Hire the Best DevOps Engineers
in Tunisia

I am a highly motivated DevOps engineer with 5+ years of experience in the field. I specialize in cloud technologies, with extensive expertise in Azure for cloud infrastructure management. I have a solid background in setting up and managing build and release pipelines using Azure DevOps, GitHub Actions, and Jenkins. Additionally, I am proficient in Infrastructure as Code (IaC) using ARM templates and Terraform, ensuring scalable, efficient, and secure cloud environments. My experience extends to containerization techniques, including Docker, Docker Compose, and Kubernetes, along with cloud-based container orchestration platforms like Azure Kubernetes Service (AKS). I am committed to driving operational efficiency and delivering high-quality solutions in dynamic environments. ✔️ Cloud Platform: Azure ☁️ ✔️Containers: Docker & Docker compose 🫙 ✔️Container Orchestration: Kubernetes & AKS 🎷 ✔️Kubernetes Application: Helm Charts & Kustomize ⚓️ ✔️Continuous Integration/Deployment: Azure Devops, GitHub Actions, jenkins ⚒️ ✔️GitOps : ArgoCD 🚀 ✔️Infrastructure as a Code: Terraform, Template Arm🏗 ✔️ Programming and Scripting: powershell, Bash and Python3 👨‍💻 ✔️Logging, Monitoring & Alerting: Grafana, Prometheus, Alert Manager 🔍 ✔️VCS: Git, GitHub 🗃️

I am a python backend developer, devops engineer (3+ years). Experience and skills: ● 2 years of experience in developing Rest Api using flask and django. ● Employed Full-time as python developer ● Having experience python, flask, django, pytest, sql, postgresql, mariadb, Git, Docker. ● Docker-swarm, kubernetes, Linux ● Working on with various CICD pipelines using both Git and Jenkins. ● Hands on experience on various projects using aws services: ec2, vpc, ecs, elb..

🏆 𝕋𝕠𝕡 1% - 𝕋𝕠𝕡 ℝ𝕒𝕥𝕖𝕕 ℙ𝕝𝕦𝕤 🧑🏻‍🤝‍🧑🏻 60+ ℍ𝕒𝕡𝕡𝕪 𝕔𝕝𝕚𝕖𝕟𝕥𝕤 ⏱️ 6000+ 𝕋𝕠𝕥𝕒𝕝 ℍ𝕠𝕦𝕣𝕤 🎭 100% 𝕁𝕊𝕊) Hi 👋, I specialize in designing and deploying 𝙞𝙣𝙣𝙤𝙫𝙖𝙩𝙞𝙫𝙚, 𝙨𝙘𝙖𝙡𝙖𝙗𝙡𝙚, 𝙖𝙣𝙙 𝙨𝙚𝙘𝙪𝙧𝙚 cloud-native solutions💡. With more than 𝟖 years of experience as 𝘾𝙡𝙤𝙪𝙙 𝘼𝙧𝙘𝙝𝙞𝙩𝙚𝙘𝙩, 𝙆𝙪𝙗𝙚𝙧𝙣𝙚𝙩𝙚𝙨 𝘼𝙙𝙢𝙞𝙣𝙨𝙩𝙧𝙖𝙩𝙤𝙧 𝙖𝙣𝙙 𝘿𝙚𝙫𝙎𝙚𝙘𝙊𝙥𝙨 𝙀𝙣𝙜𝙞𝙣𝙚𝙚𝙧. T̲h̲i̲s̲ ̲i̲s̲ ̲m̲y̲ ̲P̲r̲o̲f̲e̲s̲s̲i̲o̲n̲a̲l̲ ̲C̲e̲r̲t̲i̲f̲i̲c̲a̲t̲i̲o̲n̲ ̲:̲ 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 Administrator CKA 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 Security