Fadel
Chafai
- Senior Full-Stack Developer & SRE
I design, build, and operate production-grade web platforms and IoT/GTB (BMS) systems—backends in PHP (Symfony, API Platform) and Node.js, React/TypeScript dashboards, and MQTT-backed field integrations. I run day-to-day system administration on Linux (Debian/Ubuntu) and Windows Server across production environments: configuration, maintenance, and hardening, alongside CI/CD, Docker, reliability practices, and full-stack observability (Prometheus, Grafana, Loki).
For sensitive engagements I pair cybersecurity with operations: Linux and edge hardening on GTB stacks (ESID, cyber homologation), policy work from risk assessment and threat modeling through incident response, backup & disaster recovery, and OWASP-aligned controls, plus RAMS where the context demands it. I lead technical teams, set clear roadmaps, and keep engineering aligned with business and regulatory reality in both enterprise and startup settings.
Available for freelance missions
Development • Architecture • Consulting
Technical Skills
BACKEND_APIS
- PHP 8.2
- Node.js
- Symfony 6.x
- API Platform 4.x
- Nest.js
- Doctrine ORM
- REST/JSON APIs
- Auth: JWT / OAuth2
- Magento
- Laravel
- Phalcon PHP
- Data modeling & migrations
- Performance tuning & caching
FRONTEND
- React.js
- Angular
- TypeScript
- Vite
- Tailwind CSS
- SPA dashboards
- Component architecture
SRE_DEVOPS
- Docker
- CI/CD (GitHub Actions)
- Ansible
- Linux
- Traefik / Nginx
- Prometheus
- Grafana
- Loki
- Alerting / SLI/SLO
- Backups & reliability
SYSTEM_ADMINISTRATION
- Linux system administration (Debian/Ubuntu)
- Windows Server administration
- System configuration & hardening
- Identity & access management
- Networking fundamentals (TCP/IP, firewalling)
- Service supervision & troubleshooting
- Backup & restore strategies
- System monitoring & alerting
- SSH / secure access management
IOT_DATA
- GTB / BMS domain
- BACnet
- Modbus (IP/RTU/RS485)
- Redis
- MariaDB / MySQL
- InfluxDB
- Elasticsearch
- OpenSearch
CYBERSECURITY
- Server hardening (Linux)
- Edge server hardening (GTB/ESID)
- Cyber homologation
- Security Policy
- Risk Assessment / Threat Model
- Data Protection Policy
- Access Control Policy
- Risk Assessment & Method Statement
- Incident Response Plan
- Backup & Disaster Recovery Plan
- Secure Development Policy
- OWASP Compliance
Projects
Enterprise SaaS Projects (Private Access)
Enterprise SaaS platforms for internal and client use. Security-first architecture, authentication, and confidentiality constraints. I deliver security policy drafting and homologation (Risk Assessment, Threat Model, Incident Response, Backup & Disaster Recovery, OWASP compliance). Happy to discuss scope and references.
BOUYGUES × ARMED FORCES — DEDICATED GTB/BMS SYSTEM
Dedicated GTB/BMS system for military buildings: monitoring, supervision, and operational control of equipment and energy. Delivered edge server hardening (ESID) for cyber homologation, plus RAMS, Backup & Disaster Recovery, and Incident Response documentation.
RESPONSE — Positive Energy Neighborhoods
Smart city initiative for energy-positive districts. Architecture and data pipelines for energy monitoring and analytics.
Bouygues Telecom — Public Web Platform
Magento features and integrations, frontend modules with Angular and React.js. Reliable production releases for the public website.
Villanovo — Luxury Villa Rentals
Built from scratch: online luxury villa booking platform with performance and UX focus.
Professional Experience
Deputy Head of Studies & Development (IT)
- > Led web applications, APIs, and IoT/GTB platforms leveraging edge computing and industrial protocols (Modbus, BACnet), with hands-on system administration and infrastructure stewardship for production Linux environments.
- > Drove cybersecurity and hardened operations for critical infrastructure: server hardening, security policies, risk assessment, and incident response.
- > Built BigData pipelines for energy monitoring, InfluxDB, and Elasticsearch/OpenSearch analytics.
- > Collaborated with cross-functional teams and stakeholders on delivery and reliability.
CTO / IT Project Manager
- > Multi-tenant SaaS for energy monitoring and performance supervision.
- > Dashboards, alerting, and reporting workflows for operational teams.
- > Reliable releases, observability, and administration of Linux and Windows Server environments.
Web Consultant
- > Web applications and APIs for Bouygues Business Solutions.
- > Deployment automation, operational reliability, and production server administration.
Senior Web Developer
- > Magento features, Angular/React frontend modules, production releases.
Technical Team Lead
- > Web applications and APIs; deployment automation.
- > Led development team for Presstalis digital transformation.
Freelance Web Developer
- > Web applications and APIs for Glossarium.
Web Developer & System Administrator
- > Web applications and APIs at Casanet (Maroc Telecom subsidiary), including system administration on Linux and Windows Server.
Senior Web Developer
- > Web applications and APIs for Glossarium.
Web Developer
- > Web applications and APIs for Villanovo.