Available for new opportunities

Muhammad Salahuddin

Senior DevOps EngineerAWS & Cloud Infrastructure • DevSecOps

Senior DevOps Engineer with 7+ years designing, securing, and operating cloud-native infrastructure across AWS, Azure, and GCP for fintech, SaaS, e-commerce, and AI-driven platforms. Deep hands-on expertise in Kubernetes (EKS/AKS/GKE), Terraform-driven infrastructure as code, and end-to-end CI/CD pipeline design with Jenkins, GitHub Actions, AWS CodePipeline, and ArgoCD. Strong DevSecOps focus — integrating SIEM, vulnerability management, penetration-testing workflows, and secrets management into pipelines aligned with PCI-DSS, SOC2, and HIPAA. Experienced across cloud and on-premises (VMware vSphere/ESXi) environments, building highly available, observable, cost-optimized systems for both monolithic and microservices workloads.

Years of Experience
7+
Cloud Platforms
3
Production Platforms Owned
10+
Compliance Frameworks
PCI-DSS · SOC2 · HIPAA

01 · About

Infrastructure that stays up, secure, and cheap to run

I combine hands-on engineering with architecture and consulting — translating business requirements into secure, scalable cloud solutions for fintech, SaaS, e-commerce, and AI-driven platforms.

Multi-Cloud Architecture

Designing VPC topologies, network segmentation, and IAM governance across AWS, Azure, and GCP for secure, scalable multi-account environments.

Kubernetes & GitOps

Standardizing Helm-based deployments and ArgoCD-driven GitOps workflows across EKS, AKS, and GKE for consistent, drift-free releases.

DevSecOps

Embedding SAST/SCA, container scanning, and secrets management into CI/CD pipelines aligned with PCI-DSS, SOC2, and HIPAA.

Reliability & Cost

Building observable, highly available systems with Prometheus/Grafana and driving FinOps initiatives to sustain 24x7 uptime at lower spend.

02 · Skills

Core skills & technologies

A cross-cloud toolkit spanning infrastructure, containers, security, and observability — built over 7+ years operating production systems.

Cloud Platforms

  • AWS (EC2, EKS, ECS, Fargate, Lambda, S3, RDS/Aurora, VPC, Transit Gateway, IAM)
  • AWS (CloudFront, Route 53, CloudWatch, SQS, SNS, Secrets Manager, SES, API Gateway)
  • AWS (CodeBuild, CodeDeploy, CodePipeline, ECR, ElastiCache)
  • Azure (VMs, AKS, App Service, Azure DevOps, Azure AD, Blob Storage, Key Vault)
  • GCP (GKE, Compute Engine, Cloud Build, Cloud Run, Cloud SQL, Secret Manager, Pub/Sub, IAM)

Containers & Orchestration

  • Docker
  • Kubernetes (EKS, AKS, GKE)
  • Helm
  • KEDA (event-driven autoscaling)
  • Cluster Autoscaler
  • Secrets Store CSI Driver

IaC & Config Management

  • Terraform
  • AWS CloudFormation
  • Ansible

CI/CD & GitOps

  • Jenkins
  • GitHub Actions
  • GitLab CI
  • AWS CodePipeline
  • ArgoCD
  • Pipeline design & architecture
  • GitOps workflows

DevSecOps & Security

  • SIEM
  • Penetration testing
  • Vulnerability management
  • SonarQube
  • Snyk
  • OWASP ZAP
  • IAM least-privilege design
  • Secrets management & credential rotation
  • PCI-DSS / SOC2 / HIPAA

Observability & Monitoring

  • Prometheus
  • Grafana
  • Amazon CloudWatch
  • ELK Stack
  • Datadog
  • Nagios
  • Zabbix
  • AI-based log anomaly detection
  • SLO/SLI frameworks

Automation & AI Tooling

  • Python (boto3)
  • Bash
  • n8n (self-hosted workflow automation)
  • AI/LLM-assisted operations

Networking & Connectivity

  • VPC & subnet design
  • Transit Gateway
  • OpenVPN
  • WireGuard
  • Tailscale
  • AWS Client VPN
  • CDN (CloudFront)
  • pfSense

Databases & Caching

  • MySQL
  • MongoDB
  • PostgreSQL
  • Amazon RDS/Aurora
  • ElastiCache / Valkey
  • Redis

Virtualization & On-Prem

  • VMware vSphere / ESXi
  • Linux (RHEL, CentOS, Ubuntu, Amazon Linux)
  • Windows Server

App Stack & Version Control

  • Java
  • Node.js
  • Python
  • PHP
  • GitHub
  • GitLab
  • Bitbucket

03 · Experience

Where I've worked

Seven years across fintech, SaaS, advertising, and ERP platforms — from foundational AWS environments to multi-cloud, multi-region production systems.

