Marc Bourrel

Engagements & experience

1. Crédit Agricole Immobilier

   Aug 2026 → ongoing

   Tech Lead DevOps & Cloud · IT department, development division · contract via Joopin's Lab

   Production & reliability (SRE, level-3 run)

   • Investigating and resolving complex production incidents, escalations to software vendors.
   • Early detection and incident correlation with Graylog and Grafana, keeping systems in operational condition.
   • Ansible, Bash and PowerShell monitoring scripts to track system health.

   Kubernetes & GitOps

   • Running and securing AKS: ingress, services, pods, PDBs, PVCs.
   • Code review of vendor Helm charts before integration, GitOps deployments with ArgoCD and Argo Workflows.

   Identity & flow security

   • Lifecycle of two Keycloak instances federated with Entra ID: SSO, IAM, automated provisioning.
   • Impact analysis of version upgrades: code reviews, network filtering rules, flow isolation.

   SaaS integration

   • Technical lead on integrating vendor SaaS solutions, working with infrastructure, security and external partners.
   • .NET satellite applications, architecture records and operations procedures.
   • AKS
   • ArgoCD
   • Argo Workflows
   • Helm
   • Keycloak
   • Entra ID
   • Graylog
   • Grafana
   • Nginx
   • .NET

2. VIASANTÉ Mutuelle

   Jan 2026 → Jun 2026

   IT expert & DevOps engineer · Health insurer · critical platform

   Production

   • Ran and stabilised a multi-environment containerised platform (production, QA, staging) on Docker Swarm.

   Observability

   • Grafana, Prometheus and Loki monitoring: anomalies detected in near real time, decision dashboards, NFS incidents caught before users noticed.

   Data & security

   • Automated backups of critical data (API gateway, Keycloak), an industrialised alternative to MongoDB dumps, hardened CI/CD pipelines and secrets.

   Governance

   • Contributed to architecture decisions and DevOps practices to pay down technical debt.
   • Docker Swarm
   • Grafana
   • Prometheus
   • Loki
   • Keycloak
   • MongoDB
   • CI/CD

3. Airbus Defence and Space

   May 2025 → Sep 2025

   Cloud & DevOps engineer · Defence & space · contract via SQUAD Conseil

   Cloud & orchestration

   • OpenStack tenants end to end: projects, COTS applications, images, resources.
   • Production Kubernetes: namespaces, monitoring and alerting, scale-out, scale-in, cluster migrations and decommissioning.

   Industrialisation

   • GitLab CI/CD pipelines, infrastructure in Terraform and Cloud-Init paired with Ansible roles and playbooks.
   • Artifactory: permissions, cleanup, dependency lifecycle, Docker image build and publishing.

   Linux & knowledge transfer

   • Advanced Linux administration and troubleshooting, shell and Python scripting; operations, architecture and how-to documentation.
   • OpenStack
   • Kubernetes
   • Terraform
   • Cloud-Init
   • Ansible
   • GitLab CI
   • Artifactory
   • Python

4. Finzzle

   Nov 2023 → May 2025

   Network & systems administrator · Fintech group

   Kubernetes & VMware Tanzu

   • Clusters through Tanzu Mission Control and Tanzu Kubernetes Grid: Helm, kubectl, autoscaling, ingress controllers, ConfigMaps, Secrets, volumes.
   • Secured with RBAC, Network Policies, service accounts and TLS; monitored with Tanzu Observability and Aria for Logs.

   Docker & Azure

   • Docker, Compose and Swarm with Docker Secrets; Azure DevOps Pipelines CI/CD.
   • Azure in Terraform: VMs, VNets, storage, Azure SQL, Key Vault; CVEs handled through Security Center.

   Leadership

   • Prioritised DevOps projects, set KPIs for availability, response time and deployment success, owned the technical roadmap.
   • VMware Tanzu
   • Kubernetes
   • Helm
   • Azure
   • Terraform
   • Azure DevOps
   • Docker Swarm

5. SQUAD Conseil

   Mar 2020 → Nov 2023

   Project manager · network engineer · IT consultancy · project manager from Sep 2022 to Nov 2023

   Projects & networks

   • Designed and segmented secure networks (Stormshield, Cisco, Aruba, VPN), delivered projects on time and budget, architecture and operations docs.
   • 300+ managed devices, level-1/2 support, SQUAD to Orange interconnection, client security audits and Bitdefender patching.

   Infrastructure & workplace

   • Server room relocation: fibre, rack, UPS, cabling, with zero service interruption.
   • Azure AD and Intune: Defender for Endpoint, Windows update rings, server updates.
   • Stormshield
   • Cisco
   • Aruba
   • VPN
   • Azure AD
   • Intune