paulgdl.
FRLet’s talk

PAUL · DEVOPS & CLOUD

From code
to production.

Linux systems, cloud, automation and Kubernetes: I deploy, secure and improve the reliability of the infrastructure behind production services.

Explore my expertiseMy experience
Infrastructure. Automation. Cybersecurity.
ONE CONNECTED WORKFLOW
CLOUD & VIRTUALISATION
AWSAzureOpenStackProxmoxVMware vSphereNutanix

Describe infrastructure and make configurations reproducible.

MY TOOLKIT
  • Linux
  • Debian
  • Ubuntu
  • CentOS
  • Red Hat
  • Nginx
  • OpenResty
  • Bash
  • Git
  • AWX
  • Argo CD
  • Alerta
  • Graylog
  • PostgreSQL
  • MySQL
  • MongoDB
  • HAProxy
  • Patroni
  • etcd
  • LXC

PROFESSIONAL EXPERIENCE

01 / PROFESSIONAL EXPERIENCE

Real infrastructure.
Real-world challenges.

From industrial environments to telecom infrastructure, a career connecting systems engineering with security.

Covage · Extia2025 — PRESENT

Assignment through Extia

Linux Systems & DevOps Engineer

A scope spanning Linux operations, cloud migrations, automation, Kubernetes and the availability of production services.

  • Debian
  • Ubuntu
  • CentOS
  • Terraform
  • Ansible
  • AWX
  • Kubernetes
  • Docker
  • GitLab CI
  • Argo CD
  • Azure
  • OpenStack
  • Prometheus
  • Grafana
  • Alerta
  • PostgreSQL
  • HAProxy
  • Patroni
  • Sekoia
  • Cyberwatch
  • HarfangLab
  • OpenVAS
Responsibilities & contributions

Linux operations & incident resolution

Administering Debian, Ubuntu and CentOS production environments. Diagnosing system, network and storage incidents, investigating root causes and restoring services. Bash and Python scripting for recurring operations.

Cloud migration & provisioning

Migrating servers from Nutanix, VMware vSphere, Azure and Proxmox to OpenStack. Provisioning instances, images, volumes and networks with Terraform and the OpenStack CLI, and validating deployments.

Infrastructure as Code & automation

Automating configurations and operations with Ansible and AWX. Using Terraform to describe and provision resources, and standardising administration tasks and deployments.

CI/CD & workflow orchestration

Working with GitLab CI and Azure DevOps pipelines, Kubernetes deployments through Argo CD and workflows through Argo Workflows. Collaborating with development teams, validating changes and documenting deployment procedures.

Containers & Kubernetes

Operating and building Kubernetes environments, running Docker workloads and supporting deployments. Diagnosing incidents and following the health of containerised services.

Observability & diagnosis

Monitoring with Prometheus, Grafana and Zabbix; centralising and tracking alerts with Alerta. Working with logs through Graylog and ELK. Analysing metrics, alerts and logs to investigate incidents and understand infrastructure health.

Databases & high availability

Administering PostgreSQL, MySQL and MongoDB. Implementing high-availability architectures with HAProxy, Patroni and etcd, combining load balancing with database availability.

Azure services & networking

Managing Azure services including Application Gateway, App Registrations and DNS. Working on networking components and service dependencies across cloud and virtualised environments.

Threat detection & vulnerability tracking

Using Sekoia to analyse security events and alerts, HarfangLab for endpoint protection, and Cyberwatch and OpenVAS for vulnerability assessment. Factoring security findings into day-to-day systems operations.

Safran Nacelles2022 — 2024

Apprenticeship

Systems & Cybersecurity Engineer

Two years in an industrial environment, progressing from systems and network architecture to infrastructure security.

  • Windows Server
  • Red Hat
  • AWS
  • PowerShell
  • IIS
  • Wireshark
  • Nmap
  • Nessus
  • TXOne StellarProtect
  • HTML
  • CSS
  • PHP
Responsibilities & contributions

Systems & network architecture

Designing technical architectures, managing network traffic and writing documentation. Analysing traffic with Wireshark and exploring hosts, ports and services with Nmap. A first year focused on systems and networks, followed by a year dedicated to cybersecurity.

Servers & IIS web services

Deploying and configuring Windows Server and Red Hat Linux on private cloud and AWS. Administering web services with Microsoft IIS, accounting for the systems and networking needs of each environment.

Identity, access & certificates

Implementing authentication mechanisms, managing access and creating certificates. Integrating these security measures into Windows and Linux environments.

Hardening & automation

Hardening Windows and Linux systems and using PowerShell scripts for administration and security operations.

Vulnerability assessment

Deploying Nessus and running vulnerability scans. Analysing identified vulnerabilities and carrying out remediation to strengthen infrastructure security.

Industrial systems protection

Securing industrial environments with TXOne StellarProtect, in a context where system protection must support service continuity.

Cybersecurity awareness

Designing an internal phishing awareness campaign and building the associated web materials in HTML, CSS and PHP.

ArcheTI2023

Internship

Systems & Network Administrator

An experience focused on infrastructure administration, automation and monitoring.

  • Linux
  • AWS
  • Proxmox
  • LXC
  • Docker
  • Ansible
  • SaltStack
  • Watchtower
  • Bash
  • GitLab CI
  • Checkmk
Responsibilities & contributions

Linux & cloud administration

Administering Linux and AWS servers, firewalls and databases. Working on the services and components required to operate the infrastructure.

