Thomas Gueze
DevOps and Security engineer at Coservit- Claim this Profile
Click to upgrade to our gold package
for the full feature experience.
-
English -
-
French Native or bilingual proficiency
Topline Score
Bio
Experience
-
ServiceNav, an EasyVista Solution
-
France
-
IT Services and IT Consulting
-
1 - 100 Employee
-
DevOps and Security engineer
-
May 2021 - Present
-
-
-
ACTOLL
-
France
-
Information Technology & Services
-
1 - 100 Employee
-
Deployment automation
-
May 2019 - Present
In the continuity of the development of our SaaS offerings, shipping new features and applications grew more and more critical. Particularly, increasing speed of deployment, fiability while keeping quality of the service.I worked around the deployment automation of our applications (applications built on both new and legacies technical stacks). To accomplish this goal, I worked closely with both the development teams and operations teams. Doing so allowed to us to develop a deployment that fits our organizational and teams processes while integrating security all along the way.The automation have mainly been built using Ansible, shell scripts to deploy an infrastructure built around theses stacks : Centos, Windows Server, Java/Spring Boot, HashiCorp Vault, Apache Tomcat, C++ application, Oracle Database Show less
-
-
Software engineer
-
Jan 2014 - Present
Within the payment solutions teams, I have been involved in building the payment server (mainly C++, Java, PL/SQL and Oracle stack).My contributions went from specification to the development with the view to build a consistent product; contributing to the tooling around the delivery and deployment pipeline and providing technical assistance to the teams and customer operating the solution.
-
-
Security engineer
-
Jun 2016 - Apr 2022
Following my missions developing the payment solutions à Actoll, I took a turn and started to focus particularly in the security of our solutions.So I have been working on the following missions :- Integrating security in our software development lifecycle- Establishing a process to follow up vulnerabilities impacting our solutions- Help and support to teams regarding the best practices around data securityAlso, regarding the security of our infrastructures hosting our solutions :- Contributions to the deployment architecture- Security monitoring of the infrastructure (SOC)- PKI deployment- Vulnerability scanning- Establishing an incident response plan- Support in the infrastructure hardening- Compliance with the PCI DSS standard- Compliance with the GDPR legislation Show less
-
-
-
Bull
-
France
-
IT Services and IT Consulting
-
700 & Above Employee
-
Software engineer
-
Oct 2008 - Dec 2013
Within the IT services department, I worked for different customers delivering IT services. I had the opportunity to work on different projects during the main aspects of development lifecycle from specifications writing to corrective and perfective maintenance. These projects were built on Java/JEE Middleware, ESB (Enterprise Service Bus), and Web technologies. Among that, I have also done technical project followup (bug tracking, deliveries planification etc.) and customer training for change management.Even if theses projects involved the same general technical topics (Enterprise Service Bus applications), the business challenges were very diverse.The first one was about replacing existing heterogeneous systems (exchanging messages and files across business applications) with a new unifying one. The primary constraints was backward compatibility (more than 10 years, business applications should not be affected) and performance (old systems were reaching there limits). The second one was about building an extensible notification plaftorm for a telecom operator (prepaid reached limit, blocking, advertising, news etc.). This system had to be driven by the business rules. The focuses were on the flexibility and evolution of the platform possibilities to allow very different kind of notification (content, types) and performance (number of message per sec., limited processing time etc.). Lastly, I work on an exchange system where the goal is to build a very perennial and extensible platform. The needs are to be able to easily handle new business needs. So the exchange system is built with the goal to have highly configurable and reusable software modules. Show less
-
-
Internship
-
Apr 2008 - Sep 2008
I was part of the R&D development team of BPM (Business process management) open source products : - Bonita : http://www.bonitasoft.com (workflow engine; previously developed by Bull) - Orchestra : http://orchestra.ow2.org (web service orchestration)
-
-
-
-
Internship
-
Jun 2007 - Sep 2007
For my second year at Polytech'Grenoble engineering school I've integrated the DCS team in VERIMAG laboratory. Their works are essentially about software testing and validation methodologies. My work was part of the Politess RNRT project. I've been in charge of building and delivering a working prototype of distributed application testing using formal methodologies. This prototype was developed in Java and was able to test RMI applications. For my second year at Polytech'Grenoble engineering school I've integrated the DCS team in VERIMAG laboratory. Their works are essentially about software testing and validation methodologies. My work was part of the Politess RNRT project. I've been in charge of building and delivering a working prototype of distributed application testing using formal methodologies. This prototype was developed in Java and was able to test RMI applications.
-
-
-
-
Internship
-
Apr 2005 - Jun 2005
This internship was necessary to obtain the D.U.T diploma. I was in charge of developing a web application to manage and administrate Ardèche towns data. I developed it with PHP, HTML, CSS and a MySQL database. This internship was necessary to obtain the D.U.T diploma. I was in charge of developing a web application to manage and administrate Ardèche towns data. I developed it with PHP, HTML, CSS and a MySQL database.
-
-
Education
-
Polytech'Grenoble
Engineer, Networking systems and multimedia communication -
I.U.T. 2 of Pierre Mendès France university
D.U.T, Software engineering