Hire the Best Ansible Developers
in Tunisia

A DevOps Engineer based in Tunisia with a great passion for technology, research, and innovation. Among my career, I was seeking to build experience in supporting, automating, and optimizing mission-critical development processes.

With 5+ years of experience in Cloud Engineering and DevOps, I worked on designing, automating, and deploying scalable systems that actually perform, from 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 to 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻. I work across 𝗔𝗪𝗦, 𝗔𝘇𝘂𝗿𝗲, 𝗮𝗻𝗱 𝗚𝗖𝗣, using DevOps and cloud-native tools to deliver environments that are fast, secure, and built for growth. 💡 My focus: make your infrastructure reliable, automated, and production ready. 𝗛𝗼𝘄 𝗜 𝗪𝗼𝗿𝗸 1. 𝐂𝐥𝐨𝐮𝐝 𝐈𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞 & 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 I design and manage secure, cost-efficient environments using 𝙺𝚞𝚋𝚎𝚛𝚗𝚎𝚝𝚎𝚜, 𝚃𝚎𝚛𝚛𝚊𝚏𝚘𝚛𝚖, 𝙳𝚘𝚌𝚔𝚎𝚛, and 𝘏𝘦𝘭𝘮. Every deployment is built with scalability and zero-downtime updates in mind. 2. 𝐂𝐈/𝐂𝐃 𝐏𝐢𝐩𝐞𝐥𝐢𝐧𝐞𝐬 Whether it’s 𝘑𝘦𝘯𝘬𝘪𝘯𝘴, 𝘎𝘪𝘵𝘏𝘶𝘣 𝘈𝘤𝘵𝘪𝘰𝘯𝘴, 𝘎𝘪𝘵𝘓𝘢𝘣 𝘊𝘐, or 𝘈𝘳𝘨𝘰 𝘊𝘋, I build pipelines that automate builds, testing, and releases — giving you predictable, repeatable deployments. 3. 𝐌𝐨𝐧𝐢𝐭𝐨𝐫𝐢𝐧𝐠 & 𝐎𝐛𝐬𝐞𝐫𝐯𝐚𝐛𝐢𝐥𝐢𝐭𝐲 I implement full visibility using 𝘗𝘳𝘰𝘮𝘦𝘵𝘩𝘦𝘶𝘴, 𝘎𝘳𝘢𝘧𝘢𝘯𝘢, and the 𝘌𝘓𝘒 𝘚𝘵𝘢𝘤𝘬, so you can detect and fix issues before they affect your users. 4. 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 & 𝐁𝐞𝐬𝐭 𝐏𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬 From IAM and network hardening to secret management and compliance checks, I apply DevSecOps principles to keep your systems safe and reliable. I use my DevOps and cloud expertise to help 𝗬𝗢𝗨 move faster, stay secure, and deliver with confidence. Ready to build a resilient, automated, and production-ready infrastructure? 𝗟𝗲𝘁’𝘀 𝘁𝗮𝗹𝗸 about how I can help your systems scale effortlessly.

I am a full stack developer with extensive experience in developing and deploying scalable web applications using a wide array of modern technologies. Throughout my academic projects and internships, I’ve worked extensively with Spring Boot and Angular, developing applications using both monolithic and microservices architectures. I’ve ensured security best practices, implementing authentication and authorization using JWT and Spring Security, and protecting against CSRF attacks. I also focus on performance optimization, leveraging DTOs, pagination, reducing joins, and ensuring loose coupling between components. What makes me different? ✔ Quick response and open communication to ensure the timely delivery of projects. ✔ Flexible availability with responses within 12 hours. ✔ I build long-term professional relationships, earning trust by providing reliable and high-quality work. ✔ Extensive experience with CI/CD automation, containerization (Docker, Kubernetes), version control (GitHub, GitLab), and cloud services (AWS, Azure) to enhance project delivery. ✔ Comprehensive knowledge of agile methodologies (SCRUM) to effectively manage and execute projects. ✔ Proven track record in delivering projects such as: Investor onboarding solution with Spring Boot and Angular, providing real-time communication between Private Equity firms and investors. Automated CI/CD pipeline for the QRQC web application using Docker and Jenkins. QRQC web app development for incident management using Spring Boot and SQL Server. In addition to this, I have knowledge in cloud computing (AWS and Azure), Ansible for configuration management, Terraform for infrastructure as code (IaC), Docker for containerization, as well as GitHub and GitLab for version control, and Jenkins for automating pipelines. I am always ready to collaborate, so feel free to reach out at any time!

