Charles-Henri Chesné

Decathlon is a major international company in the sport and retail sector, with a strong technology culture focused on product, agility, and team autonomy at a global scale. I work within a DevOps team of 16 engineers, organized to support and assist feature teams (product development teams). The mission is to design, operate, and evolve multi-cloud Kubernetes platforms in an international context, with strong requirements in scalability, resilience, and platform standardization. The technical environment is mainly based on Google Cloud Platform (GCP) and Google Kubernetes Engine (GKE) for Europe, as well as Amazon EKS and Azure Kubernetes Service (AKS) for the Asia region. The team follows an agile and product-oriented organization and is composed of: • 1 Scrum Master • 1 Product Owner • 1 Tech Lead Ops / DevOps engineers specialized by domain: • 2 engineers specialized in Databases • 2 engineers specialized in Vault / secrets management • 2 engineers specialized in Terraform / Infrastructure as Code • 2 engineers specialized in Kubernetes (including myself) The DevOps team acts as a platform team and works cross-functionally with several development teams. As a DevOps engineer specialized in Kubernetes, my responsibilities include: • Operating and evolving clusters on GKE (Europe), EKS and AKS (Asia) • Participating in cluster sizing (capacity planning, performance, cost optimization) • Supporting development teams with application deployments • Implementing GitOps practices (Flux, Kustomize, Helm) • Observability through Datadog and Grafana • Secrets management with Vault and External Secrets • Contributing to cluster migrations and rationalization initiatives • Running POCs around high availability and multi-cluster architectures • Platform support and troubleshooting • Writing technical documentation and sharing knowledge/feedback

U-Tech is the IT department of the Système U cooperative group, which has around 600 employees. It leads the digital transformation of the group’s business information systems. The Kubris team specializes in the industrialization of Kubernetes clusters and the implementation of a secure, scalable, and standardized GKE foundation for project teams. I contributed to the design, automation, and security of GKE clusters while supporting application teams in adopting the GitOps framework. The project team consisted of: – 1 Product Owner – 1 Scrum Master – 1 Tech Lead – 2 DevSecOps engineers – 7 Cloud Ops engineers As a Cloud Architect, my responsibilities included: – Designing secure, standardized, and scalable GKE architectures – Contributing to the construction of the GCP landing zone (IAM, networking, project envelopes, quotas) – Defining common Terraform modules (GKE, network, DNS, firewall, IAM) – Guiding project teams in creating their environments using Terraform envelopes – Reviewing application Pull Requests (PR captain): security validation, naming conventions, budgeting, and performance optimization – GitOps integration of applications using ArgoCD, Helm, and Kustomize – Automated deployments through GitLab CI, Jenkins, and AWX – Implementing DevSecOps practices (Sealed Secrets, External Secrets, PSP/PSA) – Structuring FinOps practices: quota control, cost management, and GCP alerting – Writing architecture documentation, setting up monitoring (Prometheus, Grafana), runbooks, and best practices – Implementing a native Kubernetes service mesh-like architecture Website: [https://u-emploi.com/organisation-cooperative-u/u-tech](https://u-emploi.com/organisation-cooperative-u/u-tech) Technologies: awx · Argo · DevOps · rancher · Ansible · GitOps · argocd · Bash · GitHub · Terraform · gestion de l'infrastructure cloud · Jenkins · Conteneurisation · Environnement agile · Intégration de système · Helm · CICD · Google Cloud Platform (GCP) · Kubernetes · Linux

