrastructure as Code (Ansible, Terraform) 🛠️
- Monitoring Tools (Zabbix, Prometheus, Grafana) 📈
- Cloud Services (AWS) ☁️
- Databases (MySQL, MongoDB, ClickHouse, PostgreSQL) 🗄️
- Programming (Python, Bash, Django) 🐍
- Version Control (Git) 🔄
- Logging & Visualization (Graylog, Sentry, ELK) 📊
- Virtualization (Proxmox VE, VMware) 🖥️
- Load Balancing (HAProxy, NGINX, Keepalived) ⚖️
- DCIM/IPAM (NetBox) 📍
- BI & ETL (Apache Superset, NiFi, Redash) 📉
- CRM Systems (SuiteCRM, Elasticsearch) 📋
- Security & Compliance (PCI-DSS, SSH Hardening) 🔐
- Deployment of 4 Proxmox VE clusters (Infrastructure, Production, Kubernetes, Test)
- NetBox implementation as DCIM/IPAM single source of truth
- Custom Django plugin development for automated VM synchronization
- HA load balancer deployment with HAProxy/NGINX/Keepalived
- Hardened bastion host with session recording for compliance
- Upgraded Zabbix monitoring infrastructure to version 7.x
- Integrated Prometheus/Grafana for Kubernetes workload monitoring
- Centralized logging with Graylog
- Custom Python modules for specialized monitoring
- Deployed Apache Superset for business intelligence
- Configured Apache NiFi for ETL pipelines
- Managed ClickHouse clusters for real-time analytics
- Integrated data replication with Kafka
Feel free to explore my work and connect with me on LinkedIn or via email at contact@redouane-guerad.com!