🏆 𝕋𝕠𝕡 1% - 𝕋𝕠𝕡 ℝ𝕒𝕥𝕖𝕕 ℙ𝕝𝕦𝕤 🧑🏻‍🤝‍🧑🏻 60+ ℍ𝕒𝕡𝕡𝕪 𝕔𝕝𝕚𝕖𝕟𝕥𝕤 ⏱️ 6000+ 𝕋𝕠𝕥𝕒𝕝 ℍ𝕠𝕦𝕣𝕤 🎭 100% 𝕁𝕊𝕊) Hi 👋, I specialize in designing and deploying 𝙞𝙣𝙣𝙤𝙫𝙖𝙩𝙞𝙫𝙚, 𝙨𝙘𝙖𝙡𝙖𝙗𝙡𝙚, 𝙖𝙣𝙙 𝙨𝙚𝙘𝙪𝙧𝙚 cloud-native solutions💡. With more than 𝟖 years of experience as 𝘾𝙡𝙤𝙪𝙙 𝘼𝙧𝙘𝙝𝙞𝙩𝙚𝙘𝙩, 𝙆𝙪𝙗𝙚𝙧𝙣𝙚𝙩𝙚𝙨 𝘼𝙙𝙢𝙞𝙣𝙨𝙩𝙧𝙖𝙩𝙤𝙧 𝙖𝙣𝙙 𝘿𝙚𝙫𝙎𝙚𝙘𝙊𝙥𝙨 𝙀𝙣𝙜𝙞𝙣𝙚𝙚𝙧. T̲h̲i̲s̲ ̲i̲s̲ ̲m̲y̲ ̲P̲r̲o̲f̲e̲s̲s̲i̲o̲n̲a̲l̲ ̲C̲e̲r̲t̲i̲f̲i̲c̲a̲t̲i̲o̲n̲ ̲:̲ 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 Administrator CKA 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 Security specialist CKS 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 Application Developer CKAD 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 𝒂𝒏𝒅 𝑪𝒍𝒐𝒖𝒅 𝑵𝒂𝒕𝒊𝒗𝒆 Associate (KCNA) 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 𝒂𝒏𝒅 𝑪𝒍𝒐𝒖𝒅 𝑵𝒂𝒕𝒊𝒗𝒆 𝑺𝒆𝒄𝒖𝒓𝒊𝒕𝒚 Associate (KCSA) 🥇 𝑨𝑾𝑺 Solution Architect 🥇 𝑨𝒛𝒖𝒓𝒆 DevOps Expert🥇 𝑻𝒆𝒓𝒓𝒂𝒇𝒐𝒓𝒎 Associate🥇 𝑨𝒓𝒈𝒐 𝑪𝑫, GitOps At Scale 🥇 Certified 𝑰𝒔𝒕𝒊𝒐 and 𝑬𝒏𝒗𝒐𝒚 Service Mesh With my expertise in cloud-native design, I can help you build scalable, high-performance applications using microservices, deployed seamlessly in containers on private, public, or hybrid cloud platforms. This will be realized using this 🆃🅾🅾🅻🆂 🛠️ following the 𝙎𝙚𝙫𝙚𝙣 𝙈𝙤𝙙𝙚𝙡𝙨 𝙤𝙛 𝘾𝙡𝙤𝙪𝙙 𝙉𝙖𝙩𝙞𝙫𝙚 𝘿𝙚𝙨𝙞𝙜𝙣 🔥 : 👨‍💻 𝟏. 𝐌𝐨𝐝𝐞𝐫𝐧 𝐃𝐞𝐬𝐢𝐠𝐧 & 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 𝐌𝐨𝐝𝐞 - Programming Languages: 𝙂𝙤, 𝙋𝙮𝙩𝙝𝙤𝙣, 𝙉𝙤𝙙𝙚 𝙟𝙨, 𝘽𝙖𝙨𝙝 - Containerization Tools: 𝘿𝙤𝙘𝙠𝙚𝙧, 𝘿𝙤𝙘𝙠𝙚𝙧-𝘾𝙤𝙢𝙥𝙤𝙨𝙚, 𝙆𝙖𝙣𝙞𝙠𝙤, 𝙋𝙤𝙙𝙢𝙖𝙣 - Container Image Registry: 𝙃𝙖𝙧𝙗𝙤𝙧, 𝘿𝙤𝙘𝙠𝙚𝙧𝙝𝙪𝙗 𝙂𝙞𝙩𝙡𝙖𝙗 𝙍𝙚𝙜𝙞𝙨𝙩𝙧𝙮, 𝙂𝙞𝙩𝙝𝙪𝙗 𝙍𝙚𝙜𝙞𝙨𝙩𝙧𝙮 - A̲P̲I̲ ̲D̲r̲i̲v̲e̲n̲: 𝘼𝙥𝙞𝙨𝙞𝙭, 𝙄𝙨𝙩𝙞𝙤 𝙂𝙖𝙩𝙚𝙬𝙖𝙮, 𝙆𝙤𝙣𝙜, 𝙏𝙧𝙖𝙚𝙛𝙞𝙠, 𝘼𝙢𝙗𝙖𝙨𝙨𝙖𝙙𝙤𝙧, 𝙏𝙮𝙠 - M̲o̲d̲e̲r̲n̲ ̲D̲a̲t̲a̲b̲a̲s̲e̲s̲: 𝘾𝙖𝙨𝙨𝙖𝙣𝙙𝙧𝙖, 𝙀𝙡𝙖𝙨𝙩𝙞𝙘𝙨𝙚𝙖𝙧𝙘𝙝, 𝘾𝙤𝙪𝙘𝙝𝙙𝙗, 𝙍𝙚𝙙𝙞𝙨, 𝙋𝙤𝙨𝙩𝙜𝙧𝙚𝙎𝙌𝙇, 𝙑𝙞𝙩𝙚𝙨𝙨 - E̲v̲e̲n̲t̲-̲D̲r̲i̲v̲e̲n̲ ̲D̲e̲s̲i̲g̲n̲:̲ 𝙉𝘼𝙏𝙎, 𝙍𝙖𝙗𝙗𝙞𝙩𝙈𝙌, 𝙆𝙖𝙛𝙠𝙖, 𝘼𝙘𝙩𝙞𝙫𝙚𝙈𝙌, 𝘽𝙚𝙖𝙣𝙨𝙩𝙖𝙡𝙠𝙙 🏗️ 𝟐. 