SNCF Transilien (around 14,000 employees) launched a major IT modernization program, including the closure of a datacenter and the migration of critical applications to Microsoft Azure. I joined the Cloud Competence Center as a Cloud Ops engineer within an Agile team responsible for industrializing, securing, and maintaining both Cloud and On-Premise environments. The project team consisted of: – 5 Cloud Ops engineers (each responsible for 4 to 5 applications) – Several Product Owners and Scrum Masters dedicated to specific applications – Agile organization: sprints, backlog management, reviews, daily stand-ups, retrospectives Responsibilities: – Ensure the availability, performance, and resilience of critical production applications – Lead the migration to Azure: technical coordination, scaling, cutover, and rollback management – Build and maintain robust CI/CD pipelines using Jenkins and GitLab CI – Automate deployments with Terraform and Ansible (full Infrastructure as Code, multi-environment provisioning) – Implement a native Kubernetes service mesh-like architecture without sidecars – Actively participate in RUN operations: on-call duties, level 3/4 incident handling, and RCA (Root Cause Analysis) reporting – Set up proactive monitoring with Datadog, Prometheus, Grafana, and Nagios – Automate the deployment of Datadog dashboards for each new application – Create and maintain DEX (Operations Manuals) and DAT (Technical Architecture Documents) – Write clear documentation for onboarding and internal compliance purposes – Collaborate with Product Owners and Scrum Masters on application backlogs and technical roadmaps Website: [https://www.transilien.com](https://www.transilien.com) Technologies: Azure, Kubernetes, Terraform, Ansible, Jenkins, GitLab CI, Git, Linux, Datadog, Prometheus, Grafana, Nagios, Ingress NGINX, NetworkPolicy, cert-manager, Helm, Bash, YAML

Viaccess-Orca (part of the Orange Group) is a company of around 200 employees, specializing in content protection, distribution, and monitoring solutions for IPTV and video services aimed at telecom operators. I joined a cross-functional product team to industrialize cloud environments, automate application deployments, and improve the reliability of video testing pipelines. As a Cloud DevOps Engineer, I worked on AWS test environments, containerized application deployments, post-deployment monitoring, and the structuring of technical and operational documentation. The project team consisted of: – 1 Product Owner – 1 Scrum Master – 1 Application Developer – 2 Cloud Ops engineers (including myself) Responsibilities: – Deploying AWS test environments using Terraform to validate IPTV/OTT features under realistic conditions – Automating installations with Ansible and implementing centralized system configuration management – Containerization with Docker and orchestration via Kubernetes within a modular architecture – Operating the ELK stack (Elasticsearch, Logstash, Kibana) for centralized logging, analysis, and monitoring – Conducting end-to-end customer tests to validate video quality and overall system stability – Designing and maintaining Technical Architecture Documents (DAT) describing technical components such as IPTV streams, servers, databases, and interconnections – Writing and maintaining Operations Manuals (DEX) covering deployment, monitoring, and recovery procedures – Tracking activity in Jira (user stories, technical tasks) and maintaining documentation in Confluence Website: [https://www.viaccess-orca.com](https://www.viaccess-orca.com) Technologies: AWS, Terraform, Ansible, Docker, Kubernetes, ELK (Elasticsearch, Logstash, Kibana), Linux, Git, Jira, Confluence, Helm, Bash, YAML

Bouygues Telecom, a major telecommunications operator with around 10,500 employees, carried out several critical projects related to IPTV/OTT by integrating video platforms within its on-premise datacenters. I joined a cross-functional technical team responsible for the end-to-end integration of video solutions, covering stream management, equipment setup, network configuration, and inter-team coordination. The project team (5 members) was versatile, with each person handling multiple technical and functional roles: – Gathering client requirements – Designing network and system architecture diagrams – Integrating physical and virtual equipment – Configuring streams, firewalls, and F5 load balancers – Conducting end-to-end testing and application validation – Writing DAT/DEX documentation and managing assets through iTop Responsibilities: – Contribute to gathering and defining technical requirements from internal clients and application partners – Design and update Technical Architecture Diagrams (DAT) covering IPTV flows, servers, licenses, and IP addressing – Integrate all equipment into iTop with detailed technical metadata – Perform network flow testing (TCP/UDP, NAT, firewall) to validate inter-platform connectivity – Integrate system components (VMs, databases, servers, middleware) on CentOS / Red Hat environments – Configure F5 equipment (load balancing, reverse proxy, high availability) – Assist application teams with the deployment of their components on validated environments – Conduct end-to-end testing of the IPTV chain to verify compliance and stability before production rollout – Write Operations Manuals (DEX) for Level 1/2 support teams – Ensure initial system monitoring and deliver production-ready environments with full documentation Website: [https://www.bouyguestelecom.fr](https://www.bouyguestelecom.fr) Technologies: CentOS, Red Hat, F5, DNS, DHCP, VMware, Bash, iTop, Wireshark, Switch, IPTV/OTT, TCP/IP, Internal monitoring

