VMware expertise
Advanced vSphere administration (7.0 & 8.0) and management of clusters stretched across two datacentres (dual-site) for full high availability.
Details
From datacentres to identities, from threat detection to automation: here, area by area, is what I run every day in production, what I study in depth, and what I build at home in my home lab.
Advanced vSphere administration (7.0 & 8.0) and management of clusters stretched across two datacentres (dual-site) for full high availability.
Configuration, expansion and monitoring of vSAN clusters. Strategic deployment of witness servers for resilient virtualised storage.
Full hardware lifecycle: physical installation, racking, structured cabling and software provisioning of ESXi servers.
Management of complex domains, setup of trust relationships and streamlined administration with ADManager Plus.
Full tenant governance, MFA rollout, conditional access policies and identity synchronisation (AD Connect).
Command of critical roles (GPO, DFS, DNS, DHCP) and patch management campaigns with WSUS and Ivanti.
Administration of SentinelOne EDR and use of the Sekoia XDR platform for event correlation and incident response.
Continuous scanning with Cyberwatch, rigorous tracking of the patch lifecycle and enforcement of hardening standards.
Configuration and updates of Artica Proxy, and administration of F5 BIG-IP (nodes, pools and custom iRules).
Deployment and hardening of Debian, Ubuntu and Rocky in production environments.
Configuration of web servers (Nginx, Apache) and file servers (Samba), with advanced permission management.
Log analysis, repository management and automated system updates. Monitoring with Servicenav / EV Observe.
Technical lead of the SharePoint migration for 1,500 users, including planning, data transfer and change management.
Active contribution to merging the critical infrastructure of the cities of Pierrefitte and Saint-Denis (unified directories and resources).
Resource optimisation with Docker and systematic technical documentation (architecture and operations documents) to keep systems sustainable.
The projects and architectures presented on this site have been anonymised or altered to respect the confidentiality and security policies of partner organisations. No sensitive or critical data is publicly disclosed.
Design of virtualised environments (vSphere, vSAN, Proxmox) and deployment of multi-cloud architectures (AWS, Azure, GCP). Study of distributed storage (Ceph) and hyperconvergence (Nutanix).
Zero Trust strategies and system hardening (Linux LPIC / Red Hat, Windows Server). Preparing for the Palo Alto (PCNSA) and Juniper (JNCIA) certifications.
Industrialisation through Infrastructure as Code (Terraform, Ansible) and container orchestration (Kubernetes, Docker). GitLab CI/CD pipelines.
Hardware
A physical infrastructure built on two Dell PowerEdge servers, with the hypervisor configured to simulate enterprise scenarios (HA, live migration).
Web & access
Fully self-hosted portfolio, alexandre-faye.fr, on a dedicated mini PC. LAMP stack management and performance tuning. A personal VPN tunnel secures remote access to my infrastructure and encrypts my browsing traffic.
Media & storage
Plex media server with automated library management and hardware transcoding. Persistent data volumes and backup strategies for my critical services.
Services
Deployment and management of a container stack including Wiki.js, Nextcloud (private cloud) and Erugo (secure file transfer).
Contact / 05
An architecture to design, a project to lead, an infrastructure to harden?
Get in touch.