Fabrice Triboix, Developer in London, United Kingdom
Fabrice is available for hire
Hire Fabrice

Fabrice Triboix

Verified Expert  in Engineering

DevOps Developer

London, United Kingdom
Toptal Member Since
September 6, 2017

Fabrice is a cloud architect, DevOps engineer, and software developer with over 20 years of experience. He worked for clients such as Armedia, Topps, and MyDocSafe, and specializes in designing secure, highly available, scalable, and cost-effective solutions on AWS and Kubernetes. Fabrice also assumed managerial positions in the past as a team leader and release manager. He is very keen on automation, IaC, and CI/CD, and he can code in Python.


Home Office
Kubernetes, Amazon Web Services (AWS), GitLab, Drone CI
Amazon Web Services (AWS), Vault, Terraform, Ansible, GitLab
Armedia LLC
Kubernetes, Helm, Istio, Loki, Prometheus, Grafana, Docker...




Preferred Environment


The most amazing...

...project I've designed is a secure, highly available, and scalable architecture on AWS for an intricate web of interdependent services to MyDocSafe.

Work Experience

DevOps Engineer

2022 - 2023
Home Office
  • Took over a major security system with most of it running on Kubernetes.
  • Imported code repositories into GitLab and configured CI/CD pipeline on them.
  • Enabled automatic exportation of secrets stored in AWS Secrets Manager into Kubernetes secrets.
  • Built various Docker images and automated such builds as part of CI/CD pipelines. Deployed various apps into Kubernetes.
Technologies: Kubernetes, Amazon Web Services (AWS), GitLab, Drone CI

DevOps Engineer

2021 - 2022
  • Collaborated with the team, building architectures and making them available to other teams.
  • Took charge of short-term tasks related to designing, implementing, and maintaining cloud architectures for various products used within HMRC.
  • Involved with tasks for on-premise infrastructure as well.
Technologies: Amazon Web Services (AWS), Vault, Terraform, Ansible, GitLab

DevOps Architect

2020 - 2021
Armedia LLC
  • Modernized the architecture of ArkCase, a case management system. The architecture was monolithic, with ArkCase and half a dozen dependent services running on the same server.
  • Moved to a modern architecture based on Kubernetes, microservices, and Infrastructure-as-Code. Additionally, helped the company build an AWS Marketplace offering for ArkCase.
  • Dockerized various services and wrote Helm charts for various services.
  • Secured the Kubernetes cluster using network policies and RBAC and installed and configured Istio and observability tools. Built an internal PKI using CloudFormation.
Technologies: Kubernetes, Helm, Istio, Loki, Prometheus, Grafana, Docker, Amazon Web Services (AWS), AWS CloudFormation, Ansible, Python

Cloud Architect

2020 - 2020
  • Refactored Terraform scripts to minimize the update anxiety.
  • Advised on the best network architecture involving a Transit Gateway, multiple VPNs, and multiple AWS accounts for a complex flow of IoT data with the right balance between simplicity and efficiency, also being future-proof.
  • Set up AWS Client VPN using Terraform with mutual authentication.
Technologies: Amazon Web Services (AWS), Terraform, VPN, AWS Transit Gateway

DevOps Engineer

2019 - 2020
  • Performed various system administration tasks, especially related to SSL certificates.
  • Dockerized the Ruby-on-Rails web application in order to facilitate deployments.
  • Designed and implemented a MySQL NDB cluster in order to increase the database resiliency.
  • Designed a highly available, microservice-based cloud architecture for the SIBOTest website.
Technologies: Docker, Ruby on Rails (RoR), MySQL, DigitalOcean

Software Developer

2018 - 2020
Topps Digital
  • Designed, implemented, and tested a back-end microservice in Python 3.6 running on Elastic Beanstalk in AWS.
  • Implemented new services based on Flask and SQLAlchemy as part of a microservice architecture consisting of back-ends to mobile applications allowing users to trade virtual cards.
  • Wrote extensive unit tests using Pytest for a number of microservices.
Technologies: Amazon Web Services (AWS), SQLAlchemy, PostgreSQL, Flask-Marshmallow, Flask, Pytest, AWS Elastic Beanstalk, Python 3, Python

