Zied Ghiloufi

Automated Azure infrastructure via ARM templates (Azure DevOps) and Terraform modules (Terraform Enterprise), standardizing secure and repeatable deployments.

Built and managed Azure Data Factories with Self‑Hosted Integration Runtimes to support hybrid data integration scenarios.

Migrated Risk Management Web & Function Apps from ASEv2 to ASEv3, improving scalability, performance, and security.

Developed and maintained CI/CD pipelines in Azure DevOps; mentored DevOps engineers and managed platform administration (permissions, agents, service connections).

Enforced security and compliance by implementing Private Endpoints, configuring Microsoft Defender for Cloud, and setting up alerts for performance, budget, and security events.

Delivered special projects including HPC Pack cluster provisioning and CipherTrust Cloud Key Management implementation for secure data encryption.

Performed SRE responsibilities such as monitoring system health, defining and tracking SLIs/SLOs, conducting root cause analysis (RCA), managing incident response, and driving continuous improvements in system reliability and availability.

Transversal Contributions:

Conducted maturity assessments on Code Quality, Agility, DevOps, Monitoring, Security, and FinOps in line with TDF standards.

Helped design and enhance the TDF Service Catalog using Terraform for reusable infrastructure provisioning.

Improved Ansible playbooks for Azure resource post-configuration to ensure automation and compliance.

Squads Contributions:

Provisioned key Azure resources (Web/Function Apps, Key Vaults, Data Factories, Storage, SQL MI, etc.) using Terraform.

Managed Azure AD entities (Security Groups, App Registrations, SPNs) and configured RBAC with/without conditional access.

Designed and implemented CI/CD pipelines for both infrastructure and app deployment in Azure DevOps.

Maintained Git Flow branching strategy for efficient collaboration.

Supported Angular app integration with MSAL for secure authentication.

Enabled Managed Identity across services for secure, credential-free communication.

Applied repo policies and branch protections to secure production environments.

Integrated SonarQube, Checkmarx, and CredScan into pipelines for code quality and security.

Managed secrets and certificates via Azure Key Vault.

Implemented Flyway for automated DB versioning and migration through DevOps pipelines.

Enhanced application security using Azure Application Gateway with WAF for public-facing apps