Fabrice Triboix, DevOps Developer in London, United Kingdom
Fabrice Triboix

DevOps Developer in London, United Kingdom

Member since September 6, 2017
Fabrice is a cloud architect, DevOps engineer, and software developer with over 20 years of experience. He worked for clients such as Armedia, Topps, and MyDocSafe, and specializes in designing secure, highly available, scalable, and cost-effective solutions on AWS and Kubernetes. Fabrice also assumed managerial positions in the past as a team leader and release manager. He is very keen on automation, IaC, and CI/CD, and he can code in Python.
Fabrice is now available for hire

Portfolio

  • Armedia LLC
    Kubernetes, Helm, Istio, Loki, Prometheus, Grafana, Docker...
  • Hatchdata
    Amazon Web Services (AWS), Terraform, VPN, AWS Transit Gateway
  • SIBOTest
    Docker, Ruby on Rails (RoR), MySQL, DigitalOcean

Experience

Location

London, United Kingdom

Availability

Part-time

Preferred Environment

Linux

The most amazing...

...project I've designed is a secure, highly available, and scalable architecture on AWS for an intricate web of interdependent services to MyDocSafe.

Employment

  • DevOps Architect

    2020 - 2021
    Armedia LLC
    • Modernized the architecture of ArkCase, a case management system. The architecture was monolithic, with ArkCase and half a dozen dependent services running on the same server.
    • Moved to a modern architecture based on Kubernetes, microservices, and Infrastructure-as-Code. Additionally, helped the company build an AWS Marketplace offering for ArkCase.
    • Dockerized various services and wrote Helm charts for various services.
    • Secured the Kubernetes cluster using network policies and RBAC and installed and configured Istio and observability tools. Built an internal PKI using CloudFormation.
    Technologies: Kubernetes, Helm, Istio, Loki, Prometheus, Grafana, Docker, Amazon Web Services (AWS), AWS CloudFormation, Ansible, Python
  • Cloud Architect

    2020 - 2020
    Hatchdata
    • Refactored Terraform scripts to minimize the update anxiety.
    • Advised on the best network architecture involving a Transit Gateway, multiple VPNs, and multiple AWS accounts for a complex flow of IoT data with the right balance between simplicity and efficiency, also being future-proof.
    • Set up AWS Client VPN using Terraform with mutual authentication.
    Technologies: Amazon Web Services (AWS), Terraform, VPN, AWS Transit Gateway
  • DevOps Engineer

    2019 - 2020
    SIBOTest
    • Performed various system administration tasks, especially related to SSL certificates.
    • Dockerized the Ruby-on-Rails web application in order to facilitate deployments.
    • Designed and implemented a MySQL NDB cluster in order to increase the database resiliency.
    • Designed a highly available, microservice-based cloud architecture for the SIBOTest website.
    Technologies: Docker, Ruby on Rails (RoR), MySQL, DigitalOcean
  • Software Developer

    2018 - 2020
    Topps Digital
    • Designed, implemented, and tested a back-end microservice in Python 3.6 running on Elastic Beanstalk in AWS.
    • Implemented new services based on Flask and SQLAlchemy as part of a microservice architecture consisting of back-ends to mobile applications allowing users to trade virtual cards.
    • Wrote extensive unit tests using Pytest for a number of microservices.
    Technologies: Amazon Web Services (AWS), SQLAlchemy, PostgreSQL, Flask-Marshmallow, Flask, Pytest, AWS Elastic Beanstalk, Python 3, Python
  • DevOps Engineer

    2019 - 2019
    A shopping-site startup in the Middle East
    • Designed and implemented workload architecture on AWS suitable for the startup requirements based on Docker and ECS.
    • Designed and implemented a complex system to generate and manage SSL certificates for this multi-tenant application.
    • Automated workload provisioning using infrastructure-as-code (CloudFormation) such that white labeling would be possible.
    Technologies: Amazon Web Services (AWS), Let's Encrypt, SSL, Amazon Elastic Container Service (Amazon ECS), Docker, AWS CloudFormation
  • Blockchain Specialist

    2017 - 2018
    Blocknet
    • Inspected C++ code for the BlocknetDX wallet and advised on improvements.
    • Designed a protocol for the atomic exchange of bitcoins and ethers, including code for smart contracts.
    • Designed a protocol for the atomic exchange of Ethereum colored coins following the ERC20 standard.
    • Advised on the Ethereum side of things for the Blocknet whitepaper: https://blocknet.co/whitepaper/Blocknet_Whitepaper.pdf.
    Technologies: C++, Bitcoin, Smart Contracts, Ethereum
  • Senior Software Engineer

