[nom]

Senior Full-Stack Engineer · DevOps

[e-mail] · [téléphone] · [lien]

PROFESSIONAL SUMMARY

Senior Full-Stack Engineer and Technical Lead with 8+ years building, securing and modernizing business-critical applications across full-stack and data-intensive systems. Strong in backend development (PHP — Laravel, Symfony, Laminas; Python) and modern frontend engineering with React, Next.js, Vue.js, Angular and TypeScript.

Hands-on with software architecture, application security (OWASP Top 10, Laravel hardening), SQL and data engineering, and DevOps (Docker, Kubernetes, GitLab/Jenkins CI/CD, Terraform/Ansible, SRE). Early and heavy adopter of AI-assisted engineering: I use Claude Code and the Anthropic Claude API to accelerate legacy modernization, automate testing and code review, and ship AI features into production products.

Core Competencies: Full-Stack Development · React · Next.js · Vue.js · TypeScript · Angular · Node.js · PHP (Laravel, Symfony, Laminas) ·

Python · REST APIs · Application Security & OWASP · Legacy Modernization · AI-Assisted Development (Claude Code, Claude API, MCP) · SQL

(MySQL, PostgreSQL, IBM DB2) · Docker · Kubernetes · GitLab CI/CD · Nexus · Kaniko · Terraform/Ansible · SRE · Agile/Scrum · Technical

Leadership

PROFESSIONAL EXPERIENCE

DOCAPOSTE · April 2024 – Present

Senior Software Engineer & DevOps Consultant — Legacy Modernization & Application Security

• Legacy modernization & backend engineering — modernized legacy platforms (PHP 5.6 / Zend / Laminas → PHP 8.x, Laravel / Symfony) within large-scale modernization projects, and developed the backend services and APIs behind them (authentication, user management, enterprise workflows).
• Laravel security architecture — hardened business-critical applications against the OWASP Top 10: authentication and authorization

[pièce d'identité]

SQL-injection prevention through Eloquent and parameterized queries, and rate limiting on public endpoints — implemented through custom middleware and middleware groups, so permission checks, request sanitization, IP filtering, throttling, security headers, request- ID injection and audit logging are enforced globally at the kernel and route-group level rather than duplicated in controllers.

• Allowlist-first controls & secure configuration — IP allowlists on admin and internal endpoints with blocklists for abusive addresses, allowlisted CORS origins and trusted proxies/hosts, MIME/extension allowlists on upload, Form Request allowlist validation, $fillable whitelisting against mass assignment, allowlisted redirect and webhook URLs, and JWT/session token blacklisting on logout and credential change; removed hardcoded credentials, centralized secrets management (environment isolation, encrypted variables, Vault) and enforced HTTPS, secure session and cookie flags and security headers (CSP, HSTS, X-Frame-Options).
• Security in the pipeline, compliance & accessibility — integrated SAST and dependency/container scanning into GitLab CI (SonarQube quality gates, composer audit, image vulnerability scanning), so security regressions block the merge instead of reaching production; led security-focused code reviews, implemented audit logging and traceability on sensitive workflows, and addressed GDPR (RGPD) and accessibility (RGAA) requirements on digital-trust applications.
• AI-assisted modernization (Claude Code) — used Claude Code to accelerate the legacy-to-modern migration: automated analysis and mapping of undocumented legacy code, generation of regression and unit tests before refactoring, large-scale refactors and framework upgrades, and AI-assisted code review of merge requests — shortening migration and review cycles while raising test coverage on legacy modules.
• AI tooling & standards — defined internal guidelines for safe AI-assisted development (prompt patterns, review checkpoints, no sensitive data in prompts) and set up project context files, custom commands and MCP connections so the team uses AI consistently.
• SQL, reporting & data pipelines — analyzed and optimized enterprise data flows across multiple business applications; designed and optimized SQL queries (MySQL, PostgreSQL) for data processing, reporting and workflow monitoring; built SQL-based reporting solutions and data-consistency checks for business-critical workflows; and designed Airflow workflows to schedule, monitor and automate data- processing tasks between enterprise applications.
• CI/CD & infrastructure automation — designed GitLab CI/CD pipeline stages to automate build, test and deployment: container images built with Kaniko, artifact push/pull to Nexus, code quality enforced with SonarQube, and Terraform and Ansible applied within CI/CD workflows.
• Reliability & stakeholder alignment — improved production reliability through SRE practices (monitoring, incident resolution and performance optimization), and aligned architecture decisions with business and technical stakeholders.

