Alouane - Architecte DOCKER

Project manager

Project: Docker swarm cluster setup
-Served as a solution architect to build up a secure and prod ready docker swarm cluster, the main cluster had to be
highly resilient, scalable and easy to replicate (100% configurable and automated), monitor and supervision. The entire
process fits into the following steps
• Setup of two DMZ zones
o Public: Dedicated for docker swarm slaves that will host any frontal/public services (e.g., Frontal
Traefik gateway, Frontal apps)
o Private: Dedicated for docker swarm managers that will host internal services (e.g., Grafana, Kibana,
Atlassian suite…) but cannot interfere with ministry internal network
• Setup of a persistence storage volume (GlusterFs) solution as a container storage system for high availability
• Setup a supervision UI (Portainer) to manage all cluster nodes, services, volumes, containers, users and teams
• Setup a scheduled system prune job that frequently clean up unused images, volume or dangling/unreferenced
containers to free nodes storage space (As a docker swarm service)
• Deploy a keepalived container at each Frontal node for high availability, this has helped provision a failover of
a virtual IP address from one node to another
• Deploy a monitoring UI system (Grafana + Prometheus) in order to view several resource consumptions per
service like:
o Network usage

o Protocol usage (e.g., POST, GET, PUT…)
o Status code (e.g., 2xx, 4xx, 5xx)
o Socket usage
o Uptime and response time
• Release a stack deployment best practice report for the dev team and exploitation team that includes
o Stack files and image versioning strategy
o Service routing, dns and subnets strategy
o Volume binding and service backups strategy
o Database backups strategy (i.e., Full, differential and transactional backups with automated job
scheduling)
o Service health check strategy
o User name space and non-rooted container strategy
Project: Docker registry (Docker registry + Portus)
-Served as a solution architect to setup a highly resilient, easy to replicate (100% configurable and automated), and
role-based access control registry, this will empower dev teams to push/pull service images locally for testing, and the
CI/CD platform to pull/push staging and production labelled service images. The entire process fits into the following
steps:
• Setup docker registry (open-source version) as a scalable service in the docker swarm cluster
• Setup a supervision UI (Portus) in order to manage namespaces, repositories, users and team authorisations
• Setup a Portus background process service to ensure data synchronisation between docker registry and Portus
UI service in case of a downtime

Project: Data stream pipeline (Confluent)
-Served as a solution architect to setup a data streaming pipeline platform, easy to replicate (100% configurable and
automated), that connects and process event data in real time between different micro services deployed by different
dev teams, The entire process fits into the following steps:
• Setup Zookeeper to store persistent cluster metadata and critical component of the Confluent platform
• Setup messaging broker service (Kafka) in cluster mode
• Setup Confluent Schema Registry
• Setup Confluent control center for cluster, broker, topics management and supervision
• Setup a Ksql DB to process real time data with simple sql statement
• Release a topic normalisation best practice report for the dev team and exploitation team

Project: Gateway (Traefik)
-Served as a solution architect to setup a high availability, easy to replicate (100% configurable and automated), and
secure frontal gateway (Traefik) in a cluster mode that supports the following
• Service auto discovery
• Loadbalancing
• Api control
• Dynamique Certificate management
• Orchestrator event consumption via Socat service (Socat exposes the docker socket)
• Redirect traefik metrics to Prometheus for service monitoring

Project: Logging system (EFK)
-Served as a solution architect to build up a role-based access and easy to replicate (100% configurable and automated)
logging system, it helps index service logs via Elasticsearch DB, then empower different dev/exploitation teams to
monitor, search and analyse data in real time through Kibana UI. The entire process fits into the following steps:
• Setup Elasticsearch service in cluster mode, with a snapshot/index backup strategy, each dev team has limited
access to the spaces, indexes and logs related to applications they have deployed
• Setup a Filebeat service that auto collects and ships relevant logs from different micro services to Elasticsearch
after some filtering and processing, with an index life cycle management strategy per service
• Setup Kibana service to explore, visualize and analyse data