    2017 - 2017
    G4S
    • Added new features to an access control system written in C++11 and Python 3.
    Technologies: DBus, Docker, Git, C++11, C++, Python 3, Python, Ubuntu, Linux
  • DevOps Engineer

    2016 - 2017
    Cisco
    • Worked as part of the system team—releasing STB software to a major EU broadcaster.
    • Helped design and implement a black box STB test framework written in Python.
    • Set up and maintained a variety of software tools to enable the smooth running of the continuous integration and development/testing work.
    • Set up Coverity static analysis and nightly automation using Jenkins.
    • Set up Black Duck open source code matching.
    • Configured Nagios and set up of NRPE with custom Git checks.
    • Implemented various Cron/Jenkins jobs in Bash/Python to automate tasks.
    • Installed and configured a DHCP server.
    • Worked within a Scrum process with six weeks iterations, and the team was spread over three countries.
    • Worked with a code base with 20 million+ lines of code.
    • Detected and responded to system problems.
    Technologies: ELK (Elastic Stack), Kibana, Logstash, Elasticsearch, VMware vSphere, VMware ESXi, Rally, Git, NMap, Netfilter, Iptables, Bash, Scrum, Continuous Integration (CI), BlackDuck Protex, Jenkins, Coverity, Python, Ubuntu, CentOS, Linux
  • Release Manager

    2015 - 2016
    V-Nova
    • Worked on the Perseus-based contribution encoder.
    • Acted as the link (release manager) between the development and the product teams.
    • Translated high-level business requirements into technical requirements.
    • Established timelines and work breakdown structures in collaboration with the development team.
    • Reported on the progress on a weekly basis and detected and reported impeding difficulties.
    • Devised an Agile process with weekly iterations (based on Scrum).
    • Changed the supplier of video cards to a cheaper product with much better support.
    • Coded new features; including debugging and fixing of bugs and also integrated a TS muxer.
    Technologies: MPEG, Kernel, Boost, Standard Template Library (STL), Scrum, Agile, H.264, Git, Linux, C++11, C++
  • Senior Software Engineer

    2013 - 2015
    Ovation Systems Ltd
    • Worked on the next generation of surveillance camera running on ARM9 with embedded Linux.
    • Designed and developed the subsystems managing the date/time, mass storage, and multiplexing of the audio (AAC) and video (H.264) into a Flash file (FLV).
    • Implemented automated unit-testing for the above subsystems.
    Technologies: SQLite, H.264, Git, Embedded Linux, ARM, C
  • Senior Software Engineer

    2013 - 2013
    Samsung
    • Investigated and analyzed the performance of the OpenGL stack for WebKit.
    Technologies: WebKit, OpenGL
  • Lead Software Engineer

    2011 - 2013
    e2v
    • Worked on a modulator for a radiotherapy cancer treatment machine.
    • Worked with a team of 15 people (including five who were under my direct management).
    • Developed software that controls the modulator, from requirements to specifications, design, implementation, unit tests, and integration tests.
    • Made all the critical decisions: choosing the programming language (C++), software compilation suite, coding standards, and RTOS vs bare metal.
    • Defined C++ coding guidelines adapted to this high-integrity software.
    • Designed the software architecture, including the structure of a 1 kHz control loop with hard real-time requirements.
    • Verified the progress against time estimates and regularly reported to the project manager.
    • Demonstrated successfully a proof of concept.
    Technologies: DOORS, ASM, Embedded C, Code Composer Studio, RS-232, Serial Peripheral Interface (SPI), I2C, XML, TCP/IP, UML, Redmine, Subversion (SVN), Embedded Linux, BeagleBone Black, DSP, Software Architecture, Project Management, C++
  • Software Engineer

    2010 - 2010
    AB Tools
    • Made modifications to the Icecast MP3 server to seamlessly insert audio ads for internet radio.
    Technologies: AAC, MP3, HTTP, Icecast, C
  • Software Engineer

