11/05/2026 updated
100 % available
Senior DevOps / DevSecOps / Cloud / SRE Consultant
Casablanca, Morocco
Only remote
Master's in Information Systems SecurityAbout me
Senior DevOps/DevSecOps Consultant with 7+ years in Kubernetes, Docker, Terraform, AWS, Azure DevOps, GitLab CI/CD and observability. Based in Casablanca, Morocco, working 100% remotely.
DevOpsGitHubWindows ServersOpenShiftRedisAnsibleIstioGitLabGitKubernetesAtlassian BitbucketTerraformDevSecOpsDockerJenkins
Cloud & Infrastructure
Expertise in major cloud platforms including AWS, GCP, Azure, ProxmoxVE, OVH and Scaleway. Deployment and management of cloud-native and hybrid infrastructures, including VPCs, dedicated servers, flexible IPs and Kubernetes clusters.
CI/CD & GitOps
Design and maintenance of CI/CD pipelines using GitLab, GitHub, Jenkins, Bitbucket, Azure DevOps, ArgoCD and Kargo. Automation of build, test, security scan and deployment workflows, including GitOps-based release promotion across environments.
Containers & Orchestration
Administration of containerized workloads on Kubernetes, OpenShift, Docker, Istio, EKS, AKS, GKE, ECS, Helm, Harbor and VMware Tanzu. Handling of application packaging, deployment, scaling and management in production environments.
IaC & Automation
Infrastructure provisioning and automation using Terraform, OpenTofu, Ansible, AWX and Terragrunt. Management of versioned Ansible roles and Git repositories to ensure reusability and traceability.
Observability & Reliability
Implementation of observability stacks including Prometheus, Grafana, ELK Stack, Loki, VictoriaLogs, Dynatrace and DORA Metrics. Centralization of monitoring, log collection, processing and platform analysis.
Security & DevSecOps
Integration of security practices into CI/CD pipelines using Semgrep, njsscan and DefectDojo. Securing of Harbor image registries with Trivy scans, management of access and secrets via Keycloak and VSO, and implementation of Istio Service Mesh with mTLS.
Data & Messaging
Experience with PostgreSQL, MongoDB, MySQL, Kafka, MinIO and Redis. Deployment and administration of high-availability PostgreSQL clusters with CloudNativePG and PgDog, as well as Redis Sentinel for cache high availability.
Systems, Networks & Scripting
Administration of OPNsense, pfSense, Linux, Windows Server, Active Directory, NGINX, Traefik, Git, Python and Bash. Securing of network and web infrastructure including NAT, traffic filtering and NGINX protection.
Expertise in major cloud platforms including AWS, GCP, Azure, ProxmoxVE, OVH and Scaleway. Deployment and management of cloud-native and hybrid infrastructures, including VPCs, dedicated servers, flexible IPs and Kubernetes clusters.
CI/CD & GitOps
Design and maintenance of CI/CD pipelines using GitLab, GitHub, Jenkins, Bitbucket, Azure DevOps, ArgoCD and Kargo. Automation of build, test, security scan and deployment workflows, including GitOps-based release promotion across environments.
Containers & Orchestration
Administration of containerized workloads on Kubernetes, OpenShift, Docker, Istio, EKS, AKS, GKE, ECS, Helm, Harbor and VMware Tanzu. Handling of application packaging, deployment, scaling and management in production environments.
IaC & Automation
Infrastructure provisioning and automation using Terraform, OpenTofu, Ansible, AWX and Terragrunt. Management of versioned Ansible roles and Git repositories to ensure reusability and traceability.
Observability & Reliability
Implementation of observability stacks including Prometheus, Grafana, ELK Stack, Loki, VictoriaLogs, Dynatrace and DORA Metrics. Centralization of monitoring, log collection, processing and platform analysis.
Security & DevSecOps
Integration of security practices into CI/CD pipelines using Semgrep, njsscan and DefectDojo. Securing of Harbor image registries with Trivy scans, management of access and secrets via Keycloak and VSO, and implementation of Istio Service Mesh with mTLS.
Data & Messaging
Experience with PostgreSQL, MongoDB, MySQL, Kafka, MinIO and Redis. Deployment and administration of high-availability PostgreSQL clusters with CloudNativePG and PgDog, as well as Redis Sentinel for cache high availability.
Systems, Networks & Scripting
Administration of OPNsense, pfSense, Linux, Windows Server, Active Directory, NGINX, Traefik, Git, Python and Bash. Securing of network and web infrastructure including NAT, traffic filtering and NGINX protection.
Experience
Professional experience5 - 10 years
Freelancer since2026
Languages
EnglishFluentFrenchFluent
Project history
Contributes to Wafacash's information system modernization program: DevOps industrialization, automation, platform reliability and cloud-native operation of .NET microservices. Designs and optimizes Azure DevOps CI/CD pipelines, administers containerized workloads on Kubernetes and VMware Tanzu, deploys high-availability PostgreSQL clusters with CloudNativePG, implements Redis Sentinel, manages Harbor image registries, and deploys observability chains with Vector, VictoriaLogs, Loki, Grafana and Dynatrace.
Contributes to the design of the infrastructure and DevSecOps foundation of Deskea, an omnichannel platform. Designs and maintains GitLab CI/CD pipelines integrating Semgrep, njsscan and DefectDojo. Industrializes infrastructure with Terraform and OpenTofu on AWS, Scaleway and on-premises. Administers AWX (Ansible), deploys GitOps workflows with ArgoCD and Kargo, implements Istio Service Mesh, centralizes monitoring via ELK stack and Elastic Agent, and manages Jira epics and code reviews.
Administers OVHcloud IaaS, Windows Server and cloud environments. Manages Active Directory, GPOs, access rights and system policies. Secures network and web infrastructure with WatchGuard, pfSense, Fail2ban, NAT and NGINX. Deploys Nessus and Arachni for vulnerability assessments. Migrates VM-based solutions to Docker and secures SSH access to AWS EC2/ECS via OVHcloud The Bastion. Provides support and operations via Zendesk including SLA tracking and incident resolution.
Certificates
CCNA Routing & Switching
Cisco Systems2019