10/27/2026 updated

**** ******** ****
100 % available

Senior AWS Cloud Architect – Data Platform & Network Security

Toulouse, France
Toulouse +50 km
Brevet de Technicien Superieur (BTS), Developer option
Toulouse, France
Toulouse +50 km
Brevet de Technicien Superieur (BTS), Developer option

Profile attachments

BGruel.pdf

About me

AWS cloud architect with 7 years designing and securing multi-account AWS platforms, built on 19 years of network and security engineering. Recent work: AWS Data Platform at Safran (ingestion cut from 5h+ to under 1h) and a 50+ account Landing Zone migration at Biogen. 10 AWS certifications.

Application Programming Interfaces (APIs)Amazon Web ServicesCloud Computing SecurityCloud EngineeringData ArchitectureDevOpsNetwork SecurityAnsibleAWS CDKAWS LambdaInfrastructure as Code (IaC)AWS VPCAWS ECSCloudformationKubernetesAWS GlueAWS FargateCloudwatchTerraform
AWS Cloud Architecture & Multi-Account Design
Expertise in designing and securing multi-account AWS platforms using VPC, Transit Gateway, Direct Connect, EC2, Lambda, ECS/Fargate, Control Tower, AWS Organizations, IAM Identity Center and CloudWatch. Proven track record of migrating 50+ AWS accounts into new Landing Zones and re-architecting network backbones for enhanced security.

Infrastructure as Code, CI/CD & Automation
Deep proficiency in Terraform, Terragrunt, CloudFormation and AWS CDK for automated infrastructure deployment. Extensive use of GitLab CI/CD, GitHub Actions, Azure DevOps, Jenkins, Git, Docker and Ansible to build and maintain robust deployment pipelines.

Cloud Security & Compliance
Strong background in AWS SecurityHub, GuardDuty, Config, IAM, Access Analyzer and CloudTrail. Experience implementing Service Control Policies (SCP), PCI DSS compliance environments, EntraID to AWS IAM Identity Center federation (SSO), and tools such as Palo Alto, Netskope CASB and F5.

Data Platform & AI
Hands-on experience with AWS Lake Formation, Glue, Athena and Step Functions for data platform industrialization. Familiarity with ERP data ingestion (Infor M3), Power BI, Snowflake and Retrieval-Augmented Generation (RAG) using Azure OpenAI.

Programming & FinOps
Proficiency in Python for automation, AWS SDK/boto3, API integration and data processing, as well as Bash and YAML scripting. Cloud cost analysis and automated per-application cost reporting to optimize cloud spend.

Network & Security Engineering
19 years of network and security engineering experience including SOC Level 3, IDP/IPS deployment, firewall fleet management (Cyberoam, Stormshield, CheckPoint, Palo Alto), and inter-hospital network interconnections.

Azure & Hybrid Cloud
Experience with Azure services including EntraID, Virtual Networks and Azure DevOps. Ability to design hybrid and multi-cloud connectivity solutions bridging AWS and Azure environments.

Kubernetes & Container Orchestration
Working knowledge of Kubernetes alongside Docker for container orchestration, complementing CI/CD and cloud-native deployment workflows.

Experience

Professional experience10+ years
Freelancer since2021

Languages

EnglishFluentFrenchNative speaker

Project history

Freelance AWS Data Platform Architect — Tech Lead & Product Owner

Safran Aero Systems
Recovered a production launch running 8 months late and shipped the full AWS Data Platform to production. Rebuilt ingestion pipelines on Lake Formation, Glue, Athena, Lambda and Step Functions, cutting run time from 5+ hours to under 1 hour. Industrialized ingestion from ~20 source systems including Infor M3 ERP. Led a team of 5 data engineers and owned the product backlog and RUN operations.

Freelance Cloud Architect — AWS Network Security & Landing Zone

Collecte Localisation Satellites (CLS)
Re-architected the AWS Transit Gateway backbone around segmented route domains to raise network security. Created a declarative YAML flow matrix as the single source of truth for network connectivity consumed by Terraform. Extended the Terraform/Terragrunt stack governing the AWS Landing Zone including AWS Organizations OU structure and Service Control Policies (SCP). Acted as Level 3 escalation for AWS and DevOps across application teams.

Freelance Cloud Architect — AWS Audit & PCI DSS Compliance

BJ Invest Group
Delivered a PCI DSS-ready AWS environment including audit, new Landing Zone, AWS Organizations OU structure and SCP guardrails, security controls and certification pack. Cut cloud spend by 30% through FinOps analysis and automated per-application cost reporting.

