# Christopher Amiaud — Senior DevOps / Platform Engineer

> I make production boring. 20+ years making critical production platforms reliable — from the physical rack in the datacenter up to operating fleets of ~2,000 servers. I turn legacy infrastructure into automated, observable and resilient platforms, without ever sacrificing service continuity. From fibre and BGP up to Terraform, Nomad and observability: understanding why things break, not just how to restart them.

The portfolio (blopOS) is one page of tiled windows, in French at https://blop.foo/ and in English at https://blop.foo/en/. Its terminal is a real Linux VM in the browser, where the portfolio is a shell script. This file gives its public data as plain text.

- Location: Grenoble, France
- Experience: 20+ years
- Contact: [christopher.amiaud@gmail.com](mailto:christopher.amiaud@gmail.com)
- [GitHub](https://github.com/govlog), [LinkedIn](https://www.linkedin.com/in/christopheramiaud/), [Blog](http://gdb.re/)

## Strengths

- Designing and industrialising technical platforms
- Automating infrastructure and operations (IaC)
- Making production reliable and reducing incidents
- Observability, monitoring, incident response
- Modernising legacy systems
- Pragmatic use of AI in engineering teams (review, quality, anti-slop)

## Experience

- **2024 — now — Senior DevOps & Cloud Infrastructure Engineer @ Kokiris** (Aubagne · hybrid, ≈400 servers): Industrialising and monitoring a fleet of ~400 servers (IaC, CI/CD, observability, security). CI/CD pipelines to speed up and secure production releases. Infrastructure and operations automation, Infrastructure-as-Code approach. Strengthened observability: better incident detection, better reliability. Modernising existing components into more maintainable platforms. Measured use of AI assistants: code quality, review, security, cutting the « slop ».
- **2023 — 2024 — Lead DevOps @ Cognix Systems** (Grenoble · full remote, ≈2,000 servers): Technical leadership of the hosting unit: production quality, structuring practices. Operating and stabilising a fleet of ~2,000 servers. Technical mentoring, raising the team's maturity. Bridge between operations, industrialisation and delivery.
- **2021 — 2023 — DevOps Engineer @ Cognix Systems** (Rennes): Automating operations with Bash and Ansible. Administering virtualised, distributed, high-availability platforms. Building system tooling to improve day-to-day operations. Cloud and bare metal on OVH.
- **2020 — 2021 — Cybersecurity Consultant @ Freelance** (hybrid): Advising on securing infrastructure and services. Hardening environments, reducing risk. Pragmatic security, grounded in operational reality.
- **2018 — 2020 — Cybersecurity upskilling @ (voluntary break)** (Rennes): System hardening, penetration testing, labs / CTF (Root Me…). Led to a cybersecurity consulting activity, then a deliberate return to my core craft: operating and stabilising critical platforms.
- **2015 — 2018 — WebOps / DevOps Engineer @ Claranet** (Rennes, enterprise): Enterprise & pure-player production, SLA/recovery-time commitments. L1/L2/L3 support on critical platforms, post-incident analysis. Industrialising environments with Puppet. CHFI training (forensics).
- **2013 — Systems Architect @ DIGITEKA** (Paris · R&D): Evolving and securing a streaming platform. Monitoring, statistics, live reporting. Cost reduction.
- **2007 — 2013 — Technical Lead — Hosting & Managed Services @ Azuria** (Paris, ≈200-300 servers): Technical direction of the company, managing a team of 4. Colo & managed services for a 200–300 server fleet for enterprise clients. Full infrastructure migration to 2 new datacenters, with zero downtime. HA, high-load web architectures: multi-homing, DR/BC, virtualisation, VoIP. Security and infrastructure audits, redesign of shared services.
- **2006 — Network Technician @ Ecritel** (Global-Switch DC): IBM-operated network room for CaLyon: optical fibre, inventory, path optimisation. Built a fibre management and inventory tool.
- **2006 — System Administrator @ iVision** (Paris): On-site administration and support engagements (Active Directory…).
- **2005 — 2006 — Systems & Network Administrator — Datacenter @ SECR** (Global-Switch DC): Colo work: racking, copper/fibre cabling, patching, power, cooling. Server-room relocations between datacenters, back to production. Multi-homed network (DR/BC), BGP deployment. FreeBSD/Linux platform. VoIP: heavy Asterisk use, contributed to an SS7 solution. Hired full-time before finishing the degree. It all starts here.

