Ghaith Ben Abdessalem — Tech Lead & DevOps Engineer

Geneva-based concierge company. Sole platform owner since 2021, leading 8 devs; promoted to Tech Lead.

Platform & Leadership — Sole owner and only on-call for the production platform on Linode LKE (EU, single-region): 3 nodes (4vCPU/8GB) running ~100 pods across 11 namespaces (7 services × dev/staging/prod) at 99.9% uptime, paged via Alertmanager with MTTR under 1h. Lead the platform direction for 8 developers while mentoring 2 interns and running code and performance reviews to raise the team's operational bar.

Reliability & Security — Hardened the platform with Vault for secrets management, PKI, and automated rotation, plus Istio mTLS and distributed tracing enforced on every service for zero-trust east-west traffic and deep request visibility. Added layered resilience with custom database and file backups on top of native LKE backups, so restores stay routine instead of emergencies.

DevOps — Own the GitOps workflow with GitLab CI and Argo CD across dev, staging, and prod, shipping weekly feature releases plus out-of-band security releases scanned with Syft and Trivy. Pipelines stay around 10 minutes thanks to aggressive caching, broken changes are stopped early by unit, acceptance, and integration gates, and any release can be rolled back with a one-command Argo CD operation.

Dev — Build and maintain Go microservices around a shared middleware chain that bakes in response caching, circuit breakers, structured logging, and per-IP rate limiting, so every service inherits the same resilience baseline. Backend changes ship with full confidence from complete unit, integration, and acceptance test coverage that guards against regressions.

Dev — Built a dedicated Go image service with a WebP optimization pipeline that converts and compresses images at serve time. It keeps pages fast by slashing image payload on the fly without complicating the upload flow for content editors.

Dev — Created a reusable Next.js boilerplate that now powers 4 internal and customer-facing apps, cutting setup time for every new project. It backs the daily ops dashboard used by around 50 people every day as well as the corporate marketing site built with Next.js and Firebase for real-time content.

Multidisciplinary communication agency. Team of 10 (3 devs) crafting high-impact communication strategies for brands.

Dev — Shipped Hobb.tn end-to-end from visual identity through to e-commerce integration, led the audit, redesign, and rebuild of Digiprint.tn for better UX, performance, and brand presence, and delivered a real-estate application on a Next.js, Angular, and Express.js stack. Work covered both greenfield builds and taking over existing sites to modernize them without losing business continuity.

Dev — Ran full website audits for clients like Le Pneumatique — covering technical performance, accessibility, SEO, and security — and for Mathezer, digging into performance, user experience, and content structure. Each audit turned into a concrete punch list of improvement opportunities the team could act on immediately.

Part-time freelance alongside full-time roles.

Dev — Designed and built Elisys ERP, a custom stock system for circular inventory with integrated printing workflows, using Next.js and Express.js with role-based access control. It gives warehouse and office staff one shared source of truth instead of scattered spreadsheets.

Dev — Audited, redesigned, and rebuilt the Skanderellouze.com website with a modern look, cleaner structure, and noticeably better performance. The refresh kept existing content and SEO value while making the site far easier to maintain and extend.

Dev — Built an offline-first desktop inventory management app for AMS in Angular, packaged with Electron for shop-floor use, and backed by an Express and PostgreSQL API. It keeps working without a connection and syncs reliably, which is essential for warehouse environments.

DevOps — Maintain a public Nix configuration (gitlab.com/Colkain/nixconfig) that standardizes shells, toolchains, and editor setups across machines. The team adopted it as the default on WSL, which removed most works-on-my-machine friction for new joiners.