AOURIK HASSAN
CloudOPS & Security Engineer
Expert in Cloud and Infrastructure Solutions +10 ans d'expérience
Certified Azure and MCSA Office 365 / MCSE / VMware / CEH
Paris, France | (+33) 0604407603 / (+212) 0700721491 | ha.aourik@gmail.com | Profil LinkedIn
Professional Summary
Accomplished Infrastructure & Cloud Expert with over 10 years of experience in designing and administering systems, managing cloud infrastructures (notably Azure), and implementing virtualization solutions and CI/CD pipelines. Certified in Azure, MCSA Office 365, MCSE, and VMware, with in-depth expertise in Security, DevOps practices, infrastructure automation, and managing multi-cloud environments. Excellent at optimizing development and operations processes to ensure performance, reliability, and compliance of complex IT systems.
Certifications
- Microsoft Azure Solutions Architect Expert
- Microsoft Azure Administrator
- Microsoft Certified Solution Associate - O365
- Microsoft Certified Server Expert
- Network Concepts DevOps
- CISCO CCNA RS
- Security CEHv10
- VMware Administrator
Education
ISGA Marrakech (2016 - 2019)
Engineer in Information Systems Architecture and SecurityISTA NTIC Marrakech (2013 - 2015)
Specialized Technician in Networks and Computer SystemsProfessional Experience
Groupe BNP Paribas June 2024 - Present
Paris, France
- Design and implement IBM/Azure and on-premises Cloud infrastructure solutions tailored to the needs of development and operations teams.
- Automate deployment and infrastructure management processes using Terraform and Ansible to enhance efficiency and reproducibility.
- Manage production platforms by ensuring the security, compliance, and availability of critical systems.
- Optimize system performance and reliability through continuous monitoring, performance analysis, and proactive improvements.
Skills Acquired:
- Expertise in designing and deploying Cloud and on-premises infrastructures.
- Advanced skills in deployment automation and configuration management with Terraform and Ansible.
- Mastery of security and compliance management for production systems.
Significant Projects:
- Deployed a hybrid Cloud infrastructure to support new development initiatives while integrating on-premises solutions for specific needs.
- Fully automated the CI/CD pipeline with Terraform and Ansible, reducing deployment time by 50% and minimizing human errors.
- Implemented an advanced monitoring system for critical applications, enabling early anomaly detection and reducing downtime by 30%.
- Designed and implemented a robust security policy to ensure compliance with regulatory standards and industry best practices.
Technologies Used
- Cloud Computing (IBM Cloud, Azure)
- Automation & Scripting (Terraform, Ansible, Bash)
- Infrastructure & Cloud (IBM, Azure)
- CI/CD (Jenkins, GitLab CI, ArgoCD, Digital AI Release)
- Security (Hashicorp Vault, F5, Fortinet, Azure [Monitor, Arc, Sentinel, Defender])
- Databases (PostgreSQL, MongoDB)
- Monitoring (Dynatrace, Logstash)
- Containerization (Docker, Kubernetes, OpenShift)
- Backup & Recovery (HYCU Backup)
- Collaboration & Project Management (Jira, Confluence, ServiceNow)
- Productivity Tools (Office365)
Autodistribution June 2022 - August 2024
Paris, France
- Define and implement physical and functional architectures for complex IT infrastructures.
- Lead the design and deployment of server, storage, backup, and system solutions.
- Conduct comprehensive IT audits and design scalable and secure architectures.
- Manage and secure multi-cloud infrastructures, ensuring high availability and performance.
- Implement and optimize virtualization, cloud services, containers, monitoring, backup solutions, and collaboration tools.
- Automate infrastructure deployment with Terraform, Ansible, and PowerShell.
- Implement and manage identity and access solutions including Okta and Azure AD.
- Design and implement network solutions using Forcepoint and Fortinet technologies.
- Manage and optimize database environments, including MongoDB Atlas and PostgreSQL.
- Implement and manage CI/CD pipelines with GitLab and Jenkins.
Skills Acquired:
- Expertise in designing Cloud and on-premises architectures.
- Proficiency with virtualization tools and Cloud platforms.
- Advanced skills in IT security management and incident handling.
Significant Projects:
- Designed and deployed a hybrid Cloud infrastructure to enhance system flexibility and resilience.
- Successfully migrated data and applications to Azure.
- Implemented an automated backup solution, reducing data loss risks.
- Deployed a centralized identity management system with Okta and Azure AD.