Freelance Cloud Architect — AWS Audit & Azure/AWS Identity

Euronews
Federated identity for several hundred users between EntraID and AWS IAM Identity Center, unifying access management across Azure and AWS. Remediated AWS Control Tower configuration drift identified during a full infrastructure audit. Framed the client AWS migration with a security posture and cost assessment, and covered Level 3 Azure networking.

AWS Cloud Architect

Atos
Designed and shipped an enterprise Retrieval-Augmented Generation (RAG) solution on Azure and OpenAI, integrated into existing enterprise workflows with a FastAPI/HTMX interface.

Freelance Cloud Architect — AWS Migration & Optimization

Unibail-Rodamco-Westfield
Migrated critical applications to AWS, setting the target design and security guardrails for application teams. Centralized logging and observability using AWS native services. Extended the Terraform/Terragrunt deployment stack and shipped it through GitLab CI/CD and GitHub Actions pipelines.

Freelance DevSecOps Engineer — AWS Landing Zone & Multi-Account Migration

Biogen
Migrated 50+ AWS accounts into a newly designed Landing Zone in 6 months. Built a deployment stack in Terragrunt, YAML and Python covering 5 AWS regions. Designed AWS Organizations OU structure and Service Control Policies (SCP). Centralized egress traffic inspection and optimized VPC endpoint sharing. Automated security detection and remediation with AWS Config and Python on top of SecurityHub, GuardDuty and Access Analyzer.

Freelance AWS Cloud Architect & DevOps

Airbus
Audited the Big Data department AWS environment, refactored its Infrastructure as Code (IaC) stacks in Terraform, AWS CDK and CloudFormation, and set up CI/CD with Jenkins, GitHub, Docker and Artifactory.

Freelance AWS Cloud Architect & DevOps

Chanel
Extended Terraform/Terragrunt stacks and Ansible playbooks supporting the AWS migration program, implemented CI/CD on Azure DevOps and supported the Zabbix monitoring migration.

AWS Solutions Architect

Accenture
Ran AWS Landing Zone security assessments across multiple clients, delivered security and networking best practices consulting, and built an AWS Gateway Load Balancer proof of concept.

DevSecOps Engineer

Technofy
Designed a highly available AppStream 2.0 streaming solution for 2,500 users (client: Artemys). Architected the migration of an on-premises telephony platform to AWS over a Direct Connect link (client: Mobiyo). Advised Airbus on AWS security and networking including Transit VPC design and Transit Gateway proof of concept.

Network & Security Consultant (client: Airbus)

SQUAD
SOC Level 3 including IDP/IPS deployment, Level 3 incidents and crisis response, and Digital Workplace Level 3 on Blue Coat, Palo Alto, Netskope, F5 and Cisco.

Network & System Architect

BPC
Ran worldwide infrastructure across 5 countries (France, Mexico, China, Slovakia, Germany) as security and networking reference. Modernized the firewall fleet from Cyberoam to Stormshield and built Python tooling for SAP interfaces and production-line monitoring.

Network & Security Administrator

HDPMB
Managed CheckPoint firewalls and inter-hospital network interconnections. Developed internal tooling on open-source stacks including GLPI, Squid/HAProxy on OpenBSD and pmacct probes.

Production, System and Network Technician

Ginkoia, Aquitaine Informatique, DEAL Informatique, JPA Wanlin-Grellier
Production, system and network technician roles across multiple companies in Bordeaux and Haute-Savoie.

Certificates

AWS Certified Security - Specialty

Amazon Web Services (AWS)

2026

AWS Certified ML Engineer - Associate

Amazon Web Services (AWS)

2026

SnowPro Core Certification

Snowflake

2026

AWS Certified Advanced Networking - Specialty

Amazon Web Services (AWS)

2025

AWS Certified Data Engineer - Associate

Amazon Web Services (AWS)

2025

AWS Certified AI Practitioner

Amazon Web Services (AWS)

2025

AWS Certified Solutions Architect - Professional

Amazon Web Services (AWS)

2024

HashiCorp Certified: Terraform Associate

HashiCorp

2021

Aviatrix Certified Engineer (ACE)

Aviatrix

2020

AWS Certified SysOps Administrator - Associate

Amazon Web Services (AWS)

2019

AWS Certified Developer - Associate

Amazon Web Services (AWS)

2019

Palo Alto Networks ACE - PAN-OS 8.1

Palo Alto Networks

2019

AWS Certified Solutions Architect - Associate

Amazon Web Services (AWS)

2018

AWS Certified Cloud Practitioner

Amazon Web Services (AWS)

2018

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in