Alexandre Bernard

About

Application/security-focused customer-facing implementer who has secured multi-customer data aggregation apps using per-tenant isolation, short-lived/scoped tokens, and vault-based secrets management. Troubleshoots production issues via API gateway logs and performance tuning, and runs repeatable onboarding playbooks with strong customer-specific and cross-project documentation. Emphasizes AWS least-privilege IAM and secure agent deployment patterns, plus container scanning practices that catch vulnerabilities pre-production and build developer trust.

Experience

Education

Key Strengths

• Designed and implemented token-based controls to prevent data leakage (short-lived auth tokens, scoped API tokens, per-customer app instances)
• Strong secrets isolation practices (vaults instead of environment variables)
• Collaborative security risk assessment with customer IT teams; transparent tradeoff communication
• Effective troubleshooting using API gateway logs to identify token validation failures and latency spikes
• Performance-aware integration changes (reduced unnecessary full-API calls by fetching only deltas)
• Structured multi-customer onboarding execution (kickoff, environment setup, configuration, testing/validation) with timeline estimation
• Disciplined documentation system (per-customer reports plus reusable master playbook)
• Practical AWS security mindset (least privilege IAM, private subnet deployments, egress restriction; checks for wildcard actions and missing conditions)
• Container security best practices (avoid privileged containers; schedule scans to reduce impact) leading to earlier vuln detection and improved developer trust