To get this CV as a PDF: print this page (Cmd/Ctrl + P) and choose "Save as PDF". The print layout is built for it — white background, no navigation. There is deliberately no separate PDF file to download: that would be a second document to maintain, and it would eventually diverge from this one.

Jonathan Joly

Cybersecurity & Cloud — designing, securing and running hybrid infrastructure

Timeline · 2019 → todayPick a period to see its details.

Education

Work

Summary

Cloud Cybersecurity Engineer at Saint-Gobain (Group Digital & IT International) and MSc student in Cybersecurity & Cloud. I design and operate infrastructure I can defend: Active Directory hardening and internal PKI on the corporate side, Kubernetes with GitOps on my own. Three applications of my own design run in production on a cluster I administer — jjoly.eu is one of them, and displays its own deployed versions.

Experience

Cloud Cybersecurity Engineer (work-study)

Saint-Gobain, Group Digital & IT International — Paris, France · September 2026 – present

Day-to-day monitoring of the group's cloud environments against internal cybersecurity policies.
Operating and following up the group's cloud security tooling, supporting the existing security teams.
Automation and infrastructure as code: Terraform, Ansible, GitHub Actions pipelines.
Scope: the entire group, Azure environments.

Head of Information Systems (apprenticeship)

engIT — Valbonne, France · 2025 – 2026

Designed and deployed a hybrid on-premise ↔ cloud architecture.
Hardened security policies: VLAN segmentation, internal PKI, CrowdStrike EDR, UFW/iptables firewalling.
Recurring vulnerability assessments (OpenVAS, Nessus), with triage and remediation of critical findings.
CI/CD pipelines (GitHub Actions, GitLab CI) and Docker containerisation.
Prometheus/Grafana monitoring, 3-2-1 backups, a documented and rehearsed disaster recovery plan.
IS governance: centralised documentation, budget management, reporting to senior management, training teams.

Systems & Network Administrator

engIT — Valbonne, France · 2022 – 2025

Windows Server administration: Active Directory, hardening GPOs, certificate management.
Secured remote access (Fortinet VPN/firewall), permission audits.
Linux (Debian) maintenance, Proxmox virtualisation.
Bash/PowerShell automation, end-user support and training.

Personal projects

k3s GitOps infrastructure — single-node Kubernetes within 1.8 GB of RAM: Flux CD, SOPS/age secrets versioned and encrypted in Git, cert-manager, NetworkPolicies, read-only non-root containers. The Kubernetes API is not exposed; administration goes through an SSH tunnel. case study
Frigo Adaptatif — self-hosted food-waste application. Single-binary Go backend (~200 MB), SQLite in pure Go, PWA, Web Push, GDPR compliance by design, TOTP 2FA. AI is optional and clearly signposted; the decision logic stays deterministic. case study · fridge.jjoly.eu
Coach Adaptatif — self-hosted training coach implementing validated sport-science models (Banister, Bayesian Kalman filter, volume landmarks). Go, MariaDB, mandatory 2FA. case study · coach.jjoly.eu
Agent Cockpit — a local-first AI agent orchestrator built as a Mac app (Tauri, React, TypeScript): task queue, one isolated git worktree per task, explicit permission scope, mandatory human approval before any execution. 148 tests, 13 roles. case study

Skills

Security: AD/GPO hardening · internal PKI · TLS · VLAN segmentation · EDR (CrowdStrike) · Fortinet VPN/firewall · OpenVAS/Nessus assessments · CSP and application hardening
Cloud & containers: Docker · Kubernetes (k3s) · GitOps (Flux CD) · GitHub Actions · GitLab CI · Azure · AWS · OVH Cloud · Terraform · Ansible · SOPS/age encrypted secrets
Monitoring & resilience: Prometheus · Grafana · Node Exporter · 3-2-1 backups (Burp) · disaster recovery planning and restore testing · Proxmox (clustering, HA)
Systems & development: Windows Server · Debian Linux · UFW/iptables · Go · Bash · PowerShell · Python · SQL · IS documentation and governance (BookStack)

Education

2025 – … · MSc Cybersecurity & Cloud — IPSSI Nice
2024 – 2025 · BSc Network Administration & SecOps, DevOps track — IPSSI Nice
2022 – 2024 · Two-year technical degree in Computer Science, work-study — IUT Sophia Antipolis
2023 · Google Cloud Certified — Cloud Digital Leader
2019 – 2022 · French Baccalauréat, awarded with merit

Languages

French (native) · English (professional working proficiency) — this CV is also available in French.

← back home