Tech Stack: PHP (Laravel, Symfony, Laminas), Vue.js, Docker, Kaniko, GitLab CI/CD, SonarQube, Nexus, MySQL, PostgreSQL, Terraform, Ansible, Airflow, Claude Code, Claude API, MCP, OWASP, Vault

ITS Consulting – GFP Technologies · Jan 2022 – April 2024

Senior Backend Engineer (PHP) — Legacy Migration, Database Migration & Modernization

• Developed and maintained insurance information systems (PHP) handling large volumes of business-critical data.
• PHP framework migration — took over and led the migration of multiple legacy projects from Zend Framework to Laminas, Laravel and Symfony, including the PHP 7.4 → 8 upgrade: incremental strangler-pattern migration, dependency-injection and routing rewrites, characterization tests before refactoring, and zero-downtime releases on production insurance systems.
• Database migration IBM DB2 → PostgreSQL — led the migration of business-critical insurance data from IBM DB2 (Linux / AS400) to PostgreSQL: schema and data-type mapping, conversion of constraints, indexes, sequences and stored procedures, ETL extraction/transform/load with row-count and checksum reconciliation, and dual-run validation before cutover to guarantee no data loss.
• Secure cloud database connectivity — connected Laravel and Symfony applications to the cloud-hosted PostgreSQL instance over TLS/SSL with certificate verification (sslmode=verify-full), private networking / VPN and IP allowlisting, least-privilege database roles per service, connection pooling, and credentials kept in environment isolation and a secrets vault rather than in source code.
• Data-layer refactoring — abstracted DB2-specific SQL behind Doctrine and Eloquent repositories, replaced native DB2 calls with parameterized queries, and rewrote reporting queries for PostgreSQL semantics (sequences, ILIKE, JSONB, window functions) while preserving existing business rules.
• Worked across complex Linux and IBM DB2 environments; handled data extraction, validation and troubleshooting with IBM DB2 and SQL, and wrote and optimized SQL queries for reporting and production support.
• Built and modernized web interfaces with Angular, React and TypeScript.
• Performed code reviews and wrote automated tests to improve code quality and maintainability.

Tech Stack: Backend — PHP (Zend, Laminas, Laravel, Symfony); Frontend — Angular, React, TypeScript; Databases — IBM DB2, PostgreSQL; Data migration — schema/type mapping, ETL, reconciliation, dual-run cutover; Security — TLS/SSL, VPN, IP allowlists, least-privilege roles, secrets vault;

Environment — Linux; Tools — Git, Jira, PHPUnit, Docker; Integrations — REST APIs

Web Dragon · Feb 2020 – Jan 2022

Technical Lead & Senior Full-Stack Engineer — SaaS Platforms

• Joined as Full-Stack Developer and promoted to Technical Lead, owning architecture and delivery of multiple SaaS web platforms.
• Designed and delivered scalable SaaS applications (gaming, quiz, social platforms).
• Built responsive SaaS frontends with React and Vue.js, focusing on reusable components and maintainability.
• Led a team of 5–10 developers across architecture decisions, sprint planning and code quality.
• Designed secure payment integrations (Stripe, HiPay APIs) for subscriptions, transactions and reporting — webhook signature verification, idempotency keys and PCI-conscious handling of payment data.
• Introduced Docker and Jenkins CI/CD, improving deployment automation and developer workflows.
• Improved scalability with background jobs and queuing systems for asynchronous processing.
• Strengthened production reliability through debugging, performance optimization and incident resolution (SRE).
• Produced architecture documentation and UML diagrams; gained exposure to AWS and Linux environments.

