Internship: Development and industrialization of a portal for Orange Money's access reviews

Under the supervision of a senior security architect from the team, the intern will contribute to the development and industrialization of a portal centralizing Orange Money's IT system access reviews.

A first version of the service already exists. It allows for the collection and consolidation of rights from multiple systems, notably GitLab and Kibana, and then presents them in a common interface.

The objective of the internship is to make this database reliable, complete the review process, and make the product maintainable, secure, and extensible to other access sources.

• Getting acquainted with the Orange Money security context, access review processes, and the existing application.
• Analysis and formalization of functional requirements with security managers and business reviewers.
• Consolidation of the architecture and interface contracts to facilitate the addition of new access sources.
• Development of backend features in Kotlin and Spring Boot, as well as web interface evolutions. Secure integration of external APIs and repositories: GitLab, Kibana/Keycloak, Confluence/Jira...
• Implementation of automated tests, test data sets, and functional acceptance scenarios.
• Improvement of the CI/CD pipeline, Docker image construction, and deployment on Orange Money's private cloud infrastructure.
• Consideration of security and compliance requirements: secret management, principle of least privilege, enterprise proxy, TLS validation, logging and traceability...
• Documentation of the architecture, operations, and review procedures, followed by a demonstration under representative conditions.

Particular attention will be paid to the portal's ergonomics, code quality, test coverage, security, and the product's maintainability after the internship.

Student in computer science, software development, cybersecurity, or DevSecOps training, with a strong interest in web application design and identity and access management issues.

• Good foundation in object-oriented programming, ideally in Java or Kotlin
• Understanding of REST APIs, HTTP protocol, and JSON formats
• Basics in web development and SQL
• Experience with Git and interest in CI/CD pipelines
• Ability to analyze a need, propose a solution, and document choices
• Rigor, autonomy, curiosity, and sensitivity to security issues.
• Knowledge of Spring Boot, Docker, PostgreSQL would be appreciated, but not essential.

• Kotlin, Spring Boot, and REST APIs

• PostgreSQL and database migrations

• HTML, CSS, and JavaScript

• Git and GitLab CI/CD

• Docker and Docker Compose

• GitLab APIs, Kibana, Keycloak, Confluence/Jira

• Ansible Vault and secure configuration management

• Unit tests, integration tests, and functional acceptance

• Openshift

• Contribute to a security product intended for long-term use by Orange Money.

• Discover a complete identity and access governance process.

• Work on a concrete case combining backend and frontend development, API integration, security, compliance, and operations.

• Acquire end-to-end experience: requirements gathering, architecture, development, testing, CI/CD, deployment, and user demonstration.

• Evolve in an industrial environment with real confidentiality, traceability, and availability constraints.

The proposed gross monthly internship allowance is between €682.52 and €1680.32 depending on your current level of study. In addition, you will have access to Social and Cultural Activities offered by your Social and Economic Committee, subsidized access to the company restaurant or meal vouchers, as well as a 50% reimbursement of your public transport pass.

Within Orange Innovation, the Orange Money Security & Compliance team is responsible for the IT security of the Orange Money central Information System: transactional core and service extensions, hosted in France, and forming the common base for all subsidiaries offering the Orange Money service in Africa.

The team supports the project teams responsible for the various components of the Orange Money central IS in implementing security and compliance from design to operations.

To this end, in close collaboration with the integration team, it selects and implements "DevSecOps" tools adapted to Orange Money's specific technical environments, usable by projects in their CI/CD pipelines.

Within Orange Innovation, the Orange Money Security & Compliance team is responsible for the IT security of the Orange Money central Information System: transactional core and service extensions, hosted in France, and forming the common base for all subsidiaries offering the Orange Money service in Africa.

The team supports the project teams responsible for the various components of the Orange Money central IS in implementing security and compliance from design to operations.

To this end, in close collaboration with the integration team, it selects and implements "DevSecOps" tools adapted to Orange Money's specific technical environments, usable by projects in their CI/CD pipelines.

Skills