DevOps Engineer

2019 - 2019
A shopping-site startup in the Middle East
  • Designed and implemented workload architecture on AWS suitable for the startup requirements based on Docker and ECS.
  • Designed and implemented a complex system to generate and manage SSL certificates for this multi-tenant application.
  • Automated workload provisioning using infrastructure-as-code (CloudFormation) such that white labeling would be possible.
Technologies: Amazon Web Services (AWS), Let's Encrypt, SSL, Amazon Elastic Container Service (Amazon ECS), Docker, AWS CloudFormation

Blockchain Specialist

2017 - 2018
  • Inspected C++ code for the BlocknetDX wallet and advised on improvements.
  • Designed a protocol for the atomic exchange of bitcoins and ethers, including code for smart contracts.
  • Designed a protocol for the atomic exchange of Ethereum colored coins following the ERC20 standard.
  • Advised on the Ethereum side of things for the Blocknet whitepaper: https://blocknet.co/whitepaper/Blocknet_Whitepaper.pdf.
Technologies: C++, Bitcoin, Smart Contracts, Ethereum

Senior Software Engineer

2017 - 2017
  • Added new features to an access control system written in C++11 and Python 3.
Technologies: DBus, Docker, Git, C++11, C++, Python 3, Python, Ubuntu, Linux

DevOps Engineer

2016 - 2017
  • Worked as part of the system team—releasing STB software to a major EU broadcaster.
  • Helped design and implement a black box STB test framework written in Python.
  • Set up and maintained a variety of software tools to enable the smooth running of the continuous integration and development/testing work.
  • Set up Coverity static analysis and nightly automation using Jenkins.
  • Set up Black Duck open source code matching.
  • Configured Nagios and set up of NRPE with custom Git checks.
  • Implemented various Cron/Jenkins jobs in Bash/Python to automate tasks.
  • Installed and configured a DHCP server.
  • Worked within a Scrum process with six weeks iterations, and the team was spread over three countries.
  • Worked with a code base with 20 million+ lines of code.
  • Detected and responded to system problems.
Technologies: ELK (Elastic Stack), Kibana, Logstash, Elasticsearch, VMware vSphere, VMware ESXi, Rally, Git, NMap, Netfilter, Iptables, Bash, Scrum, Continuous Integration (CI), BlackDuck Protex, Jenkins, Coverity, Python, Ubuntu, CentOS, Linux

Release Manager

2015 - 2016
  • Worked on the Perseus-based contribution encoder.
  • Acted as the link (release manager) between the development and the product teams.
  • Translated high-level business requirements into technical requirements.
  • Established timelines and work breakdown structures in collaboration with the development team.
  • Reported on the progress on a weekly basis and detected and reported impeding difficulties.
  • Devised an Agile process with weekly iterations (based on Scrum).
  • Changed the supplier of video cards to a cheaper product with much better support.
  • Coded new features; including debugging and fixing of bugs and also integrated a TS muxer.
Technologies: MPEG, Kernel, Boost, Standard Template Library (STL), Scrum, Agile, H.264, Git, Linux, C++11, C++

Senior Software Engineer

2013 - 2015
Ovation Systems Ltd
  • Worked on the next generation of surveillance camera running on ARM9 with embedded Linux.
  • Designed and developed the subsystems managing the date/time, mass storage, and multiplexing of the audio (AAC) and video (H.264) into a Flash file (FLV).
  • Implemented automated unit-testing for the above subsystems.
Technologies: SQLite, H.264, Git, Embedded Linux, ARM, C

Senior Software Engineer

2013 - 2013
  • Investigated and analyzed the performance of the OpenGL stack for WebKit.
Technologies: WebKit, OpenGL