specialist CKS 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 Application Developer CKAD 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 𝒂𝒏𝒅 𝑪𝒍𝒐𝒖𝒅 𝑵𝒂𝒕𝒊𝒗𝒆 Associate (KCNA) 🥇 𝑲𝒖𝒃𝒆𝒓𝒏𝒆𝒕𝒆𝒔 𝒂𝒏𝒅 𝑪𝒍𝒐𝒖𝒅 𝑵𝒂𝒕𝒊𝒗𝒆 𝑺𝒆𝒄𝒖𝒓𝒊𝒕𝒚 Associate (KCSA) 🥇 𝑨𝑾𝑺 Solution Architect 🥇 𝑨𝒛𝒖𝒓𝒆 DevOps Expert🥇 𝑻𝒆𝒓𝒓𝒂𝒇𝒐𝒓𝒎 Associate🥇 𝑨𝒓𝒈𝒐 𝑪𝑫, GitOps At Scale 🥇 Certified 𝑰𝒔𝒕𝒊𝒐 and 𝑬𝒏𝒗𝒐𝒚 Service Mesh With my expertise in cloud-native design, I can help you build scalable, high-performance applications using microservices, deployed seamlessly in containers on private, public, or hybrid cloud platforms. This will be realized using this 🆃🅾🅾🅻🆂 🛠️ following the 𝙎𝙚𝙫𝙚𝙣 𝙈𝙤𝙙𝙚𝙡𝙨 𝙤𝙛 𝘾𝙡𝙤𝙪𝙙 𝙉𝙖𝙩𝙞𝙫𝙚 𝘿𝙚𝙨𝙞𝙜𝙣 🔥 : 👨‍💻 𝟏. 𝐌𝐨𝐝𝐞𝐫𝐧 𝐃𝐞𝐬𝐢𝐠𝐧 & 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 𝐌𝐨𝐝𝐞 - Programming Languages: 𝙂𝙤, 𝙋𝙮𝙩𝙝𝙤𝙣, 𝙉𝙤𝙙𝙚 𝙟𝙨, 𝘽𝙖𝙨𝙝 - Containerization Tools: 𝘿𝙤𝙘𝙠𝙚𝙧, 𝘿𝙤𝙘𝙠𝙚𝙧-𝘾𝙤𝙢𝙥𝙤𝙨𝙚, 𝙆𝙖𝙣𝙞𝙠𝙤, 𝙋𝙤𝙙𝙢𝙖𝙣 - Container Image Registry: 𝙃𝙖𝙧𝙗𝙤𝙧, 𝘿𝙤𝙘𝙠𝙚𝙧𝙝𝙪𝙗 𝙂𝙞𝙩𝙡𝙖𝙗 𝙍𝙚𝙜𝙞𝙨𝙩𝙧𝙮, 𝙂𝙞𝙩𝙝𝙪𝙗 𝙍𝙚𝙜𝙞𝙨𝙩𝙧𝙮 - A̲P̲I̲ ̲D̲r̲i̲v̲e̲n̲: 𝘼𝙥𝙞𝙨𝙞𝙭, 𝙄𝙨𝙩𝙞𝙤 𝙂𝙖𝙩𝙚𝙬𝙖𝙮, 𝙆𝙤𝙣𝙜, 𝙏𝙧𝙖𝙚𝙛𝙞𝙠, 𝘼𝙢𝙗𝙖𝙨𝙨𝙖𝙙𝙤𝙧, 𝙏𝙮𝙠 - M̲o̲d̲e̲r̲n̲ ̲D̲a̲t̲a̲b̲a̲s̲e̲s̲: 𝘾𝙖𝙨𝙨𝙖𝙣𝙙𝙧𝙖, 𝙀𝙡𝙖𝙨𝙩𝙞𝙘𝙨𝙚𝙖𝙧𝙘𝙝, 𝘾𝙤𝙪𝙘𝙝𝙙𝙗, 𝙍𝙚𝙙𝙞𝙨, 𝙋𝙤𝙨𝙩𝙜𝙧𝙚𝙎𝙌𝙇, 𝙑𝙞𝙩𝙚𝙨𝙨 - E̲v̲e̲n̲t̲-̲D̲r̲i̲v̲e̲n̲ ̲D̲e̲s̲i̲g̲n̲:̲ 𝙉𝘼𝙏𝙎, 𝙍𝙖𝙗𝙗𝙞𝙩𝙈𝙌, 𝙆𝙖𝙛𝙠𝙖, 𝘼𝙘𝙩𝙞𝙫𝙚𝙈𝙌, 𝘽𝙚𝙖𝙣𝙨𝙩𝙖𝙡𝙠𝙙 🏗️ 𝟐. 𝐌𝐨𝐝𝐞𝐫𝐧 𝐈𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞/𝐃𝐞𝐯𝐎𝐩𝐬 - 𝐂𝐈/𝐂𝐃 - CI/CD Tools: 𝙂𝙞𝙩𝙡𝙖𝙗 𝘾𝙄, 𝙂𝙞𝙩𝙝𝙪𝙗 𝘼𝙘𝙩𝙞𝙤𝙣𝙨, 𝙅𝙚𝙣𝙠𝙞𝙨, 𝘿𝙖𝙜𝙜𝙚𝙧, 𝙏𝙧𝙖𝙫𝙞𝙨 𝘾𝙄, 𝘾𝙞𝙧𝙘𝙡𝙚 𝘾𝙄, 𝙏𝙚𝙠𝙩𝙤𝙣. - Security Scanning Tools: 𝙏𝙧𝙞𝙫𝙮, 𝘿𝙤𝙘𝙠𝙚𝙧 𝙎𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙎𝙘𝙖𝙣𝙣𝙚𝙧, 𝙎𝙣𝙮𝙠 - Secret Management: 𝙎𝙤𝙥𝙨, 𝙑𝙖𝙪𝙡𝙩, 𝙆𝙚𝙮𝙗𝙖𝙨𝙚, 𝙑𝙖𝙪𝙡𝙩 𝙎𝙚𝙘𝙧𝙚𝙩𝙨 𝙊𝙥𝙚𝙧𝙖𝙩𝙤𝙧, 𝙄𝙣𝙛𝙞𝙨𝙞𝙘𝙖𝙡 - D̲e̲c̲l̲a̲r̲a̲t̲i̲v̲e̲ ̲A̲P̲I̲ ̲(̲I̲a̲a̲C̲)̲: 𝙏𝙚𝙧𝙧𝙖𝙛𝙤𝙧𝙢, 𝙋𝙪𝙡𝙪𝙢𝙞, 𝘼𝙣𝙨𝙞𝙗𝙡𝙚, 𝙋𝙪𝙥𝙥𝙚𝙩, 𝘾𝙝𝙚𝙛, 𝙆𝙪𝙗𝙚𝙫𝙚𝙡𝙖 - Service Discovery & Service Mesh: 𝙄𝙨𝙩𝙞𝙤, 𝙀𝙣𝙫𝙤𝙮, 𝘾𝙤𝙣𝙨𝙪𝙡, 𝙇𝙞𝙣𝙠𝙚𝙧𝙙, 𝙕𝙤𝙤𝙠𝙚𝙚𝙥𝙚𝙧, 𝙈𝙚𝙨𝙝𝙚𝙧𝙮 - SSL: 𝘾𝙚𝙧𝙩 𝙈𝙖𝙣𝙖𝙜𝙚𝙧, 𝘾𝙚𝙧𝙩𝙗𝙤𝙩, 𝙇𝙚𝙩’𝙨 𝙀𝙣𝙘𝙧𝙮𝙥𝙩 - Applications Platforms: 𝙆𝙪𝙗𝙚𝙧𝙣𝙚𝙩𝙚𝙨, 𝘿𝙤𝙘𝙠𝙚𝙧 𝙎𝙬𝙖𝙧𝙢, 𝙊𝙥𝙚𝙣𝙨𝙝𝙞𝙛𝙩, 𝙍𝙖𝙣𝙘𝙝𝙚𝙧, 𝙊𝙥𝙚𝙣𝙨𝙩𝙖𝙘𝙠 - Internal Developer Platforms: 𝘽𝙖𝙘𝙠𝙨𝙩𝙖𝙜𝙚, 𝙆𝙧𝙖𝙩𝙞𝙭, 𝙋𝙤𝙧𝙩 - Kubernetes Package Managers: 𝙃𝙚𝙡𝙢 , 𝙃𝙚𝙡𝙢𝙛𝙞𝙡𝙚, 𝙃𝙚𝙡𝙢𝙨𝙢𝙖𝙣 ⚙️ 𝟑. 𝐁𝐮𝐢𝐥𝐝 & 𝐃𝐞𝐩𝐥𝐨𝐲𝐦𝐞𝐧𝐭 𝐌𝐨𝐝𝐞𝐥 - Worker Nodes Scaling: 𝙆𝙖𝙧𝙥𝙚𝙣𝙩𝙚𝙧, 𝘾𝙡𝙪𝙨𝙩𝙚𝙧 𝘼𝙪𝙩𝙤𝙨𝙘𝙖𝙡𝙚𝙧 - Pods Replication Scaling: 𝙠𝙣𝙖𝙩𝙞𝙫𝙚, 𝙃𝙤𝙧𝙞𝙯𝙤𝙣𝙩𝙖𝙡 𝙋𝙤𝙙 𝘼𝙪𝙩𝙤𝙨𝙘𝙖𝙡𝙚𝙧 (𝙃𝙋𝘼), 𝙑𝙚𝙧𝙩𝙞𝙘𝙖𝙡 𝙋𝙤𝙙 𝘼𝙪𝙩𝙤𝙨𝙘𝙖𝙡𝙚𝙧 (𝙑𝙋𝘼) - G̲i̲t̲O̲p̲s̲: 𝙁𝙡𝙪𝙭𝘾𝘿, 𝘼𝙧𝙜𝙤𝘾𝘿, 𝙍𝙖𝙣𝙘𝙝𝙚𝙧 𝙁𝙡𝙚𝙚𝙩, Argo Rollout , Canary, Blue/Green 🔭 𝟒. 