Sébastien Wenske
Systems Engineer
Île-de-France, France · sebastien@wenske.fr · linkedin.com/in/sebastien-wenske · github.com/swenske
Profile
In IT operations since 1999: telecom operators, a card-payment platform under PCI-DSS, health-data hosting, e-commerce. Computing is my passion as much as my job: I am no expert in any one field, but I have a hand in everything, from systems, networks and telecom to email, security and code. At home, a lab that serves public Linux and TeX mirrors, a Syncthing relay and a webradio, and open-source projects such as Janus, an immutable Linux for HAProxy load balancers.
Experience
Systems Engineer, VeepeeTech
July 2020 - present · Paris
Tech entity of Veepee, the European online flash-sales group.
- run and evolve bare-metal Linux servers (Debian), configured with Ansible
- build the machine images of our private cloud
- automate tape backups
- write Ansible roles and test them with Molecule
- CI/CD automation
- internal tooling
- on-call duty
Security Officer / Sysadmin, Implicity
November 2019 - July 2020 · Paris area
Independent consultant
September 2015 - July 2020
- Airtag / Morpho / Idemia: production support and maintenance
- Hibox: web hosting
- Audiologys: remote networks, private cloud
- Beloa: security audit and advice
- Nikolsen, HorseCom: internal networks
- VTS: Synology integration (file server and VPN)
- Implicity: health-data hosting (HADS) infrastructure on OVH cloud, internal network
PCI-DSS Systems and Network Administrator, Dalenys
October 2014 - November 2019 · Levallois-Perret
Card-payment production under the PCI-DSS standard:
- keep the platform available 100% of the time
- evolve it to current technology and security standards
- installation and deployment
- maintenance of the fleet (300+ servers, virtual and physical): hardening and monitoring
- production releases of the in-house software (PHP)
- backups
- since December 2018: compliance-check tools for PCI-DSS, written in Python and put in place; PCI-DSS audits
Debian, OpenBSD, VMware, Cisco, Puppet, Nginx, Bareos, HAProxy, PF, Keepalived, TLS, PKI, MySQL, Python
Systems, Network and Telecom Administrator, Airtag
April 2011 - September 2014 · Châtillon
- complete redesign of the network, logical and physical
- dynamic routing between sites with OSPF
- migration of the whole user environment: directory, email, intranet
- anti-spam built on open-source tools
- telephony moved to VoIP
- move of the head office
Systems and Network Administrator, 118 218 Le Numéro
June 2007 - March 2011 · Paris
Operations Analyst, CARAC
May 2006 - June 2007 · Neuilly-sur-Seine
UNIX Operations Analyst, Sogeti
2001 - 2006 · for France Télécom Mobile, Orange, 9 Telecom and Cegetel
Technician, Netquartz
2000 - 2001 · Nanterre
Technician, ACEB
June - September 1999
Open source and home lab
- Janus: immutable Linux for HAProxy load balancers
- gotochanger: virtual tape library for backup software tests
- gigaset-directory: online phonebook for Gigaset DECT base stations
- sw-servers.net: public Arch Linux, CTAN and apt mirrors, a Syncthing relay in the public pool, a webradio
Skills
- Systems
- Debian, OpenBSD, KVM, VMware
- Networks
- network administration, Cisco, MikroTik, OSPF, PF, HAProxy, Keepalived, DNS, VPN, VoIP
- Security
- PCI-DSS (audits, compliance tooling), hardening, TLS, PKI, anti-spam
- Services
- Nginx, MySQL, Bareos
- Monitoring
- Prometheus
- Automation
- Ansible, Molecule, Puppet, CI/CD pipelines
- Code
- Go, Python
- Languages
- French (native), English (B2.1)
Education
Self-taught.