Software Engineer

My_PhotoMy_PhotoMy_Photo
Laurent LEGAZ
citizenship:French
Address:2, Boulevard de la République
93330 Neuilly sur Marne
FRANCE
Phone:
E-mail:
Web site:http://laurent.legaz.eu
GitHub:GitHub Profile
PeriodsDegrees and Certifications
2018

AWS Certified Solutions Architect (Associate)

2014

IT Engineer, graduated from ESIPE, now ESIEE

2008 - 2010

IRIS (Computing and Networks for Industry and Services) High Technician certified, graduated from Dorian high school in Paris

2007 - 2008

Mathematics and computing license, first year UPEM in Paris

2007

Scientific baccalauréat specialized in mathematics with honors

PeriodsPositions
Since October 2014

Freelance Consultant

Back–end Engineer, Cloud based software architect - Paris, France



Several clients : from startup, to associations and from little company to big industrial groups.

  • REST API design, development and documentation.

  • Cloud based solutions architecture (AWS, GCP, MongoDB Atlas).

  • Software Design and specification writing

  • WEB development (Full Stack)

  • Docker/Vagrant stacks development/improvment

  • Transversal projects integration in SOA architectures

  • Applicative maintenance, testing, debugging

  • Technical Architecture and APIs Documentation


November 2013 - October 2014

Sanofi - Junior Project Manager - Massy, France

BISPA: Business & IS Projets and Application - Engineer in training among a Project Leaders team - worldwide



The BISPA solutions center is a Project Leaders team in charge of solutions delivery (SaaS, IS tools and workflow solutions), it manages several workflow projects implemented on different BPMS as K2, Nintex or workflowGen.
In addition, they were developing a smarter workflow solution platform based on K2 BPMS called WaaS. The goal of the WaaS was to deliver a Workflow as a Service solution able to generate an entire workflow application on demand, designed on a single XML file describing totally the targeted flow.

  • Project Supervisor and software developer / designer for a Javascript based application "XML2Graphs" (jQuery, jQuery UI, jsPlumb, BootStrap).

  • Software developer and designer for a WaaS delegation feature module development (C# .NET, entity, Knockout)

  • Design of known IS Security workflows.

  • Integration of IS Security workflows into the WaaS platform.

  • Planning, software deliveries and maintenance.

XML2Graphs is a drag and drop / graphic tool aimed to WaaS designers. It interprets WaaS XML Files and draw smartly, thanks to some graph algorithms, a workflow graph. WaaS designers could then manipule the graph data visually (rules, steps, users, etc.) and after retrieve all their changes in a newly generated, formatted to be WaaS comprehensible, XML File.

September 2010 - September 2013

Sanofi - Apprenticeship - Gentilly, France

Information System Security Office - Engineer in training among an Engineers team - worldwide



  • Software developer and designer of workflows management applications, targeting essentially security flows, for Sanofi’s Information System.
    These applications provide, for instance, security policies management, derogations’ request system for Sanofi’s IS users, internal and external (contractors, vendors) networks Firewall rules, etc.They are automated systems (BPM, contact by emails, renewals, reminders) with a worldwide transparent authentication on Sanofi’s intranet using Microsoft NTLMv2 scheme and Active Directory.

  • Deployment of applications and their databases on Microsoft Windows Server 2008 R2.

  • Development of Backups AT automation scripts in order to archive applications data and databases dumps in Microsoft Windows Server 2008 environment.

  • Study, design and deployment of a cluster of virtual servers with several tools integrated (e.g. JtR) and ready-to-use for IS security risk assessments on IS passwords (implementation: VMware ESXi 4.0 Hypervisor and CentOS 6.4 as System guest)

  • Deployment of two application servers on provisionned VMs: a secure platform for sharing documents and a password recovery server for a documents encryption desktop solution used internally (RHEL systems, Yum Proxy configuration, RPMs installation and configuration, softwares integration based on LAMP architecture and others needed APIs, in order to use an Aladdin eToken smartcard allowing strong data encryption)

  • Software maintenance.

