Jocelyn Fontaine

Since November 2025

Leading AWS architectures for the group's applications and Landing Zone.

• Definition and design of solutions for Solvay applications and Landing Zone
• High Level Designs for AWS-hosted projects, with constant documentation review
• AWS platform leadership alongside the Infra Lead Architect, ownership of AWS changes

• AWS
• Azure
• Jenkins
• Terraform
• IAM
• EC2
• S3
• AWS Backup

Since 2026

Design of a production-grade RAG platform for querying enterprise documents, with strict access control and full auditability.

• End-to-end architecture: ingestion, retrieval, generation, authentication, audit
• Vector search with permissions enforced at document level
• LLM pipelines with token control, retry strategies and concurrency management

• Python (FastAPI, asyncio)
• Amazon Bedrock
• PostgreSQL pgvector
• ECS Fargate
• RDS
• KMS
• Cognito
• Terraform
• React/TypeScript

Since 2026

Design and development of an autonomous AI agent generating, evaluating and publishing content on LinkedIn and X.

• End-to-end autonomous agent: generate / evaluate / decide / act
• Hybrid decision system: deterministic veto + LLM scoring
• RAG-based knowledge system enforcing tone, style and constraints

• Amazon Bedrock
• Python
• Terraform
• EC2
• Lightsail
• S3
• IAM
• Hypothesis
• Telegram Bot API
• X API

October 2024 — October 2025

Supporting the Cloud team in implementing the group's AWS platform.

• Tech Lead and consulting advisor on AWS and DevOps topics
• Design and implementation of the AWS Landing Zone
• Support for migrating Cegid applications to AWS

• Terraform
• AWS Cloud WAN
• Transit Gateway
• Direct Connect
• IAM
• Checkpoint Firewall
• Azure DevOps
• JFrog
• Dynatrace

July 2025 — September 2025

Cloud security audit and remediation of the Nanolike platform.

• Comprehensive security audit of the platform
• Identification and categorization of high-risk security deficiencies
• Development of a detailed remediation plan

• AWS
• Azure
• Jenkins
• Terraform

June 2025 — July 2025

Cloud security audit and remediation.

• Comprehensive security audit
• Identification and categorization of high-risk security deficiencies
• Development of a detailed remediation plan

• AWS
• EC2
• IAM
• IoT
• API Gateway
• S3
• ALB/NLB
• Lambda

January 2025 — May 2025

Implementation of a robust data segregation strategy and hardening of the security posture.

• Led the implementation of a robust data segregation strategy
• Design and implementation of application-level data encryption
• Critical review of the EKS platform with architecture recommendations

• AWS
• EKS
• KMS
• Kubernetes
• Terraform
• Java

February 2023 — August 2024·Monaco

Building and improving the AWS platform alongside the Infrastructure team.

• Design and implementation of the Landing Zone: IAM, VPN, Transit Gateway, Config Rules, security
• EKS/RDS patterns for application hosting
• VDI solution for DevOps teams based on AWS Workspaces

• AWS
• Transit Gateway
• VPC
• IAM
• EKS
• EC2
• RDS
• S3
• AWS Backup
• Kubernetes
• Workspaces
• Terraform

May 2022 — February 2024·Monaco

Definition, design and deployment of a sovereign Data Platform for the Government of Monaco.

• Data Platform Landing Zone: identity baseline, Transit Gateway, Site-to-Site VPN, Client VPN
• Terraform Enterprise and Vault Enterprise architecture
• Keycloak architecture for SSO integration (SAML & OIDC) across all core applications

• AWS EC2
• RDS
• Route 53
• ACM
• KMS
• ECS
• Terraform
• Vault
• GitLab
• Keycloak
• SSO

May 2022 — July 2022·Valenciennes

AWS cost and usage assessment for the Brazil and US entities.

• AWS Cost and Usage Assessment for Brazil and the United States
• Assessment of Vallourec applications hosted on AWS
• Development of the AWS usage optimization plan

• AWS
• Cost Explorer
• FinOps

January 2022 — April 2022·Colomiers

Supporting Safran Cabin and Safran Group in building their AWS Data Platforms.

