Samy Jacquet

AI Infrastructure Engineer · Kubestronaut · CEH_

On-prem AI platforms on Kubernetes.

Services

On-Prem AI Platforms

Self-hosted LLM serving on Kubernetes. vLLM, llama-server, GPU scheduling, observability. Replaces cloud inference with infrastructure you own.

Hardened Kubernetes

CIS benchmarks, OPA/Kyverno policies, Zero-Trust networking. Compliance built in for regulated industries (GDPR, HDS, eIDAS, NIS2).

GitOps & SRE

ArgoCD, Prometheus, Grafana, Loki, Velero. Production platforms that run themselves.

About

Engineer by training, builder by nature. I started my career in embedded systems and IoT. Soldering PCBs, writing Linux kernel drivers, designing custom Raspberry Pi boards for EV charging infrastructure. Over the years I shifted to infrastructure, from sysadmin to platform engineering, driven by the same instinct: understanding how things work, end to end.


Today I design and operate Kubernetes platforms at Brevo for high availability at scale. I hold all five CNCF certifications (Kubestronaut, 93% on CKS) and the CEH. I also teach enterprise networking at UTT since 2019.


At home, I run a 5-node Talos Linux cluster with 3 GPUs for self-hosted LLM inference, 100+ smart home devices, a solar energy system with battery storage, and a habit of breaking DNS that my family has learned to tolerate. From embedded C to Kubernetes manifests, from PCB design to Terraform, the thread has always been the same: curiosity, and a stubborn need to build things myself.

10+
Years Experience
5/5
Kubestronaut Certs
5
Bare Metal Nodes
24/7
Homelab Uptime

Experience

Feb 2026 - Present
Senior Platform Engineer
Brevo (ex-Sendinblue), Remote
Managing Kubernetes orchestration for high availability at scale. Leading infrastructure security hardening, performance tuning, and developer platform tooling.
KubernetesPlatform EngineeringSecurityScale
2019 - Present
Lecturer in Enterprise Networking
Université de Technologie de Troyes
Teaching advanced enterprise networking (RE14): campus architectures, routing optimization, load balancing, redundancy, and multicast.
TeachingNetworkingArchitecture
Jun 2024 - Feb 2026
Platform Engineer & Pentester
Goodflag
Led on-premise Kubernetes infrastructure on Talos Linux: BGP, IPSEC, Helm, ArgoCD, Istio, Grafana/Prometheus/Loki observability, Velero/Kasten backup, CIS benchmarks, OPA/Kyverno policies. Designed developer environments with Docker, GitLab CI/CD, and Traefik. Internal pentesting and vulnerability assessments.
Talos LinuxArgoCDIstioPentestingCISOPA/Kyverno
May 2021 - May 2024
Systems & Networks Engineer
Lex Persona (Goodflag Group)
Piloted a full VxRail virtualized infrastructure renewal, from design to migration, managing legacy coexistence and vendor relationships. Network architecture for a digital signature platform with HSM security, ISO 27001, eIDAS, and NIS2 compliance.
VxRailHSMISO 27001eIDASMigration
Jul 2015 - Apr 2021
Embedded Systems & Infrastructure Engineer
EV Charging Industry, Troyes
Designed embedded systems and IT infrastructure for connected EV charging stations. Modified Linux kernel drivers (SC16IS7XX for I2C + RS485), cross-compilation toolchains, custom UDP protocols, remote update systems. Infrastructure with Proxmox, Docker, VPN, firewalling. Custom Raspberry Pi daughter boards for energy management.
Embedded LinuxKernel DriversProxmoxIoTOCPPRaspberry Pi

Skills & Tools

Platform & Orchestration

KubernetesTalos LinuxArgoCD HelmCiliumMetalLB TraefikIstioCeph TerraformRancher/RKE2

Cybersecurity

CEHPentestingCTI/CTH SOC OperationsOPA/KyvernoCIS Benchmarks TrivySonarQubeRBACZero-Trust

Cloud & Infrastructure

ProxmoxVMware/VxRailDocker GCPFortinetPalo Alto BGPIPSECDNS

Observability & CI/CD

PrometheusGrafanaLoki JaegerKialiELK Stack GitLab CI/CDVelero

AI & Automation

MLOpsKubeAILLM Inference GPU Workloadsn8nMCP Prompt EngineeringClaude

Dev & Embedded

PythonGoBashAnsible Raspberry PiLinux Kernel Cross-CompilationIoT

Projects

claude-toolbox

Collection of custom Claude Code skills for infrastructure management: Proxmox, Home Assistant, Kubernetes, GitLab, Frigate, Victron, and more.

