Paris, France · Targeting English-speaking platform, backend, cloud and AI-platform roles
Portfolio · Engineering brief · Case studies · LinkedIn · Email
Platform and backend engineer, focused on backend services, CI/CD and GitOps delivery, Kubernetes controls, telemetry, and AI systems that run on local infrastructure rather than external APIs. Work follows a single delivery path, so everything can be reviewed, released, observed and rolled back:
code → tests → immutable artifact → reviewed GitOps → runtime → telemetry → rollback
Public work is grouped below by domain; each project is labeled by scope so the evidence stays honest.
| Project | Scope | Engineering signal |
|---|---|---|
| Multi-Tenant GitOps Platform Lab | Production-style lab | GitHub Actions, multi-arch GHCR images, Helm overlays, Argo CD reconciliation, Prometheus-gated Argo Rollouts, RBAC, NetworkPolicy, Grafana + Loki. Case study |
| Cloud Analytics ML Pipeline | Production-style data lab | Config-driven PySpark ingestion, feature engineering, MLlib training/evaluation, dashboard artifacts, local-to-GCP Dataproc parity. |
| LC production infrastructure | Employer org — documented | WordPress → versioned Next.js/TypeScript catalogue (299 SSG pages), separate staging/prod GitHub Actions paths on one VPS, incident recovery. Covered in the engineering brief. |
A recurring thread is local AI: self-hosted inference (Ollama serving a 30B Qwen model) behind an authenticated OpenAI-compatible gateway bound to loopback, agent workflows orchestrated through Hermes gateways — including fixing a tool-call defect and validating real agent tool execution — and bounded workflows built on LangGraph and LangChain rather than dependent on external inference APIs.
| Project | Scope | Engineering signal |
|---|---|---|
| Thales Optronic Video Indexing | Academic collaboration | FastAPI, Celery/Redis, frame sampling, YOLO, OCR, Whisper transcription, semantic search, JSON/PDF/CSV reporting. |
| Local Multi-LLM Orchestrator | Personal systems project | Local Ollama services (30B Qwen), anonymized peer review, chairman synthesis, strict JSON/Zod contracts, SQLite run history, health/latency observability. |
| OpsPilot | Personal systems project | Local-first RAG operations copilot: evidence collection across logs/metrics/deployments/runbooks, bounded structured LLM calls, persisted investigation steps, Ollama/Gemini provider boundaries, typed contracts, fail-closed validation, Langfuse tracing. |
| LC Academy (OpenMAIC) | Employer org — deployed | AI-assisted multi-agent classroom adapted from an open-source system, with organisation-aware access control and teacher review/publishing workflows. |
| Project | Scope | Engineering signal |
|---|---|---|
| ISO 27001 Lab | Deployed learning product | Bilingual Next.js platform for evidence, risk treatment, SoA, audit, nonconformity, Annex A controls, mock-exam practice. |
| Lightweight Authentication for LIN/CAN Probes | Research prototype | Message-authentication scheme for automotive LIN/CAN buses. |
| Bangladesh E-Voting | Research prototype | Blockchain e-voting with Solidity, React and Web3.js — cast-as-intended integrity. |
| Project | Scope | Engineering signal |
|---|---|---|
| ATouPay | Product MVP | Expo/React Native client, Fastify API, Firebase identity/data, backend-owned critical writes, receipts, recovery, provider boundary for payments. |
| SyntaxMap | Teaching product | Interactive classroom tool for English grammar practice, built and used at Linguistic Communication. |
Early in the contribution cycle — no upstream merge has landed yet, and that is stated plainly rather than implied otherwise. The existing work is verifiable and in progress on flagship projects:
- OpenTelemetry JS contrib PR #3669 — deprecation of the long-task instrumentation, reviewed by a maintainer, who asked for the replacement (
Long Animation Frames) to be built first. That replacement is now being built. CLA signed, not merged. - Grafana MCP #987 — traced a service-account token-rotation bug across stdio and HTTP client lifecycles and proposed maintainer-reviewable implementation paths.
Process: reproduce the issue → propose a focused change → sign the CLA → iterate with maintainers → land. Scope is logged honestly so nothing is presented as merged before it is.
A proportionate security baseline applied to Linguistic Communication's public Next.js platform, validated in staging then production:
- Retired the live HTML uploader in favour of Git-reviewed publication.
- Sandboxed embedded content without
allow-same-origin. - Bounded the two lead APIs (
quiz-lead,b2b-diagnostic-lead): content-type checks, 64 KB body cap, field/array limits. - Bot and abuse controls: honeypot, minimum completion time, short-window duplicate suppression, SMTP rate limits.
- Edge identity and headers: trusted client-IP restoration behind Cloudflare, baseline security headers, CSP report-only, disabled
X-Powered-By, Nginx body/rate limits,security.txt+ data-handling policy. - Evidence: a baseline-vs-hardened scenario harness (13/13 hardened tests pass; primary runtime/static classes 1/14 → 14/14) plus staging and production validation.
| Platform delivery | Backend systems | Observability & AI |
|---|---|---|
| Linux · Docker · Kubernetes · Helm · Argo CD · GitHub Actions | TypeScript · Python · FastAPI · Fastify · PostgreSQL | OpenTelemetry · Prometheus · Grafana · LangGraph · LangChain · RAG · pgvector · Ollama |
- Platform / cloud: the six-page engineering brief, then the GitOps case study.
- Backend / local AI systems: Thales Video Indexing, the Local Multi-LLM Orchestrator and LC Academy (OpenMAIC).
- Security-aware engineering: ISO 27001 Lab and the LC production hardening above.
- Broader evidence: the portfolio evidence map.
