Matteo Murru
DevOps / Cloud / SRE work-study (1 year)
Nice, Francecontact@zapz.workzapz.worklinkedin.com/in/matteo-murru-775720274github.com/ZapzCsgo
Profile
42 Nice student looking for a 1-year work-study contract in Nice, Sophia Antipolis or Monaco. I run an app in production with real users on my own: checked releases, monitoring, database restored after an incident.
Skills
- Used in production: Linux (VPS, systemd, cron), Bash, Git, Cloudflare (Workers, Pages, Tunnel), Vercel (CLI, edge), PostgreSQL (Neon) with Prisma, Redis (Upstash), Node.js / TypeScript, Python
- Operations in production: health route, scheduled alerts, deployments with automatic rollback, additive migrations, point-in-time restore (PITR)
- Learning: Docker, Docker compose, Ansible, GitHub Actions, Lighthouse CI, AWS (Cloud Practitioner in progress), HashiCorp Vault
- Systems security and low level: C (CodinGame certification), C++, x86-64 assembly, ELF format, system calls
Projects in production
GaijinToSensei, a Japanese learning app (gajintosensei.com)
- In production with real users: Next.js, serverless PostgreSQL (Neon) with Prisma, Redis (Upstash), Resend emails, Cloudflare Workers (moved from Vercel, free quota exceeded; TTFB 0.26-0.30 s -> 0.07-0.09 s).
- A Claude Code agent pipeline that writes code, tests (Playwright QA), merges and deploys, with locks against conflicts and batched deployments to fit the platform quota.
- Releases through a locked script: preview, HTTP checks, promotion, a second check, automatic rollback. A scheduled production guard every 10 minutes.
- Monitoring: health route (database, Redis, email, storage), server errors stored in the database, sliding-window rate limits.
- Incident on 29/10/2026: production database wiped by a mis-targeted migration, restored with point-in-time restore. Blameless postmortem, additive-only migrations, destructive commands banned on production.
Personal infrastructure
- Linux VPS: night agents as a systemd service under a dedicated non-root user, a closed-list root executor, 25 scheduled jobs (production guard, publishing, bot watchdog, alerts).
- Personal hub exposed through a Cloudflare tunnel with no open port, behind an edge proxy on Vercel (PBKDF2 password, HMAC cookie, brute-force delay, HSTS).
- 5 static sites published automatically to Cloudflare Pages (Git integration or wrangler from the VPS), including MetaAOE and MetaDBD.
- zapz.work: GitHub Actions CI (lint, build, tests, Lighthouse), Docker image published to GHCR, Cloudflare Workers (static assets, redirects and headers in the Worker), release script, uptime check.
42 projects (systems and infrastructure)
- Cloud-1, in progress, in a pair: automated deployment of a website to the cloud with Ansible and Docker.
- ft_transcendence, team project: HashiCorp Vault in a container for secrets, Docker compose, nginx with TLS.
- ft_strace (system call tracing), woody_woodpacker (ELF64 binary encryption), libasm (x86-64 assembly), ft_ls, AntiDebug (Windows x86_64).
- Common core: Minishell, Webserv (HTTP server in C++98), Philosophers (threads), Libft.
Experience
- Localization QA (LQA), Keywords Studios, Tokyo, June 2026 to October 2026
- Tested video games from the Konami studio: checked the French language in game, reproduced technical bugs and reported them precisely to the development teams.
- Crew member, McDonald's
Education
- 42 Nice, Since January 2025. Common core completed in 2025, Unix and low-level branch, towards 42's RNCP level 7 degree (master's level).
- 42 Tokyo (exchange), then working holiday in Japan, March 2026 to October 2026
- Vocational high school diploma in restaurant service (bac pro)
Certifications
CodinGame: C (June 2025)AWS Certified Cloud Practitioner: in progress
Languages
French (native) | English (professional and conversational) | Japanese JLPT N5