Senior DevOps Engineer | 10+ Years Experience | AWS, Terraform, Gitlab, Linux, CI/CD

I am a results-driven Senior DevOps Engineer with proven expertise in building secure, scalable, and automated cloud platforms. Over the years, I’ve designed and implemented container patching pipelines, migrated CI/CD ecosystems from Bamboo to GitLab, and led large-scale cloud security initiatives such as enforcing S3 access controls, IAM role adoption, and cross-account data encryption with KMS. My background spans AWS, GitLab CI/CD, Terraform, CloudFormation, ECS, and security-driven automation, enabling me to deliver resilient platforms while reducing vulnerabilities, costs, and manual effort. What sets me apart is my ability to bridge engineering excellence with security and reliability, driving end-to-end automation while partnering closely with developers to accelerate feature delivery. From migrating legacy repositories to GitLab, designing self-service CI/CD tools, and optimising cloud spend, to remediating vulnerabilities within SLA, I thrive on creating solutions that not only work but scale securely and efficiently.

Core Skills & Expertise

• AWS Services: EC2, RDS, S3, VPC, IAM, CloudFormation, Lambda, CloudTrail, Config, CloudWatch, ELB/ALB, Cognito, Organizations, API Gateway, Systems Manager, CodeCommit, Secrets Manager, ECS, ECR, CloudFront, SSO, ACM, Route53, WAF, KMS
• Networking: TCP/IP, DNS, DHCP, IPv6, VPN, VLAN
• DevOps Tools: Ansible, Jenkins, Git, Gitlab, Bitbucket, Bamboo, Docker, New Relic, Splunk, Sumologic, Stash, Terraform, Dynatrace, Prisma Cloud
• Scripting: Python, Bash scripting
• Platform: Redhat, CentOS, Ubuntu
• Database: MySQL, PostgreSQL
• Others: PingFederate, Mulesoft, Layer 7 Policy Manager (SAG)

Work Experience & Achievements

• Designed and implemented a container patching pipeline using GitLab CI/CD, reducing container vulnerabilities by 40% and eliminating manual patching effort.
• Led migration of CI/CD jobs from Bamboo to GitLab pipelines, improving deployment speed by 30% and standardising build workflows across teams.
• Enhanced cloud security posture by rotating/deleting AWS access keys, replacing them with IAM roles, and reducing credential-based incidents by 100%.
• Spearheaded S3 security project by blocking public access and enforcing CloudFront Origin Access Identity, ensuring compliance with corporate data security standards.
• Migrated 20+ source code repositories from Stash to GitLab with full commit history, enabling centralised collaboration and version control.
• Deployed and managed Optus microservices on AWS ECS, ensuring 99.9% uptime and supporting high-volume customer transactions.
• Re-designed legacy workflows (migrating cron jobs to ECS scheduled tasks) to deliver cost savings of 25% and improved reliability.
• Automated infrastructure provisioning with CloudFormation and Terraform, including S3, CloudFront, and WAF integration, restricting access to corporate networks only.
• Developed tagging policy generator and enforced tagging compliance for 100% of AWS resources, enabling accurate cost allocation and governance.
• Designed cross-account KMS encryption workflows, protecting sensitive customer and financial data across business units.
• Improved incident resolution by leveraging ELK and CloudWatch logs, reducing mean time to resolution (MTTR) by 35% through close collaboration with development teams.
• Optimised AWS cost management by identifying unused resources and rightsizing compute workloads, saving $150K annually.

I am eager to leverage my expertise in cloud automation, security, and DevOps transformation to contribute to large-scale digital initiatives in Middle East. My career goal is to drive secure, scalable, and cost-efficient cloud platforms while mentoring teams and fostering a culture of continuous improvement. I am seeking senior DevOps opportunities in forward-thinking organisations—particularly in finance, telecom, or government—where I can deliver measurable business impact through innovation and automation.