Lead Software Engineer

2011 - 2013
  • Worked on a modulator for a radiotherapy cancer treatment machine.
  • Worked with a team of 15 people (including five who were under my direct management).
  • Developed software that controls the modulator, from requirements to specifications, design, implementation, unit tests, and integration tests.
  • Made all the critical decisions: choosing the programming language (C++), software compilation suite, coding standards, and RTOS vs bare metal.
  • Defined C++ coding guidelines adapted to this high-integrity software.
  • Designed the software architecture, including the structure of a 1 kHz control loop with hard real-time requirements.
  • Verified the progress against time estimates and regularly reported to the project manager.
  • Demonstrated successfully a proof of concept.
Technologies: DOORS, ASM, Embedded C, Code Composer Studio, RS-232, Serial Peripheral Interface (SPI), I2C, XML, TCP/IP, UML, Redmine, Subversion (SVN), Embedded Linux, BeagleBone Black, DSP, Software Architecture, Project Management, C++

Software Engineer

2010 - 2010
AB Tools
  • Made modifications to the Icecast MP3 server to seamlessly insert audio ads for internet radio.
Technologies: AAC, MP3, HTTP, Icecast, C

Software Engineer

2009 - 2010
  • Worked on the next generation of a portable appliance tester running on Integrity.
  • Designed and developed some GUI screens and widgets.
  • Designed and developed C++ classes to access SQLite databases; also designed the database schemas.
  • Proposed an agile iterative software development process; it was partially adopted.
  • Developed a USB printer class driver.
  • Developed a Win32 PC application allowing the user to upgrade the PAT SW.
  • Developed various device drivers: SPI driver, RTC driver, keyboard driver, and more.
  • Made some modifications in U-Boot.
  • Developed a .NET PC application to automate the programming of boards.
Technologies: USB, SQLite, U-Boot, .NET, C, Microsoft Project, UML, Agile, Visual Studio, Win32 API, C#, C++, Systems

Software Engineer

2007 - 2009
  • Performed various jobs on the next generation of IPTV STB, including a CA integration and MPEG Demux driver.
Technologies: Linux Kernel, Embedded Linux, MPEG, IPTV, C

Software Engineer

2006 - 2007
Imagination Technologies
  • Integrated GStreamer to the next generation of digital radios able to play internet audio streams.
  • Developed the following: an RTSP/RTP/RDT stack, ASF Demux, Real Media Demux, and a HTTP streaming client.
Technologies: GLib, Windows Media Audio (WMA), MP3, Linux, GStreamer, RTCP, RTP, RTSP, SHOUTcast, C

Software Engineer

2006 - 2006
NXP Semiconductors
  • Upgraded some software drivers from an old STB to a new one running on Linux.
Technologies: JTAG, MIPS, Linux Kernel, C

Software Engineer

2006 - 2006
  • Developed some test tools to test STB drivers that wwere developed by STB manufacturers for the US digital TV market.
Technologies: MPEG, ARM, JTAG, MIPS, PVCS, C

Software Engineer

2005 - 2006
  • Developed various software components for a tiny WiFi board.
  • Delivered successfully an SW—allowing the demonstration of the smallest WiFi board on the market to a key trade exhibition.
Technologies: WiFi, TCP/IP, C

Networking Software Engineer

2004 - 2005
  • Wrote for an ADSL modem a Linux Bluetooth API calling VxWorks.
  • Developed an ethernet bridge making use of the network processor.
Technologies: MIPS, TCP/IP, Ethernet, VxWorks, Linux Kernel, Embedded Linux, C

Software Engineer

2003 - 2004
Philips CE
  • Worked on the next generation of high-end Philips Digital TV.
  • Integrated the VxWorks USB stack.
  • Developed various plug-ins.
Technologies: MIPS, Continuum, USB, VxWorks, C

Software Engineer

2003 - 2003
Reuters Financial Software
  • Maintained a server providing access services to an Oracle database.
Technologies: CVS, Design Patterns, Standard Template Library (STL), Solaris, Oracle, TIBCO Rendezvous, C++

Validation Manager

2002 - 2002
  • Managed the validation of a test bench of a missile launching system.
Technologies: RPM, Solaris, Linux, VxWorks, UDP, TCP, CVS, C

Software Engineer

2001 - 2002
Philips MP4NET
  • Developed a network tool to replicate a distant video session.
  • Maintained a video streaming server.
Technologies: RPM, UDP, TCP, Solaris, Linux, CVS, Shell Scripting, RTCP, RTP, RTSP, C++, C