𝐌𝐨𝐝𝐞𝐫𝐧 𝐈𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞/𝐃𝐞𝐯𝐎𝐩𝐬 - 𝐂𝐈/𝐂𝐃 - CI/CD Tools: 𝙂𝙞𝙩𝙡𝙖𝙗 𝘾𝙄, 𝙂𝙞𝙩𝙝𝙪𝙗 𝘼𝙘𝙩𝙞𝙤𝙣𝙨, 𝙅𝙚𝙣𝙠𝙞𝙨, 𝘿𝙖𝙜𝙜𝙚𝙧, 𝙏𝙧𝙖𝙫𝙞𝙨 𝘾𝙄, 𝘾𝙞𝙧𝙘𝙡𝙚 𝘾𝙄, 𝙏𝙚𝙠𝙩𝙤𝙣. - Security Scanning Tools: 𝙏𝙧𝙞𝙫𝙮, 𝘿𝙤𝙘𝙠𝙚𝙧 𝙎𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙎𝙘𝙖𝙣𝙣𝙚𝙧, 𝙎𝙣𝙮𝙠 - Secret Management: 𝙎𝙤𝙥𝙨, 𝙑𝙖𝙪𝙡𝙩, 𝙆𝙚𝙮𝙗𝙖𝙨𝙚, 𝙑𝙖𝙪𝙡𝙩 𝙎𝙚𝙘𝙧𝙚𝙩𝙨 𝙊𝙥𝙚𝙧𝙖𝙩𝙤𝙧, 𝙄𝙣𝙛𝙞𝙨𝙞𝙘𝙖𝙡 - D̲e̲c̲l̲a̲r̲a̲t̲i̲v̲e̲ ̲A̲P̲I̲ ̲(̲I̲a̲a̲C̲)̲: 𝙏𝙚𝙧𝙧𝙖𝙛𝙤𝙧𝙢, 𝙋𝙪𝙡𝙪𝙢𝙞, 𝘼𝙣𝙨𝙞𝙗𝙡𝙚, 𝙋𝙪𝙥𝙥𝙚𝙩, 𝘾𝙝𝙚𝙛, 𝙆𝙪𝙗𝙚𝙫𝙚𝙡𝙖 - Service Discovery & Service Mesh: 𝙄𝙨𝙩𝙞𝙤, 𝙀𝙣𝙫𝙤𝙮, 𝘾𝙤𝙣𝙨𝙪𝙡, 𝙇𝙞𝙣𝙠𝙚𝙧𝙙, 𝙕𝙤𝙤𝙠𝙚𝙚𝙥𝙚𝙧, 𝙈𝙚𝙨𝙝𝙚𝙧𝙮 - SSL: 𝘾𝙚𝙧𝙩 𝙈𝙖𝙣𝙖𝙜𝙚𝙧, 𝘾𝙚𝙧𝙩𝙗𝙤𝙩, 𝙇𝙚𝙩’𝙨 𝙀𝙣𝙘𝙧𝙮𝙥𝙩 - Applications Platforms: 𝙆𝙪𝙗𝙚𝙧𝙣𝙚𝙩𝙚𝙨, 𝘿𝙤𝙘𝙠𝙚𝙧 𝙎𝙬𝙖𝙧𝙢, 𝙊𝙥𝙚𝙣𝙨𝙝𝙞𝙛𝙩, 𝙍𝙖𝙣𝙘𝙝𝙚𝙧, 𝙊𝙥𝙚𝙣𝙨𝙩𝙖𝙘𝙠 - Internal Developer Platforms: 𝘽𝙖𝙘𝙠𝙨𝙩𝙖𝙜𝙚, 𝙆𝙧𝙖𝙩𝙞𝙭, 𝙋𝙤𝙧𝙩 - Kubernetes Package Managers: 𝙃𝙚𝙡𝙢 , 𝙃𝙚𝙡𝙢𝙛𝙞𝙡𝙚, 𝙃𝙚𝙡𝙢𝙨𝙢𝙖𝙣 ⚙️ 𝟑. 𝐁𝐮𝐢𝐥𝐝 & 𝐃𝐞𝐩𝐥𝐨𝐲𝐦𝐞𝐧𝐭 𝐌𝐨𝐝𝐞𝐥 - Worker Nodes Scaling: 𝙆𝙖𝙧𝙥𝙚𝙣𝙩𝙚𝙧, 𝘾𝙡𝙪𝙨𝙩𝙚𝙧 𝘼𝙪𝙩𝙤𝙨𝙘𝙖𝙡𝙚𝙧 - Pods Replication Scaling: 𝙠𝙣𝙖𝙩𝙞𝙫𝙚, 𝙃𝙤𝙧𝙞𝙯𝙤𝙣𝙩𝙖𝙡 𝙋𝙤𝙙 𝘼𝙪𝙩𝙤𝙨𝙘𝙖𝙡𝙚𝙧 (𝙃𝙋𝘼), 𝙑𝙚𝙧𝙩𝙞𝙘𝙖𝙡 𝙋𝙤𝙙 𝘼𝙪𝙩𝙤𝙨𝙘𝙖𝙡𝙚𝙧 (𝙑𝙋𝘼) - G̲i̲t̲O̲p̲s̲: 𝙁𝙡𝙪𝙭𝘾𝘿, 𝘼𝙧𝙜𝙤𝘾𝘿, 𝙍𝙖𝙣𝙘𝙝𝙚𝙧 𝙁𝙡𝙚𝙚𝙩, Argo Rollout , Canary, Blue/Green 🔭 𝟒. 𝐂𝐥𝐨𝐮𝐝 𝐎𝐛𝐬𝐞𝐫𝐯𝐚𝐛𝐢𝐥𝐢𝐭𝐲 - Monitoring: 𝙋𝙧𝙤𝙢𝙚𝙩𝙝𝙪𝙚𝙨, 𝙂𝙧𝙖𝙛𝙖𝙣𝙖 - Tracing: 𝙏𝙚𝙢𝙥𝙤, 𝙚𝘽𝙋𝙁, 𝙊𝙥𝙚𝙣𝙏𝙚𝙡𝙚𝙢𝙚𝙩𝙧𝙮,𝙅𝙖𝙚𝙜𝙚𝙧, 𝙕𝙞𝙥𝙠𝙞𝙣 - APM: 𝙉𝙚𝙬 𝙍𝙚𝙡𝙞𝙘, 𝙎𝙠𝙮𝙬𝙖𝙡𝙠𝙞𝙣𝙜, 𝘿𝙖𝙩𝙖𝙙𝙤𝙜 - Continuous Profiling & Analysis: 𝙋𝙖𝙧𝙦𝙖, 𝙏𝙚𝙩𝙧𝙖𝙜𝙤𝙣, 𝙋𝙮𝙧𝙤𝙨𝙘𝙤𝙥𝙚 - Logging: 𝙇𝙤𝙠𝙞, 𝙀𝙇𝙆, 𝙁𝙡𝙪𝙚𝙣𝙩𝘽𝙞𝙩 - Observability Platforms: 𝙋𝙞𝙭𝙞𝙚, 𝙐𝙥𝙩𝙧𝙖𝙘𝙚, 𝙋𝙞𝙣𝙥𝙤𝙞𝙣𝙩, 𝘾𝙤𝙧𝙤𝙤𝙩 - Security Policies: 𝙆𝙚𝙮𝙘𝙡𝙤𝙖𝙘𝙠, 𝙁𝙖𝙡𝙘𝙤, 𝙆𝙪𝙗𝙚𝘼𝙧𝙢𝙤𝙧 🔐 𝟓. 𝟒𝐂'𝐬 𝐨𝐟 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 - Container Security | Cluster Security | Cloud Security | Container Image Security ☁️ 𝟔. 𝐂𝐥𝐨𝐮𝐝 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬 - Private: 𝘼𝙒𝙎 𝙂𝙊𝙑 𝘾𝙡𝙤𝙪𝙙 , 𝘼𝙯𝙪𝙧𝙚 𝙂𝙊𝙑 𝘾𝙡𝙤𝙪𝙙 - Public: 𝘼𝙒𝙎 , 𝘼𝙯𝙪𝙧𝙚, 𝙂𝘾𝙋, 𝘿𝙞𝙜𝙞𝙩𝙖𝙡𝙊𝙘𝙚𝙖𝙣, 𝙑𝙈𝙬𝙖𝙧𝙚, 𝙇𝙞𝙣𝙤𝙙𝙚, Scaleway, Hertzner, OVH Cloud 🔁 𝟕. 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 - Chaos Engineering: 𝙇𝙞𝙢𝙞𝙩𝙪𝙨, 𝘾𝙝𝙖𝙤𝙨 𝙈𝙚𝙨𝙝 , 𝘾𝙝𝙖𝙤𝙨 𝙆𝙪𝙗𝙚 - MLOps Tools: 𝙈𝙇𝙁𝙡𝙤𝙬, 𝙋𝙚𝙧𝙛𝙚𝙘𝙩, 𝙈𝙚𝙩𝙖𝙛𝙡𝙤𝙬, 𝙆𝙪𝙗𝙚𝙁𝙡𝙤𝙬, 𝙍𝙖𝙮, 𝙈𝙚𝙩𝙖𝙁𝙡𝙤𝙬 💡 What Clients Say: ⭐⭐⭐⭐⭐"Firas has become a reliable resource for our company whenever we face any issues with our devops needs from cloud architecture, or cloud native app" ⭐⭐⭐⭐⭐"Firas went above and beyond in delivering the work! His dedication and skillset are commendable. Highly recommended!!" ⭐⭐⭐⭐⭐"Firas was like a GINUIS that solved a long persisting issues"