Project: Atlassian suite
-Served as a solution architect to setup the Atlassian suite as a collaboration tool for enterprise product development
teams, the setup has to be 100% configurable, automated and easy to replicate, the entire process fits into the following
steps:
• Setup a postgreSql DB service to power up all Atlassian products, with a backup strategy support and
performance consideration in order to support large team workload
• Setup an Adminer service for postgreSql DB visualisation and supervision
• Setup of Jira software service with a data backup strategy, and custom workflows schemes appropriate for a
scrum environment and DevOps driven
• Setup of Jira service desk with a data backup strategy and custom SLA strategies and web portals
• Setup of confluence with a data backup strategy, and custom space structure organisation
• Setup of Bitbucket with a data backup strategy and synchronisation with other Atlassian products
• Setup of Bamboo as a CI/CD platform and in sync with the local docker registry and other Atlassian products

Project: Legacy app automation (CI/CD)
-Served as a DevOps consultant to setup many automation pipelines for legacy apps (12 apps) developed in different
technologies, all pipelines needed an auto-deployment step for staging environments and a manual confirmation step
for production deployment, these pipelines were built to support the following frameworks
• Backends
o Spring boot (Java)
o Django (Python)
o Symfony (Php)
o Laravel (Php)
o Express (Nodejs)
• Front
o Angular (Js)
o React (Js)
• Mobile
o Flutter (android & ios) via firebase app distribution
o Ionic (android)

Project: Cursussup platform
-Served as a Techlead and architect to build a national bachelor platform, where all Moroccan candidates (1 million) in
each year have to choose their preferred universities, prioritize and confirm or decline the proposed offer, the selection
system implements the well-known Gale-Shapley algorithm for maximum transparency. The platform has:
• A Front office where candidates can view latest news and apply to different universities (Angular 9)
• A Backoffice where universities can manage selection formulas, test/Assessment score required to passe and
candidates’ post registrations (Angular 9)
• A Backend with 3 micro services (Spring Boot + Liquibase for DbOps + Swagger for API documentation +
ehcach and vranish for caching)
o Referentiel: Manage all system data and repositories
o Orientation: Manage all candidates data and orders
o Selection: Manage selection formulas and candidates scoring
o The 3 micros services exchange events through Kafka topics
o Each micro service has its own SQL server database with a backup and recovery strategy
o Each service logs gets pushed using filebeat, and can be analysed through Kibana
o Each service has its own health check and rate limiter
• An SMTP service (AWS SES) with
o Backoff strategy to overcome service consumption limits
o Bounce rate and complaints rate listener
o Notification fallback in case of
▪ Hard bounce (Full User inbox, Email inexistant, ISP block)
▪ Complaints
▪ Delivery delays
Upon each pull request approval in an env branche (e.g., staging), a new docker image gets build and published (via
Bamboo CI/CD) in docker registry then gets deployed automatically via Portainer in the appropriate environment
(except for production env that needs a manual approve before deployment)
-Links: ******** -

Project: Accreditation platform
-Served as a techlead and architect to build a national course accreditation platform, where all establishment and
universities (800 entities) have to apply for course accreditation before starting the enrolment. The ministry teams and
the National Quality Agency (NQA) assess each application through a peer review process for compliance with the
standards. The NQA has more than 1000 experts that continually review applications, and gets paid monthly for their
contributions, all performance review of each expert gets calculated by the same platform and generates the right
monthly amount of payment.
More than 1200 Jira tickets has been processed and the project is still in active development and maintenance
The same technologies, workflows and stacks used in Cursussup platform have been deployed for this one
-Links: ******** -

Project: Equivalence platform
-Served as a techlead and architect to build a national degree equivalence platform, where all students have to apply for
an equivalence certificate when they have got a foreign degree. The ministry teams and the National Quality Agency
assess each application through a blind review process for compliance with the standards
The same technologies and stacks as Cursussup platform have been deployed for this one
-Links: ******** -

