About Guilhem
- 15+ years of experience.
- Debian Project Member (“Debian Developer”); Member of the Debian LTS Security Team.
- Good sense of abstraction and high degree of precision in problem solving applications. (Academic background: Licentiate of Engineering and PhD in Theoretical Computer Science from Chalmers University of Technology.)
- Ability to remain cold-blooded and a fast thinker under stress or tight deadlines.
- Good understanding of technical and operational security, as well as data privacy-related topics.
- Languages: English, Swedish, French.
Selected projects
Senior system architect, The Document Foundation (2021–now). The Document Foundation (TDF) is the legal entity behind the LibreOffice project, a leading free and open-source office suite. The work consists in managing and maintaining TDF's infrastructure and services in order to ensure 24/7 operation. This contract is a continuation of the former one at a higher seniority level.
Debian LTS contributor, Freexian SARL (2022–now). Debian Long Term Support (LTS) is a project to extend the lifetime of all Debian stable releases to (at least) 5 years. The work consists in fixing security issues and releasing updated versions along with matching advisories, much like The Debian Security Team does for the stable release. LTS contributions are financed by various sponsors under the umbrella of Freexian SARL.
System administrator, The Document Foundation (2016–2021). The work consisted in managing and maintaining TDF's infrastructure and services in order to ensure 24/7 operation for the LibreOffice project.
Technical abilities
UNIX. Extensive experience with the Debian GNU/Linux distribution, in system administration as well as packaging; further experience with RHEL and some of its derivatives such as Fedora and CentOS.
Scripting languages. Perl, Python, Lua, POSIX shell, Bash.
Other programming languages. ANSI C, JavaScript, PHP, Emacs Lisp, Haskell, OCaml, LaTeX, TeX.
Networking. TCP/IP incl. IPsec (AH, ESP and IKEv2). Routing, switching, firewalling.
Configuration management and software deployment tools. Ansible, SaltStack, Propellor, Chef, Puppet.
Version Control System. Git, Mercurial, Subversion (SVN).
Virtualization. KVM, LXC (Linux Containers), libvirt API, QEMU, Docker.
Monitoring. Prometheus, Elastic Stack (ELK), Munin, Nagios, Zabbix.
Email. In-depth knowledge of IMAP4rev1, SMTP and LMTP. Extensive experience with Postfix and Dovecot servers.
Geographic Information System (GIS). OSGeo libraries (GDAL/OGR), QGIS and GRASS GIS. Web integration: OpenLayers library, Web Map Service (WMS), Web Map Tile Service (WMTS), Web Feature Service (WFS).
Videoconferencing and streaming. Jitsi, BigBlueButton, TURN and STUN protocols, Real-Time Messaging Protocol (RTMP).
Frontend webservices. Extensive experience deploying and maintaining large and complex webservices for 24/7 operation and, for the most busy sites, tune the stack for performance. Services include large instances of various projects such as Discourse, Nextcloud, [Matrix], Moodle, Drupal, CiviCRM, Piwik/Matomo, Jenkins, Bugzilla, Redmine, MediaWiki, GitLab, Gerrit, Roundcube, Mailman or Sympa.
Databases. In-depth knowledge of LDAP and SQL. Extensive experience with OpenLDAP, MySQL and PostgreSQL servers as well as SQLite.
Security protocols. OpenPGP, X.509 PKI, SSL/TLS, Kerberos, SASL, SAML 2.0, SSH-2, LUKS.