Wassim is available for hire
Hire WassimWassim EL-Asmar
Verified Expert in Engineering
Software Developer
Location
Montreal, QC, Canada
Toptal Member Since
September 17, 2021
Wassim is passionate about system administration, focusing on infrastructure, automation, configuration management, and the implementation of evolutive systems. His past experiences include working with OpenStack, as well as a migration of a Docker infrastructure to OpenShift. His current contracts involve work with AWS, Kubernetes, and GitLab CI/CD. Skilled, organized, and professional, Wassim is a considerable asset to any team geared toward process automation and DevOps best practices.
Portfolio
National Bank of Canada
Amazon Web Services (AWS), Terraform, Jenkins, OpenShift, Helm, Bash Script...
Desjardins Group
Concourse CI...
CAE
Chef, Jenkins, Azure, Docker
Experience
Availability
Part-time
Preferred Environment
Linux, Kubernetes, Helm, Terraform, GitLab CI/CD, Jenkins, Bash, Python, Amazon Web Services (AWS), Concourse CI
The most amazing...
...project that I've worked on needed a complete automation of a complex infrastructure while focusing on optimization every step of the way.
Work Experience
Senior DevOps | Site Reliability Engineer
2019 - PRESENT
National Bank of Canada
- Established a structure that meets the needs of security, stability, speed, and continuous development.
- Implemented CI/CD processes with Bitbucket, Jenkins, Nexus, Harness, Helm, and OpenShift.
- Managed deployments and operation configurations in OpenShift, including replicas, probes, CPU, memory, and ConfigMap.
- Configured EKS and Kinesis Data Firehose on AWS with Terraform.
- Set up a Git flow model for code management, a proper image versioning for all built images, and a process for hotfixes on critical transactional applications in production.
- Ensured the execution of SonarQube and Veracode scans and implemented gating from the scan's reports within the pipelines.
- Managed and externalized property files in ConfigMap and templatized the application's deployments using Helm.
Technologies: Amazon Web Services (AWS), Terraform, Jenkins, OpenShift, Helm, Bash Script, Groovy Scripting, Python, Splunk, Datadog, Go
Senior DevOps and SRE Consultant
2018 - 2019
Desjardins Group
- Implemented CI/CD with Concourse and PCF for multiple critical transactional applications.
- Supported critical transactional applications in their lifecycle in all environments from development to production.
- Collaborated with multiple teams of developers and QAs to maximize pipeline functionalities.
- Led three teams of developers which I enrolled in the DevOps processes and best practices.
Technologies: Concourse CI, VMware Tanzu Application Service (TAS) (Pivotal Cloud Foundry (PCF)), Bash Script, DevOps
Senior DevOps and SRE Consultant
2018 - 2019
CAE
- Configured automation of deployments and management of configuration files for CAE web servers with Chef.
- Implemented Jenkins pipelines to trigger the Chef cookbooks for initial configuration and update part of the components.
- Used Azure DevOps to create pipelines for deploying applications to Azure.
Technologies: Chef, Jenkins, Azure, Docker
DevOps and SRE Consultant
2018 - 2019
Gologic
- Configured an OpenShift cluster and migrated from a Docker infrastructure to the OpenShift infrastructure, including migration of all applications, databases, and every component related to the microservices.
- Refactored Bash scripts used to automate manual tasks.
- Created automation and configuration management with Chef.
Technologies: OpenShift, Bash Script, Chef, Proxmox, GlusterFS
Senior System Administrator
2018 - 2019
iweb
- Administered an OpenStack infrastructure such as cloud instances and bare-metal servers and processed cluster migrations.
- Configured and troubleshot Linux and Windows web clusters such as LB, web servers, databases, and DFS and structured Hyper-V clusters.
- Set up Cisco ASA firewalls and VPN configurations and solved network issues.
- Managed backups, server clones, monitoring, investigations, and documentation.
Technologies: OpenStack, Linux, Bash Script, Cisco, Hyper-V
System Administrator
2015 - 2016
OVHcloud
- Configured Linux servers to match the client's requirements, such as LVM partitions and RAID configs.
- Configured security onto Linux servers, including iptables firewall and natting rules.