Greetings! I am an experienced DevOps Engineer with a strong skill set in Linux administration, Ansible automation, Kubernetes orchestration, and CI/CD practices. With my comprehensive knowledge and hands-on experience in these areas, I can effectively optimize your development and deployment processes to ensure efficient and seamless operations. Linux Administration: I have extensive experience in Linux system administration, providing proficient management of Linux servers, troubleshooting issues, and ensuring system security. I am well-versed in system configuration, user and group management, file system administration, and network configuration. Ansible Automation: I possess expertise in utilizing Ansible for efficient configuration management and infrastructure provisioning. I can design and implement Ansible playbooks and roles to automate repetitive tasks, ensuring consistent server configurations and streamlined operations. Kubernetes Orchestration: I am proficient in leveraging Kubernetes, the leading container orchestration platform. With my knowledge of Kubernetes architecture and best practices, I can design and manage scalable and resilient deployments. I am experienced in creating and managing clusters, deploying applications, configuring pod scheduling, and implementing service discovery. Cloud Platforms: I have extensive experience with both OpenStack and AWS. In OpenStack, I can assist in deploying and managing virtual machines, networks, and storage resources. I am also an AWS Certified Cloud Practitioner (CCP) and can help set up and optimize AWS resources for scalable and reliable cloud infrastructure deployments. CI/CD Practices: I have hands-on experience with CI/CD pipelines, particularly with GitLab CI. I can set up and maintain CI