ShellClaude CodeMCPDevOps

homelab-os

Self-hosted LLM assistant for homelab management. Monitors infrastructure health, runs maintenance tasks, and ties together Home Assistant, Proxmox, and Kubernetes via natural language.

PythonLLMHome Automationn8n

node-debug-dashboard

Web UI and REST API for debugging Talos Linux Kubernetes nodes. SMART disk diagnostics, DIMM memory parsing, partition info, and hardware health.

PythonJavaScriptTalos LinuxHardware

iostack.fr

This website. A single Go binary serving embedded HTML with live metrics over SSE. Home Assistant pushes a snapshot every 5 minutes: solar and grid energy, Frigate detections, GitLab activity.

GoSSEHome AssistantCaddyCloudflare

Pousse

Cross-platform mobile app (Flutter) for positive child behavior tracking. Missions, stars, rewards, family dashboard. 100 % local, no account, no tracking. Android-first, iOS planned.

FlutterDartRiverpodDriftAndroid

iohc-flipper

Flipper Zero FAP for io-homecontrol (Velux + Somfy). 868 MHz cross-vendor sniff, pair and control with per-shutter identity isolation.

Flipper ZeroCSub-GHz868 MHzReverse Engineering

Plume

Voice dictation for macOS that runs 100 % on-device. Hold fn, speak, release: clean, punctuated text lands at the cursor. Parakeet for speech, llama.cpp for cleanup, a writing style per app.

SwiftmacOSParakeetllama.cppLocal AI

Cliché

Open-source screenshots for macOS. Scrolling capture, 14 annotation tools, an edge-detecting ruler, on-device OCR and QR. Native Swift, no account, no upload, no telemetry.

SwiftmacOSScreenCaptureKitVisionOpen Source

rke2-supervisor-shim

Joins stock rke2 agents to a Talos Linux control plane. Speaks the RKE2 supervisor protocol on :9345 and signs node CSRs with the Talos CA. No change to the Talos image or the workers.

GoKubernetesTalos LinuxRKE2PKI

apsystems-bridge

Local telemetry from APsystems YC600 / QS1 / DS3 microinverters without the ECU-R gateway. Custom 802.15.4 firmware on a 20 euro Sonoff dongle, decoded to JSON, MQTT and Home Assistant.

Python802.15.4FirmwareSolarHome Assistant

Contact

Homelab

A Proxmox hypervisor in the basement running a 5-node Talos Linux Kubernetes cluster, self-hosted GitLab with ArgoCD GitOps, Home Assistant with 100+ Zigbee devices & 6 cameras, and a solar energy system with Victron & Pylontech batteries. All on retired hardware and a refusal to pay for things you can run yourself.

talos-1
Proxmox VM
Control Plane
talos-2
Node 202 SFF
GTX 1660 6GB
Worker
talos-3
Dell OptiPlex 7010
Control Plane
talos-4
Dell Inspiron 7610
RTX 3060 6GB
Control Plane
talos-5
AMD Ryzen 7 3800X
RTX 3090 24GB
Worker
GitLabArgoCDHome AssistantFrigate NVR Pi-holen8nKubeAI / OllamaPrometheus GrafanaLonghornTraefikZoraxy VaultwardenZigbee2MQTTMLflowCloudflared
connecting...
Cluster
--
Nodes
--
Running Pods
--
Containers
--
Requests / min
Energy // Solar Powered
--
Solar Today
--
Self-Sufficiency
--
CO₂ Avoided
AI // Inference & Agents
--
Local LLM Tokens / Month
--
Claude Code Tokens / Month
--
GPU-Hours / Month
--
CV Detections / Month
Code // Self-Hosted GitLab
--
Repositories
--
Commits This Year