// cybersecurity & cloud apprentice
Jonathan Joly
I design, secure and run hybrid infrastructure.
Head of Information Systems on a work-study contract, and Master's student in Cybersecurity & Cloud. From Active Directory hardening to GitOps on Kubernetes, I build systems I can defend — and I put them into production, like this site.
skills
🛡Security
- Active Directory / GPO hardening
- Internal PKI, SSL/TLS (Let's Encrypt)
- VLAN network segmentation
- Vulnerability assessments (OpenVAS, Nessus)
- EDR (CrowdStrike), Fortinet VPN/firewall
☁Cloud & Containers
- Docker, Kubernetes (k3s), GitOps (Flux CD)
- CI/CD: GitHub Actions, GitLab CI
- AWS, OVH Cloud, Azure AD
- Encrypted secrets (SOPS/age)
📡Monitoring & Resilience
- Prometheus, Grafana, Node Exporter
- 3-2-1 backup strategy (Burp)
- Disaster recovery plan & regular restore tests
- Proxmox: clustering & high availability
⌨Systems & Scripting
- Windows Server (AD, GPO, PKI)
- Linux (Debian), UFW / iptables
- Bash, PowerShell, Python, SQL
- IS documentation & governance (BookStack)
experience
Head of Information Systems (apprenticeship)
engIT — Valbonne, France
- Designed and deployed a hybrid on-premise ↔ cloud architecture
- Hardened security policies: VLANs, internal PKI, CrowdStrike EDR, UFW/iptables firewalling
- Ran vulnerability assessments (OpenVAS/Nessus) and remediated critical findings
- Built CI/CD pipelines (GitHub Actions, GitLab CI) and containerised workloads
- Prometheus/Grafana monitoring, 3-2-1 backups, tested disaster recovery plan
- IS governance: centralised documentation, budget, reporting to management
Systems Administrator & Support
engIT — Valbonne, France
- Windows Server administration: AD, hardening GPOs, certificates
- Secured remote access (Fortinet VPN/firewall), audited permissions
- Linux (Debian) maintenance, Proxmox virtualisation
- Bash/PowerShell automation, end-user training
Academic background
- 2025+ · MSc Cybersecurity & Cloud — IPSSI Nice
- 2024-2025 · BSc Network Administration & SecOps, DevOps track — IPSSI Nice
- 2022-2024 · Two-year technical degree in Computer Science (work-study) — IUT Sophia Antipolis
- 2023 · Google Cloud Certified — Cloud Digital Leader
- 2019-2022 · French Baccalauréat, awarded with merit
projects
Frigo Adaptatif
Self-hosted food-waste tracker: fridge inventory (barcode, photo, receipt), fully local meal planning, run-out forecasting, cost & seasonality, guests & dietary requirements. AI optional and clearly labelled. Single-binary Go backend, PWA, GDPR by design.
Coach Adaptatif
Self-hosted strength-training coach that models physiology in real time (Banister model, Kalman filter, MEV/MRV volume landmarks). Single-binary Go backend, GDPR by design, mandatory 2FA.
k3s GitOps infrastructure
The platform serving this page: single-node Kubernetes tuned for 1.8 GB of RAM, Flux CD, SOPS/age encrypted secrets, cert-manager, NetworkPolicies, full CI/CD — push to main means deploy.
Securing a corporate IS
End-to-end modernisation of a hybrid infrastructure: internal PKI, EDR, VLAN segmentation, disaster recovery, monitoring and 3-2-1 backups. Delivered at work, presented in anonymised form.
Verifiable
| Service | Version in production | At last build |
|---|---|---|
| Frigo Adaptatif | v3.9.0 |
returned 200 |
| Coach Adaptatif | v0.1.0 |
returned 200 |
| jjoly.eu | sha-af5a4b3 |
returned 200 |
contact
Apprenticeship, collaboration, or just an infra/security question — my inbox is open.
The technical notes are written in French and not machine-translated here: a stale translation would be worse than none. The stack write-up and the case studies are available in English. Happy to walk through the notes in English too.