workflows, automating software builds, testing, and deployments. This enables faster and more reliable delivery of applications, ensuring continuous integration and delivery. In addition to my practical expertise, I hold certifications in various relevant areas, including: RHCSA (Red Hat Certified System Administrator): This certification validates my proficiency in Linux system administration, covering essential skills and tasks. RHCE (Red Hat Certified Engineer): As an RHCE, I have advanced knowledge and skills in Linux administration, demonstrating expertise in designing and managing complex environments. CKA (Certified Kubernetes Administrator): This certification verifies my ability to design, configure, and manage Kubernetes clusters effectively, ensuring the smooth operation of containerized environments. CKAD (Certified Kubernetes Application Developer): With the CKAD certification, I am skilled in developing and deploying applications on Kubernetes, ensuring optimal performance and scalability. With my strong foundation in Linux administration, Ansible automation, Kubernetes orchestration, and CI/CD practices, I am well-prepared to collaborate with you on your DevOps initiatives. Together, we can optimize your development and deployment processes, leading to enhanced productivity and streamlined operations. Let's discuss how we can achieve your business goals effectively.

Certifications: Linux Professionals Institute - LPIC-1 AWS Certified SysOps Administrator - Associate AWS Certified DevOps Engineer - Professional I am a Senior DevOps / Cloud Infrastructure Engineer specializing in AWS architecture, production reliability, compliance readiness (SOC 2 / ISO 27001), and scalable multi-environment infrastructure. I help startups and growing SaaS companies stabilize, secure, and scale their AWS environments — often stepping in to audit, fix, and modernize existing infrastructure. To date, I have: • Designed and