Technologies Used
- Systems (Windows Server, Redhat/Centos)
- Cloud (Azure, Google Cloud, AWS)
- Automation & Scripting (Terraform, Ansible, PowerShell, Bash)
- Networks (Forcepoint, Fortinet, Netscaler)
- Databases (MongoDB Atlas, PostgreSQL)
- CI/CD (GitLab CI, Jenkins, ArgoCD, Azure DevOps)
- Security (Sekoia, Wallix, Okta, Hashicorp Vault, Quest Auditor, Azure AD, Netscaler, Azure [Monitor, Advisor, Arc, Sentinel, Defender])
- Virtualization (Nutanix, VMware, Citrix)
- Containerization (Docker, Kubernetes, OpenShift)
- Monitoring (Centreon, Azure Monitor, Prometheus, Grafana, Kibana)
- Backup & Recovery (Veeam, Altaro VM, HYCU Backup, Azure Backup)
- Collaboration & Project Management (Jira, Confluence, ServiceNow)
- Productivity Tools (Office365, Intune)
HDCE.Inc November 2019 - June 2022
Drummondville, QC, Canada
- Design and implement hybrid Cloud solutions using Azure and on-site infrastructure.
- Manage Windows Server environments, including Active Directory, DNS, DHCP.
- Administer the Office 365 suite: Exchange Online, SharePoint Online, Teams, OneDrive.
- Implement and manage Azure services such as virtual machines, storage, backup, and Azure AD Connect.
- Design and implement high-availability solutions with Windows Failover Clustering.
- Migrate on-site Exchange to Exchange Online and SharePoint to SharePoint Online.
- Implement and manage VMware vSphere environments.
- Develop PowerShell scripts to automate routine tasks and bulk operations.
- Implement DevOps practices including CI/CD pipelines, Infrastructure as Code, and containerization.
- Manage SQL Server and MongoDB databases.
- Deploy and manage VoIP systems based on Asterisk and Skype for Business.
- Implement and manage Citrix XenApp and XenDesktop environments.
- Deploy and manage firewalls and WAFs.
- Use Veeam and Altaro VM Backup for backup and disaster recovery solutions.
- Provide Level 2 and 3 technical support in English/French for complex incidents.
Skills Acquired:
- Expertise in administering Windows systems and Cloud services.
- Skills in automation and system performance management.
- Ability to resolve complex technical incidents.
Significant Projects:
- Migrated messaging services to Office 365, enhancing collaboration and security.
- Deployed an automated server performance reporting system, increasing operational visibility.
- Implemented CI/CD pipelines to accelerate software development and deployments.
- Developed automation scripts for user and permission management, reducing manual tasks by 40%.
Technologies Used
- Systems (Windows Server, Redhat/Centos)
- Cloud Computing (Azure, AWS, GCP)
- Automation & Scripting (PowerShell, Bash, Terraform)
- Infrastructure & Virtualization (Hyper-V, VMware, Citrix)
- Databases (SQL Server, MongoDB, MySQL, PostgreSQL)
- Security (Quest Auditor, IT Audit, PKI, IPS/IDS, Centralized Antivirus, Captive Portal)
- Containerization (Docker, Kubernetes)
- Monitoring (Centreon, Nagios, Kibana)
- Backup (Synology, Veeam, NetBackup)
UPM Marrakech April 2015 - December 2019
Marrakech, Morocco
- Deploy and optimize system infrastructure.
- Manage user accounts and permissions.
- Configure firewalls, proxy servers, and antivirus solutions.
- Administer NAS storage servers and VoIP systems.
- Manage backups and restoration procedures for business continuity.
- Supervise the local network (LAN) and manage WAN connections.
- Implement network security policies and monitor potential threats.
- Provide end-user support and manage technical incidents.
- Configure and manage network equipment such as routers and switches.
Skills Acquired:
- Expertise in systems and network management.
- Skills in network security and equipment management.
- Ability to provide technical support and problem resolution.
Significant Projects:
- Redesigned the network infrastructure, improving performance and security.
- Deployed a VoIP solution to enhance internal communications, reducing communication costs.
- Implemented automated backup solutions, ensuring business continuity in case of disasters.
- Configured and managed advanced network equipment to optimize connectivity and security.
Technologies Used
- Systems (Windows Server, Ubuntu/Centos)
- Infrastructure (Windows Server, Hyper-V, VMware)
- Security (Centralized Antivirus (Kaspersky, Firewalls (Netgate/Fortigate), IPS/IDS, Captive Portal ...)
