Muhammad Salahuddin
Senior DevOps Engineer — AWS & Cloud Infrastructure • DevSecOps
Senior DevOps Engineer with 7+ years designing, securing, and operating cloud-native infrastructure across AWS, Azure, and GCP for fintech, SaaS, e-commerce, and AI-driven platforms. Deep hands-on expertise in Kubernetes (EKS/AKS/GKE), Terraform-driven infrastructure as code, and end-to-end CI/CD pipeline design with Jenkins, GitHub Actions, AWS CodePipeline, and ArgoCD. Strong DevSecOps focus — integrating SIEM, vulnerability management, penetration-testing workflows, and secrets management into pipelines aligned with PCI-DSS, SOC2, and HIPAA. Experienced across cloud and on-premises (VMware vSphere/ESXi) environments, building highly available, observable, cost-optimized systems for both monolithic and microservices workloads.
- Years of Experience
- 7+
- Cloud Platforms
- 3
- Production Platforms Owned
- 10+
- Compliance Frameworks
- PCI-DSS · SOC2 · HIPAA
01 · About
Infrastructure that stays up, secure, and cheap to run
I combine hands-on engineering with architecture and consulting — translating business requirements into secure, scalable cloud solutions for fintech, SaaS, e-commerce, and AI-driven platforms.
Multi-Cloud Architecture
Designing VPC topologies, network segmentation, and IAM governance across AWS, Azure, and GCP for secure, scalable multi-account environments.
Kubernetes & GitOps
Standardizing Helm-based deployments and ArgoCD-driven GitOps workflows across EKS, AKS, and GKE for consistent, drift-free releases.
DevSecOps
Embedding SAST/SCA, container scanning, and secrets management into CI/CD pipelines aligned with PCI-DSS, SOC2, and HIPAA.
Reliability & Cost
Building observable, highly available systems with Prometheus/Grafana and driving FinOps initiatives to sustain 24x7 uptime at lower spend.
02 · Skills
Core skills & technologies
A cross-cloud toolkit spanning infrastructure, containers, security, and observability — built over 7+ years operating production systems.
Cloud Platforms
- AWS (EC2, EKS, ECS, Fargate, Lambda, S3, RDS/Aurora, VPC, Transit Gateway, IAM)
- AWS (CloudFront, Route 53, CloudWatch, SQS, SNS, Secrets Manager, SES, API Gateway)
- AWS (CodeBuild, CodeDeploy, CodePipeline, ECR, ElastiCache)
- Azure (VMs, AKS, App Service, Azure DevOps, Azure AD, Blob Storage, Key Vault)
- GCP (GKE, Compute Engine, Cloud Build, Cloud Run, Cloud SQL, Secret Manager, Pub/Sub, IAM)
Containers & Orchestration
- Docker
- Kubernetes (EKS, AKS, GKE)
- Helm
- KEDA (event-driven autoscaling)
- Cluster Autoscaler
- Secrets Store CSI Driver
IaC & Config Management
- Terraform
- AWS CloudFormation
- Ansible
CI/CD & GitOps
- Jenkins
- GitHub Actions
- GitLab CI
- AWS CodePipeline
- ArgoCD
- Pipeline design & architecture
- GitOps workflows
DevSecOps & Security
- SIEM
- Penetration testing
- Vulnerability management
- SonarQube
- Snyk
- OWASP ZAP
- IAM least-privilege design
- Secrets management & credential rotation
- PCI-DSS / SOC2 / HIPAA
Observability & Monitoring
- Prometheus
- Grafana
- Amazon CloudWatch
- ELK Stack
- Datadog
- Nagios
- Zabbix
- AI-based log anomaly detection
- SLO/SLI frameworks
Automation & AI Tooling
- Python (boto3)
- Bash
- n8n (self-hosted workflow automation)
- AI/LLM-assisted operations
Networking & Connectivity
- VPC & subnet design
- Transit Gateway
- OpenVPN
- WireGuard
- Tailscale
- AWS Client VPN
- CDN (CloudFront)
- pfSense
Databases & Caching
- MySQL
- MongoDB
- PostgreSQL
- Amazon RDS/Aurora
- ElastiCache / Valkey
- Redis
Virtualization & On-Prem
- VMware vSphere / ESXi
- Linux (RHEL, CentOS, Ubuntu, Amazon Linux)
- Windows Server
App Stack & Version Control
- Java
- Node.js
- Python
- PHP
- GitHub
- GitLab
- Bitbucket
03 · Experience
Where I've worked
Seven years across fintech, SaaS, advertising, and ERP platforms — from foundational AWS environments to multi-cloud, multi-region production systems.
Senior DevOps Engineer · Rough Copies
Jul 2024 – PresentArchitect and operate multi-cloud infrastructure (AWS, GCP) across a diverse portfolio of production platforms — fintech SaaS, social media, e-commerce, and AI-driven applications — owning DevOps strategy end-to-end from network design through observability and security.
