Raphaël Gouttière

Sysadmin Linux
Raphaël Gouttière's Photo

Career

Site Reliability Engineer

January 2021 - Current
QWANT (Rouen, France)

Architect and orchestrate containerized applications and infrastructure suited for scalable, reliable and distributed software services.

Selected accomplishments:
  • Migrate services from virtual machines to containers.
  • Architect and orchestrate new services on Kubernetes.
  • Manage ArgoCD projects to allow developers to be autonomous in the deployment of their applications.
  • Create and manage Helm chart and repositories.

Security Administrator

February 2020 - December 2020
QWANT (Rouen, France)

Monitor and analyze qwant infrastructure. Implement, develop and bench security software. Provide technical security advice to coworkers.

Selected accomplishments:
  • Firewall administration.
  • Implementation HOTP with pam. RFC-4226 and 6238 on criticals servers.
  • Vault creation for SSI team.
  • Manage YesWeHack bugbounty.

System Linux Administrator

October 2018 – February 2020
QWANT (Rouen, France)

Install, upgrade and monitor software and hardware (mostly opensources). Troubleshoot issues and outages. Maintain production environment operational.

Selected accomplishments:
  • Update and ansiblize unbound + healthcheck (py3+redis) DNS server.
  • Terraform + orchestration 100+ elasticsearch cluster with rabbitMQ + logstash feeders.

Work-study Security Administrator

March 2016 – September 2018
ACE Service (Rouen, France)

Audit and PCIDSS compliance. R&D monitoring and reporting, project management, PowerShell for Docker and Exchange. Sysadmin Windows and Linux, backup infrastructure maintainer. Security infrastructure architect, security products installation and administration (McAfee, StoneSoft, Forcepoint, Sophos, WatchGuard, Fortinet, TrendMicro, Symantec, F5...)

Selected accomplishments:
  • Migrate 50 servers from baremetal to cloud infrastructure (OVH).
  • IPS-IDS forcepoint integration in critical infrastructure.

Technical skills

Monitoring

Zabbix
Prometheus

Scripting

Bash
Python

Other

Windows
Opensource

Key competencies:

  • Caching (Varnish, Memcached, Redis)
  • High availability (L7 HAproxy/ATS, L4 IPVS via keepalived, L3 BGP via Bird)
  • Orchestration (Kubernetes, Ansible, Saltstack)
  • Logs (Loki, ELK, RabbitMQ, Kafka)
  • DB (Elasticsearch, PSQL, Mysql Percona, Redis)

Side Projects

unbound-healthcheck

Unbound/Redis/Python3
DNS server wich checks the urls of his records and roundrobin the result if the service is UP.

Education

System and Network Engineering

Master (2016 – 2018)
https://ecole-alternance.cesi.fr/, CESI Alternance

Network Administration and Security

Bachelor (2015 – 2016)
http://iutrouen.univ-rouen.fr, IT of Rouen

Networks and Telecommunications

Technical degree (DUT) (2013 – 2015)
http://iutrouen.univ-rouen.fr, IT of Rouen