𝐂𝐥𝐨𝐮𝐝 𝐎𝐛𝐬𝐞𝐫𝐯𝐚𝐛𝐢𝐥𝐢𝐭𝐲 - Monitoring: 𝙋𝙧𝙤𝙢𝙚𝙩𝙝𝙪𝙚𝙨, 𝙂𝙧𝙖𝙛𝙖𝙣𝙖 - Tracing: 𝙏𝙚𝙢𝙥𝙤, 𝙚𝘽𝙋𝙁, 𝙊𝙥𝙚𝙣𝙏𝙚𝙡𝙚𝙢𝙚𝙩𝙧𝙮,𝙅𝙖𝙚𝙜𝙚𝙧, 𝙕𝙞𝙥𝙠𝙞𝙣 - APM: 𝙉𝙚𝙬 𝙍𝙚𝙡𝙞𝙘, 𝙎𝙠𝙮𝙬𝙖𝙡𝙠𝙞𝙣𝙜, 𝘿𝙖𝙩𝙖𝙙𝙤𝙜 - Continuous Profiling & Analysis: 𝙋𝙖𝙧𝙦𝙖, 𝙏𝙚𝙩𝙧𝙖𝙜𝙤𝙣, 𝙋𝙮𝙧𝙤𝙨𝙘𝙤𝙥𝙚 - Logging: 𝙇𝙤𝙠𝙞, 𝙀𝙇𝙆, 𝙁𝙡𝙪𝙚𝙣𝙩𝘽𝙞𝙩 - Observability Platforms: 𝙋𝙞𝙭𝙞𝙚, 𝙐𝙥𝙩𝙧𝙖𝙘𝙚, 𝙋𝙞𝙣𝙥𝙤𝙞𝙣𝙩, 𝘾𝙤𝙧𝙤𝙤𝙩 - Security Policies: 𝙆𝙚𝙮𝙘𝙡𝙤𝙖𝙘𝙠, 𝙁𝙖𝙡𝙘𝙤, 𝙆𝙪𝙗𝙚𝘼𝙧𝙢𝙤𝙧 🔐 𝟓. 𝟒𝐂'𝐬 𝐨𝐟 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 - Container Security | Cluster Security | Cloud Security | Container Image Security ☁️ 𝟔. 𝐂𝐥𝐨𝐮𝐝 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬 - Private: 𝘼𝙒𝙎 𝙂𝙊𝙑 𝘾𝙡𝙤𝙪𝙙 , 𝘼𝙯𝙪𝙧𝙚 𝙂𝙊𝙑 𝘾𝙡𝙤𝙪𝙙 - Public: 𝘼𝙒𝙎 , 𝘼𝙯𝙪𝙧𝙚, 𝙂𝘾𝙋, 𝘿𝙞𝙜𝙞𝙩𝙖𝙡𝙊𝙘𝙚𝙖𝙣, 𝙑𝙈𝙬𝙖𝙧𝙚, 𝙇𝙞𝙣𝙤𝙙𝙚, Scaleway, Hertzner, OVH Cloud 🔁 𝟕. 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 - Chaos Engineering: 𝙇𝙞𝙢𝙞𝙩𝙪𝙨, 𝘾𝙝𝙖𝙤𝙨 𝙈𝙚𝙨𝙝 , 𝘾𝙝𝙖𝙤𝙨 𝙆𝙪𝙗𝙚 - MLOps Tools: 𝙈𝙇𝙁𝙡𝙤𝙬, 𝙋𝙚𝙧𝙛𝙚𝙘𝙩, 𝙈𝙚𝙩𝙖𝙛𝙡𝙤𝙬, 𝙆𝙪𝙗𝙚𝙁𝙡𝙤𝙬, 𝙍𝙖𝙮, 𝙈𝙚𝙩𝙖𝙁𝙡𝙤𝙬 💡 What Clients Say: ⭐⭐⭐⭐⭐"Firas has become a reliable resource for our company whenever we face any issues with our devops needs from cloud architecture, or cloud native app" ⭐⭐⭐⭐⭐"Firas went above and beyond in delivering the work! His dedication and skillset are commendable. Highly recommended!!" ⭐⭐⭐⭐⭐"Firas was like a GINUIS that solved a long persisting issues"

Self-driven DevOps engineer who builds and runs infrastructure that works when it matters. I've spent years working with Kubernetes, OpenShift, and Linux systems in production environments where downtime isn't an option (Banking Sector). I handle the full stack: cluster setup and operations Day0-2, infrastructure automation with Terraform and Ansible, CI/CD pipelines, and production troubleshooting when things break. I work across AWS, Azure, and on-prem environments, and I'm comfortable with both greenfield builds and fixing what's already there. My background includes networking, security hardening, and Linux administration. I've architected and deployed Red Hat platforms like Ansible Automation Platform and Red Hat Satellite. I manage SSL/TLS certificates, configure load balancing, and handle DNS. I've also deployed self-hosted AI infrastructure including vector databases and RAG pipelines on Kubernetes. I write tools in Golang when the situation calls for it. I use monitoring and observability tools like Prometheus, Grafana, and Loki