To get this CV as a PDF: print this page (Cmd/Ctrl + P) and choose "Save as PDF". The print layout is built for it — white background, no navigation. There is deliberately no separate PDF file to download: that would be a second document to maintain, and it would eventually diverge from this one.

Jonathan Joly

Cybersecurity & Cloud — designing, securing and running hybrid infrastructure

Summary

Head of Information Systems on a work-study contract and MSc student in Cybersecurity & Cloud. I design and operate infrastructure I can defend: Active Directory hardening and internal PKI on the corporate side, Kubernetes with GitOps on my own. Three applications of my own design run in production on a cluster I administer — jjoly.eu is one of them, and displays its own deployed versions.

Experience

Head of Information Systems (apprenticeship)

engIT — Valbonne, France · 2025 – present

Designed and deployed a hybrid on-premise ↔ cloud architecture.
Hardened security policies: VLAN segmentation, internal PKI, CrowdStrike EDR, UFW/iptables firewalling.
Recurring vulnerability assessments (OpenVAS, Nessus), with triage and remediation of critical findings.
CI/CD pipelines (GitHub Actions, GitLab CI) and Docker containerisation.
Prometheus/Grafana monitoring, 3-2-1 backups, a documented and rehearsed disaster recovery plan.
IS governance: centralised documentation, budget management, reporting to senior management, training teams.

Systems Administrator & Support

engIT — Valbonne, France · 2022 – 2024

Windows Server administration: Active Directory, hardening GPOs, certificate management.
Secured remote access (Fortinet VPN/firewall), permission audits.
Linux (Debian) maintenance, Proxmox virtualisation.
Bash/PowerShell automation, end-user support and training.

Personal projects in production

k3s GitOps infrastructure — single-node Kubernetes within 1.8 GB of RAM: Flux CD, SOPS/age secrets versioned and encrypted in Git, cert-manager, NetworkPolicies, read-only non-root containers. The Kubernetes API is not exposed; administration goes through an SSH tunnel. case study
Frigo Adaptatif — self-hosted food-waste application. Single-binary Go backend (~200 MB), SQLite in pure Go, PWA, Web Push, GDPR compliance by design, TOTP 2FA. AI is optional and clearly signposted; the decision logic stays deterministic. case study · fridge.jjoly.eu
Coach Adaptatif — self-hosted training coach implementing validated sport-science models (Banister, Bayesian Kalman filter, volume landmarks). Go, MariaDB, mandatory 2FA. case study · coach.jjoly.eu

Skills

Security: AD/GPO hardening · internal PKI · TLS · VLAN segmentation · EDR (CrowdStrike) · Fortinet VPN/firewall · OpenVAS/Nessus assessments · CSP and application hardening
Cloud & containers: Docker · Kubernetes (k3s) · GitOps (Flux CD) · GitHub Actions · GitLab CI · AWS · OVH Cloud · Azure AD · SOPS/age encrypted secrets
Monitoring & resilience: Prometheus · Grafana · Node Exporter · 3-2-1 backups (Burp) · disaster recovery planning and restore testing · Proxmox (clustering, HA)
Systems & development: Windows Server · Debian Linux · UFW/iptables · Go · Bash · PowerShell · Python · SQL · IS documentation and governance (BookStack)

Education

2025 – … · MSc Cybersecurity & Cloud — IPSSI Nice
2024 – 2025 · BSc Network Administration & SecOps, DevOps track — IPSSI Nice
2022 – 2024 · Two-year technical degree in Computer Science, work-study — IUT Sophia Antipolis
2023 · Google Cloud Certified — Cloud Digital Leader
2019 – 2022 · French Baccalauréat, awarded with merit

Languages

French (native) · English (professional working proficiency) — this CV is also available in French.

← back home