Julien Levesy
- jlevesy@gmail.com
- https://jlevesy.github.io
- Lyon (France)

Product centered software engineer who loves to learn, I am comitted to build meaningful and reliable products, from the frontend to the infrastructure and from early stage proposals to production, not to forget customer support! I am a strong believer in teamwork and collective intelligence. Having lived abroad and traveled a lot, I am especially at ease with (and definitely looking for!) multicultural and diverse work environments. If you think I might be a fit, feel free to contact me! I will be happy to talk to you!
Work Experience
Senior Software Engineer
Currently working on the backend and the infrastructure of https://exalyze.io. Developped the frontend (HTML, Bootstrap) and a large part of the backend application backend logic. I also lead the effort on automation (using Gitlab CI, Docker Swarm and Ansible) making as easy as possible to deploy the application. I also greatly improved the platform observability by setting up systematic application monitoring using Prometheus, Loki and Grafana.
Senior Platform engineer
As part of the VOI Platform team, I am in charge of maintaining the platform and tools supporting VOI, from the core infrastructure on GCP, to the CI/CD pipeline (GitHub Actions and ArgoCD), through monitoring (Prometheus, Grafana and Mimir). In less than a year, I have achieved amongst other things the successful zero downtime migration of our workload to separate Kubernetes namespaces and the rollout of Grafana Mimir as our metric storage backend. My proficiency with Go and Kubernetes allowed me to make meaningful contributions across our application stack and to be recognized as a technical reference in our organization. This is also a very productive period for me as an open source developer as my position inspired me many side projects like kudo, a Kubernetes controller that allows to implement secure permission escalation, and kxds, a control plane for gRPC xDS service discovery. I also won the second prize of the Traefik 3.0 Haekathon with my work integrating SPIFFE with Traefik. Last but not least, I implemented an highly available solution to push metrics to Mimir using Prometheus Agents and Kubernetes Leader Election which got very good feedback from the Prometheus maintainers. For more information see the project section.
VP of Engineering
While still being involved on a daily basis at a technical level, this position was also the first time I assumed a leadership role in a team. On the technical side, I wrote amongst other things the support for Instagram stories, an ETL pipeline for email analysis, performed various infrastructure updates and contributed to major new features of the platform. As a team leader, I successfully set up a development workflow from the feature inception to production. This contribution greatly improved the team productivity while ensuring an acceptable workload and provides a better visibility to other stakeholders of the company.
Teacher
For a couple of years, with @DamienDuportal, we have been giving a 3 days lecture to a MSc level group of students related to CI and CD, tests and “good” practices of software development. This lecture aims to be the more practical possible and relies on SaaS tools like gitpod for students development environments and GitHub actions as CI/CD engine to ensure that. You can find the slides here, (only in French).
Senior Software Engineer
Involved in the Traefik Enterprise team, I contributed to numerous features embedded in the product. I proposed and implemented many improvements on it and impacted positively its reliability. For instance setting up an end to end testing framework or the systematic writing of unit tests. I was also very involved with the support team and regularly participated to client facing calls. Traefik Labs was my first experience in a truly distributed and multicultural company where clear communication and inclusion are a must, and I have to say that I loved this kind of environment.
Software Engineer
Hired initially as backend developer, my previous experience with server management quickly got me involved with the operations as well. I was put in charge of important subjects like moving our ecommerce websites to HTTPS, rewrote, extended several applications and deployed a whole new monitoring system based on Datadog. I also had the opportunity to teach an intern during my time and I found it to be a rewarding experience.