to catch issues before they become incidents. I've built multi-tenant Kubernetes architectures with proper isolation, configured zero-trust networking with Wireguard, and integrated security scanning into CI/CD pipelines. I hold certifications from Red Hat, AWS, and the Linux Foundation, but what matters more is that I can diagnose problems quickly, communicate clearly, and stay engaged through tough situations. If you are looking for someone who can own infrastructure end-to-end and keep systems stable, let's talk.

✅ I'm the highest-rated and one of the highest-earning Devops and Cloud specialist freelancers on Upwork, with more than 60 5-star reviews and overwhelmingly positive feedback. 💫 I am featured as the top freelancer in the IT category on Upwork, which has over 116,000 Freelancers in the category. 👨🏻‍💻 I am your all-in-one DevOps partner and your co-CTO: I help tech & AI startups build scalable, secure, production-ready infrastructure from day one. Whether you’re launching an MVP, deploying ML models, or scaling your SaaS, I bring 8+ years of DevOps expertise to move fast without breaking things. 🔐📆 🥇 Proud to be part of Upwork’s Expert-Vetted Talent Pool (Cloud & DevOps) 🆘 I’ve helped: - AI platforms optimizing LLM and inference workloads - NLP + computer vision teams deploy fast across dev/staging/prod - Founders ship early and scale confidently with clean infra 🍝 History: - 70+ projects completed - 2400+ hours of DevOps & Cloud consulting delivered - Clients include AI platforms, fintech companies, and early-stage startups 😌 Why your life would be easier working with me: - All-in-One Expert : From day one, I handle everything related to infrastructure, DevOps, and CI/CD. You’ll never worry about scaling, monitoring, or hiring multiple engineers. - Infra that just works : I build platforms that are reliable, observable, and secure. You focus on product. I’ll take care of the rest. - Speed + stability : I move fast while following best practices. That means rapid delivery, clean automation, and fewer late-night emergencies. - Efficiency-focused : I help you avoid cloud waste and complexity. This means fewer headaches, reduced costs, and a stack that scales confidently without technical debt. 