    2009 - 2010
    Megger
    • Worked on the next generation of a portable appliance tester running on Integrity.
    • Designed and developed some GUI screens and widgets.
    • Designed and developed C++ classes to access SQLite databases; also designed the database schemas.
    • Proposed an agile iterative software development process; it was partially adopted.
    • Developed a USB printer class driver.
    • Developed a Win32 PC application allowing the user to upgrade the PAT SW.
    • Developed various device drivers: SPI driver, RTC driver, keyboard driver, and more.
    • Made some modifications in U-Boot.
    • Developed a .NET PC application to automate the programming of boards.
    Technologies: USB, SQLite, U-Boot, .NET, C, Microsoft Project, UML, Agile, Visual Studio, Win32 API, C#, C++, Systems
  • Software Engineer

    2007 - 2009
    Amino
    • Performed various jobs on the next generation of IPTV STB, including a CA integration and MPEG Demux driver.
    Technologies: Linux Kernel, Embedded Linux, MPEG, IPTV, C
  • Software Engineer

    2006 - 2007
    Imagination Technologies
    • Integrated GStreamer to the next generation of digital radios able to play internet audio streams.
    • Developed the following: an RTSP/RTP/RDT stack, ASF Demux, Real Media Demux, and a HTTP streaming client.
    Technologies: GLib, Windows Media Audio (WMA), MP3, Linux, GStreamer, RTCP, RTP, RTSP, SHOUTcast, C
  • Software Engineer

    2006 - 2006
    NXP Semiconductors
    • Upgraded some software drivers from an old STB to a new one running on Linux.
    Technologies: JTAG, MIPS, Linux Kernel, C
  • Software Engineer

    2006 - 2006
    NDS
    • Developed some test tools to test STB drivers that wwere developed by STB manufacturers for the US digital TV market.
    Technologies: MPEG, ARM, JTAG, MIPS, PVCS, C
  • Software Engineer

    2005 - 2006
    Ezurio
    • Developed various software components for a tiny WiFi board.
    • Delivered successfully an SW—allowing the demonstration of the smallest WiFi board on the market to a key trade exhibition.
    Technologies: WiFi, TCP/IP, C
  • Networking Software Engineer

    2004 - 2005
    Sagem
    • Wrote for an ADSL modem a Linux Bluetooth API calling VxWorks.
    • Developed an ethernet bridge making use of the network processor.
    Technologies: MIPS, TCP/IP, Ethernet, VxWorks, Linux Kernel, Embedded Linux, C
  • Software Engineer

    2003 - 2004
    Philips CE
    • Worked on the next generation of high-end Philips Digital TV.
    • Integrated the VxWorks USB stack.
    • Developed various plug-ins.
    Technologies: MIPS, Continuum, USB, VxWorks, C
  • Software Engineer

    2003 - 2003
    Reuters Financial Software
    • Maintained a server providing access services to an Oracle database.
    Technologies: CVS, Design Patterns, Standard Template Library (STL), Solaris, Oracle, TIBCO Rendezvous, C++
  • Validation Manager

    2002 - 2002
    MBDA
    • Managed the validation of a test bench of a missile launching system.
    Technologies: RPM, Solaris, Linux, VxWorks, UDP, TCP, CVS, C
  • Software Engineer

    2001 - 2002
    Philips MP4NET
    • Developed a network tool to replicate a distant video session.
    • Maintained a video streaming server.
    Technologies: RPM, UDP, TCP, Solaris, Linux, CVS, Shell Scripting, RTCP, RTP, RTSP, C++, C
  • Software Engineer

    2000 - 2001
    Alcatel Optronics
    • Developed software that was embedded on transmitting laser chips to control the laser's wavelength.
    Technologies: Oscilloscopes & Tester Equipment, MPLAB, C
  • Software Engineer

    1998 - 2000
    Sagem
    • Developed various software modules embedded on military vehicles and planes.
    Technologies: Solaris, CVS, RPM, Microsoft SQL Server, MS-DOS, Linux, C

Experience

  • Migrating Services from Physical Servers to AWS

    ThinkAlpha needed to migrate services from on-premise, physical servers to AWS Cloud to streamline their operations and increase resiliency. They required an unusually high number of environments for various purposes, each one replicating exactly the same services. This was a medium-scale project, with about 25 services, six environments, VPNs and Direct Connect.

    I proposed the Terraform as Infrastructure-as-Code tool and built the environments from the ground up, adding each service in turn. Services were either Node-based application or static websites. The Node apps were run as Fargate ECS clusters. I also helped with the Dockerization process. Static websites were run as S3 buckets fronted with CloudFront distributions.