Software Engineer

2000 - 2001
Alcatel Optronics
  • Developed software that was embedded on transmitting laser chips to control the laser's wavelength.
Technologies: Oscilloscopes & Tester Equipment, MPLAB, C

Software Engineer

1998 - 2000
  • Developed various software modules embedded on military vehicles and planes.
Technologies: Solaris, CVS, RPM, Microsoft SQL Server, MS-DOS, Linux, C

Migrating Services from Physical Servers to AWS

ThinkAlpha needed to migrate services from on-premise, physical servers to AWS Cloud to streamline their operations and increase resiliency. They required an unusually high number of environments for various purposes, each one replicating exactly the same services. This was a medium-scale project, with about 25 services, six environments, VPNs and Direct Connect.

I proposed the Terraform as Infrastructure-as-Code tool and built the environments from the ground up, adding each service in turn. Services were either Node-based application or static websites. The Node apps were run as Fargate ECS clusters. I also helped with the Dockerization process. Static websites were run as S3 buckets fronted with CloudFront distributions.

Continuous Deployment was performed with CircleCI. I updated the CircleCI scripts to deploy the services to AWS instead of the physical servers.

ThinkAlpha had some additional requirements in terms of networking, and needed VPNs and Direct Connect to link services. To ease the hand over of the infrastructure to ThinkAlpha, I generated templates from the two types of services and documented how to create new services and update the infrastructure for the various environments.

Modernizing a Web Infrastructure

SIBOTest needed to move away from a monolithic and fragile approach of having everything on one server and wanted to up their game as a startup.

I proposed an overhaul of the internal structure of the web app to use microservices based on Docker so that the architecture would be robust and scalable.

Work Done:
· Introduced load balancers with SSL termination.
· Separated the production and staging environments.
· Moved the MySQL databases to a separate subnet, using MySQL NDB Cluster.
· Dockerized their Ruby on Rails application.
· Set up a continuous-integration system based on Jenkins to automatically build the Docker images.
· Wrote Ansible scripts to automate the provisioning of new servers and deployment of the docker images.
· Ensured the air-tight security of the overall infrastructure.

In the end, this multitier architecture was working very nicely, with no reported downtime.

Design a Highly Available and Scalable Architecture on AWS

MyDocSafe needed some expert help to design a monitoring system suited to their application. They experienced a lot of instability, server crashes, and performance problems. Once this immediate solution was in place, they required an expert to design and implement a highly available and scalable architecture to run their workload reliably on AWS, complete with automated deployment.

Work Done:
• Write Ansible roles and playbook to install CloudWatch Agent on EC2 instances and configure Amazon SNS and CloudWatch to notify key people of alarms on EC2 instances.
• Tweak Apache configuration to stop it crashing under heavy load.
• Write Ansible roles and playbook to create Let's Encrypt SSL certificates using DNS challenge, including creating the subdomain on AWS Route53.
• Install and configure ELK stack to monitor Apache logs.
• Design a highly available and scalable architecture to reliably run a complex workload.
• Progressively migrate the existing system to the new architecture.
• Employed the new architecture in production.

Set up of CI/CD Pipelines for a Startup

PSD2Enabler required the setup of CI/CD pipelines on GitLab for various projects.

Work Done:
· Set up a GitLab pipeline to build and deploy an app to AWS using Terraform and Ansible.
· Set up a GitLab pipeline to build and deploy an app to a Kubernetes cluster hosted on the Google Cloud Platform.
· Set up a GitLab pipeline to build and deploy an app to a Kubernetes cluster hosted on AWS EKS.

Cisco | DevOps Engineering and Python Development

I worked as part of the system team who released set-top-box software to a major EU broadcaster.

Work Done:
· Set up and maintained a variety of software tools to enable the smooth running of the continuous integration process.
· Set up the Coverity static analysis and enabled nightly automation using Jenkins
· Set up BlackDuck open-source code matching.
· Configured Nagios and set up an NRPE with custom Git checks.
· Set up various Cron/Jenkins jobs with Bash/Python to automate tasks.
· Worked in a Scrum process with three-week iterations with a team spread over three countries.
· Worked with a codebase of 20 million+ lines of code.
· Detected and responded to the system problems.

