Personal statement

Entusiast IT engineer with over 6+ years of experience in hyper-converged infrastructure and DevSecOps model supporting, automating and optimizing critical deployments in on-premise infrastructure.

Following my passion for technology was one of the best decisions I ever made. It gave me the confidence and motivation that I needed.

I decided to integrate an IT school back in 2013, The CESI EXiA School. After my first two years as CPGE, I choose to follow the Network and Infrastructure specialization engineering courses.

I am now working on DevSecOps field with specialization in Kubernetes, Gitlab-EE and Nutanix hyper-converged infrastructure.

AnthonyPradal


Job Experiences

2023 - now

- Maintaining Nutanix Hyper Converged Infrastructure and implementing DevSecOps workflows.
- Developing and implementing next-gen company architecture for On-Premise and Cloud providers.

- Implement solutions to perform secure SDLC activities (Threat Modeling/DAST/SAST/OSS Scanning/IaC/SCA) and manual pen testing into a CI/CD workflow.

- Developed and implement next-gen company architecture involving resources interactions with On-Premise and Cloud providers.

- Collaborating with cross-functional teams to integrate DevSecOps practices.
- Providing consultation/support as a DevSecOps subject matter expert.
- Ensuring security controls and compliance requirements are met.

- Leading incident response and remediation efforts. - Managing security analysis and remediation efforts, including coordinating with third-party companies for investigations.
- Previously overseeing the response to a security incident, and managing a team to ensure the security of the organization's infrastructure.

- Specialized in Docker, Gitlab Enterprise, Nutanix and Kubernetes


- Maintain Nutanix Hyper Converged Infrastructure, design and implement DevSecOps worflows within running infrastructure.

- Implement solutions to perform secure SDLC activities like Threat Modeling, DAST, SAST, OSS Scanning and manual pen testing into a CI/CD workflow.

- Developed and implement next-gen company architecture involving resources interactions with On-Premise and Cloud providers.


2019 - 2020

- Managing internal DevSecOps pipeline and maintaining CBS and hyper-converged infrastructure.

- Design, code, deploy and maintain various infrastructure and business solutions using custom tools and scripts (PHP, Rails, Python, Powershell)

- Experience with Security Operational Management, including Change, Release, Incident, and Problem Management.


Feb 2018 - Feb 2019

IT consultant around the DevOps and Agile methods. Implement GDPR and CSSF obligations within Client's IT system.

Participe in company's projects kickstart and improve current Infrastructure by implementing new Monitoring and log system. Prepare and implement new GitOps plateform to enable DevOps philosophy within the company.

Technologies used: Python, Powershell, Bash. PHP, Maven And Selenium for CI/CD. Splunk and Centreon.


Sept 2016 - Feb 2017

Automation & Internal tools development. Working on their internal reporting tool used for incidents using usual web programming language.


Education & Certification

IT Engineer's degree

CESI Association - EXIA

2015-2018

The exia.CESI Graduate School of Engineering offers an IT Applied Computer Science Engineering programme, which is a accredited by the CTI (Accreditation Board in Engineering).


Analyst Programmer (IT Prepa)

CESI Association - EXIA

2015-2018

This diploma program focuses on preparing you to work as a programming analyst in the application of current practices, procedures and tools. This program will give you the theoretical knowledge and hands-on skills in analyzing the needs, design, coding and testing of new software programs.

Technical skills

DevSecOps Tools (Gitlab-EE, SAST/DAST, Helm, K8s, OWASP, Terraform, Ansible, ...)

80% Complete (success)

Scripting (Bash, Powershell, Python)

85% Complete

Web and Software Development (PHP, Rails, JS)

60% Complete (warning)

Infrastructure(VMWare, Proxmox)

60% Complete (danger)

Nutanix hyper-converged infrastructure (AHV, AOS, Files, Objects, Mine, Era, ...)

75% Complete (danger)

Certifications

Certified Kubernetes Security Specialist (CKS)

LinuxFoundation (2022)

The Certified Kubernetes Security Specialist (CKS) program provides assurance that a CKS has the skills, knowledge, and competence on a broad range of best practices for securing container-based applications and Kubernetes platforms during build, deployment and runtime. CKA certification is required to sit for this exam.


Certified Kubernetes Administrator (CKA)

LinuxFoundation (2021)

What is CKA? Image result for CKA The Certified Kubernetes Administrator (CKA) program was created by the Cloud Native Computing Foundation (CNCF), in collaboration with The Linux Foundation, to help develop the Kubernetes ecosystem. As one of the highest velocity open source projects, Kubernetes use is exploding.


Nutanix Certified Professional (NCP)

Nutanix (2020)

The Nutanix Certified Professional (NCP) certification confirms your ability to administer the Nutanix Enterprise Cloud Platform and successfully deploy and manage workloads critical to your business.


ITIL® Foundation Certificate in IT Service Management

AXELOS Global Best Practice (2019)

ITIL (Information Technology Infrastructure Library) is a set of detailed practices for IT service management (ITSM) that focuses on aligning IT services with the needs of business.


Test of English for International Communication, TOEIC

ETS Global B.V. (2018)

Score: 920. The TOEIC Program was conceived in Japan and created by the Educational Testing Service (ETS), a U.S. nonprofit test development institution, as a common global yardstick for measuring English skills.


Cisco Certified Network Associate Certification

CISCO Inc. (2017)