    Continuous Deployment was performed with CircleCI. I updated the CircleCI scripts to deploy the services to AWS instead of the physical servers.

    ThinkAlpha had some additional requirements in terms of networking, and needed VPNs and Direct Connect to link services. To ease the hand over of the infrastructure to ThinkAlpha, I generated templates from the two types of services and documented how to create new services and update the infrastructure for the various environments.

  • Modernizing a Web Infrastructure
    http://sibotest.com/

    SIBOTest needed to move away from a monolithic and fragile approach of having everything on one server and wanted to up their game as a startup.

    I proposed an overhaul of the internal structure of the web app to use microservices based on Docker so that the architecture would be robust and scalable.

    Work Done:
    · Introduced load balancers with SSL termination.
    · Separated the production and staging environments.
    · Moved the MySQL databases to a separate subnet, using MySQL NDB Cluster.
    · Dockerized their Ruby on Rails application.
    · Set up a continuous-integration system based on Jenkins to automatically build the Docker images.
    · Wrote Ansible scripts to automate the provisioning of new servers and deployment of the docker images.
    · Ensured the air-tight security of the overall infrastructure.

    In the end, this multitier architecture was working very nicely, with no reported downtime.

  • Design a Highly Available and Scalable Architecture on AWS
    https://mydocsafe.com

    MyDocSafe needed some expert help to design a monitoring system suited to their application. They experienced a lot of instability, server crashes, and performance problems. Once this immediate solution was in place, they required an expert to design and implement a highly available and scalable architecture to run their workload reliably on AWS, complete with automated deployment.

    Work Done:
    • Write Ansible roles and playbook to install CloudWatch Agent on EC2 instances and configure Amazon SNS and CloudWatch to notify key people of alarms on EC2 instances.
    • Tweak Apache configuration to stop it crashing under heavy load.
    • Write Ansible roles and playbook to create Let's Encrypt SSL certificates using DNS challenge, including creating the subdomain on AWS Route53.
    • Install and configure ELK stack to monitor Apache logs.
    • Design a highly available and scalable architecture to reliably run a complex workload.
    • Progressively migrate the existing system to the new architecture.
    • Employed the new architecture in production.

  • Set up of CI/CD Pipelines for a Startup

    PSD2Enabler required the setup of CI/CD pipelines on GitLab for various projects.

    Work Done:
    · Set up a GitLab pipeline to build and deploy an app to AWS using Terraform and Ansible.
    · Set up a GitLab pipeline to build and deploy an app to a Kubernetes cluster hosted on the Google Cloud Platform.
    · Set up a GitLab pipeline to build and deploy an app to a Kubernetes cluster hosted on AWS EKS.

  • Cisco | DevOps Engineering and Python Development

    I worked as part of the system team who released set-top-box software to a major EU broadcaster.

    Work Done:
    · Set up and maintained a variety of software tools to enable the smooth running of the continuous integration process.
    · Set up the Coverity static analysis and enabled nightly automation using Jenkins
    · Set up BlackDuck open-source code matching.
    · Configured Nagios and set up an NRPE with custom Git checks.
    · Set up various Cron/Jenkins jobs with Bash/Python to automate tasks.
    · Worked in a Scrum process with three-week iterations with a team spread over three countries.
    · Worked with a codebase of 20 million+ lines of code.
    · Detected and responded to the system problems.

    Technologies: Linux, CentOS, Coverity, Jenkins, Black Duck, Continuous Integration, Scrum, Bash, Python, iptables/Netfilter, Nmap, Git, Rally

  • DevOps Architect

    Armedia needed an AWS specialist and DevOps expert to help them modernize the architecture of ArkCase, a case management system. They needed to move from running everything on one server to a modern architecture based on Kubernetes, microservices, and infrastructure as code (IaC). Additionally, they required an AWS expert to help them build an AWS marketplace offering for ArkCase.

    Tasks:
    - Move from a monolithic architecture to a microservice-based architecture
    - Dockerize various services
    - Write Helm charts
    - Secure the Kubernetes cluster using network policies and RBAC
    - Install and configure Istio to encrypt internal traffic and facilitate distributed tracing
    - Install and configure observability tools: Loki for log aggregation, Prometheus and Grafana
    - Write CloudFormation templates to set up the infrastructure on AWS
    - Write Lambda functions in Python as CloudFormation custom resources or for admin tasks such as rotating secrets with the SecretsManager
    - Modify existing Ansible roles and playbooks
    - Build an internal PKI using IaC on AWS using only serverless services; certificates are renewed automatically when they expire and when CA certificates are renewed themselves.