Senior DevOps Engineer · Rough Copies

Jul 2024 – Present

Architect and operate multi-cloud infrastructure (AWS, GCP) across a diverse portfolio of production platforms — fintech SaaS, social media, e-commerce, and AI-driven applications — owning DevOps strategy end-to-end from network design through observability and security.

  • Designed and implemented multi-account AWS architecture including VPC topologies, network segmentation, and IAM governance, enabling secure, scalable deployment of services across multiple client environments.
  • Architected and maintained containerized platforms on Amazon EKS, ECS, and Google GKE with automated node scaling (Cluster Autoscaler/KEDA) for both monolithic and microservices workloads, standardizing deployment patterns across applications.
  • Built and fully managed multi-application AWS infrastructure as code with Terraform — provisioning networking, compute, containers, databases, and IAM end-to-end — with Fun Social, ScoutPro, and Artfully entirely managed through Terraform for repeatable, version-controlled, drift-free deployments.
  • Built and operated cloud infrastructure for a range of production products, including AutoLeap (SaaS automotive shop-management platform), Fun Social (Python-based social media application), an AI-based barbershop booking platform (HairCut), an AI-driven pharmacy solution (GCP/Java-based), ScoutPro and The Dust Test (AWS/PHP applications), and HomeGlance (AWS/Node.js).
  • Architected a multi-region, highly available deployment for Fun Social, engineering cross-region disaster recovery with automated failover and CloudFront CDN delivery for low-latency global access and resilience against regional outages.

Senior DevOps Engineer · Systems Limited

Mar 2020 – Jun 2024

Owned DevOps, infrastructure architecture, and security operations for EP-Systems, running two production fintech applications (OneLoad, OneZapp) on hybrid AWS and on-premises infrastructure with 24x7x365 availability requirements.

  • Architected and designed hybrid cloud and on-premises infrastructure supporting high-transaction Java-based fintech platforms, spanning AWS and on-premises environments in a hybrid architecture.
  • Designed and operated a microservices architecture for the fintech applications, containerizing services on Amazon EKS with standardized Helm deployments, service-to-service communication, and independent scaling.
  • Ensured reliability of payment and transaction processing for the fintech platforms (OneLoad, OneZapp), owning application availability, capacity planning, and incident response for high-volume financial workloads.
  • Led Terraform and CloudFormation infrastructure-as-code initiatives, standardizing provisioning across development, staging, and production and enforcing consistent, compliant baseline configurations.
  • Designed and built DevSecOps CI/CD pipelines with Jenkins and GitLab CI, embedding the full secure-delivery lifecycle — static application security testing (SonarQube), dependency and vulnerability scanning (Snyk), container image scanning, automated unit and integration testing, and security gate enforcement — to block insecure or non-compliant builds before promotion to production.

DevOps Engineer · Wadic Solution

Jul 2019 – Feb 2020

Delivered DevOps and infrastructure support across AWS cloud and on-premises VMware vSphere environments, managing ERP, CRM, and client-facing web applications.

  • Deployed and managed Odoo ERP and CRM systems with Nginx on Ubuntu, maintaining service uptime and performance for client operations.
  • Deployed, configured, and operated PHP- and Python-based client applications, owning build, deployment, and ongoing operational support across environments.
  • Performed Linux server administration across client infrastructure — provisioning, hardening, patching, and performance tuning for production and staging systems.
  • Built a centralized monitoring system using Python and Django to track health, uptime, and performance metrics across all client deployments, providing a single pane of visibility for the operations team.
  • Configured and managed high-availability database clusters (MySQL InnoDB and MongoDB/NoSQL), implementing replication, failover, and automated backup routines for production data.

Associate DevOps Engineer · AdMaxim Inc.

May 2017 – Jun 2019

Supported infrastructure and DevOps operations for a digital advertising platform, including the Pinpoint solution, administering AWS and Linux/Windows server environments for high-availability production workloads.

  • Configured foundational AWS environments — VPC networks, EC2 instance fleets, and security group policies — establishing baseline cloud architecture for hosting the advertising platform and internal applications.
  • Administered Linux and Windows server infrastructure, performing OS-level configuration management, system hardening, and patch compliance to keep development and production environments consistent and secure.
  • Automated deployment, provisioning, and security patching using Ansible, and built CI/CD workflows with Jenkins to reduce manual operational effort.
  • Developed Python and Bash automation for operational workflows — patching pipelines, log collection and centralization, system health reporting, and configuration compliance checks across server infrastructure.
  • Implemented monitoring and alerting with Nagios, Zabbix, and AWS CloudWatch — configuring custom metrics, threshold-based alarms, and dashboards for visibility into server, application, and resource health.

04 · Education

Education

MS, Computer Science

Riphah International University, Lahore

BS, Telecom & Networking

COMSATS Institute of Information Technology, Sahiwal

05 · Contact

Let's build resilient infrastructure together

Open to senior DevOps, cloud infrastructure, and DevSecOps roles. Reach out directly or connect on LinkedIn.