FR · Version française
Antoine Keranflec'h
Antoine Keranflec'h
Senior Network, Security and Automation Engineer Tech Lead · 10+ years of experience
antoine.keranflech@gmail.com
+33 6 45 55 72 10
8 allée des aulnes, 35520 La Chapelle-des-Fougeretz
34 years old · Driving licence B
antoinekh · antoine-keranflech

Experience

Network Engineer TAC backboneOrange FR (Rennes, 35)2026 – Now

TAC network team for the Orange France backbone

  • Creation and deployment of NETCONF configuration models (SROS, JUNOS), L3 analysis
  • Creation and improvement of engineering tools: ContainerLab labs, docs as code, BGP BMP monitoring
Network Reliability Engineer / Technical leaderWorldline (Rennes, 35)2023 – 2026

Missions in a critical, high-availability and international environment

  • Architecture, migration and support of redundant high-availability BGP network architecture
  • Creation of a VPN as a Service offer, 100% as code with PaloAlto, Python and Netbox
  • Netbox deployment, data migration and synchronization, plugin development
  • Management and automation of the PaloAlto perimeter (200+ devices)
Network and Security Engineer NetSecOpsGroupama G2S (Mordelles, 35)2019 – 2023

Missions within the network operations team

  • Automation of firewall requests, firewall upgrade campaign, creation of automatic blocking services
  • Continuous improvement and involvement in RFPs for firewall solutions
  • Management of the Tufin infrastructure, creation of API backend servers, Python scripts and dashboards
Cisco router engineeringOrange OGSB / SII (Rennes, 35)2018 – 2019

Mission in a network provider engineering environment

Security Engineer L3 ShareCloudOrange OCD / SII (Rennes, 35)2017 – 2018

Mission in an international shared cloud environment

Network and Security EngineerOrange NRS / Proservia (Rennes, 35)2016 – 2017

Network and security mission in a multi-entity environment with a total of over 5000 users

Gap year abroad: cultural and language immersionNew Zealand2015 – 2016
Network and Telecom Expert in apprenticeshipNextiraOne (Rennes, 35)2011 – 2015

Skills

Networks
BGP, MPLS, ISIS, EVPN/VXLAN, Cisco ACI, GCP, VPN IPSec
Security
PaloAlto, Fortinet Firewalls, Audits (PCI DSS, SecNumCloud SNC, Internal/External)
Automation & DevOps
Python, Ansible, Bash, Terraform, GitLab CI, Docker, Linux, SQL, GCP
NetBox
Administration, Upgrades, Custom Plugin Development (Data Modeling, Visualization, UI), Data Synchronization, Open-Source Contributions
Tooling
Wireshark, Grafana stack, GraphQL, RestAPI, Jinja2, ContainerLab, Telegraf, Nornir, FastAPI
Certifications
Fortinet NSE 4, Cisco CCNA, Cisco DEVASC, Tufin Expert, Azure Fundamentals (AZ-900), HashiCorp Terraform Associate
Languages
Fluent in English, basic knowledge of Spanish

Degrees

Engineering degree in Information and Communication Sciences and Technologies2015

Télécom Lille

DUT Networks and Telecommunications in apprenticeship2012

IUT of Saint-Malo

Open source

NetBox ecosystemcore & plugins

Contributions to core and plugins: netbox-contract, more-metrics, interface-synchronization

Containerlabsrl-labs - container-based network labs

Contributions to several core features and documentation

RAVEN - BGP routing security monitorNokia

Contributions to code and documentation: BMP, RPKI ROV, ASPA validation

Author of open source toolsgithub.com/antoinekh
  • nokia-sr-skills - AI (Claude Code) plugin to inspect and operate Nokia SR OS / SR Linux (YANG, NETCONF, gNMI)
  • juniper9-crypt & juniper8-crypt - Python libraries and CLI for Juniper $9$/$8$ password handling

Major projects

Network Reliability EngineerWorldline02/2023 – 01/2026

Secure multi-site environment with strong high-availability and regulatory constraints

  • Architecture and support of multi-site, multicloud, multi-VRF BGP networks
  • Participation in audits: SNC, PCI and internal/external
  • BGP migration of multiple high-availability platforms, Cisco ACI, PaloAlto, Checkpoint, Cisco routers
  • Leader of the PaloAlto community (200+ firewalls), creation of a Python SDK to manage 100% as code
  • Development of a VPN IPSEC as a service offer, 100% as code via Netbox, Python and PaloAlto
  • Migration of customer infrastructures to GCP with firewall, load balancer, VPN and partner interconnect
  • Creation of automation and pipelines for the whole platform lifecycle: production rollout, monitoring, deployment, compliance and decommissioning
BGPCiscoPaloAltoVPNTelegrafPythonNornirGCPAnsibleGitLab
Network Reliability Engineer - NetboxWorldline02/2023 – 01/2026
  • Netbox deployment, administration and upgrade
  • Creation of a data synchronization tool with external sources (NS1, Infoblox, Netbox, ServiceNow, routers), syncing >100k objects
  • Development of plugins for data models, visualization and UI improvements
  • Open source contributor
NetboxDockerPythonDjangoGitLab CIGCP
Network and Security EngineerG2S04/2019 – 02/2023
  • Automation and orchestration of the entire security architecture (150 firewalls) with Tufin and Python
  • Optimization, support, upgrade and addition of services on the Checkpoint & PaloAlto firewall perimeter
  • Creation of a dynamic blocking service on Checkpoint firewalls via Bash script and Python API
  • Creation of APIs, Python scripts and interfaces to make network information accessible
  • Operation of Cisco ACI, F5, Cisco Ironport, Firewall, IPAM Infoblox infrastructures
  • Incident management and crisis response. Involvement in RFPs for network infrastructure
TufinDockerPythonCheckpointPaloAltoCisco ACIF5IronportInfoblox
Cisco CPE router engineeringOGSB09/2018 – 04/2019
  • Performance (IxNetwork) and compliance testing: IPSEC, QoS, NAT, DSL, Security
  • Drafting of configuration guides and custom technical proposals for non-standard requests
Cisco ISRASRJuniperAlcatelIxia
Security Engineer L3 ShareCloudOCD08/2017 – 08/2018

International environment with 7 platforms on 11 DC

  • Consulting in technical security architecture for Shared Cloud projects
  • Integration of a new multiplatform DC in India. LLD writing, schematics and design work
  • Firewall security audits, upgrade campaigns, platform refresh
  • Level 3 support, writing documentation for deployment and support teams
NetscreenFortigateF5CheckpointLAN Cisco