- Troubleshot network availability using tcpdump, Nmap, and MTR analysis.
Technologies: Linux, Bash, Cloud
Experience
EKS Deployment with Terraform
Configured the deployment of all elements of an EKS cluster with Terraform in a scalable design, including resources, IAM roles, and policies. I also made variations of all configurations per environment and installed a custom CNI (Calico) to fix AWS IP limitation per worker node.
Configured a custom launch template in AWS, deployed an ingress controller, and created a pipeline in GitLab-CI to launch our Terraform.
Created a second pipeline that will take care of:
• Creating Docker images used as workers in our main pipeline
• Testing those worker images
• Pushing the versioned images in the GitLab registry
Deployed ExternalDNS to automate zone creation in Route 53 that verifies ingress configs automatically. Automated SSL certificate creation and signature process with Let's Encrypt to configure a service account for cert-manager and a ClusterIssuer and deploy cert-manager that verifies ingress configs, creates SSL certs accordingly, and signs certs with authority.
Configured DynamoDB to manage the LockState of our Terraform state.
Configured a custom launch template in AWS, deployed an ingress controller, and created a pipeline in GitLab-CI to launch our Terraform.
Created a second pipeline that will take care of:
• Creating Docker images used as workers in our main pipeline
• Testing those worker images
• Pushing the versioned images in the GitLab registry
Deployed ExternalDNS to automate zone creation in Route 53 that verifies ingress configs automatically. Automated SSL certificate creation and signature process with Let's Encrypt to configure a service account for cert-manager and a ClusterIssuer and deploy cert-manager that verifies ingress configs, creates SSL certs accordingly, and signs certs with authority.
Configured DynamoDB to manage the LockState of our Terraform state.
Financial Data Parsing and Outputted Into Kafka
A Go-based application that fetches stock data from API to parse it and produce structured messages into Kafka topics.
The main purpose of this application is the serialization and deserialization of data acquired from multiple API endpoints. The final product is a parsed message that the application produces onto Kafka topics which will be consumed by Elasticsearch. The application is deployed with Helm onto Kubernetes.
Outside from the applicative code, a big part of this project is the release management and infrastructure as code, taken from another project that I've built.
The infrastructure—an EKS cluster deployed through Terraform will host the application and all other parts (Elasticsearch, upcoming apps).
The AWS infrastructure is configured for the auto-scaling group to scale the EKS workers as needed.
Security—deployment and configuration of cert-manager, in charge of certificate creation and renewals.
Deployment and configuration of ExternalDNS for automatic zone creation in Route 53 from pull requests in the ingress rules.
Release management—trunk-based branching, simple image versioning. To ensure robustness, tests are run early, and production release is done often.
The main purpose of this application is the serialization and deserialization of data acquired from multiple API endpoints. The final product is a parsed message that the application produces onto Kafka topics which will be consumed by Elasticsearch. The application is deployed with Helm onto Kubernetes.
Outside from the applicative code, a big part of this project is the release management and infrastructure as code, taken from another project that I've built.
The infrastructure—an EKS cluster deployed through Terraform will host the application and all other parts (Elasticsearch, upcoming apps).
The AWS infrastructure is configured for the auto-scaling group to scale the EKS workers as needed.
Security—deployment and configuration of cert-manager, in charge of certificate creation and renewals.
Deployment and configuration of ExternalDNS for automatic zone creation in Route 53 from pull requests in the ingress rules.
Release management—trunk-based branching, simple image versioning. To ensure robustness, tests are run early, and production release is done often.
Skills
Languages
Bash, Python, Bash Script, Go
Tools
GitLab CI/CD, Jenkins, Helm, Terraform, Concourse CI, Chef, Splunk, Nagios, Hyper-V, Amazon EKS
Platforms
Linux, Kubernetes, OpenShift, Docker, Amazon Web Services (AWS), OpenStack, VMware Tanzu Application Service (TAS) (Pivotal Cloud Foundry (PCF)), Proxmox, Azure, Apache Kafka
Paradigms
DevOps
Storage
Datadog, GlusterFS
Other
Cisco, Cloud, Groovy Scripting
Certifications
AUGUST 2015 - PRESENT
MCA200 OpenStack Certification
Mirantis
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring