GenAI
RAG Assistant in Spring Boot
A production-grade RAG system with role-based document access enforced at the vector-search layer — a proof-of-concept for enterprise knowledge management.
Spring BootSpring AIAWS BedrockpgvectorKeycloakTerraform
Available immediately
Alexandre Bessard
AI & Automation Expert · Senior Cloud Architect
AI Agents AWS Cloud DevOps Security
I automate your repetitive tasks with tailored AI agents — to save time, cut operational costs and let your teams focus on what truly matters.
9 years of experience on critical, secure systems.
9years of experience
5M+users protected
0critical incident (2 yrs)
9+
years of experience
8
cloud & vendor certifications
5M+
users protected
0
critical incident (2 years)
6+
completed missions
2
countries (France + Canada)
About
At a glance
9+
years experience
8
certifications
0
critical incident
2
countries
Core stack
Agents IAPythonAWSTerraformKubernetesDockerJavaSpring BootAngularKeycloakFIDO2CI/CD
Alexandre Bessard
AI & Automation Expert · Senior Cloud Architect, founder of LEXOFT
With 9 years of experience on mission-critical projects, I design and deploy tailored AI agents that automate business processes — and build the secure cloud infrastructure they run on.
My technical rigour comes from demanding missions: 2 years at Atos / French Ministry of Education on the National Identity Registry — 30 school districts, 5M+ users, 0 critical security incident. That standard of excellence applies to every solution I deliver.
Proven international experience in Canada (Toronto, Montréal) in fintech and cloud SaaS. Available remote, hybrid or on-site. Recommendation letters available on request.
Available immediately Remote · Hybrid · On-site
Expertise
Areas of excellence
Full-stack expertise grounded in critical projects — public cloud, banking, national education.
Cloud AWS
EKS · ECS Fargate · Lambda · S3 · RDS · EC2 · CloudWatch · IAM · SNS · SQS · Bedrock · VPC · Route 53
DevOps & IaC
Terraform · Kubernetes (CKAD) · Docker · GitLab CI/CD · Jenkins · Ansible · Helm · Prometheus · Grafana
IAM & Security
Spécialité cléKeycloak (SPI) · MidPoint · LDAP · OAuth2/OIDC · SAML 2.0 · FIDO2/WebAuthn · MFA · TOTP · GDPR
Backend Java
Java 11/17 · Spring Boot · Spring Batch · Spring Security · Micronaut · Python · REST APIs · Kafka · Microservices
Front-end Angular
Angular 14–21 · TypeScript · RxJS · HTML5 · CSS3 · Bootstrap
AI & GenAI
AWS Bedrock · Claude · Titan · RAG · LangChain · pgvector · Prompt Engineering · AI Agents
Projects
AI & Open Source
Hands-on projects showcasing my GenAI expertise — from RAG to autonomous agents. More projects are currently in progress and coming soon.
AI Agent
AI appointment-scheduling agent
Natural-language booking for a hair salon: a LangGraph (ReAct) agent handles the whole flow — availability, confirmation and payment — in a single chat thread.
PythonFastAPILangGraphClaudeAngular
Experience
Recent missions
9 years on high-stakes technical projects — public sector, banking, cloud SaaS, international.
Senior Cloud / IAM Architect & Engineer
Atos · French Ministry of Education
Jun 2024 – May 2026 · 2 years Orléans / Remote
National Identity Registry (RNI) — national IAM platform covering 33 academies and 5M+ users.
- End-to-end IAM architecture: Keycloak + MidPoint + LDAP, 0 critical security incidents over 2 years.
- Strong authentication: FIDO2/WebAuthn, OTP/TOTP, enforced MFA — –60% access support tickets.
- Zero-downtime GitLab CI/CD pipelines across 5 environments (dev → prod).
- Spring Batch processing 500K+ LDAP/CSV entries per cycle.
Java 17 · Spring Boot · Spring Batch · Angular 14–18 · Keycloak · MidPoint · LDAP · FIDO2/WebAuthn · GitLab CI/CD · Docker · PostgreSQL · Python
Recommendation letters available on request
Senior Full-Stack Engineer (reinforcement)
Atos · BRGM
Apr. – May 2024 · 2 months Orléans
French Geological Survey — full-stack reinforcement on a geotechnical sensor platform.
- New features validated by Tech Leads; robust REST APIs.