restructured multi-account AWS environments (dev/staging/prod isolation) • Built and maintained ECS Fargate production clusters • Migrated legacy servers to containerized workloads • Implemented Terraform-based Infrastructure as Code across multiple organizations • Led SOC 2 readiness initiatives including security hardening and risk remediation • Recovered unstable production systems under live traffic AWS Architecture (Advanced) • Multi-account architecture (Organizations, SCPs, IAM boundaries) • ECS Fargate, EC2, ALB/NLB, Auto Scaling • RDS (Aurora Serverless v2), MySQL/Postgres optimization • S3, CloudFront, WAF, Route53 • VPC design, subnet isolation, NACL hardening • Secure parameter management (SSM, Secrets Manager, KMS) • CloudWatch monitoring, alerting, log aggregation DevOps & Automation • Terraform (modular, environment-aware design) • GitHub Actions & CI/CD architecture • OIDC-based GitHub → AWS authentication • Ephemeral preview environments per PR • Blue/Green & zero-downtime deployments • Docker production optimization • Cost optimization & AWS spend audits Security & Compliance • SOC 2 Type I / II preparation • IAM least-privilege design & MFA enforcement • Encryption at rest & in transit (KMS, TLS policies) • Secrets rotation & audit logging • Risk assessments & remediation roadmaps • Security architecture documentation Databases & Data Operations • Production MySQL / Postgres migrations • CouchDB clustered deployments (n=3, q=8) • Shard recovery & disaster recovery planning • Backup validation & restore testing • Schema migrations (Alembic, Laravel, etc.) I do not apply superficial fixes. I audit environments thoroughly, document risk exposure, and implement long-term infrastructure improvements designed for scalability, security, and operational clarity. If you need a senior-level DevOps engineer who understands production systems, compliance pressure, and business continuity, I would be glad to assist.