Claranet is a leading European provider of cloud and managed services, employing around 2,000 people. I joined the Core Service team, a cross-functional group responsible for both Level 1/2/3 support and the industrialization of cloud deployments (AWS, Azure) within a DevOps and Agile environment. The project team consisted of: – 10 Cloud Ops engineers – 1 Product Owner – 1 Scrum Master I contributed to support operations, cloud migrations, automation, and monitoring activities, with a strong DevOps focus: – Managing Level 1/2/3 incidents on managed cloud platforms (analysis, escalation, documentation) – Participating in the migration of critical applications to Azure and AWS – Deploying and improving CI/CD pipelines using Ansible, Terraform, Jenkins, and GitLab – Automating recurring tasks with Bash scripting and Ansible roles – Implementing monitoring and observability with Prometheus, Grafana, and Zabbix – Contributing to FinOps initiatives by optimizing cloud resource usage and costs – Writing technical documentation and onboarding materials for teams – Actively participating in Agile ceremonies (daily stand-ups, sprint planning, retrospectives) Website: [https://www.claranet.fr](https://www.claranet.fr) Technologies: Azure, AWS, Debian, Ubuntu, CentOS, Terraform, Ansible, Jenkins, GitLab CI, Bash, Prometheus, Grafana, Zabbix, ELK, YAML

certification niveau II - Administrateur systèmes et réseaux

certification niveau III technicien supérieur en réseaux et télécommunications (admis)

Contexte: Participation à la préparation opérationnelle pour des déploiements en missions extérieures (OPEX) et à la gestion de la vie courante en section au sein du régiment. En tant qu’observateur feu, j’avais pour mission de coordonner les appuis (feux aériens, artillerie, drones) au profit des unités amies, dans un cadre hautement tactique et sécurisé. Responsabilités & Activités Leadership & Encadrement • Management d’un groupe de 40 militaires (formation, discipline, préparation opérationnelle) • Conduite d’entretiens individuels pour suivi personnel et professionnel • Organisation de séances d’aguerrissement et d’activités physiques • Animation de formations techniques sur support PowerPoint Planification & Logistique • Planification complète de missions d’entraînement ou de projection • Gestion de matériel sensible : armes, optiques, radios classées • Supervision d’une armurerie régimentaire • Coordination d’un groupe de magasiniers logistiques Expertise Opérationnelle & Technique • Certification OTAN "National Fire Observer" : coordination de guidages aériens (chasse, hélicoptère, drone, artillerie) • Utilisation d’équipements spécialisés et optiques de haute précision • Réalisation de balisages héliportés tactiques • Préparation des appuis feu 3D et 2D : hélicoptère, artillerie, drones, bâtiments navals Sécurité, Procédures & Systèmes • Application stricte des procédures OTAN et protocoles radiophoniques • Missions en environnement Confidentiel Défense / Secret Défense • Titulaire de certifications en secourisme (militaire & civil) Compétences Transverses pour le DevOps • Gestion de projets & coordination d’équipes • Discipline, rigueur documentaire, respect des procédures critiques • Réactivité, autonomie, adaptation en environnements hostiles • Gestion de matériel critique (parallèle avec infrastructure IT sensible) • Communication technique claire (écrite et orale)Bas du formulaire

https://www.reserve-operationnelle.ema.defense.gouv.fr/index.php/armee-de-terre/le-reserviste/parcours-et-formation/militaires-du-rang

