Hamid HAMILA

Azure Cloud Engineer specialized in designing and industrializing enterprise platforms, with strong expertise in DevOps, IaC automation, Landing Zones, governance & ISO 27001 compliance, FinOps and Move2Cloud migrations.

Professional experience

I-SHANE – Azure Cloud Consultant

2026 – Present

Azure Cloud consultant at an IT services firm, on assignment at Hello Paris (CDG Express) since October 2026.

Hello Paris – Azure Cloud & DevOps Engineer

2026 – Present

Contributing to the build of the Azure cloud platform for CDG Express, the upcoming direct rail link between Paris and CDG Airport operated by Hello Paris (Keolis & RATP Dev).

Hub & Spoke architecture, bringing the existing infrastructure under Terraform (Infrastructure as Code).

Architecture study and rollout of Microsoft Entra Application Proxy with pre-authentication, securing SSO access to applications hosted on IaaS (VMs).

Migration of a legacy application that sends trainset energy consumption data to the power grid operator: infrastructure redesigned to CAF / WAF / ISO 27001 standards (naming, governance, security) and application onboarding prepared.

Wrote architecture studies, technical architecture documents (DAT) and presentations for stakeholders.

Environment: Azure, Terraform, Microsoft Entra ID, Entra Application Proxy, VM (IaaS), Hub & Spoke, CAF / WAF, ISO 27001

VINCI Construction SI – Azure Cloud Engineer

2024 – 2026

Designed cloud architectures approved by the architecture board (backup monitoring, DNS governance, quota monitoring, automated backup redesign), from native solution studies to production rollout.

Built custom Terraform modules that cut provisioning time by more than 50% while meeting internal security standards.

Industrialized Azure DevOps pipelines, automated application configuration with Ansible and set up VMSS-based build agent pools.

Led the Azure Virtual Desktop project (design, POC, IaC deployment) and built a service catalog for more than 100 users.

Automated Landing Zone deployments for partner entities following the CAF & WAF frameworks, using IaC and DevOps practices.

Delivered an ISO 27001-compliant backup monitoring platform (Log Analytics, KQL, automated daily report).

Hardened governance with 15 custom Azure Policies with auto-remediation (Private Endpoint DNS segmentation, resource compliance).

Built an Azure quota monitoring solution covering 21 resource providers (vs 3 natively), with proactive alerting across more than 20 subscriptions.

Architecture study of a VNet Data Gateway (Power BI to databases on private networks) by reverse-engineering the existing setup, then wrote the design document and implemented it.

Comparative analysis of Azure billing models (PAYG, Reserved, Savings Plans) that cut costs by more than 50%.

Extended a global Azure VWAN network architecture to 3 new regions (USA, Chile, Canada), with hub configuration and a latency study.

Took part in Move2Cloud migrations and production releases of critical applications on Azure, diagnosing and resolving complex incidents to keep services running.

Environment: Azure, Azure DevOps, Terraform, Ansible, Azure Virtual Desktop, VM, VMSS, Recovery Services Vault, Azure Policies, Azure Monitor, Log Analytics, KQL, Workbooks, Logic Apps, Function Apps, App Insights, Azure Firewall, App Gateway, WAF Policy, Bastion, Private DNS Zones, Private Resolver, Private Endpoints, Service Endpoints, Key Vault, Managed Identities, Storage Account, Azure SQL, PostgreSQL, MySQL, Cosmos DB, Azure VWAN, Power BI / Fabric, Azure AI Foundry, Azure OpenAI Service

Universcience – Systems & Network Administrator

2022 – 2023

Managed Active Directory, the Microsoft 365 environment (Exchange, Teams, OneDrive) and Intune: accounts, access rights, licenses and mailboxes for a 200-user site.

Managed the network estate with Extreme Management Center (XMC): switch, VLAN and telephony configuration, with MAC-based access control.

Led the audit and upgrade of the Mac fleet: planning, OS upgrades and Active Directory integration.

Installed and configured Extreme Networks switches for new rooms: firmware updates, port, VLAN and trunk configuration.

Managed NAS storage servers, scheduled tape-rotation backups and provided user support, including VIP support in English.

Environment: Active Directory, Microsoft 365 (Exchange, Teams, OneDrive), Intune, Windows, macOS, NAS, Extreme Networks, XMC, ITAM

Mairie de Saint-Ouen – Systems & Network Administrator

2022

Managed a VMware virtualized infrastructure (vCenter, ESXi) and Windows Server roles: Active Directory, DNS, DHCP, print server.

Set up a Pulse Secure VPN server as failover for the primary one, ensuring continuity of remote access.

Managed backups with NetVault and configured volumes on Linux systems.

Deployed application packages across the fleet with SCCM.

Configured and maintained Cisco network equipment (switches, cabling).

Environment: Windows Server, VMware vCenter/ESXi, Active Directory, SCCM, Linux, Cisco, NetVault, Pulse Secure, GLPI, SQL