Tech Stack: Backend — PHP (Laravel, Symfony); Frontend — React, Vue.js; DevOps — Docker, Jenkins; Infrastructure — AWS, Linux; Integrations —

Stripe API, HiPay API; Database — MySQL

Forcap · Nov 2019 – Jan 2020

Functional Architect — Business & Data Analysis

• Contributed to the design of a national vocational-training information system, in collaboration with the European Union.
• Collected and analyzed business requirements from institutional stakeholders.
• Produced functional specifications, UML models and data-flow documentation.
• Defined the platform's functional architecture and designed prototypes and workflows for user validation.
• Applied SAP BusinessObjects / BO Designer and BI concepts (universes, joins, measures, filters) to reporting-oriented system design.

Tech Stack: UML, PostgreSQL, IBM DB2, Adobe XD, MySQL, BO Designer

Rejjess, OGFP, Florartis · Sep 2019 – Nov 2019

Full-Stack Developer — Odoo & Symfony, API Integrations

• Integrated Stripe with Odoo and Symfony for municipal service platforms.
• Automated dashboards, KPIs and ad-hoc reporting using WordPress back-ends.
• Delivered an e-commerce site with Prestashop/Odoo integration and built training tools for users.

Tech Stack: Odoo, Python, Prestashop, Symfony, Stripe, WordPress, Angular, MySQL, Git, Jira, PHPUnit, Unix shell, PHP

La Bible du VTC · Mar 2019 – Sep 2019

Backend Developer — PHP, Laravel & WordPress

• Developed and customized WordPress plugins to support platform-specific business features.
• Implemented backend services and APIs to connect the website with internal management tools.
• Built custom modules for booking management, driver data and reporting workflows.

Tech Stack: WordPress, PHP, REST APIs, MySQL

A2HS-TEK · Jan 2018 – Jan 2019

Full-Stack Developer — Java & PHP

• Built enterprise applications and a recruitment management solution using Java and PHP (Symfony, jQuery).
• Conducted full-cycle development and testing with a focus on maintainability and performance.

KEY PROJECTS

Cue-Coders — SaaS ERP Platform

Software Architect & Lead Full-Stack Developer — Architecture, End-to-End Development & Business Analysis

• Audit & target architecture — as architect and transformation manager, ran a cross-department audit: gathered and analyzed data, interviewed every business unit and mapped existing operations; then defined target procedures and the application & functional architecture, translating business needs into data models, business rules and specifications.
• Modular SaaS ERP design & roadmap — designed a modular SaaS ERP (HR, Moroccan payroll / CNSS, accounting, invoicing, fleet, workflow validation), owning data models, module boundaries and REST API design; defined the product roadmap, prioritized modules and led technical design.
• Full-stack development (end to end) — built the backend in PHP / Laravel / MySQL — payroll engine with Moroccan CNSS rules, accounting and invoicing, fleet, multi-step workflow validation, REST APIs, queues and background jobs — and the Vue.js front-end: reusable component library, role-aware UI, module dashboards and data-entry screens.
• Domain-driven testing & functional validation — built the test suites (PHPUnit, Jest, Codeception) with cases derived from business rules rather than the specification alone: payroll and CNSS calculation edge cases, proration and back-pay, accounting entries and invoicing, and workflow approval paths — catching business-rule violations that generic tests would have missed.
• Security architecture — access control, isolation & authentication — designed the security model around sensitive HR and payroll data: role- and permission-based access control (Laravel Policies, Gates, Spatie Permission), strict multi-tenant isolation with global scopes to prevent cross-tenant leakage, and a layered middleware pipeline (tenant resolution, authentication, permission and subscription checks, throttling, input sanitization, security headers, audit logging) applied through route groups; allowlist-first controls throughout ($fillable, CORS origins, trusted hosts, webhook sources, MIME/extension, admin and payroll IP) with token/session blacklisting and revocation;

Sanctum / JWT authentication, two-factor auth, session and device management, API rate limiting, signed URLs and webhook verification.

