Experienced DevOps and Site Reliability Engineer architecting secure, scalable cloud infrastructure on AWS. Skilled in IaC, CI/CD, building everything from event-driven serverless applications to containerised microservices and legacy monolith modernisation, with experience supporting complex distributed systems running 10k+ workloads.
Currently at Velstar, I've modernised deployments, slashed cloud costs across dozens of AWS accounts, and built comprehensive observability systems with a strong focus on DevSecOps and platform engineering. My journey from developer to senior DevOps engineer brings a well-rounded understanding of both technical and business sides of technology. I excel at adaptability, whether troubleshooting complex network issues, hardening security or diving deep into application performance optimisation, always quick to learn and bridge gaps between development, operations, and security teams.
Work Experience
Velstar
Senior DevOps Engineer
Jan 2023 - Present
Liverpool, United Kingdom
- Built and maintained Terraform modules enabling consistent infrastructure deployments with ephemeral environments, reducing provisioning time leveraging improved platform engineering practices
- Established comprehensive CI/CD pipelines on GitLab and Bitbucket with integrated SAST, SCA, and automated QA and test, including golden AMI creation and automated patching workflows.
- Implemented observability using DataDog, CloudWatch,Sentry and Prometheus/Grafana stack enabling proactive monitoring and faster incident response
- Hardened cloud security by remediating audit findings and aligning with the latest CIS Benchmark v3.0 and ensuring regulatory compliance PCI DSS v4.0.1, using AWS Security Hub as CSPM to manage findings and enforce best practice controls.
- Migration of legacy monolith applications from traditional infrastructure to containerised solutions on AWS ECS improving scalability, performance and deployment pipeline.
- Developed and maintained **serverless workloads** using **AWS Lambda**, working with various runtimes (Node.js, Python, Go) across **event-driven**, **scheduled (cron-based)**, and **request-based** execution models.
- Significantly lowered cloud spend while maintaining performance across 40+ AWS accounts.
- Upgraded on-premise enterprise firewalls while ensuring uninterrupted VPN connectivity for critical business operations.
- Implemented internal enterprise AI chatbot backed by various internal knowledge sources.
9xb
Cloud Support Engineer
Sep 2021 - Dec 2022
Leeds, United Kingdom
- Supported and maintained AWS-hosted applications across LAMP, MEAN, and JAMstack including legacy environments focusing on automation and modern DevOps practices.
- Designed and built CI/CD pipelines with GitLab and Bitbucket, integrating Terraform and Terratest for IAC, enabling automated test-driven deployments.
- Architected and implemented advanced hybrid cloud networking solutions, including site-to-site VPNs, dedicated network connectivity, and centralized routing frameworks to securely integrate third-party systems and on-prem infrastructure with AWS.
- Managed on-premise firewalls, development servers, and **Citrix-based virtualisation**, bridging hybrid environments across cloud and on-prem infrastructure.
- Implemented observability and FinOps practices, optimising cloud spend while maintaining performance and reliability.
- Reviewed and remediated security vulnerabilities uncovered during **external penetration tests**, **PCI DSS scans**, and web application assessments, ensuring compliance across both cloud infrastructure and application layers.
- Diagnosed and resolved complex **backend performance issues**, including analysing **MySQL query performance**, indexing strategies, and optimising slow-running application logic to improve response times.
- Handled incident response for production issues, participating in on-call rotations
La Poste TELECOM
Site Reliability Engineer
Jun 2019 - Sep 2021
Paris, France
- Architected & implement centralised logging and metric solution using Elastic Stack across on-prem and cloud infrastructure, supporting multiple production environments, providing comprehensive visibility into 100+ nodes and their performance
- Developed Kibana dashboards for operational insights and troubleshooting, enabling data-driven decision making for infrastructure optimisation
- Managed complex workloads with even driven workflows across multiple environments, ensuring smooth operations and minimizing disruptions
- Managed Nagios monitoring system and automated functional testing workflows, providing support and incident escalation during on-call rotations
- Automated functional and non-functional testing, reducing manual effort and improving release cycle
- Developed automation scripts in UNIX and PowerShell environments to streamline routine operational tasks
La Poste TELECOM
Junior Site Reliability Engineer
Jul 2018 - May 2019
Paris, France
- Maintained a large-scale distributed workload automation system using **AutoSys**, supporting over **10k+ complex interdependent jobs** tied to internal operations and third-party data exchanges.
- Assisted in production deployments, server maintenance (IIS, Apache Tomcat), and database support.
- Configured Nagios monitoring and developed automation scripts using Ruby to enhance operational efficiency.
- Developed automation scripts in **Ruby**, **Shell**, and **VBScript** to streamline recurring tasks and improve operational efficiency.
- Supported incident response, service request handling, and workflow troubleshooting as part of the SRE team, gaining hands-on experience in linux administration, **automation**, **infrastructure monitoring**, and **system reliability**.
Webicosoft
PHP Developer
Jul 2017 - Dec 2017
Gujrat, Pakistan
- Gained foundational experience in backend development, version control, and client requirement understanding.
- Built web applications using Laravel, Bootstrap, and jQuery, following best practices for responsive and maintainable code.
- Contributed to bug fixing, feature enhancements, and testing under senior developer supervision.
- Participated REST API development and deployment to staging or production environments.
Skills
Cloud & Infrastructure
- Cloud Platforms: AWS, Digital Ocean
- Infrastructure as Code: Terraform, CloudFormation, Terratest, Packer, Checkov
- Containerization: Docker, AWS ECS, Kubernetes
- Virtualization: Citrix XenServer, VMware, VirtualBox, Vagrant
- Serverless Computing
CI/CD & DevOps
- Pipelines: GitLab CI, Jenkins, Bitbucket Pipelines, AWS CodeDeploy
- Configuration Management: Ansible, Salt, Chef
- Version Control: Git, GitLab, GitHub, Bitbucket
- Methodologies: GitOps, DevSecOps, FinOps
Monitoring & Observability
- Logging: ELK Stack, Elasticsearch, Logstash, Kibana
- Metrics & Alerting: Prometheus, Grafana, DataDog, Nagios
- APM & Tracing: AWS CloudWatch, DataDog APM
- Dashboarding & Visualization
Security & Compliance
- Frameworks: PCI DSS, CIS Benchmarks, OWASP TOP 10
- Testing: SAST, DAST, SCA
- Vulnerability Management: Tenable, Security Hub
- Security Monitoring: Wazuh SIEM
- Identity & Access: IAM, Authentication/Authorization
Networking & Infrastructure
- Services: DHCP/DNS/FTP, CDN (Cloudflare)
- Security: Firewalls (SonicWall), VPNs (IPsec, SSL)
- Load Balancing: HAProxy, AWS ELB
- Web Servers: Nginx, Apache, IIS, Tomcat
Database & Storage
- SQL: MySQL, PostgreSQL, Oracle, SQL Server, MariaDB, Aurora
- NoSQL: Elasticsearch, Redis, DynamoDB
- Data Management: Backup strategies, Replication, Scaling
Programming & Automation
- Scripting: Bash, Python, PowerShell
- Web: PHP, JavaScript
- Automation: Shell scripting, Python automation
- Job Scheduling: AutoSys, Cron