
SRE / Platform Engineer with 4 years in regulated, business-critical environments — GCP, AWS, Azure and on-prem VMware, Kubernetes (GKE/EKS), cloud security and observability. Currently at Veolia, keeping a 100+ server hybrid estate reliable and secure (ISO 27001 scope), and increasingly bringing AI into operations: agents, tooling and curated context, always human-in-the-loop.
I write here to think in public, and I take on a small number of independent consulting engagements each year — that's what the button below is for.
Reliability, security and evolution of business-critical platforms across 100+ servers (GCP primary, AWS, Azure, on-prem VMware). Production GKE, K8s security (Cilium, Kyverno, Tetragon), low-downtime replatforming (CentOS→AlmaLinux/Debian, VMware vSphere 5.5/6→8), and AI agents applied to Ops.
Led migration of critical on-premises environments to AWS with minimal downtime, built multi-account AWS environments, automated cloud consumption, and rolled out endpoint security to 1,200+ users.
Designed AWS/Scaleway architectures with Terraform, ran EKS/Kapsule clusters, built GitLab CI/CD + ArgoCD pipelines, and set up observability (Prometheus, Grafana, Loki, Mimir) from scratch.
A few engagements a year, for teams that want to stop being surprised by production. Typical shapes:
Independent review of your cloud and Kubernetes security posture — IAM, network exposure, cluster hardening — with a prioritized remediation plan, not just a findings list.
Moving critical workloads — on-prem to cloud, cloud to cloud, or platform version upgrades — without the 3am rollback. Scoped cutover plan, low-downtime execution.
Prometheus, Grafana and Loki configured to answer real questions during an incident, not dashboards nobody opens. Alerting tuned to respect on-call sleep.
A GCP foundation built right the first time — IAM, networking, logging and guardrails in place before workloads land on it.
Short, focused engagements for a specific GCP question or decision: architecture review, second opinion, unblocking a stuck migration.
Applying AI agents to operational toil, with the integration tooling and curated context they need to be useful — human in the loop by design.