- VoIP (Asterisk, Alcatel PBX)
- Networks (Cisco Routers/Switches, HP)
- Databases (SQL Server, Access, MySQL)
- Scripting (Bash)
- Monitoring (Nagios)
- Backup (Synology, Veeam, NetBackup)
Testimonials
Key Technical Skills
Installation, Configuration, and Systems Administration
- Windows Server 2003-2019 (GPO, PSO, DNS, DHCP, SCCM, SCVMM, WSUS, DFS, RADIUS, Active Directory)
- Linux (Ubuntu, CentOS, Red Hat, Debian...)
- Authentication and access management with LDAP and Active Directory
Automation & Scripting
- PowerShell, Python, Bash
- Workflow management with Okta, YAML
- Task automation with Ansible, Terraform
- Creating custom scripts for continuous integration
Virtualization
- Nutanix HC, VMware vSphere, Microsoft Hyper-V, Citrix XenServer
- Container management with Docker, Podman, Kubernetes
DevOps & Cloud
- CI/CD: Jenkins, GitLab CI, Azure DevOps, ArgoCD, Digital AI Release
- Infrastructure as Code: Terraform, Ansible
- Containerization & Orchestration: Docker, Kubernetes, OpenShift, Podman, Helm
- Cloud Platforms: Azure, GCP, IBM Cloud, AWS, MongoDB Atlas
- Monitoring & Logging: Dynatrace, Kibana, Prometheus, Grafana, ELK Stack ...
- Secret Management: PKI server, HashiCorp Vault, Azure Vault, AWS Secrets Manager ...
- Deployment Automation: ArgoCD, Digital AI Release
Security
- SOC (Sekoia, Microsoft Defender for Cloud/Office 365, Azure SC)
- Bastion (Wallix), Centralized Antivirus (Kaspersky, Bitwarden, ESET Security)
- SOC for Active Directory (Quest Auditor, Azure AD Security)
- Identity and Access Management (IAM, Okta, Azure AD, LDAP)
- Encryption and Key Management (Hashicorp Vault, PKI server, Azure Vault)
- Vulnerability Management and Penetration Testing (Metasploit, Loader, Shodan, Ms Defender for Cloud)
- Implementing security policies and regulatory compliance
Methodologies
- Agile, Scrum, Kanban
- Site Reliability Engineering (SRE) Principles
- Project Management
Network
- Firewalls (Netgate, Fortinet, Forcepoint, Palo Alto, Cisco ASA)
- Routing & Switching (CISCO, HP, Huawei)
- Managing ACLs, VPNs (IPSec, SSL), DHCP, DNS, Load Balancing (F5, HAProxy), Content Switching
- Proxy, Reverse Proxy (Netscaler, NGINX, Apache, Squid)
- Web Filtering, Antivirus (ClamAV), IPS, IDS (Snort, Suricata)
- Optimizing network performance and resolving connectivity issues
Databases
- MongoDB & MongoDB Atlas (Cloud)
- MySQL, PostgreSQL, Microsoft SQL Server, Oracle Database
- Implementing data backup and replication strategies (Repmgr)
Version Control & Collaboration
- Git, GitHub, GitLab
- Project management and collaboration tools: Jira, Confluence, ServiceNow, Kayako, Asana
- Continuous Integration and Continuous Deployment (CI/CD)
- Managing code reviews and branching for efficient development
VoIP & Unified Communications
- Asterisk, Elastix, FreePBX
- SIP, RTP protocols and VoIP fundamentals
- Voice features and integration with Microsoft Teams, Zoom, Slack
- Managing IP telephony systems and virtual PBXs
- Implementing real-time conferencing and collaboration solutions
Backup & Disaster Recovery
- VEEAM, HYCU Backup, Altaro, Azure Backup
- Disaster Recovery Plans (DRP) and Business Continuity Planning (BCP)
- Automating backups and restoration testing
- Implementing redundant backup solutions to ensure data availability
📦 Storage
- NetApp, Dell EMC, HPE Storage Solutions
- SAN, NAS Technologies (Synology, FreeNAS, QNAP)
- Managing cloud storage solutions (AWS S3, Azure Blob Storage, Google Cloud Storage, IBM Cloud Object Storage)
- Optimizing performance and data management
- Implementing effective storage strategies for different types of data