DevOps profile · Integration & platforms

Oulom Souvannavong

DevOps / Integration Engineer — CI/CD, IaC, Kubernetes & sovereign cloud

From the CI/CD pipeline to the Kubernetes cluster: I automate, harden and operate critical platforms.

Independent consultant
Email ouloms@gmail.com Phone +33 6 18 67 96 00 Address 142 avenue de Saint-Ouen, 75018 Paris Website oulom-souvannavong.fr

DevOps profile

20+ years in critical Linux production, including end-to-end DevOps practice: delivery industrialization (GitLab CI, Jenkins, Ansible Tower), Infrastructure as Code (Terraform, Ansible, Salt) on the OpenStack/NUBO sovereign cloud, Kubernetes/Helm packaging and operations (Onyxia), containers (Docker, Podman, Apptainer) and observability (Prometheus, Grafana, Centreon). Technical referent at the French Ministry of Finance, Radio France, BnF, INPI and Naarea.

20+yrs
of Linux production experience
500+VMs
operated in critical environments
8missions
major · public, media, finance, energy
3datacenters
migrated with no service downtime

DevOps toolbox

CI/CD & Infrastructure as Code

GitLab CIJenkinsAnsibleAnsible TowerTerraformSaltStackPuppetRundeckNexusBambooDollar Universe

Containers & orchestration

KubernetesHelmOnyxiaDockerPodmanApptainerRancher / RancherOS

Cloud & virtualization

OpenStack (NUBO)VMware vSphereoVirt / KVMProxmoxHyper-VVMware SRM (PRA)

Observability & monitoring

PrometheusGrafanaCentreonNagiosGraylogElastic StackJMX

Systems, storage & security

Linux RHEL/SUSE/DebianANSSI / durcissementLDAP / SSSD / ADSAN HP 3PARCeph / S3MySQL Galera + ProxySQLiSCSI / FC / NFS

Scripting, dev & AI

BashPythonGoFastAPIn8nClaude APIOllama / MistralSelenium

DevOps & integration track record

Feb 2025 — Feb 2026 Paris Bercy / Noisy-le-Grand
Independent Linux expert consultant
Ministry of Finance — Bercy HUB & DGFIP

Assignments with at least two entities of the ministry: Bercy HUB for the Nubonyxia project, then the DGFIP (taxes) for the RADAR project.

  • Sovereign State data lab platform
  • Voice chatbot & Legal Code
  • Catalog of compliant Helm charts
Onyxia · InseeAI hackathon · Feb 2025Helm · KubernetesTerraform · OpenStackCMDBuild · NiFi
Occasional (2024 — 2025) France
Support assignments
Enedis, Fayat IT

Designed a test bench for real-time software: verified the chaining between Linux and the real-time application.

  • Test bench for Enedis
  • Application reversibility at Fayat IT
Linux temps réelMigration Linux → Windows
Since 2005 France
IT support (family-run business)
RYC — business support

Since 2005, supporting RYC, a business assistance structure (advice on administration, pre-accounting notably with Sage Coala).IT and office support: Windows workstations on the client side; Linux servers for infrastructure, with folder sha…

  • AI agents for document processing
  • Local LLM inference at a small business
  • 20 years of infrastructure continuity
n8n · Claude APIOllama · MistralSage Coala · Samba
Jan 2024 — Jan 2025 Nanterre
HPC platform operations
Naarea — energy (small modular reactors)

Startup in the small modular nuclear reactor (SMR) sector; mostly Windows-based information system, with a decision to invest in a HPC platform for simulation and scientific computing.

  • HPC for nuclear simulation (SMR)
  • MPI-compatible HPC containers
  • Linux master image hardened to State framework
Slurm · InfiniBandApptainer (Singularity)ANSSISaltStack
2022 — 2023 Paris / Maison de la radio
Linux expert — infrastructure project
Radio France

Hired as part of the OnAir project: migration of part of the radio business information system to a Linux software base, while the legacy until then was essentially Windows-based.

  • Three engineers had failed before me
  • Durable Linux base in an AD domain
  • Advisory for the Linux installation
SSSD · Active DirectoryMaster Debian · PXECyberwatchAnsible Tower
2019 — 2022 Paris
Integration engineer
National Library of France (~3000 staff)

The B2I bureau (engineering and integration) bridged the production / operations teams and the R&D / studies teams — in short, the glue between development and prod. A small team of about ten people splitting up the entire application portf…

  • At the heart of the BnF's operation
  • Research in human and social sciences
  • Physical public service: access, ticketing, checkout
Catalogue général · RéservationsHeurist · SHSNFC · Vivaticket · ZebraPodman · Ansible · Sonar
2010 — 2019 Courbevoie / Bécon-les-Bruyères
Linux systems architect engineer
INPI — French Industrial Property Institute (~800 staff)

After the Sungard experience, joined INPI — about nine years there, a very rich experience. On arrival: no virtualization yet, no containers as we know them today; services were still massively installed on dedicated hardware ("bare metal" …