Software Engineer
As the company’s first employee, I was involved in a small distributed team between Lyon and San Francisco. We built from scratch multiple products centered around content marketing and native advertising and it finally lead the Upfluence software to be one of the most powerful influencer search engine available. My position was fullstack developer and I worked on a complex application stack involving numerous microservices written in 4 major different languages, golang included. This was also my first experience with production and gave me the opportunity to learn cutting edge subjects like containers, orchestration and distributed systems. I’m proud to see that many years later, Upfluence is a successful company and some of my code is still running at its core
Software Engineer
Hired as developer on a complex application built to refund clients in case of bank bankruptcy. It involved complex business rules and being able to handle an important amount of open cases. This was my first experience as web developer, in a large team and in a large company. I gave various talks about test driven development, like this presentation as I understood how important it is on projects of this scale.
Junior Software Engineer
I had two primary missions in that position: First was to build middleware and user interface application for a “second screen” set top box system, using DLNA, linux and web technologies. Second was to build a multiplatform desktop application dedicated to control Awox Striim series devices. It featured a DLNA control point, and also custom features like devices zoning and lighting control over network.
Projects
Exalyze
Exalyze is an online malware analysis platform, it allows in a few seconds to disassemble and analyze an unknown sample. It features a state of the art sample search engine based on Machoc Hashing allowing to find similar samples instantaneously.
Kudo
Kudo is a side project inspired by my work at VOI. It is a Kubernetes controller that allows to implement secure permission escalations for workload and users. It is designed as an extension of the Kubernetes RBAC API and allows to declare policies defining a fine grained permission escalation scheme. Check out the repository and the documentation website.
kXDS
kXDS is a Kubernetes native xDS control plane for gRPC. Modern versions of gRPC includes an extensive support of Envoy’s xDS protocol which allows to implement advanced service to service traffic routing without relying on an external reverse proxy: everything is embedded in the client. Unfortunately there are very few control planes available that supports this feature. As a consequence, I started to write kXDS as an attempt to provide a Kubernetes native control plane which allows to provide an advanced routing configuration to gRPC clients using a Kubernetes custom resource. Check out the repository as well as the available examples.
SPIRE + Traefik
During my time at VOI, I had the opportunity to explore SPIRE as a way to provide strong verifiable identity to our workload and enable end to end encryption via TLS and mTLS from the web browser to the database. One of the pain points we identified is the first hop between the ingress controller and an HTTP API server. After investigating a bit, I started to build a testbed which allowed me to develop a working proof of concept for making Traefik compatible with SPIRE. I then decided to open a proposal and turned my proof of concept into a successful contribution that got me the second prize of the Traefik 3.0 Haekathon.
Prometheus Elector
One of the topics I had to work on at VOI is the deployment of Mimir as a metrics storage backend to use accross all our Kubernetes cluster. One challenge we had to solve is how to have multiple agents per monitored clusters to guarantee high availability on the agent side. The solution built into Mimir is to run a server side deduplication of the pushed samples which requires running an etcd cluster. I didn’t find this satisfying (because etcd is a complex beast to run) so, I went on and wrote prometheus-elector which allows to run a kubernetes leader election accross multiple replicas of prometheus and make sure that only the leader is actually pushing samples to Mimir. Check out the repository.
Traefik Enterprise Edition
Traefik Enterprise Edition is a natively distributed verion of Traefik the open source edge router. Leveraging Docker’s very own Swarmkit at its core, it provides all the features of the open source version plus several advanced features like native authentication and authorization systems, distributed rate limiting and recently the integration of Traefik Labs service mesh implementation, Maesh. More information can be found on Traefik lab’s website
Sind (Swarm In Docker)
Inspired by all the work done in the Kubernetes ecosystem and motivated by the fact that we needed for TraefikEE an easy way to create multi nodes swarm environments, I decided to build Sind which is a CLI tool to easily create multi node swarm clusters on top of a docker daemon. Check it out at https://github.com/jlevesy/sind
Various Opensource Contributions
The contributions I’m most proud of are the one I did on firefox’s javascript JIT engine where I implemented various optimizations of the generated code. I’ve contributed to yaegi, Traefik Labs’s very own golang interpreter and i3-status-rust because I love i3wm and wanted to learn a bit of rust !