• Support for building the Safran Cabin and Safran Group Data Platforms on AWS

• AWS

October 2021 — December 2021·Toulouse

Development of the Customer Line Execution System (CLES) and its data pipeline.

• Development of the CLES system and the CLES Dataset building pipeline in Skywise
• Design of the CLES data model
• PoC of an ingestion pipeline between the Skywise (Foundry) platform and the AWS-based CLES application

• AWS Glue
• S3
• IAM
• RDS
• CloudWatch
• EventBridge
• Lambda
• SQS
• Terraform
• Python
• Foundry

January 2021 — November 2021·Monaco

Sovereign cloud for the Government of Monaco and its critical infrastructure operators.

• Definition, design, implementation and deployment of the sovereign cloud
• PoC of a Cloud Management Platform and monitoring solution
• Customer Landing Zone and core foundation of the hosting infrastructure

• AWS Outposts
• Organizations
• Config Rules
• EKS
• ECS
• SSO
• RDS
• Kinesis
• Terraform Enterprise
• Vault
• CloudBolt
• Ansible
• Grafana
• InfluxDB
• Prometheus

October 2020 — March 2021·Lyon

Design of the META1 solution from PoC and alignment with the Roche Security Standard.

• Design of the META1 solution from the existing PoC
• Security improvements and alignment with the Roche Security Standard
• Design of the solution's CI/CD chain

• Route53
• CloudFront
• Cognito
• Amplify
• AppSync
• CMK/KMS
• S3
• IAM
• API Gateway
• DynamoDB
• Elasticsearch
• CodePipeline
• Sumologic
• Dome9

October 2020 — December 2020·Paris

Risk assessment of AXA services and applications hosted on AWS.

• Risk assessments of AXA services and applications hosted on AWS
• Implementation of an AWS Foundation Assurance Plan for the group

• AWS
• Risk Assessment
• Compliance

April 2019 — April 2020·Blagnac

Technical Leader on Skywise Developer Experience, designing a Massive Data Extractor for airlines.

• Technical Leader role on the DX/DA scope
• Definition, design, implementation and deployment of a Massive Data Extractor for airlines
• Architecture consulting and support for the DX team

• Lambda
• ECS
• S3
• SNS
• IAM
• KMS
• Step Functions
• CloudFront
• CloudFormation
• MobileSSO
• OneLogin
• Mulesoft
• Salesforce
• Foundry
• Jenkins
• SonarQube

December 2018 — March 2019·Blagnac

Definition of dedicated Ops solutions and EKS architecture for NavBlue applications.

• Definition of dedicated Ops solutions and validation PoCs
• AWS EKS (Kubernetes) architecture and infrastructure for NavBlue applications
• Infrastructure as Code to automate every new EKS environment and its tooling

• Terraform
• EKS
• EC2
• VPC
• RDS
• Lambda
• Route53
• ELB
• Kubernetes
• Grafana
• Prometheus
• Jenkins

October 2018 — March 2019·Blagnac

Monitoring solution for legacy data ingestion into Skywise.

• Definition and design of the monitoring solution
• Splunk dashboards for pipeline data health, both historical and real-time

• Foundry
• Splunk
• Legacy applications

January 2018 — July 2018·Toulouse

Definition of hybrid AWS/Azure cloud security best practices and target architecture.

• Promotion and support of cloud strategies and concepts across teams
• Definition of Security Best Practices for the hybrid AWS and Azure cloud
• Target architecture designs aligned with AF/KLM compliance requirements

• AWS
• Azure
• Hybrid Cloud
• IDaaS
• CASB

July 2012 — December 2017·Saint-Martin du Touch

Five and a half years designing the physical layer of new Airbus solutions and infrastructure, aligned with functional architecture and business SLAs.