Project manager

-Served as a solution architect to build up a flexible and easy asset tracking software, clients can use the service as a
SAAS platform, with a proprietary mobile device including a built-in barcode and RFID scanner, clients can customize
their internal workflow and data schemas as they go with a role-based access, and can perform more advanced audit
and maintenance jobs. The platform has 3 main components
• Front office where managers orchestrate jobs and workflows (Angular 12 + state and store management)
• Backend API for processing requests (Spring boot + Liquibase + ehcache + Swagger Api)
• Mobile app for auditors and maintenance jobs (Ionic + Capacitor)
• CI/CD pipeline is configured via Bamboo CI/CD
o Front office: Node based image (Install modules, test, Build release) + Bamboo docker image build
and push to docker hub registry
o Backend: Maven (Compile, test, Package) + Jib (Docker image build and push to docker hub registry)
o Mobile: CircleCI android/IOS based image (Install modules, Verify, Test) + Firebase CLI + Fastlane
(Generate screenshots, build signed release, Push to Beta/Alpha/Production stores)

Project: Docker swarm cluster setup
-Served as a solution architect to build up a secure and prod ready docker swarm cluster, the cluster had to be highly
resilient, scalable and easy to replicate (100% configurable and automated), monitor and supervision all deployed
services

Project manager

-Served as a project manager to build an E-council platform similar to clarity.fm, It’s a marketplace for better matching
between consultants and professionals through a new form of support (VideoConferencing), while using latest
technologies:
• Design workflow: Invisionapp
• Tasks management: Asana (Scrum disposal)
• Webrtc for VideoConferencing
• Angular 6 app for the front site
• Angular 6 app for the backoffice app
• Payment gateways (Paypal and Payzone)
• Varnish cdn, new cluster build
• Crawlers redirection in the cdn edges side (SEO friendly)
• Social networks integration
• S3 as an origin hosting solution
• Slim Restfull API
• Aws code deploy + Php units + travis cli integration for deployments automation from github repository
-Links: ******** -

Lead Technical Architect

A react based platform to automate conversion of written content into digital audio, also leveraging AI voice
reconstruction, script automation, voice-over, editing, publishing and analytics to make things simpler for content
creators.
-Core Content:
• React front/backoffice app
• Nodejs API (Loopback 3.X)
• AmplitudeJs based audio player
• Cloudfront as cdn audio delivery solution
• S3 as an origin hosting solution
• Public audio canals integration (itunes, soundcloud)
• Aws Lambda + S3 +nginx for analytics
• ffmpeg for audio processing
• Aws code deploy + Php units + travis cli integration for deployments automation from github repository
-Links: ******** –

Lead Technical Architect

-Served as technical lead for a team of developers to build a fully functional video hosting platform similar to
********
platform where the public can monetize their videos & make money from vast ads impressions -Core Content:
• Angular 2 app for the front site
• Angular 2 app for the backoffice app
• Highwinds cdn integration for video, thumbs & assets hosting
• Crawlers redirection in the cdn edges side (SEO friendly)
• Social networks integration
• S3 as an origin hosting solution
• Cloudfront for backoffice app hosting
• Aws elastic transcoder for video transcoding
• Dmca for content ownership & report protection
• Slim Restfull API
• Videogular2 integration + plugins development
• Lightweight embed player solution for other sites
• Yeild bird Async adx integration
• Aws Lambda + S3 +nginx for click frauds & bots’ detection
• Daily Cron jobs for users, videos, channels statistics
• Aws elastic loadbalancer + Autoscaller for backend scalability
• Aws S3 + Kuberenetes + Vitess cluster management system as a database solution
• Aws code deploy + Php units + travis cli integration for deployments automation from github repository
-Links: ********, ********

Project: Data stream pipeline (Confluent)

Served as a solution architect to setup a data streaming pipeline platform, easy to replicate (100% configurable and
automated), that connects and process event data in real time between different micro services deployed by different
dev teams

-Served as a solution architect to setup a high availability, easy to replicate (100% configurable and automated), and
secure frontal gateway (Traefik) in a cluster mode

Project: Logging system (EFK)

Served as a solution architect to build up a role-based access and easy to replicate (100% configurable and automated)
logging system, it helps index service logs via Elasticsearch DB, then empower different dev/exploitation teams to
monitor, search and analyse data in real time through Kibana UI

Project: Atlassian suite

Served as a solution architect to setup the Atlassian suite as a collaboration tool for enterprise product development
teams, the setup has to be 100% configurable, automated and easy to replicate

Project: Single sign on (SSO)

-Served as a solution architect to setup a keycloak based SSO to manage user identity, access and authorization for
• Atlassian suite (Private realm)
• Legacy LDAP based apps (Private realm)