Complete Engineering Track Record (2010 - 2026)

Software Engineering & Architecture Experience

From securing state IAM infrastructures (HAS) to leading CAC 40 multi-tenant SaaS platforms (IDPosition), here are 15 years of concrete chronological achievements.

IAM & Security #22

IAM Expert / Keycloak Architect

Haute Autorité de Santé (HAS) • Saint-Denis, France

🗓️ May 2026 - July 2026

Securing access for HAS through the design and industrialization of a highly available IAM infrastructure based on Keycloak, integrated with a Node.js portal and fully driven by code (GitOps).

Key Achievements:

  • ▹ Design and development of an idempotent Node.js import tool synchronizing Keycloak Realm configuration from a YAML model.
  • ▹ Automated deployments across 3 environments (Local, Staging, Prod) in GitLab CI/CD with HashiCorp Vault.
  • ▹ Implementation of advanced authentication flows with custom dynamic MFA (Java SPI Email OTP).
  • ▹ Development, Docker containerization, and deployment of the management portal (SPA + Nginx Proxy + Node.js BFF).
  • ▹ Authoring of the Zero-Trust architecture comparative study and Playwright E2E test suite.
🚀 Impact: Secured, industrialized state IAM infrastructure automated 100% in Configuration-as-Code.
Stack: Keycloak Java (SPI) Node.js Docker Nginx LDAP GitLab CI/CD HashiCorp Vault Playwright OIDC
IAM & Security #21

IAM & Keycloak Security Expert

Resalocal / Premices • Talloires-Montmin, France

🗓️ May 2026

Setting up an IAM infrastructure for two major regional projects (Resalocal and Premices) covering 4 environments (QA & Prod).

Key Achievements:

  • ▹ Configuration and deployment of 4 Keycloak realms on Kubernetes.
  • ▹ Implementation of hybrid authentication flows: Social Login (Google, Entra ID) and Passwordless (Magic Link).
  • ▹ Generic Master JSON Template and CI/CD automation via keycloak-config-cli.
  • ▹ Comparative study of application vs infrastructure Policy Enforcement Points (PEP) and ReBAC strategy with OpenFGA.
🚀 Impact: Smooth and scalable multi-tenant identity management for regional platforms.
Stack: Keycloak Kubernetes OpenFGA Entra ID Passwordless GitLab CI/CD keycloak-config-cli
SaaS & Scale #20

CTO & Tech Lead (Permanent)

IDPosition • Paris, France

🗓️ April 2021 - October 2025 (4 yrs 6 mos)

Transforming a technical POC into a secure, scalable multi-tenant SaaS platform meeting the demands of major CAC 40 groups (Orange, Dior, FDJ, Vinci, BNP...).

Key Achievements:

  • ▹ Migration to a multi-tenant Kubernetes infrastructure (Scaleway) with total data isolation (dedicated PostgreSQL DB per client).
  • ▹ Database and SQL query optimization on datasets exceeding 3 million rows.
  • ▹ Implementation of Keycloak for centralized authentication and enterprise SSO. Validated Cloudflare protections and security audits.
  • ▹ Robust API under Symfony 6 / PHP 8 with granular permission engine and reactive UI under Vue.js 3.
  • ▹ Automated CI/CD pipelines with ArgoCD and GitHub Actions.
🚀 Impact: Enterprise SaaS platform deployed across CAC 40 giants.
Stack: Symfony 6 PHP 8 Vue.js 3 Node.js PostgreSQL Kubernetes Docker Keycloak RabbitMQ ArgoCD Cloudflare
SaaS & Scale #19

Web Designer & Developer

Parentor • Wilmington, USA

🗓️ May 2020 - April 2021

Innovative language learning solution for children.

Key Achievements:

  • ▹ Design of an intelligent algorithm enabling daily spaced repetition and lesson rotation.
  • ▹ Robust and scalable backend architecture (Symfony 5) to support multiple native and target languages.
  • ▹ Development of a reactive, child-friendly front-end under Vue.js.
Stack: Symfony Vue.js Docker Algorithms