  • Terraform vs. CloudFormation: The Definitive Guide (Publication)
    Choosing between infrastructure-as-code tools CloudFormation and Terraform can be arduous. It's helpful to have some advice from someone with practical experience scaling apps using both technologies.
  • ELK to AWS: Managing Logs with Less Hassle (Publication)
    The ELK stack boasts a range of impressive capabilities, but in some scenarios, it can be difficult to configure and maintain. In this article, Toptal DevOps Engineer Fabrice Triboix explains why he decided to shift to a serverless solution that requires less maintenance and allows for superior scaling.

Skills

  • Languages

    Bash Script, Python, Python 3, C++11, Bash, C, MIPS, UML, XML, Embedded C, C#, Go, C++
  • Tools

    Terraform, AWS CloudFormation, Amazon CloudWatch, Amazon Elastic Container Service (Amazon ECS), AWS CLI, GitLab CI/CD, NGINX, Ansible, Amazon Virtual Private Cloud (VPC), AWS IAM, AWS Systems Manager, GitLab, Bitbucket, GitHub, Git, DBus, Coverity, BlackDuck Protex, NMap, Rally, VMware vSphere, Logstash, Kibana, Subversion (SVN), Redmine, DOORS, Visual Studio, Microsoft Project, U-Boot, Continuum, TIBCO Rendezvous, CVS, RPM, SHOUTcast, Let's Encrypt, Pytest, VPN, ELK (Elastic Stack), Jenkins, Helm, Istio, Grafana
  • Platforms

    Docker, Amazon Web Services (AWS), Linux, Amazon EC2, Kubernetes, AWS Lambda, Ubuntu, CentOS, Kernel, Embedded Linux, VxWorks, BeagleBone Black, Oracle, Solaris, MS-DOS, Ethereum, DigitalOcean, AWS Elastic Beanstalk
  • Other

    TCP/IP, Infrastructure as Code (IaC), SSL, Autoscaling, Technical Writing, Iptables, VMware ESXi, H.264, ARM, WebKit, Linux Kernel, Ethernet, Software Architecture, DSP, I2C, Serial Peripheral Interface (SPI), RS-232, Code Composer Studio, Icecast, HTTP, MP3, AAC, Systems, USB, IPTV, TCP, UDP, RTSP, RTP, RTCP, Shell Scripting, MPLAB, Oscilloscopes & Tester Equipment, Windows Media Audio (WMA), PVCS, JTAG, WiFi, Smart Contracts, Bitcoin, AWS Transit Gateway, Prometheus, MPEG, Loki, Observation, AWS Secrets Manager
  • Paradigms

    Continuous Deployment, Continuous Integration (CI), Scrum, Agile, Design Patterns, DevOps
  • Storage

    MySQL, Amazon S3 (AWS S3), Elasticsearch, SQLite, Microsoft SQL Server, Google Cloud, PostgreSQL
  • Frameworks

    Netfilter, Boost, ASM, .NET, GStreamer, Ruby on Rails (RoR), Flask
  • Libraries/APIs

    Standard Template Library (STL), OpenGL, Win32 API, GLib, Flask-Marshmallow, SQLAlchemy, Jenkins Pipeline
  • Industry Expertise

    Project Management

Education

  • Master of Science Degree in Computer Sciences Applied to Earth Sciences
    1995 - 1998
    Pierre and Marie Curie University - Paris, France

Certifications

  • Certified Kubernetes Security Specialist
    FEBRUARY 2022 - FEBRUARY 2024
    Linux Foundation
  • Certified Kubernetes Administrator
    DECEMBER 2021 - DECEMBER 2024
    The Linux Foundation
  • Certified Kubernetes Application Developer
    DECEMBER 2021 - DECEMBER 2024
    The Linux Foundation
  • AWS Certified DevOps Engineer Professional
    OCTOBER 2021 - OCTOBER 2024
    AWS
  • AWS Certified SysOps Administrator Associate
    MARCH 2019 - OCTOBER 2024
    AWS
  • AWS Certified Developer Associate
    FEBRUARY 2019 - OCTOBER 2024
    AWS
  • AWS Certified Solutions Architect Associate
    JANUARY 2019 - JANUARY 2025
    AWS

To view more profiles

Join Toptal
Share it with others