🔧 You’ll get infrastructure that is: - Cost-optimized and cloud-native (GCP, AWS) - Automated and reproducible (Terraform, CI/CD) - Designed for scale (Kubernetes, GitOps, GPU-ready) - Observed and hardened (Monitoring, Security, Secrets Mgmt) 💬 Recent Client Feedback: ⭐⭐⭐⭐⭐ “I was extremely impressed with Haythem's professionalism, knowledge, skill, and experience throughout our engagement. His communication was excellent - he consistently responded within an hour or two and really understands business requirements well. He's very efficient at solving not just simple problems, but complex ones too, and he truly gets how development teams work. Haythem communicates really well with our entire team and is even willing to adapt to DevOps related technologies he's not familiar with. The quality of his work was consistently excellent. I would highly recommend him to anyone looking for outstanding DevOps support and help. If we have another project, I would definitely hire him again in a heartbeat.” - DAOSTREET - https:// daostreet.io ⚙️ Tech Stack Expertise : for AI & Tech Startups - Not limited to - - Cloud: GCP (GKE, Cloud Run, Vertex AI), AWS (EKS, Lambda, SageMaker), Azure, DigitalOcean, OVH - IaC & Automation: Terraform, GitHub Actions, GitLab CI, Jenkins (Groovy), Cloud Build, Ansible, HashiCorp Vagrant - Containers & Orchestration: Kubernetes (GKE, EKS), Helm, ArgoCD, Docker, Docker Compose, Docker Swarm, Harbor - MLOps: Model deployment pipelines, GPU workloads, feature store integration - Monitoring: Prometheus, Grafana, Sentry, Cloud Monitoring, Zabbix, Munin, Loki - Security: IAM, VPCs, TLS/SSL, WAFs, HashiCorp Vault, Keycloak, OpenVPN, IPSEC, pfSense, fail2ban - Databases: PostgreSQL, Redis, MongoDB, Firebase, Cloud SQL, MySQL - Web & System Services: Nginx, Apache, Tomcat, JBoss, Postfix, Kannel, Alfresco - Linux & OS-Level: Debian, Nix, RHEL, Pacemaker, Corosync, LVM, VDO, Stratis - Dev Tooling & Scripting: Bash, Python, Maven, Gradle, NPM, Git, Node.js - Networking: SMPP/SMS, SMTP, DNS, DHCP, NTP, FTP, SSH, T.38 - Virtualization & Firewall: VMware, Cisco ASA