May 2009 - July 2009

BeYouConsulting - Internship - Paris, France

Web Developper - Website redesign based on Joomla! CMS, database administration, and custom PHP Modules Development

July 2008 - August 2008

Bank of France - Internship - Paris, France

Technician - Accreditations of Institutes for credits in centralized BdF system, equipment inventory, hardware installation (computers, printers) and network checking

Languages

French (native speaker), english (Fluent / TOEIC score: 900/990), german (beginner)

Programming

PHP, Javascript, Java/JEE, C/C++, Python, Perl

Programming concepts

POO, Design patterns, SOLID, Code quality, Refactoring, Review, Peer programming

Project management & collaboration tools

SCRUM, Kanban, Waterfall Model, Atlassian (Jira, Confluence), Trello, ClickUp, UML

Databases

Redis, MySQL, PostgreSQL, SQLite, DynamoDB, MongoDB, Neo4J, Firebase, APCu

Tests & debugging

xUnit, Mockery, Behat, WebTools, XDebug, Wireshark, Firebug, Tamper Data, SF dumper

CI/CD, reporting, code quality

Jenkins, Travis CI, GitLab CI, Bamboo, SonarQube, Sentry.io

Versioning

GIT, SVN, CVS

Frameworks

Slim3/4, Symfony (2 to 6), Yii1/2, Doctrine1/2, QCubed, QCodo, Zend2, VueJS1/2, EJB, JSF

Templating

Twig, Smarty, ApiDoc, Nelmio/Swagger, Javadoc

WEB Toolkits

AWS SDK, Guzzle, JQuery, JQuery UI, Bootstrap, jsPlumb, Vue.js, Knockout ,Underscore.js, Nuxt.js

WEB techniques

HTTP protocol, HTML, XHTML, XML, JSON, CSS, XHR/AJAX, RDFa, PHP-FIG, reverse proxy, URL rewrite,
Cache invalidation, OPCache, PHP-FPM, Responsive front Apps,Async I/O (Swoole, ReactPHP)

HTTP servers

Apache, NGINX, Node.js, Apache Tomcat

Operating Systems

VxWorks, Linux Debian/Ubuntu, CentOS, RHEL, BackTrack/Kali Linux, Fedora, Mandriva,
Windows XP, 7, 8, 8.1, 10, Server 2008 R2, Server 2012 R2

Security

SSL/TLS ciphering, HTTPS, LDAPS, SFTP, XSS, SQL Injection, CSRF, SSRF, Certificates, CSP, HSTS, input validation/sanitization, Applicative API rate limiting, Authentication, Authorization, JWT, Firewall, server hardening

Used Softwares (including but not limited to): JtR, rcracki, Paros, Burp, WebScarab, Nmap

Virtualization, Containerization

VMWare ESX, VMWare Workstation, Oracle Virtualbox, KVM, Xen, Docker, Vagrant, Kubernetes, Swarm

System Administration

bash, awk, RPM, deb/dpkg, Yum, APT, systemctl, journalctl, cron,curl, wget, SCP, SSH, batch, AT, RDP

Network
  • TCP/IP networks architecture, installation, configuration

  • Cisco, DD-WRT, HP, serial or distant connection

  • Routing (RIP, EIGRP, OSPF and BGP)

  • Security (VPN, Firewall, Proxy,DMZ, ACL)

  • Infrastructure deployment (DNS, DHCP, SAMBA)

  • Load Balancing

IDE / Softwares

NetBeans, Eclipse, Visual Studio, Tornado (Wind River Workbench), Qt Creator, VS Code, Atom,
Postman, Sysinternals suite, Nmap, Wireshark, JXplorer, SoapUI, Gimp, Photoshop, Gedit, Nano, Vi, Sublime Text, Notepad++, MySQL Workbench

Languages

French (native speaker), english (Fluent / TOEIC score: 900/990), german (beginner)

Contributions open source

2023 - OWASP API Top10, part in the 2nd edition working group

2021 - OWASP API Top10, translation assistance on 1st edition (in french)

Academic publications (in french)

2014 - Digital Forensics, legal computing and security

2013 - OWASP WebGoat, Web applications security

interests

Reading, Graphic design, DIY

Sports

Swimming, sailing, hiking