I build internal developer platforms, secure delivery pipelines and Kubernetes platforms across Azure, AWS and on-prem. I have 11+ years in IT and 8+ in DevOps, starting in pre-sales and customer-facing engineering. I'm based in Dubai.
- 🧩 Platform engineering: built a Backstage IDP that runs one golden path from a template, through an approval, to infra and app repos, and on to a Dev deploy
- ☸️ Scale: part of a team running 130+ Azure subscriptions with AKS, managed identities and Argo CD; automated the migration of 100+ repos and pipelines from GitLab to GitHub
- 🔐 DevSecOps: end-to-end HashiCorp Vault (Raft high availability, auto-unseal, Kubernetes/AppRole/OIDC auth, Agent Injector and CSI driver) plus shift-left scanning in templated CI/CD
- 📉 SRE: Splunk and SignalFx alerting for applications and infrastructure; MTTD cut 30%, MTTR cut 40%
- 🤖 AI infrastructure: GPU-enabled Kubernetes and CI/CD for on-prem model deployment; built a hybrid cloud and local LLM chatbot (OpenAI, Gemini, Ollama)
azure-backstage-goldenpath: an open-source IDP where one Backstage form creates a GitHub repository, Terraform infrastructure approved in Backstage (enforced by GitHub), CI/CD and a running app on AKS, then shows its live health in the portal. OIDC and Workload Identity instead of secrets, a durable Python orchestrator, verified rollbacks, and the whole platform runs on an Azure Free Trial for about $0.18/hour.
k8s-ai-agent-platform: a private AI platform that runs on one laptop, with no cloud, no GPU and no API keys. A LangGraph agent answers from your own documents and scans with cited sources (agentic RAG), using six MCP tool servers, LiteLLM model routing with an evaluation gate, MLOps (Dagster, MLflow, BentoML, Evidently) and OpenTelemetry tracing, all on k3s with Argo CD GitOps and single sign-on.
Backstage template → infra sizing → approval → infra repo (Terraform/Terragrunt → Azure) → app repo + CI/CD skeleton → deploy to Dev
Developers get a governed environment and a deployable app from one request, with no infra tickets. The backend is Python APIs integrating with Azure Graph APIs.
- Senior DevOps Engineer · Government sector, Dubai · 2026 – now: DevSecOps lead; templated Azure DevOps CI/CD for APIs, CMS, web and mobile apps; Vault; Argo CD; Harbor + Tanzu; GPU Kubernetes
- DevOps & Cloud Engineer · Core42, Abu Dhabi · 2025: Backstage IDP, 130+ subscriptions, AKS, Terraform/Terragrunt, GitLab → GitHub migration
- Technical Lead, DevSecOps · Wipro (US Bank) · 2023–24: Azure/AKS migrations, Autosys → Azure Data Factory, Splunk/SignalFx SRE; Inspiring Performance Award
- Senior Systems Engineer, DevOps · QC Infotech, Dubai · 2015–23
- DevSecOps: Jenkins CI/CD with security best practices for React and Java e-commerce apps; Docker and Kubernetes; Terraform; Boto3 cost automation
- Storage and backup: NAS, on-prem and cloud object storage, tiered storage, tape, backup software
- File transfer: accelerated UDP-based transfer (FileCatalyst SaaS on AWS and Azure)
- Pre-sales: RFP responses, demos and POCs
| Area | Tools |
|---|---|
| Azure | VMs · App Service · Blob Storage · Functions · AKS · VNet · Load Balancer · Key Vault · Data Factory |
| AWS | EC2 · S3 · VPC · IAM · Lambda · CloudWatch · EKS · Auto Scaling · CloudTrail · Route 53 · EBS · EFS · KMS |
| Kubernetes | AKS · EKS · GKE · VMware Tanzu · Rancher · Helm · Kustomize · Argo CD · GPU workloads · cert-manager |
| IaC and platform | Terraform · Terragrunt · Ansible · Backstage |
| CI/CD | Azure DevOps (cloud and on-prem) · GitHub Actions · GitLab CI · Jenkins · Harbor · JFrog Artifactory |
| Containers | Docker · Podman · Kaniko |
| AI and LLM | OpenAI · Gemini · Ollama · FastAPI · React |
| Security | SonarQube · Fortify · Black Duck · Synopsys · Trivy · Twistlock · Gitleaks · Spectral · OWASP ZAP · Kyverno |
| Secrets | HashiCorp Vault · Azure Key Vault · AWS Secrets Manager |
| Observability | Splunk · SignalFx · New Relic · Prometheus · Grafana · ELK/EFK · OpenTelemetry |
| Storage and backup | NAS · object storage (on-prem and cloud) · tiered storage · tape · backup software · UDP file transfer (FileCatalyst) |
| SCM and build | Git · GitHub · GitLab · Maven · npm |
| Languages and OS | Python (Boto3) · Bash · Linux · Windows |
| ITSM and collaboration | Jira · ServiceNow · Confluence · Slack · Microsoft Teams · Zoom |
- azure-backstage-goldenpath: an open-source Internal Developer Platform on Backstage and Azure. One form produces a repository, Terraform infrastructure approved in Backstage, CI/CD and a running app on AKS, with live health and Kubernetes tabs in the portal, OIDC and Workload Identity throughout, and a timed teardown that keeps it inside an Azure Free Trial.
- k8s-ai-agent-platform: a self-hosted AI agent, RAG and MLOps platform on k3s that runs on a laptop with CPU-only local LLMs. LangGraph agent with MCP tools and cited answers, LiteLLM routing with an evaluation gate, MLflow and BentoML, Phoenix tracing, Authelia SSO and Argo CD GitOps.
- hybrid-chatbot: a hybrid AI chatbot with a FastAPI router that sends each prompt to OpenAI or Gemini in the cloud, or to a local Ollama model. Private prompts stay local, the router falls back automatically when a cloud model fails, and it has a React UI and runs as a full Podman container stack.
- sentiment-microservices-gke-cicd: three microservices (React, Spring Boot, Flask) with GitHub Actions CI/CD to GKE. It covers SonarQube scanning, Docker Hub images, Kustomize stage and prod overlays, HPA, cert-manager TLS and tag-based production releases.
- aws-ecs-fargate-terraform: Terraform for a highly available ECS Fargate service behind an ALB across two AZs, with IAM roles, networking, a one-command deploy script and an architecture diagram generated as code.
- sentiment-frontend-devsecops-kyverno: Kyverno admission policies (signed images only, registry allow-lists, label and namespace rules) plus a hardened container image, deployed with Kustomize.
Azure data migration strategies · AWS CLI commands for DevOps interviews · Managed file transfer in the cloud · Cost-effective CDN options