## Open-source projects

- [shclaw](https://github.com/govlog/shclaw): Multi-agent AI orchestrator in C. A single static binary < 1 MB, zero dependencies: TLS (BearSSL), IRC, JSON, persistent memory… and an embedded C compiler (TinyCC) — agents write C compiled in-memory to extend their own capabilities at runtime. The same ELF runs on Linux, FreeBSD, NetBSD and OpenBSD (Cosmopolitan Libc). (C, MIT)
- [cidre](https://github.com/govlog/cidre): Real-time log analysis by CIDR block: auto IPv4/IPv6 extraction from any log format, mapping to network block + country + WHOIS. In 30 seconds you see which scraper or coordinated attack is hitting your infra — where it used to take grep, awk, whois and a lot of coffee. ~2,200 lines of C, zero dependencies. (C, GPL-2.0)
- [ttyloom](https://github.com/govlog/ttyloom): An ircii-style terminal chat client: Telegram, Discord and IRC in one window. Real-pixel images (kitty graphics protocol, Unicode half blocks elsewhere), videos and GIFs played inside the conversation, a zoomable viewer, cross-network search, scriptable hooks, FR/EN interface. Main author: Claude (Claude Code), under my direction. (Go, MIT)
- [claude-darkroom](https://github.com/govlog/claude-darkroom): A Claude Code mod: the images Claude reads, writes or makes, and the ones you paste, show up as a film strip right in the chat. Built-in viewer, copy image or path, colored-block preview outside Ghostty/kitty. Main author: Claude (Claude Code), under my direction. (TypeScript, MIT)
- [pytaskpool](https://github.com/govlog/pytaskpool): Multiprocessing pool with result generators (ordered or not). Published on PyPI. (Python, GPL-3.0)
- [8080sh](https://github.com/govlog/8080sh): An Intel 8080 CPU emulator written in Bash. Yes, in Bash. (Bash, undefined)
- [3d-bash-spinning-cube](https://github.com/govlog/3d-bash-spinning-cube): A spinning 3D cube rendered in ASCII in the terminal: coproc to bc for trig, hand-rolled Bresenham for the edges. (Bash, undefined)
- [basha1](https://github.com/govlog/basha1): SHA-1 implemented in pure Bash (builtins only), output identical to sha1sum. (Bash, undefined)
- [writeups](https://github.com/govlog/writeups): Reversing a MIPS ransomware (Labyrenth CTF): ptrace anti-debug patched by hand, fork followed under strace, XOR key extraction via gdb scripted in Bash. (reverse, undefined)
- [rcurl](https://github.com/govlog/rcurl): A curl wrapper to test a domain against an arbitrary IP (--resolve): http↔https, www↔non-www normalisation. The daily tool behind a load balancer. (Bash, undefined)
- [bcrpn](https://github.com/govlog/bcrpn): A bc-like arbitrary-precision calculator: INFIX → POSTFIX → RPN + stack solver, a mini-language with variables and loops. (Python, undefined)