Certifications: Linux Professionals Institute - LPIC-1 AWS Certified SysOps Administrator - Associate AWS Certified DevOps Engineer - Professional I am a Senior DevOps / Cloud Infrastructure Engineer specializing in AWS architecture, production reliability, compliance readiness (SOC 2 / ISO 27001), and scalable multi-environment infrastructure. I help startups and growing SaaS companies stabilize, secure, and scale their AWS environments — often stepping in to audit, fix, and modernize existing infrastructure. To date, I have: • Designed and restructured multi-account AWS environments (dev/staging/prod isolation) • Built and maintained ECS Fargate production clusters • Migrated legacy servers to containerized workloads • Implemented Terraform-based Infrastructure as Code across multiple organizations • Led SOC 2 readiness initiatives including security hardening and risk remediation • Recovered unstable production systems under live traffic AWS Architecture (Advanced) • Multi-account architecture (Organizations, SCPs, IAM boundaries) • ECS Fargate, EC2, ALB/NLB, Auto Scaling • RDS (Aurora Serverless v2), MySQL/Postgres optimization • S3, CloudFront, WAF, Route53 • VPC design, subnet isolation, NACL hardening • Secure parameter management (SSM, Secrets Manager, KMS) • CloudWatch monitoring, alerting, log aggregation DevOps & Automation • Terraform (modular, environment-aware design) • GitHub Actions & CI/CD architecture • OIDC-based GitHub → AWS authentication • Ephemeral preview environments per PR • Blue/Green & zero-downtime deployments • Docker production optimization • Cost optimization & AWS spend audits Security & Compliance • SOC 2 Type I / II preparation • IAM least-privilege design & MFA enforcement • Encryption at rest & in transit (KMS, TLS policies) • Secrets rotation & audit logging • Risk assessments & remediation roadmaps • Security architecture documentation Databases & Data Operations • Production MySQL / Postgres migrations • CouchDB clustered deployments (n=3, q=8) • Shard recovery & disaster recovery planning • Backup validation & restore testing • Schema migrations (Alembic, Laravel, etc.) I do not apply superficial fixes. I audit environments thoroughly, document risk exposure, and implement long-term infrastructure improvements designed for scalability, security, and operational clarity. If you need a senior-level DevOps engineer who understands production systems, compliance pressure, and business continuity, I would be glad to assist.