### Offre d’emploi — Ingénieur Plateforme Cloud

**AYRADE recrute un(e) Ingénieur Plateforme Cloud** pour concevoir, déployer et exploiter **AYRADE CloudOS Ghayma**, une plateforme cloud complète intégrant calcul, stockage, réseau, PaaS et gestion multi-locataires.

**🎯 Missions principales :**

 **Mission N°01 :** Posséder le plan de contrôle Ghayma : amorçage et cycle de vie du cluster, ajout et remplacement de nœuds, mises à niveau, quorum et reprise après sinistre

 **Mission N°02 :**  Posséder le calcul : orchestration de conteneurs (Kubernetes) et machines virtuelles (KubeVirt/libvirt), ordonnancement, migration à chaud et isolation des ressources

 **Mission N°03 :** Posséder le stockage : stockage bloc et objet distribué (Ceph, Longhorn ou équivalent), politique de réplication, points de terminaison compatibles S3, instantanés et sauvegarde

**Mission N°04 :** Posséder le réseau : CNI, réseau overlay et underlay, répartition de charge (MetalLB ou BGP), entrée (Traefik), DNS, automatisation TLS et isolation réseau par locataire

**Mission N°05 :** Posséder la couche PaaS et la multi-location : déploiement applicatif depuis Git, buildpacks/Nixpacks, bases de données managées, identité, projets, quotas, RBAC, métrologie et garanties d'isolation

**Mission N°06 :** Posséder les opérations de deuxième jour et l'architecture matérielle de référence : supervision, alerte, capacité, chemins de mise à niveau sans reconstruction, configuration minimale à trois nœuds et topologie de croissance

### Profil recherché

* **Bac+5** — Ingénieur d’État ou Master en Informatique, Systèmes distribués, Réseaux ou équivalent.
* **5 à 8 ans d’expérience** dans la conception, le déploiement ou l’exploitation de **clouds privés sur infrastructure physique**.

  \

**Compétences requises pour le poste** :

\- Kubernetes en profondeur : composants du plan de contrôle, etcd, CRD et opérateurs, ordonnancement, interfaces réseau et stockage (CNI/CSI)

\-  Construction ou exploitation de clouds sur infrastructure physique — avoir installé la plateforme, pas seulement l'avoir consommée

\-  Stockage distribué en production (Ceph, Longhorn ou équivalent), y compris une récupération après incident réelle

\-  Virtualisation : KVM/QEMU, libvirt, KubeVirt, SR-IOV, passage de périphériques, migration à chaud

\-  Go, ainsi qu'une automatisation d'infrastructure solide (Terraform, Ansible, Cluster API)

\-  Jugement en systèmes distribués : consensus, partition de cluster, défaillance partielle, compromis CAP assumés

\-  Couche PaaS : déploiement depuis Git, buildpacks/Nixpacks, bases de données managées (PostgreSQL, MySQL/MariaDB, MongoDB, Redis) avec sauvegarde, haute disponibilité et mise à niveau

 

 **Qualités Humaines et aptitudes**

\-  Sang-froid opérationnel et sens de la fiabilité

\-  Honnêteté technique sur les limites et les compromis

\-  Capacité à simplifier une plateforme complexe pour le client

\-  Autonomie et rigueur documentaire

logo

SPA AYRADE

Ansible is an IT automation tool. It can configure systems, deploy software, and orchestrate more advanced IT tasks such as continuous deployments or zero downtime rolling updates. Ansible’s goals are foremost those of simplicity and maximum ease of use.

icon

Go is expressive, concise, clean, and efficient. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel type system enables flexible and modular program construction. Go compiles quickly to machine code yet has the convenience of garbage collection and the power of run-time reflection. It's a fast, statically typed, compiled language that feels like a dynamically typed, interpreted language.

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency.

Redis is an open source, BSD licensed, advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets.

MongoDB stores data in JSON-like documents that can vary in structure, offering a dynamic, flexible schema. MongoDB was also designed for high availability and scalability, with built-in replication and auto-sharding.

The MySQL software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software.

Started by core members of the original MySQL team, MariaDB actively works with outside developers to deliver the most featureful, stable, and sanely licensed open SQL server in the industry. MariaDB is designed as a drop-in replacement of MySQL(R) with more features, new storage engines, fewer bugs, and better performance.


PostgreSQL is an advanced object-relational database management system
that supports an extended subset of the SQL standard, including
transactions, foreign keys, subqueries, triggers, user-defined types
and functions.

Border Gateway Protocol (BGP) is a standardized exterior gateway protocol designed to exchange routing and reachability information among autonomous systems (AS) on the Internet.[1] BGP is classified as a path-vector routing protocol,[2] and it makes routing decisions based on paths, network policies, or rule-sets configured by a network administrator.
BGP used for routing within an autonomous system is called Interior Border Gateway Protocol, Internal BGP (iBGP). In contrast, the Internet application of the protocol is called Exterior Border Gateway Protocol, External BGP (eBGP).

The DNS (Domain Name System) is in a way the telephone directory of the Internet. Internet users access information online through domain names (for example, nytimes.com or espn.com), while browsers interact through Internet Protocol (IP) addresses. DNS translates domain names into IP addresses so that browsers can load web resources.
Each device connected to the Internet has a unique IP address that other devices use in order to find it. Thanks to DNS servers, Internet users do not have to memorize IP addresses (for example, 192.168.1.1 in IPv4) or newer and more complex alphanumeric IP addresses (for example, 2400: cb00: 2048: 1 :: c629 : d7a2 in IPv6).

Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions.

A modern HTTP reverse proxy and load balancer that makes deploying microservices easy. Traefik integrates with your existing infrastructure components and configures itself automatically and dynamically.

With Terraform, you describe your complete infrastructure as code, even as it spans multiple service providers. Your servers may come from AWS, your DNS may come from CloudFlare, and your database may come from Heroku. Terraform will build all these resources across all these providers in parallel.