- Designed and implemented multi-account AWS architecture including VPC topologies, network segmentation, and IAM governance, enabling secure, scalable deployment of services across multiple client environments.
- Architected and maintained containerized platforms on Amazon EKS, ECS, and Google GKE with automated node scaling (Cluster Autoscaler/KEDA) for both monolithic and microservices workloads, standardizing deployment patterns across applications.
- Built and fully managed multi-application AWS infrastructure as code with Terraform — provisioning networking, compute, containers, databases, and IAM end-to-end — with Fun Social, ScoutPro, and Artfully entirely managed through Terraform for repeatable, version-controlled, drift-free deployments.
- Built and operated cloud infrastructure for a range of production products, including AutoLeap (SaaS automotive shop-management platform), Fun Social (Python-based social media application), an AI-based barbershop booking platform (HairCut), an AI-driven pharmacy solution (GCP/Java-based), ScoutPro and The Dust Test (AWS/PHP applications), and HomeGlance (AWS/Node.js).
- Architected a multi-region, highly available deployment for Fun Social, engineering cross-region disaster recovery with automated failover and CloudFront CDN delivery for low-latency global access and resilience against regional outages.
Senior DevOps Engineer · Systems Limited
Mar 2020 – Jun 2024Owned DevOps, infrastructure architecture, and security operations for EP-Systems, running two production fintech applications (OneLoad, OneZapp) on hybrid AWS and on-premises infrastructure with 24x7x365 availability requirements.
- Architected and designed hybrid cloud and on-premises infrastructure supporting high-transaction Java-based fintech platforms, spanning AWS and on-premises environments in a hybrid architecture.
- Designed and operated a microservices architecture for the fintech applications, containerizing services on Amazon EKS with standardized Helm deployments, service-to-service communication, and independent scaling.
- Ensured reliability of payment and transaction processing for the fintech platforms (OneLoad, OneZapp), owning application availability, capacity planning, and incident response for high-volume financial workloads.
- Led Terraform and CloudFormation infrastructure-as-code initiatives, standardizing provisioning across development, staging, and production and enforcing consistent, compliant baseline configurations.
- Designed and built DevSecOps CI/CD pipelines with Jenkins and GitLab CI, embedding the full secure-delivery lifecycle — static application security testing (SonarQube), dependency and vulnerability scanning (Snyk), container image scanning, automated unit and integration testing, and security gate enforcement — to block insecure or non-compliant builds before promotion to production.
DevOps Engineer · Wadic Solution
Jul 2019 – Feb 2020Delivered DevOps and infrastructure support across AWS cloud and on-premises VMware vSphere environments, managing ERP, CRM, and client-facing web applications.
- Deployed and managed Odoo ERP and CRM systems with Nginx on Ubuntu, maintaining service uptime and performance for client operations.
- Deployed, configured, and operated PHP- and Python-based client applications, owning build, deployment, and ongoing operational support across environments.
- Performed Linux server administration across client infrastructure — provisioning, hardening, patching, and performance tuning for production and staging systems.
- Built a centralized monitoring system using Python and Django to track health, uptime, and performance metrics across all client deployments, providing a single pane of visibility for the operations team.
- Configured and managed high-availability database clusters (MySQL InnoDB and MongoDB/NoSQL), implementing replication, failover, and automated backup routines for production data.
Associate DevOps Engineer · AdMaxim Inc.
May 2017 – Jun 2019Supported infrastructure and DevOps operations for a digital advertising platform, including the Pinpoint solution, administering AWS and Linux/Windows server environments for high-availability production workloads.
- Configured foundational AWS environments — VPC networks, EC2 instance fleets, and security group policies — establishing baseline cloud architecture for hosting the advertising platform and internal applications.
- Administered Linux and Windows server infrastructure, performing OS-level configuration management, system hardening, and patch compliance to keep development and production environments consistent and secure.
- Automated deployment, provisioning, and security patching using Ansible, and built CI/CD workflows with Jenkins to reduce manual operational effort.
- Developed Python and Bash automation for operational workflows — patching pipelines, log collection and centralization, system health reporting, and configuration compliance checks across server infrastructure.
- Implemented monitoring and alerting with Nagios, Zabbix, and AWS CloudWatch — configuring custom metrics, threshold-based alarms, and dashboards for visibility into server, application, and resource health.
04 · Education
Education
MS, Computer Science
Riphah International University, Lahore
BS, Telecom & Networking
COMSATS Institute of Information Technology, Sahiwal
05 · Contact
Let's build resilient infrastructure together
Open to senior DevOps, cloud infrastructure, and DevSecOps roles. Reach out directly or connect on LinkedIn.