Triballat Noyal is an independent French agri-food company known for its brands such as Sojasun, Vrai, and Sojade. The company employs around 1,000 people. The technical team consisted of: – 3 system and network administrators – 1 IBM i (AS/400) expert – 1 technical manager My mission was part of a project to integrate a centralized and automated monitoring platform, along with the daily administration of systems and databases: – Administration of Windows Server 2012R2/2016 environments – Administration of GNU/Linux systems (CentOS, Debian, Red Hat) – Maintenance and monitoring of PostgreSQL and MySQL/MariaDB databases – Virtualization using VMware and VirtualBox – Deployment and integration of a centralized monitoring solution with Icinga2 – Creation of dashboards using Grafana and InfluxDB databases – Use of Ansible to deploy Icinga agents across all servers – Technical handover of configurations to RUN/operations teams – Participation in production rollouts and writing of functional documentation Website: [https://www.triballat.fr](https://www.triballat.fr) Technologies: Windows Server, CentOS, Debian, PostgreSQL, MariaDB, Icinga2, Grafana, InfluxDB, Ansible, VMware, VirtualBox

Le margeur alimente en papier une presse offset et se charge de préparer les matières premières et les consommables nécessaires à l'impression. Il assiste également le Conducteur de presse. Tout d'abord il participe à la planification de la production imprimée, prépare les groupes d'impression, vérifie et ajuste les systèmes d'ancrage, vérifie et ajuste la solution de mouillage et prépare le système d'alimentation en papier de la presse. Lors de la mise en train en mouvement de la presse, il contrôle le système d'alimentation et contribue à l'évaluation de la qualité de l'imprimé. En cours de tirage, le Margeur assure le bon fonctionnement de l'alimentation en papier, prépare les matières premières nécessaires au prochain tirage, enregistre les informations liées à la consommation des divers matériaux du projet d'impression et clôture le dossier Le Margeur maîtrise toutes les sortes de presse offset à feuille ainsi que les spécificités des différents imprimés. Il est capable d'alimenter la presse pendant le tirage, de détecter les problèmes et de les solutionner. Il connait les différentes encres, les différents types de solution de mouillage, sait utiliser les outils liés à son métier (colorimètre, spectrophotomètre, hygromètre…)

ENI École Informatique est un établissement d’enseignement supérieur privé spécialisé dans les formations en développement logiciel, infrastructure IT, cloud et cybersécurité. Fondée en 1981, l’école est reconnue pour ses formations professionnalisantes, en partenariat avec les acteurs du secteur numérique, et propose également une plateforme e‑learning accessible à l’international. Au cours de cette formation, j’ai acquis des compétences solides sur : - L’administration des systèmes Windows et Linux - La configuration des réseaux IP, VPN, pare-feu et services réseaux - La virtualisation avec Hyper-V, VMware, VirtualBox - L’automatisation avec PowerShell et scripts Bash - Le déploiement de services (AD, DNS, DHCP, FTP, Apache…) - La supervision et la sauvegarde - La sécurité des infrastructures - La gestion des incidents et du support technique

Ce cursus Bac+2 forme des professionnels capables de mettre en œuvre, maintenir et sécuriser des infrastructures de télécommunications et réseaux informatiques dans des environnements professionnels complexes. Au cours de cette formation, j’ai acquis des compétences théoriques et pratiques sur : - L’installation et la configuration d’équipements réseaux : switchs, routeurs, WiFi, VoIP - Les protocoles réseau (TCP/IP, VLAN, NAT, DHCP, DNS, etc.) - La mise en œuvre de solutions de sécurité réseau : filtrage, pare-feu, tunnels VPN - La supervision et le diagnostic des pannes réseau - La maintenance préventive et curative d’équipements actifs et passifs - L’utilisation d’outils de configuration et d’analyse réseau (Wireshark, Packet Tracer…) - La gestion de projet technique et la rédaction de documentation