- Angular 17 UX overhaul; unit test coverage raised to 85%.
Angular 17 · Java · Spring Boot · REST APIs · PostgreSQL
Recommendation letters available on request
Senior Software Engineer Cloud / AWS
Mimecast
Jan. – Dec. 2023 · 1 year Toronto, Canada
Cloud-native SaaS platform for large-scale data collection and analytics.
- Java/Micronaut microservices on AWS ECS Fargate, multi-AZ architecture — 99.9% SLA.
- Multi-threaded Java library for S3 transfers — –50% batch processing time.
- FinOps: –25% cloud costs via Spot instances and S3 lifecycle policies.
Java 11 · Micronaut · AWS ECS Fargate · S3 · CloudWatch · Lambda · SNS · Terraform · Jenkins · Docker · Kafka · PostgreSQL
Lead Full-Stack Developer
National Bank of Canada
Nov. 2021 – Oct. 2022 · 1 year Toronto, Canada
Critical real-time financial analytics platform (ActiveViam) — highly regulated environment.
- Java/Spring Boot + React microservices architecture, OAuth2 APIs — 99.95% production availability.
- Multi-AZ AWS EKS infrastructure, automated CI/CD, CloudWatch/Prometheus/Grafana monitoring.
- FinOps: –20% cloud costs.
Java · Spring Boot · Spring Security · React · AWS EKS · Kubernetes · GitLab · Prometheus · Grafana
Full-Stack Java Developer
Desjardins
Jul. 2019 – Jul. 2021 · 2 years Montréal, Canada
Critical account-opening application deployed across all Desjardins branches in Canada.
- Critical Spring Boot/Spring MVC features serving thousands of daily internal users.
- Responsive UX for banking agents; end-to-end ownership: requirements → design → dev → prod → follow-up.
Java · Spring Boot · Spring MVC · Bootstrap · JavaScript · Oracle DB
Java Developer / DevOps
Accenture · BNP Paribas
Nov. 2017 – Aug. 2018 · 10 months Paris
BNP Paribas banking project — DevOps tooling and application development.
- Set up DevOps toolchain: Ansible, Jenkins, Nexus, GEMFIRE.
- Java email library reused by 4 teams.
Java · Ansible · Jenkins · Nexus · GEMFIRE · IBM WAS · Splunk
Recommendation letters available on request
Certifications
Technical certifications: a mark of quality and reliability
Certified by industry leaders: AWS, Oracle, VMware, HashiCorp, and the Linux Foundation.
These certifications validate advanced skills in software development, cloud computing, infrastructure as code, cybersecurity, DevOps, and artificial intelligence.
Cloud & AI
AWS Solutions Architect – Associate
Designing scalable, resilient, and fault-tolerant distributed systems on AWS.
View badge
AWS Certified Machine Learning Engineer – Associate
Turn your data into predictive models to automate and optimize your business processes.
View badge
AWS Certified Developer – Associate
Design and development of cloud-native applications on AWS.
View badge
AWS Certified AI Practitioner
Artificial intelligence, machine learning, and AWS use cases.
View badgeDevOps
Certified Kubernetes Application Developer (CKAD)
Application development, deployment, and debugging in a Kubernetes environment.
View badge
HashiCorp Terraform Associate
Infrastructure as Code, infrastructure management, and DevOps best practices.
View badgeProgramming
Oracle Certified Professional: Java SE 11
Advanced expertise in Java Standard Edition development.
View badge
VMware Spring Professional
Building robust applications with Spring Boot, Spring Security, and the Spring ecosystem.
View badge
Oracle Certified Professional: Java SE 8
Mastery of the Java language validated through real-world enterprise scenarios.
View badgeClients
Companies that have trusted me in France and Canada
Legal compliance
A mark of credibility and transparency
Responsible third party
I provide proof of compliance of my legal file (Art. D8222-5 of the Labour Code) regarding official company registration documents and social contribution regularity.
Provigis Certificate
LEXOFT holds compliant legal documentation (Kbis and URSSAF).
Responsible third partyClick to view the certificate
Contact me
Have a project in mind? Let's talk.
lexoft.eurl@gmail.com
Phone
+33 6 34 49 12 75
Location
Orléans (45), France
Available in Paris
Availability
Monday – Friday
9:00 AM – 6:00 PM