• Data protection & secure coding — encryption at rest for sensitive payroll and identity fields, immutable audit trails on financial and HR operations, soft deletes with recovery workflows, GDPR-aligned data retention and export/erasure handling; centralized Form Request validation, mass-assignment protection, SQL-injection, XSS and CSRF hardening, secure file upload and storage (MIME/size validation, non-public disks), and dependency auditing in CI.
• Claude integration (product features) — integrated the Anthropic Claude API into the platform to deliver AI-powered features: document and CV parsing into structured data, natural-language querying of HR and payroll reports, automated summarization of workflow histories, and assistive drafting of contracts and job descriptions — with structured JSON outputs, prompt templating, retries and cost/token monitoring.
• Business collaboration & production support — worked directly with the payroll and accounting teams: ran working sessions, reproduced and diagnosed the calculation and process defects they reported, fixed them and locked the corrected behaviour in with regression tests; delivered client training sessions and product walkthroughs, onboarding end users.

Tech Stack: PHP, Laravel, MySQL, REST APIs, Vue.js, Claude API; SaaS multi-tenant architecture, RBAC, encryption, audit logging, OWASP, data modeling, workflow automation, testing (PHPUnit, Jest, Codeception)

Human Jobs — SaaS Recruitment Platform

Architect & Lead Developer — HRIS (SIRH)

• Architected and developed a SaaS HRIS (SIRH) covering recruitment, job matching, candidate management and workflow automation.
• Built data-driven recruitment/matching using PHP (Laravel, Symfony) and Python; integrated AI APIs for resume parsing and matching.
• Developed candidate management, reporting and operational dashboards; orchestrated recurring data pipelines with Airflow.
• Integrated the platform with Odoo HR / Payroll modules; drove functional and technical design, architecture decisions and code reviews.

Tech Stack: PHP (Laravel, Symfony), Python, Vue.js, Odoo (HR, Employee, Payroll), Airflow, LLM/AI APIs, resume parsing, workflow automation

Parrazzo AG

Technical Lead — Legacy Modernization & DevOps

• Led the maintenance and evolution of a legacy business application (PHP, Perl): drove technical decisions, data modeling and code quality.
• Implemented CI/CD and Dockerized environments, server management and monitoring (Grafana, SonarQube), and infrastructure automation (Ansible).

Tech Stack: PHP, Perl, SQL, MySQL, Docker, CI/CD, Ansible, SonarQube, Grafana, Jira

Rev Media Group

Full-Stack Developer — CRM Platform

• Built full-stack features for a large-scale CRM application — backend in PHP / Python, front-end in Vue.js / Angular.
• Developed reusable UI components and REST API integrations, focusing on scalability and performance.

Tech Stack: PHP, Python, Vue.js, Angular, TypeScript, REST APIs, Git, Jira

PlugNotes — Note-Taking & Productivity Application

Full-Stack Developer — Go (Backend) / React.js (Frontend)

• Go REST API — built the backend as a Go service exposing a REST API for notes, tags, folders and search — structured into handler, service and repository layers, with an idiomatic net/http router (Gin), context-based request timeouts and graceful shutdown.
• Concurrency — used goroutines and channels to handle background work off the request path (full-text search indexing, attachment processing, scheduled reminders), with worker pools and context cancellation to bound resource usage under load.
• Data & persistence — PostgreSQL access with prepared statements and migrations; typed models and explicit error handling; database transactions around multi-step note/tag updates.
• Auth & security — JWT authentication with refresh tokens, middleware chain for auth, request logging, rate limiting and CORS allowlisting; bcrypt password hashing and per-user data scoping on every query.
• Testing & delivery — table-driven unit tests and httptest-based handler tests in Go; compiled to a [information personnelle] static binary and shipped in a minimal multi-stage Docker image.
• React frontend — React.js SPA in TypeScript with reusable UI components, optimistic updates, debounced search and offline-tolerant local caching; covered by Jest and React Testing Library.

