Mathys Haubert

DevOps Engineer — Cloud · Infrastructure as Code · Observability

Available November 2026 · Full-time · Paris

Profile

ISEP engineering graduate with three years as an apprentice at PharmaGDD, an online pharmacy. I work on the backend and, more and more, on the infrastructure: production monitoring, moving an extranet from GCP to OVH with Terraform, GitHub Actions deployments. Looking for a DevOps / Cloud role to automate infrastructure and make production more reliable.

Skills

DevOps & Cloud: Terraform, OVH Public Cloud, OpenStack, AWS, GitHub Actions, Harbor registry, Docker Compose, Traefik, Caddy, FrankenPHP, Linux, Prometheus, Grafana, Loki, Alloy, Alertmanager

Languages: Bash, Python, Java, PHP, C#

Data: MySQL (replication, backups), Redis, Elasticsearch, Neo4j

Security: Bastion and ProxyJump, SSH hardening, security groups, TLS, 2FA

Frameworks: Symfony, Sylius, Spring Batch, FastAPI, .NET

Currently learning: Kubernetes, AWS CDK, Microservices

Experience

Software Engineer Apprentice — PharmaGDD, Paris Sept 2023 — present

Online pharmacy: e-commerce rebuild (Symfony / Sylius 2) and its OVH infrastructure.

Observability: Set up production monitoring: Prometheus, Loki, Grafana, Alertmanager and Alloy agents on the VMs. Slack alerts provisioned from Git (VMs, MySQL and replication, Redis, Elasticsearch, 5xx and p95 latency, Symfony exceptions). VM and S3 provisioned with Terraform, ingestion behind an IP allowlist.
Cloud: Moved a Symfony extranet from GCP to OVH: hand-written Terraform (ovh + OpenStack), private network and bastion, security groups, DNS as code, Traefik + Let's Encrypt, MySQL backups to Object Storage. Cutover through MySQL replication (GTID, TLS) with a few minutes of downtime.
CI/CD: GitHub Actions deployment workflows: production deploys by commit SHA, repo access through a GitHub App, pinned host keys. Automated build and release of the desktop app (Velopack).
Data: Java 21 / Spring Batch ETL for the v1 → v2 migration: 73M rows at ~1.8M rows/min, PHP-serialized columns decoded by a Swoole daemon over TCP. Replayed nightly on the production dump (self-hosted runner, integrity checks).
Dev: Symfony / Sylius 2 backend on the rebuild (Elasticsearch, Redis cache). C# / .NET desktop app in production: drives 4 sensors (3 lasers + a scale) and sends the measurements to the ERP.

Student jobs: Delivery driver (Paris, 2023–24) · Maintenance agent, EQUIPMEDICAL (Caen, summers 2023 and 2024) · Crew member, McDonald's (Caen, 2019–20)

Side projects

Home Infrastructure — OVH VPS · Docker Compose
Self-hosted personal infrastructure: Traefik (TLS through DNS challenge), Authelia + 2FA, Prometheus / Grafana / node_exporter, Garage S3 storage, Dragonfly cache, Redpanda and NATS for messaging.

AWSPlayground — Terraform · LocalStack
AWS labs written in Terraform: IAM, S3, Lambda + SQS, DynamoDB, Secrets Manager, CloudWatch alarms, HTTP vs SQS benchmark. Preparation for the Solutions Architect exam.

PackageHeroMock — Rust
Virtual serial device simulating the PackageHERO scale and laser, to develop and test HeroLink without the hardware.

Education

Engineering degree, software engineering — ISEP Paris · apprenticeship 2023 — 2026

CPGE TSI (engineering prep school) — Lycée Marcel Sembat, Rouen 2021 — 2023

Certifications

AWS Certified Cloud Practitioner — Amazon Web Services

AWS Certified Solutions Architect – Associate — Amazon Web Services (in progress)

Junior Cybersecurity Analyst Career Path — Cisco

Foundational C# with Microsoft — freeCodeCamp

Languages

French: native | English: TOEIC 850

Outside code

Triathlon, Marathons, Blender 3D, Game dev