Virtualisation & containers

Administering Proxmox and LXC environments alongside Docker services. Configuring and operating virtualised and containerised environments.

Deployment automation

Automating with Ansible and SaltStack and using Watchtower in Docker environments. Making configurations and operational tasks reproducible.

Scripting & continuous integration

Writing operational Bash scripts and GitLab CI pipelines to support administration tasks and deployments.

Monitoring & incident response

Monitoring infrastructure with Checkmk, investigating alerts, diagnosing issues and responding to operational incidents.

02 / AREAS OF EXPERTISE

Expertise across
the infrastructure.

From systems to application services: eight areas to explore my skills, the tools I use and their role in production.

01 / 08

Linux & Windows systems

Administer systems, understand their dependencies and resolve production incidents.

  • Administering multiple Linux distributions and Windows Server.
  • Diagnosing system, network and storage issues and investigating causes.
  • Configuration, hardening and operations automation.

Tools & technologies

  • Debian
  • Ubuntu
  • CentOS
  • Red Hat
  • Windows Server
02 / 08

Cloud & virtualisation

Deploy resources and support migrations across cloud and virtualised environments.

  • Provisioning instances, images, networks and volumes.
  • Migrations across hypervisors, private cloud and cloud platforms.
  • Azure services: Application Gateway, App Registrations and DNS.

Tools & technologies

  • AWS
  • Azure
  • OpenStack
  • Proxmox
  • Nutanix
  • VMware vSphere
03 / 08

Automation & IaC

Turn manual operations into reproducible configurations and deployments.

  • Infrastructure provisioning with Terraform.
  • Configuration management and task execution with Ansible and AWX.
  • Administration scripts and automation of recurring operations.

Tools & technologies

  • Terraform
  • Ansible
  • AWX
  • SaltStack
  • Python
  • Bash
  • PowerShell
04 / 08

Containers & CI/CD

Connect code, pipelines and the operation of containerised services.

  • Building and operating Kubernetes environments and Docker services.
  • CI/CD pipelines, GitOps deployments with Argo CD and orchestration with Argo Workflows.
  • Change validation and collaboration with development teams.

Tools & technologies

  • Kubernetes
  • Docker
  • Git
  • GitLab CI
  • Azure DevOps
  • Argo CD
  • Argo Workflows
  • LXC
  • Watchtower
05 / 08

Observability & incidents

Connect metrics and logs to understand systems and investigate incidents.

  • Infrastructure monitoring and service health tracking.
  • Centralising and tracking alerts with Alerta; analysing metrics and logs.
  • Diagnosis and root cause investigation to restore services.

Tools & technologies

  • Prometheus
  • Grafana
  • Zabbix
  • Alerta
  • Graylog
  • ELK
  • Checkmk
  • Centreon
06 / 08

Networking & web services

Configure web services, manage network traffic and diagnose communication between systems.

  • Configuring web servers and reverse proxies: Nginx, OpenResty and Microsoft IIS.
  • Load balancing, network traffic management and FortiGate firewalls.
  • Packet analysis with Wireshark; host, port and service discovery with Nmap.
  • Managing DNS and service certificates.

Tools & technologies

  • Nginx
  • OpenResty
  • IIS
  • HAProxy
  • FortiGate
  • Wireshark
  • Nmap

Related skills

  • DNS
  • TLS certificates
07 / 08

Cybersecurity

Integrate security into systems administration and production constraints.

  • Vulnerability assessment with Nessus, Cyberwatch and OpenVAS; remediation tracking.
  • Event and alert analysis with Sekoia; endpoint protection with HarfangLab.
  • Windows and Linux hardening, authentication and access management.
  • Industrial systems protection and phishing awareness.

Tools & technologies

  • Sekoia
  • HarfangLab
  • Cyberwatch
  • OpenVAS
  • Nessus
  • TXOne StellarProtect

Related skills

  • Access management
  • Hardening
  • Certificates
08 / 08

High availability & data

Administer databases and implement the components that support their availability.

  • Relational and document database administration.
  • Highly available PostgreSQL architectures with Patroni and etcd.
  • Load balancing with HAProxy and database incident diagnosis.

Tools & technologies

  • PostgreSQL
  • MySQL
  • MongoDB
  • HAProxy
  • Patroni
  • etcd

03 / EDUCATION & APPROACH

Engineering foundations.
A rigorous approach.

Understanding dependencies, documenting changes and working with IT teams: an approach that connects technical analysis with service continuity.

ESIGELEC — Ingénieurs généralistes

ENGINEERING EDUCATION

Engineering degree

General engineering programme, specialising in cybersecurity and networks.

Cybersecurity & networking
Systems
Networks
Security
01

Understand before changing

Analyse dependencies, constraints and how systems operate.

02

Automate for repeatability

Build reproducible configurations and validate changes.

03

Document to share knowledge

Make operations understandable and share knowledge.

04 / WEB PORTFOLIO

On the web, too.

A selection of websites I have designed and developed alongside my professional work.

Product website · Open source

NervaBrain

Introducing an open-source workspace bringing notes, tasks and projects together in a Markdown vault.

Visit website

LET’S TALK ABOUT YOUR TEAM

Your next
infrastructure challenge.

Hiring in DevOps, systems or cloud? Let’s discuss your challenges and how I could contribute to your team.

An initial conversation about your needs, environment and team.

The information in this form is used only to reply to you. No attachment or sensitive data is needed.

Privacy