## Apps and games hosted on blop.foo

- [Arcade Vault](https://blop.foo/arcade/): The games launcher: one node:22-alpine container (Express) serves the static games and hosts the backends of the LLM-driven ones. Canvas-animated thumbnails, terser minification at build time.
- [Fractalscape](https://blop.foo/arcade/game/): 1-bit-inspired fractal roguelite: seeded 10-floor dungeon, weapons with unique DNA, build mutations, final boss. Canvas 2D, a single JS file, keyboard and touch.
- [Command Grid](https://blop.foo/arcade/game2/): Real-time strategy on a procedural battlefield: infantry, tanks, fighters, crush the enemy HQ. Deterministic simulation, single HTML file.
- [Base Defender '89](https://blop.foo/arcade/game3/): Old-school turret defense: waves of alien ships, power-ups, a boss, chiptune music. Single HTML, code-drawn sprites.
- [Fractal Zelda SF](https://blop.foo/arcade/game4/): Sci-fi Zelda-like in a fractal megastructure. NPCs talk through an LLM (gpt-4o-mini) and their sprites come from DALL·E, cached in SQLite; daily budgets and rate limiting server-side.
- [Voidreach](https://blop.foo/arcade/voidreach/): Space sim and trading: procedural galaxy from a deterministic seed — trade, mine, colonise, fight. A nod to Elite, Frontier and Star Control; Vite bundle.
- [La Glycine Sacrée](https://blop.foo/arcade/glycine/): Cozy pixel-art garden: plant, water, prune the brambles and coax the wisteria into bloom. One 100 KB HTML file, synthesized chiptune.
- [Termin-Hack](https://blop.foo/arcade/game5/): Movie-style fake mainframe: every command goes to an LLM (DeepSeek) that answers with a small JavaScript program the page runs — fake windows, fake UIs, live chat with hackers. Server-side SSE relay.
- [Xplore](https://blop.foo/arcade/xplore/): Elite's cockpit × No Man's Sky's worlds: one seed generates 2,200 systems, every hill, every creature, every name. Zero dependencies. You talk to your ship — literally (whisper + LLM relay).
- [The Isle](https://blop.foo/theisle/): Contemplative flight over a voxel ocean planet: an endless seeded archipelago, thermals, villages, quests and companions. Dialogue and upcoming quests are prepared in the background by an LLM (DeepSeek, SSE), with a local fallback when there is no key. Somewhere far away, behind a storm: the Isle.
- [Silfen, les chemins](https://blop.foo/arcade/sylfen/): Contemplative first-person walk along the Silfen paths. Noise-based procedural terrain in WebGL2, pointer lock, memory fragments to find, Web Audio ambience. Single HTML file.
- [Alex — trackmo](https://blop.foo/alex/): 8-bit birthday trackmo: 320×200 software renderer in Uint32 (no hardware acceleration), old-school effects, ProTracker .MOD replayer in Web Audio, 8×8 font. One 150 KB file, music inlined as base64.
- [chiptun0r](https://blop.foo/chiptun0r/): Chiptune composed live, never the same twice: functional harmony, Beethoven-style cell development, jazz/funk/blues/bossa/techno/baroque styles. Web Audio oscillators; dist, bitcrush, resonant filter, flanger, compressor.
- [shell — CRT bash](https://blop.foo/shell/): A real x86-64 bash (Alpine, musl) emulated in the browser by blink compiled to WebAssembly, with fork(), pipes and subshells added by this fork. ghostty-web CRT terminal, COOP/COEP isolation.
- [iris — bot orchestrator](https://blop.foo/iris/): Personal agent orchestrator (Flask): several role-based agents (hub, oracle, builder), swappable LLM providers, Google Calendar/Tasks tools, e-mail, scheduler, persistent memory, push notifications, PWA.

## Skills

- Systems: Linux, Debian, FreeBSD/NetBSD/OpenBSD, hardening
- IaC & automation: Terraform, Ansible, Puppet, Bash
- Orchestration: Docker, Nomad, Consul, Vault
- Observability: Prometheus, Grafana, Loki, Icinga, strace
- Network & HA: HAProxy, Varnish, Apache/nginx, BGP, multi-homing, DR/BC
- CI/CD: GitLab CI/CD, git
- Cloud: OVHcloud, bare metal, AWS (basics)
- Databases: MySQL/MariaDB, Redis, tuning & replication
- Security: pentest (labs/CTF), reverse (MIPS), forensics (CHFI), fail2ban, anti-scraping
- Dev: C (C11), Python, advanced Bash
- Applied AI: LLM APIs (Claude/GPT/Ollama), multi-agent, code assistants + guardrails

## Education and certifications

- IT Systems & Networks (vocational), IUT René-Descartes (2004 – 2006): Work-study, IBM internship. Left in year 2: hired full-time in hosting before graduating.
- University Diploma — Internet Technologies, Université de Limoges (2001 – 2002): Obtained. Web creation, project management, collaborative work.
- OVHcloud ×6 — Discover (IaaS, Web, Support, Solution Architect, Enterprise) · 2022
- AWS Technical Professional · 2014
- CHFI training — forensics · (Claranet)

## For agents

- In the browser, https://blop.foo/ registers read-only WebMCP tools: get_profile, get_experience, list_projects, get_skills, get_recommendations (argument: lang, fr or en).
- Deep links go to a window: [experience](https://blop.foo/en/#career), [open source](https://blop.foo/en/#projects), [about](https://blop.foo/en/#about).