Tech Stack: Go (Gin, goroutines, channels, net/http), PostgreSQL, JWT, Docker; React.js, TypeScript, JavaScript, HTML, CSS, Jest, React Testing Library

NFC Time & Attendance Platform — Workforce Management SaaS

Full-Stack Developer — Laravel & Node.js, Real-Time Systems

• Built a cloud-based time & attendance platform with NFC badge check-in/out across multiple client sites, real-time tracking and payroll- ready exports.
• Developed backend services combining Laravel (PHP) for core business logic, authentication and payroll rules with Node.js / TypeScript for the real-time layer (NFC event ingestion, WebSocket live dashboards).
• Designed internal and external REST APIs (authentication, versioning, webhooks) to expose attendance data to partner systems.
• Integrated Stripe for subscription billing and payments, including webhook handling, idempotent processing and invoicing.
• Built a Node.js data-sync service pushing attendance records to external CRMs (HubSpot, Zoho) with queue-based retries and rate-limit handling.
• Delivered responsive Vue.js dashboards; containerized with Docker and integrated into CI/CD.

Tech Stack: Laravel (PHP), Node.js, TypeScript, Vue.js, MySQL/PostgreSQL, Redis, Stripe API, HubSpot/Zoho APIs, REST APIs, WebSockets, Docker, CI/CD

RevPanda

Backend Engineer — WordPress & REST API Integrations

• Developed and maintained WordPress backend features, custom plugins and REST API integrations for e-gaming platforms.

Tech Stack: WordPress, PHP, MySQL, REST APIs, Git, Jira

CERTIFICATIONS & TRAINING

• Claude Code — AI-Assisted Software Engineering: agentic coding workflows, project context (CLAUDE.md), custom commands and subagents, MCP (Model Context Protocol) server integration, AI-assisted refactoring, test generation and code review on legacy codebases.
• Building with the Anthropic Claude API: prompt engineering, structured JSON outputs, tool use / function calling, streaming, context management, RAG patterns, token and cost optimization, and safe integration of LLMs into production applications.
• AI for Legacy Modernization: applying LLMs to codebase analysis, characterization testing, incremental refactoring and framework upgrades.
• Stripe Integration Expertise: E-Commerce Payments Using Stripe and Node.js.
• Ansible Automation for Red Hat Enterprise Linux (in progress).
• Infrastructure as Code — Terraform on Google Cloud (in progress).
• Web Application Security / OWASP Top 10 (in progress).

EDUCATION

• 2015 – 2018 — Engineer's Degree, Diplôme d'Ingénieur (BAC+5), Option: Software Engineering.
• 2012 – 2014 — Specialized diploma in IT development (DEUG, BAC+2).
• 2011 – 2012 — Baccalaureate, Option: Sciences – Physics.

SKILLS

AI-Assisted Engineering & LLM Integration: Claude Code (agentic development, CLAUDE.md project context, custom commands, subagents), Anthropic Claude API, MCP (Model Context Protocol), prompt engineering, structured outputs, tool use / function calling, RAG, embeddings

& vector search (pgvector), AI-assisted code review, test generation and legacy refactoring, GitHub Copilot, Cursor; AI APIs (Google AI, IBM

Watson, ML services).

[pièce d'identité]

middleware & middleware groups, whitelisting/blacklisting strategies (IP allow/deny lists, CORS & trusted-host allowlists, MIME/extension allowlists, $fillable mass-assignment whitelisting, token/session blacklisting & revocation), RBAC & multi-tenant isolation, CSRF/XSS/SQLi prevention, secure file uploads, encryption at rest & in transit, secrets management (Vault), security headers (CSP, HSTS), audit logging, GDPR/RGPD, SAST & dependency scanning (SonarQube, composer audit, Trivy/Snyk).

Functional Analysis & Requirements: Requirements gathering and analysis, cahier des charges, functional specifications, UML / Merise modeling, prototyping and user validation.

Architecture & Design: Application & functional architecture, data modeling, REST API design, definition of target procedures and processes.