• Led the technical design of new solutions per functional architecture and Business Service Level Requirements
• Alignment with Airbus standard middleware (VAX/VMS, MS SQL, DB2, AIX, Websphere, Tomcat, Oracle, Windows Server)
• Alignment with security policy and operational constraints

• J2EE
• .NET
• LDAP
• Unix/Solaris
• Websphere
• Tomcat
• Siteminder
• Kerberos
• Windchill
• AIX
• VMS
• ESX
• Active Directory
• Grid Computing

October 2011 — April 2012·Blagnac

Technical support for the ADOC Manager V3.1 project for Airbus.

• Analysis and design of a bulk SGML document import/export prototype
• Software architecture analysis for the application handover
• Evolution design, technical specifications and indexing system update

• Java 6
• J2EE 5
• Hibernate
• JBoss
• Spring 2.0
• Tomcat 5.5
• Oracle 11g
• Linux RH
• XML/SGML
• Maven
• ApacheMQ

April 2011 — December 2011·Blagnac

Infrastructure architecture for Corporate Functions and Security Solutions.

• Infrastructure architecture definition for Corporate Functions and Security Solutions
• Technical design of new solutions per functional architecture and business SLAs
• Definition of infrastructure components (server, storage, network) per Airbus standards

• J2EE
• .NET
• LDAP
• Unix/Solaris
• Websphere 6
• Siteminder
• Kerberos
• Windchill
• Active Directory

November 2007 — December 2010·Saint-Martin du Touch

Functional Design Activities architect for projects across engineering departments.

• Validation of application solution architecture across engineering projects
• Ensured consistency and compliance with Airbus standard infrastructure, integration rules and security
• Design-phase consulting and support, technical architecture workshops

• J2EE 1.4/5
• Hibernate
• Struts
• Spring
• .NET
• LDAP
• Unix/Solaris
• Tomcat
• Websphere 6
• Siteminder
• Alfresco

June 2006 — October 2007·Blagnac

Technical operations of the E-Technician application: PDA/WAP front office and web back office.

• Technical focal point for the application, operations management, monitoring and bug tracking
• Budgeting and development of updates: batches, Java components (Servlet, JSP), bug fixing, versioning
• Organization of technical and operational environments

• J2EE
• JSP
• XML/XSL
• AXIS
• WAP
• Web Services
• Jolt/Tuxedo
• Oracle 9i
• JMS
• MQ-Series
• Apache

2006 — December 2009·Toulouse

Platform design for the Toulouse agency's projects.

• Platform design for the agency's projects
• Cross-project technical support
• Creation and management of the agency's technical department

• J2EE
• PHP
• LemonLDAP
• Oracle

August 2005 — May 2006·Montpellier

Interfacing study between Habilinet and the W@C portal (Vignette).

• Study and technical document on WAC / Habilinet interfacing solutions after the Vignette migration
• Prototypes, unit, integration and workload tests
• Security assessment between Habilinet and the W@C portal

• ASP.NET
• COM+
• VB6
• C#
• .NET 1.2
• J2EE 1.4
• Portlet (JSR 168)
• SOAP
• SQL Server
• Vignette 7.2
• XML/XSL

June 2005 — August 2005·Nîmes

Integration of the BRL information system (Borneo).

• Integration of the Borneo information system
• Operations monitoring, update implementation and bug tracking

• Unix
• Tomcat 5
• Oracle 9i
• JSP
• J2EE 1.4
• Mantis

December 2004 — May 2005·Montpellier

Design and development of the BRL information system (Borneo).

• Component design and development, testing and integration
• Quartz (OpenSymphony) integration and integration manual

• Unix
• Tomcat 5
• Oracle 9i
• JSP
• J2EE 1.4
• JavaScript

April 2004 — May 2004·Saint-Denis

Support tooling for WebSphere 5.1 administration.

• Design and development of support tools for WebSphere 5.1 administration
• Java component wrapper scripts, unit and integration testing

• AIX
• Shell Script
• JACL
• J2EE 1.4
• Log4J
• Websphere 5.1