ZIED OUERTANI

Achievements: Design and deployment of a sovereign, fully on-premise RAG (Retrieval-Augmented Generation) platform, with no dependency on public cloud.
Infrastructure & DevOps:

Self-hosted k3s cluster with persistent NFS storage (Synology)
Private Docker registry on Synology: build, push, deployment on k3s
Traefik Ingress, local DNS, namespace management and PersistentVolumes
GitOps CI/CD pipeline: build → push registry → k3s deployment

Sovereign AI Stack:

Local LLM model deployment via Ollama (Mistral, Llama3) — no data sent externally
Embeddings with nomic-embed-text and vector storage via pgvector / PostgreSQL
Full RAG pipeline implementation: PDF ingestion → chunking (3 strategies) → vectorisation → cosine similarity retrieval → response generation
Anti-hallucination policy: configurable similarity threshold, explicit refusal when context is insufficient

Security & Audit:

Spring Security with RBAC (ROLE_USER / ROLE_ADMIN), document classification (public / internal / confidential)
Full traceability: every LLM request logged (question, context, response, sources, traceId)
User-level isolation, userId injected into all logs

Evaluation:

Structured test dataset (question/answer pairs) — measurement of context recall, answer relevance, latency, refusal rate
Configuration comparison: chunking strategies, LLM models, topK

Project: Cloud Migration / Cloud Architect / Hands-on Tech Lead DevOps — Spring Boot / AWS 09/2025 - 2026
Over 2 years on 4 consecutive projects, progressing from Senior Developer to Cloud Tech Lead. Critical financial environment (clearing, post-trade).
Full migration of the software suite from on-premise to AWS across 3 environments (DEV / QA / UAT).
• Technical team leadership: architecture decisions, code review, mentoring, workshop facilitation.
• Integration of 2 AI agents (enterprise LLM) into the CI/CD pipeline to automate code review and Checkmarx analysis.
• Infrastructure as Code with Terraform: EC2, EBS, FSx ONTAP, NLB, API Gateway, IAM, networking.
• Ansible deployment automation: Java backend, Apache front-end, Docker IBM MQ, Oracle databases.
• GitLab CI/CD pipeline integrating Terraform + Ansible, ensuring reproducibility and traceability

Projet: Concorde / Architecte Solutions / Tech Lead Hand-on Java / Spring Boot / IBM MQ / Kafka 01/2024 - 12/2024 LCH

Architecture design and development of an event-driven integration system for the CATS IS in a critical post-trade financial context Architecture & conception event-driven :
• Design and validation of microservice architecture: pattern selection (Hexagonal, DDD, SAGA), interface and API contract definition.
• Full event-driven architecture: Hexagonal · DDD · SAGA · Kafka · AVRO · MongoDB — target architecture validated for the project.
• Integration architecture: JSON message routing to IBM MQ to feed the DataLake.
• Steering committee facilitation: meeting preparation, minutes, action tracking.
• Stakeholder coordination: development teams, BAs, middleware team.
Development & delivery
• Development of Spring Boot microservice exposing REST APIs consumed by the VTOM orchestrator.
• Performance and robustness analysis and issue resolution.
• Team management: architecture, code review, delivery, Swagger documentation.
Technical Leadership
• Technico-functional oversight: stakeholder coordination, progress meetings, schedule consolidation, risk escalation.
• Architecture documentation: DAT, interface contracts, event-driven patterns

Project: Natop Integration Tech Lead Hand-on Dev Java / Spring Boot / IBM MQ 01/2024 - 12/2024 LCH

Design and development of 2 microservices for integrating 'Nature of Operation' messages into the CATS IS in a critical post-trade context
• Technical leadership: architecture definition, code review, development team management.
• Natop-Receiver: IBM MQ (JMS) consumption, JSON deserialisation, Oracle persistence, secured REST API (Spring Security + Swagger).
• Natop-Manager: Spring Batch for transforming messages into capital-call lines via mapping table, automated insertion for business process consumption.
• Full lifecycle coverage: design, development, testing, delivery.

Project: SYSPO Technical Lead Java Spring Boot Angular 09/2022 - 08/2023 ENEDIS
Technical lead on the SYSPO application (electrical substation management), covering microservices architecture, full-stack development and team coordination in a large-scale SAFe context.
Leadership & coordination
• Technical lead for a team of 5 developers: architecture advice, code review (Sonar + Checkmarx), developer support, PI Planning, Story Mapping, Sprint Planning and Backlog Refinement
Architecture & backend development
• Design and development of a new multi-IS acknowledgement management microservice, responsible for synchronising several information systems.
• Decomposition of a monolithic microservice into several independent microservices communicating asynchronously via Kafka, on a 12-microservice platform — improved scalability and maintainability.
• Inter-service integration via Feign, API security with Spring Security.
Développement frontend
• Development of several major Angular features, from UI to PostgreSQL persistence
Quality & performance
• Performance and robustness analysis and resolution on the production application.
• Systematic Sonar and Checkmarx code review.
Stack: Java 11 · Spring Boot · Spring Security · Angular · Kafka · Feign · PostgreSQL · Docker · Kubernetes · Ansible · GitLab CI/CD · Jenkins · Sonar · Checkmarx · SAFe
---------------------------------------------------------------------------------------------------------------------------------------------


From-scratch set up of the industrialization foundation and CI/CD chain for the development team.
+ Deployment of development tools on VA: Gt, Jenkins, Sonar, Ansibe, Nagios, JIRA
+ Full GitLab CI/CD pipeline: compilation, tests, static analyss, deployment, monitoring
Stack : Java 8 - - - GitLab CI/CD + Jenkins - Ansibl - -
Management of TMA and evolutions for 4 business extranets (Repairer, Insured, Client, Salvager) in the automotive expertise sector
Management & Oversight
+ Team management — 6 developers: panning, time tracking, change estimation.
+ Steering committee and progress committee facilitation with stakeholders.
+ Tracking and coordination of new application compenent development.

Architecture @ Technical
+ Design of nter-extranet communication channels (WebService, REST).
+ Management of ergonomic harmonisation across the 4 extranet.
+ Infrastructure: JBOSS EAP 5.2, mod_cluste, load balancing, Apache front end

Stack: Java 8 - JBOSS EAP 5.2 - mod_custer
• ood Balancing - Apache - REST - WebService