Théo Morin/
RésuméFR

DevOps & Cloud Engineer

Théo Morin

Kubernetes in production,
secure, automated, monitored by default.

I design, harden and run Kubernetes clusters for demanding environments: Airbus, the French Navy, the French Air and Space Force, and now Avisto.

Get in touchPDF résumé
Trusted by
  • Airbus
  • Capgemini
  • French Navy
  • French Air and Space Force
  • Avisto
CI/CDDeployment pipeline
#9b4a2fidleBUILD24 testsidleTESTprodv1.4.1SHIPDEPLOYROLLBACKNODE 5NODE 4NODE 3NODE 2NODE 1
Press deployprod · v1.4.1

Four roles, from defence to aerospace, and Avisto today.

Avisto

DevOps Engineer · Permanent
2026 — Present
  • Brought Kubernetes clusters (sandbox, pre-production) back into shape: debugging, repair, Talos Linux and Kubernetes upgrades.
  • Secure integration pipeline: SBOM (Syft), dependency and vulnerability analysis (Grype), reports centralized in DefectDojo.
  • Infrastructure audit scripts for a major client.

RKE2, Talos, Istio, ArgoCD, Proxmox, Terraform, CloudNativePG, OpenObserve, New Relic, HarfangLab

What I build and run outside of client work.

INFRA/GitOps cluster

INFRA — GitOps cluster

k3s cluster on 3 VPS, provisioned and hardened with Ansible. Argo CD syncs 34 applications; CrowdSec WAF, Authelia SSO, admin over Tailscale.

k3sTerraformAnsibleArgoCDCrowdSecTailscale
infra
Kybers preview

Kybers

Self-hosted IDP in the spirit of Backstage: one portal that brings together repository bootstrapping, deployment to the Kubernetes cluster, and access to infrastructure logs and metrics. One interface for the whole application lifecycle.

GogRPCKubernetesHelmPostgreSQLNext.jsDocker
Watch · CrashLoopBackOff
AGENTwatch · rag · lecture seule

DevOps Agent

Continuous monitoring agent for Kubernetes clusters: captures events through watch, filters out noise and produces a diagnosis grounded in company runbooks (hybrid RAG). Strictly read-only, enforced in code.

PythonRAGOllamaClaude APIKubernetesbge-m3
TrivyHub

TrivyHub

Centralized SaaS for Trivy vulnerability management. Go REST API, a trivy-push CLI with automatic CI detection, and remediation SLA tracking.

GoPostgreSQLNext.jsTrivy
pgpilot

pgpilot

Automated PostgreSQL backup CLI for Kubernetes. Runs CronJobs to S3 storage with no sidecar and no GitOps conflict, relying on Kubernetes Secrets.

GoKubernetesPostgreSQLS3MinIO

YNER

Real-time virtual tabletop for role-playing games, built as microservices: 10 Fastify services, a NATS JetStream bus, Postgres and Socket.IO, shipped through GitOps on k3s.

Next.jsFastifyNATSPostgreSQLThree.js

Orchestration11

  • Kubernetes
  • RKE2
  • Talos
  • k3s
  • Proxmox
  • Istio
  • Traefik
  • Helm
  • Docker
  • CloudNativePG
  • AWS

CI/CD and GitOps9

  • Argo CD
  • GitLab CI
  • GitHub Actions
  • Jenkins
  • Terraform
  • Ansible
  • Kustomize
  • Kaniko
  • Renovate

Security13

  • Trivy
  • Grype
  • Syft
  • DefectDojo
  • SonarQube
  • CrowdSec
  • Authelia
  • Sealed Secrets
  • Kyverno
  • cosign
  • WireGuard
  • HarfangLab
  • Wazuh

Observability5

  • Prometheus
  • Grafana
  • Loki
  • OpenObserve
  • New Relic

Languages6

  • Go
  • Python
  • Bash
  • TypeScript
  • Java
  • HCL
Open to new challenges

Open to DevOps, SRE and Cloud engineering roles. Feel free to email me directly to talk about your projects.

Send an email