youssef.atik

Contributed to deliver a cost-effective cloud-native architecture for the new offer-based platform based on server-less standards on AWS. Delivered an Enterprise strategy and architecture to solve for the IAM needs of multiple business initiatives within Altus Group reducing the cost overhead and helping to comply with security standards. Contributed to evolve an API driven platform bringing multiple market leading products and applications together in the commercial real state industry. Architecting the core of a cloud based enterprise platform as part of a Web/SaaS transition strategy to expand Altus Cloud platform. Missions and achievements: • Led the project to replace the existing IAM and API management platforms. Performed the due diligence (w/ Gartner support) to evaluate top leading products with weighted criteria, and produced assessment results and recommendation to senior managers for decision making • Contributed to architect the new Altus Performance Platform in form of multiple Package Business Capabili- ties (PBCs) allowing flexibility, agility and innovation through design • Designed for Altus Enterprise IAM Strategy Architecture to meet the overall IAM requirements across Altus systems (e.g SSO, Conditional access enforcement, PI Management, Federation with customers) • Drove the IAM standards work-stream in join-effort with the Security team to establish the strategy for security hardening (Single Sign out, Password hardening, MFA enablement, Conditional access policies) • Collaborated to document and advocate the Architecture principles and standards and help the organisation to understand and follow them • Spearhead the technology trajectory by doing progressive research and prototyping cutting-edge technologies • Contributed to build and adopt an Architecture Operating Model to manage architecture deliverables, priority, and capacity to align architect support for Innovation and PMT processes (R2S / R2P stages) • Advocated for a set of API Design standards to foster API collaboration and standardisation across multiple teams and accelerate team’s design process while enforcing quality and style consistency • Supported Engineering Build process, SDLC with architecture design, oversight and technical leadership Technical environment: AWS Services: EC2, ALB, ECS, Lambda, API Gateway, Cognito, SNS, SQS, Event Bridge, SAM Identity & Access Management: SAML, OAuth2/Open ID Connect, SCIM, Azure AD B2B & B2C, WSO2 IDS, ADFS, Okta, CloudEntity API Management & Integration: WSO2 API Gateway, Swagger Hub, OpenAPI 3, RabbitMQ Monitoring & Logs: CloudWatch Logs/Alarm, Azure Monitor, DataDog SDLC: Nexus Repository Manager, Nexus IQ, Jenkins, AWS Code Build/Deploy/Pipeline Methodology and Design: Scrum, Domain-Driven Design, Bounded Context Canvas, UML, C4 model, BPC (Packaged Business Capabilities), Confluence/Gliffy, Azure DevOps (TFS)

Establishment of an IAM platform to manage the governance of identities, and provide authentication and access control features to On-Premise and Cloud-based applications. The platform enables to securely expose business capabilities for customers and partners, it also allows them to self-manage their users and permissions. Missions and achievements: • Led the Architecture work-stream to ensure software and technical architecture deliverables are provided • Engaged as SME liaising with the different stakeholders (Cloud provider, IBM Architects, SOC team, Front-end editor and the Product managers) • Designed for the integration of the API Gateway with the IAM platform • Defined Open API specifications for the exposed IAM capabilities (Users and Permissions management) • Contributed to implement the Core API Gateway policies (security enforcement, transformation and routing filters) • Implemented the automation of the platform deployment, backup/restore and patching (Infra-as-code) • Contributed to design and implement the monitoring system for the IAM platform Technical environment: Ansible, Docker Swarm, Jenkins, XLDeploy Axway API Gateway, OpenAPI/Swagger IBM (ISAM / IGI / TDI / SDI), OAuth2 / OpenID Connect, SCIM (System for Cross-Domain Identity Management), DNS Management, SSL Certificate Management, Kerberos, Microsoft Visio Monitoring & logs: Centreon, KERN platform (Kibana, ElasticSearch, Rsyslog, Nifi)

Participated in the design and development of LinkyCoeur system. A distributed Core system that provides services and processes to collect measurement data from smart electric meters. It also exposes APIs and event listeners to send setting commands to smart meters and concentrators devices connected to the smart grid. Missions and achievements: • Animated design workshops with Dev team-leads for the 'Monitoring V2' project • Advocated to adopt DevOps approach within the dev teams to be incorporated in the full SDLC • Participated in the design of the new micro-service based architecture blueprint • Contributed to design and develop the Core features of the new Container-based platform • Led the project to secure JMS resources and Business Services exposed within the Service Bus Technical environment: Java 8, JEE 6 (CDI/Weld, JPA, JAX/RS), MBean/JMX, OAuth2/JWT, Spring Boot Swagger 2.0, ReactJS, Oracle OSB/Weblogic, JBoss Wildfly-Swarm, JUnit/Mockito Jenkins 2, Nexus, Ansible, Docker Compose, Vagrant, Scrum