Functional Domains: Payments & banking flows, HR & Moroccan payroll (CNSS), accounting & invoicing, insurance information systems.

Compliance: GDPR (RGPD), accessibility (RGAA).

Reporting, BI & Data: SQL, dashboards, KPIs, data-quality checks, SAP BusinessObjects / BO Designer (Power BI equivalent — fast ramp-up).

User Support: Functional assistance, training and onboarding, request tracking and incident resolution; tracking tool: Jira (fast ramp-up on Salesforce / ServiceNow).

DevOps & CI/CD: GitLab CI/CD, Jenkins, GitHub Actions, Docker, Kaniko, Kubernetes, Helm, Nexus, Terraform, Ansible; pipeline design (build, test, scan, deploy), server management, automation.

Observability & SRE: Prometheus, Grafana, SonarQube, centralized logging (ELK), alerting, incident response, production debugging, performance optimization.

Databases, Modeling & Analytics: Design, optimization and administration of relational and NoSQL databases; data modeling, reporting, integration and business-process analysis. MySQL, PostgreSQL, MongoDB, Oracle 12c, IBM DB2, SQL Server, Redis.

Data Engineering: Apache Airflow, ETL/ELT pipelines, data orchestration; SAP BusinessObjects / BO Designer (universes, joins, measures, filters).

API Integration & Web Services: Scalable, secure REST APIs; OpenAPI/Swagger; Stripe, HiPay and PayPal payment integrations; webhooks, OAuth2, JWT.

Testing & QA: PHPUnit, Pest, Jest, Codeception, Cypress/Playwright; unit, integration, API and functional testing, TDD.

Software Architecture & Principles: Client-server and modular monolith architectures, MVC, SOLID, design patterns, DDD basics, scalable web design; strong OOP across PHP and Python, concurrent programming in Go (goroutines, channels, worker pools), with working Java experience.

Modeling & Methodologies: Functional and technical analysis with Merise and UML; requirements engineering; Agile/Scrum, 2TUP; sprint execution and team coordination.

Tools: Git, GitLab, GitHub, Jira, Confluence, Postman, Docker Desktop, WSL, Linux/Unix shell, Figma/Adobe XD.

Languages: French (fluent), English (professional), Arabic (native).

PROGRAMMING LANGUAGES & TECHNOLOGIES

Front-End: React.js, Next.js, Vue.js, Angular, TypeScript, JavaScript, HTML, CSS, Tailwind, Bootstrap, jQuery.

Back-End: PHP, Python, Go (Golang), Java, Node.js, Perl.

Frameworks: Laravel, Symfony, Laminas, Zend, Gin (Go), Ionic, React Native, Spring Boot, FastAPI.

CMS, ERP & CRM: Odoo, WordPress, Prestashop, Shopify, HubSpot, Zoho.

Payment & API Integrations: Stripe, HiPay, PayPal.

Databases: MySQL, MariaDB, PostgreSQL, MongoDB, Oracle 12c, IBM DB2, Redis, PL/SQL, JSON.

INTERNSHIPS

• A2HS-TEK (Jan 2018 – Jan 2019) — Full-Stack Developer, end-of-studies project: recruitment management solution. PHP, Symfony, jQuery, MySQL.
• WEBHELP (Jul – Sep 2017) — Full-Stack Developer: HR management application; specifications and UML design. PHP, Laravel, MySQL.
• ARAMOBILE (Mar – Jul 2017) — Full-Stack Developer: hybrid mobile app for announcements and events. Ionic, AngularJS, Node.js.
• Nokia (Jul – Sep 2016) — Full-Stack Developer: web application for outsourcing-team management. PHP, Symfony, MySQL.
• Commune de Salé (Jul – Aug 2015) — WordPress Developer: City Hall website. PHP, WordPress, MySQL.
• AIDMO (Jul – Aug 2014) — Graphic Design & Front-End Developer. Adobe Director.
• Direction des équipements publics, Rabat (Jul – Aug 2013) — PHP Developer: public-works contracts web application. PHP, HTML, CSS, MySQL.