  • European Patent Office software suite
  • Pioneer in virtualization + cross-DC DRP
  • Active-active SQL & object storage architecture
EPTOS · OEBVMware vSphere · SRMGalera · ProxySQL · Ceph · S3CyberwatchHP 3PAR · iSCSI/FC · NFSSLES · normalisation
2007 — 2010 Saint-Cloud
Senior support consultant & integrator
Sungard Group — Global Portfolio 3 / Asset Management (Neoxam)

Après l’expérience à l’UCAD, mission chez Sungard (une partie de l’offre GP3 existe aujourd’hui sous la marque Neoxam) : produit phare Global Portfolio 3 (GP3), solution de gestion d’actifs (asset management) pour banques et assureurs. Part…

  • Near-monopoly of asset management in France
  • Porting a VMS legacy to Unix
  • Continuous integration before the Git era
Global Portfolio 3 (GP3)OpenVMS · runtime UnixBamboo · SVNMéthode d’analyse d’incidents
2006 — 2007 Paris
Computing engineer
UCAD — Union centrale des arts décoratifs (museum)

Institution muséale, +300 salariés. Parc mixte : postes de travail Windows et postes Linux ; serveurs Linux (production Debian, etc.) et stack Windows/Novell. Pas encore d’Active Directory : l’institution reposait sur Novell, dont l’annuair…

  • Thin clients — Linux Terminal Server (LTSP)
  • Free firmware on Wi-Fi router
  • Mastering the system end-to-end
LTSP · PXE · disklessDD-WRT · Linksys WRT54GCompilation noyau LinuxGLPI · OCS Inventory
During EPSI program Paris
Student job — IT support
DGC — training centre (same group as EPSI)

During studies at EPSI, student job at DGC, a training centre in the same group as the school.IT support and fleet management of the workstations dedicated to students: Windows NT 4, then Windows 2000. Created images with Ghost (Symantec / …

  • Re-imaging an entire room
Norton Ghost · multicast

Technical skills

Systems & networking

Linux Red Hat/CentOS, Debian/Ubuntu, SUSE in production (level 3); Active Directory / LDAP / SSSD integration (Radio France, Naarea); PXE boot / Preseed, LTSP for thin clients (UCAD); BIND DNS, iptables firewall; kernel compilation and trimming (recycled fleet). Unix AIX, Solaris, HP-UX (INPI, Sungard GP3 migrations). Windows and Samba in mixed contexts (small businesses, museum).

Monitoring & observability

Centreon, Grafana, Prometheus; Nagios → Centreon → Prometheus journey (INPI, Naarea). Graylog, Elastic Stack for logs and correlation. JMX metrics (Tomcat/Java). Tech-functional operations dashboards.

Storage, SAN & DRP

HP 3PAR SAN, iSCSI, Fibre Channel, NFS; Ceph, S3 / MinIO object storage; MySQL Galera + ProxySQL. VMware Site Recovery Manager DRP / BCP, cross-DC replication and datacenter migrations (INPI). Backups: Bacula, BackupPC, NetBackup, Veeam.

Virtualization, cloud & Kubernetes

VMware vSphere, oVirt, KVM, Proxmox, Hyper-V; OpenStack (NUBO, ministry). Kubernetes & Helm (Onyxia / Nubonyxia, "Onyxia-flavored" charts, catalog CI). Docker; Apptainer for container-style workloads; first clusters via Rancher / RancherOS (INPI).

Databases & middleware

MySQL / MariaDB, PostgreSQL, Oracle (operations), MongoDB, MaxDB. Tomcat / Java stacks, Apache NiFi, CMDBuild (RADAR DGFIP). PHP, Node, Heurist (SHS at BnF) integrations. Ext JS (business UI).

Automation & CI/CD

Ansible (Tower), Terraform (OpenStack VMs), Puppet, SaltStack; Git, Jenkins, GitLab CI, Bercy/BnF/INPI release chains; Rundeck → Ansible Tower (Radio France). Dollar Universe (scheduling). Bamboo / SVN (Sungard era).

Development, scripting & AI

Bash/shell, Python, JavaScript/React, Go, Ext JS; Django, PHP, VBA/AutoIt. Recent projects: FastAPI, RAG, Whisper. In production: n8n agents, Claude API, local Ollama / Mistral inference (small business), operations scripts and Selenium (prod checks).

HPC & operational security

Slurm, InfiniBand, Apptainer (MPI, scientific workloads), Lenovo platforms; protected network zones, dedicated LDAP (Naarea). Linux master images hardened to ANSSI guides, MCS. Cyberwatch (INPI rollout, Radio France advice).

Education

  • 2004 — EPSI Paris
    Master's degree (Bac+5) — Information Systems Expert

Languages

  • French — Native language
  • English — Professional — reading, international project exchanges (EPTOS, Sungard)
  • Lao — Family roots — basics