Technologies: Linux, CentOS, Coverity, Jenkins, Black Duck, Continuous Integration, Scrum, Bash, Python, iptables/Netfilter, Nmap, Git, Rally

DevOps Architect

Armedia needed an AWS specialist and DevOps expert to help them modernize the architecture of ArkCase, a case management system. They needed to move from running everything on one server to a modern architecture based on Kubernetes, microservices, and infrastructure as code (IaC). Additionally, they required an AWS expert to help them build an AWS marketplace offering for ArkCase.

- Move from a monolithic architecture to a microservice-based architecture
- Dockerize various services
- Write Helm charts
- Secure the Kubernetes cluster using network policies and RBAC
- Install and configure Istio to encrypt internal traffic and facilitate distributed tracing
- Install and configure observability tools: Loki for log aggregation, Prometheus and Grafana
- Write CloudFormation templates to set up the infrastructure on AWS
- Write Lambda functions in Python as CloudFormation custom resources or for admin tasks such as rotating secrets with the SecretsManager
- Modify existing Ansible roles and playbooks
- Build an internal PKI using IaC on AWS using only serverless services; certificates are renewed automatically when they expire and when CA certificates are renewed themselves.


Bash Script, Python, Python 3, C++11, Bash, C, MIPS, UML, XML, Embedded C, C#, Go, C++


Terraform, AWS CloudFormation, Amazon CloudWatch, Amazon Elastic Container Service (Amazon ECS), AWS CLI, GitLab CI/CD, NGINX, Ansible, Amazon Virtual Private Cloud (VPC), AWS IAM, AWS Systems Manager, GitLab, Bitbucket, GitHub, Git, DBus, Coverity, BlackDuck Protex, NMap, Rally, VMware vSphere, Logstash, Kibana, Subversion (SVN), Redmine, DOORS, Visual Studio, Microsoft Project, U-Boot, Continuum, TIBCO Rendezvous, CVS, RPM, SHOUTcast, Let's Encrypt, Pytest, VPN, ELK (Elastic Stack), Jenkins, Helm, Istio, Grafana, Vault


Docker, Amazon Web Services (AWS), Linux, Amazon EC2, Kubernetes, AWS Lambda, Ubuntu, CentOS, Kernel, Embedded Linux, VxWorks, BeagleBone Black, Oracle, Solaris, MS-DOS, Ethereum, DigitalOcean, AWS Elastic Beanstalk, Drone CI


TCP/IP, Infrastructure as Code (IaC), SSL, Autoscaling, Technical Writing, Iptables, VMware ESXi, H.264, ARM, WebKit, Linux Kernel, Ethernet, Software Architecture, DSP, I2C, Serial Peripheral Interface (SPI), RS-232, Code Composer Studio, Icecast, HTTP, MP3, AAC, Systems, USB, IPTV, TCP, UDP, RTSP, RTP, RTCP, Shell Scripting, MPLAB, Oscilloscopes & Tester Equipment, Windows Media Audio (WMA), PVCS, JTAG, WiFi, Smart Contracts, Bitcoin, AWS Transit Gateway, Prometheus, MPEG, Loki, Observation, AWS Secrets Manager


Continuous Deployment, Continuous Integration (CI), Scrum, Agile, Design Patterns, DevOps


MySQL, Amazon S3 (AWS S3), Elasticsearch, SQLite, Microsoft SQL Server, Google Cloud, PostgreSQL


Netfilter, Boost, ASM, .NET, GStreamer, Ruby on Rails (RoR), Flask


Standard Template Library (STL), OpenGL, Win32 API, GLib, Flask-Marshmallow, SQLAlchemy, Jenkins Pipeline

Industry Expertise

Project Management

1995 - 1998

Master of Science Degree in Computer Sciences Applied to Earth Sciences

Pierre and Marie Curie University - Paris, France


Certified Kubernetes Security Specialist

Linux Foundation


Certified Kubernetes Administrator

The Linux Foundation


Certified Kubernetes Application Developer

The Linux Foundation


AWS Certified DevOps Engineer Professional


MARCH 2019 - OCTOBER 2024

AWS Certified SysOps Administrator Associate



AWS Certified Developer Associate



AWS Certified Solutions Architect Associate