
Younes Bouchama
Verified Expert in Engineering
DevOps Engineer and Developer
Paris, France
Toptal member since November 4, 2024
Younes is a DevOps engineer with extensive experience working in diverse environments. He specializes in cloud infrastructure, CI/CD pipelines, and containerization. He has played significant roles at leading companies like RATP Dev, La Poste, and BeyondTrust—driving cloud migrations, optimizing DevOps processes, and implementing microservices architectures. Younes is also a certified AWS Solutions Architect, Kubernetes Administrator and Security Specialist (CKA/CKS), and Terraform Associate.
Portfolio
Experience
- Terraform - 6 years
- GitLab CI/CD - 6 years
- Kubernetes - 6 years
- Docker - 6 years
- Amazon EKS - 6 years
- Helm - 6 years
- GitOps - 5 years
- Argo CD - 4 years
Availability
Preferred Environment
Amazon EKS, GitLab CI/CD, Kubernetes, Argo CD, Helm, GitOps, Docker, Terraform, Ansible, DevOps
The most amazing...
...project I've developed is a GitOps CI/CD pipeline using ArgoCD, GitLab CI, and Terraform, enabling automated Helm deployments on EKS.
Work Experience
Senior DevSecOps Engineer
RATP Dev
- Designed highly available and fault-tolerant architectures on AWS using services such as VPC, EC2, S3, RDS, and EKS.
- Configured and managed secure Kubernetes environments using solutions like Amazon EKS.
- Automated container security scans with Trivy to identify and address vulnerabilities.
- Implemented security policies based on IAM roles to control access to AWS resources.
- Set up security alerts and metrics with Amazon CloudWatch to monitor suspicious activities.
- Enabled continuous visibility and compliance by integrating security tools like AWS Security Hub and AWS Config.
- Integrated Datadog with AWS and Kubernetes to collect and analyze real-time performance data.
- Detected performance anomalies and security issues through automated alerts in Datadog.
- Optimized cloud resources and reduced costs by configuring Karpenter to automatically balance workload demand with available capacity.
- Leveraged DefectDojo to automatically import security analysis results, including Trivy container scans and automated security tests.
Senior DevOps Engineer
La Poste
- Leveraged SonarQube for static code analysis to identify quality and security issues.
- Set up GitLab CI/CD to automate Docker image building and infrastructure deployment.
- Integrated Terraform into GitLab CI/CD pipelines to automate infrastructure deployment.
- Configured the application load balancer on AWS to distribute traffic to Kubernetes services using AWS Certificate Manager to manage SSL/TLS certificates and the NGINX Ingress controller to route traffic to pods.
- Templated and versioned Kubernetes resources using Helm charts.
- Implemented local development environments with Docker Compose and Makefile.
- Used Ingress rules in Kubernetes to specify traffic routing paths and options to deployed services.
DevOps Engineer
Breakwater Solutions
- Collaborated with platform, machine learning, search, data, and front-end teams to understand their DevOps and infrastructure needs.
- Influenced the DevOps roadmap and led various projects.
- Designed and managed multi-tenant AWS cloud infrastructure for Responsum.
- Ensured scalability, performance, observability, resilience, and cost optimization.
- Managed all Kubernetes clusters and service deployments.
- Improved system observability and reliability through monitoring and alerting infrastructure using tools like Prometheus, Grafana, and PagerDuty.
- Built and managed CI/CD pipelines using infrastructure as code for the Responsum application stack across different environments.
- Developed networking infrastructure with best-in-class security practices.
- Enhanced the Responsum infrastructure's privacy and security posture.
DevOps Engineer
BeyondTrust
- Provisioned AWS resources using infrastructure as code tools like Terraform and Ansible.
- Executed a continuous delivery pipeline with an immutable infrastructure philosophy using Golden AMIs, Docker, and blue-green deployment.
- Configured cloud-ready monitoring and log management tools using Datadog.
- Designed, built, managed, and operated the infrastructure and configuration of SaaS applications, focusing on automation and infrastructure as code.
- Implemented automatic scaling of infrastructure and services.
Experience
Cloud Migration with AWS and Kubernetes
Security Testing Automation with DevSecOps
Performance Monitoring and Analysis with Datadog
Design of an Evolvable Cloud Architecture
I conducted an in-depth analysis of performance, availability, and security requirements to design a robust and flexible architecture. I leveraged AWS and Azure cloud services to create a highly available and scalable infrastructure and implemented resilience and disaster recovery strategies to ensure operational continuity in case of failure.
Additionally, I collaborated with development, operations, and security teams to align the architecture with best practices and business requirements. I created detailed architecture documentation, including diagrams, data flows, and security policies, to facilitate understanding and future maintenance. I also supervised the implementation and deployment of the cloud architecture, ensuring compliance with established specifications and standards. Finally, I evaluated the architecture continuously to identify optimization and improvement opportunities, considering technological advancements and new business needs.
Vulnerability Management and Code Analysis
I cultivated a culture of security awareness within the development team, emphasizing the importance of security best practices in the software development lifecycle. We achieved a 60% decrease in the critical vulnerabilities identified during external audits, showcasing the effectiveness of the integrated security measures. By minimizing security-related delays, we also reduced the time to market for new features by 25%, enhancing our competitive edge.
Education
Master's Degree in Computer Systems and Networks
Institut F2i - Vincennes, France
Bachelor's Degree in Computer Systems and Networks
Institut F2i - Vincennes, France
Certifications
Terraform Associate
HashiCorp
Certified Kubernetes Security Specialist (CKS)
The Linux Foundation
AWS Certified Developer - Associate
Amazon Web Services
AWS Certified Solutions Architect - Associate
Amazon Web Services
Certified Kubernetes Administrator (CKA)
The Linux Foundation
AWS Certified Cloud Practitioner
Amazon Web Services
LPIC-1
Linux Professional Institute (LPI)
CompTIA Linux+ (powered by LPI)
CompTIA
Skills
Tools
Amazon EKS, GitLab CI/CD, Helm, Terraform, Ansible, AWS Subnets, Amazon CloudWatch, Amazon Elastic Container Service (ECS), AWS CodeBuild, AWS IAM, Amazon Elastic Container Registry (ECR), GitLab, DefectDojo
Paradigms
DevOps
Platforms
Kubernetes, Docker, Amazon EC2, AWS ALB, AWS Lambda, AWS Elastic Beanstalk
Storage
Amazon S3 (AWS S3), Datadog
Languages
JavaScript
Other
Argo CD, GitOps, Cloud, AWS DevOps, Virtual Private Cloud (VPC), AWS NAT Gateway, AWS Internet Gateway, AWS Secrets Manager, Amazon RDS, AWS WAF, AWS Auto Scaling, Certified Kubernetes Administrator (CKA), Kubernetes Security, IAS, AWS CodePipeline, Linux Administration, CI/CD Pipelines, Infrastructure as Code (IaC), Canary Deployment, Trivy, Azure Administrator, Networking
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring