[nom]
DevOps Engineer | AWS · Kubernetes · Terraform · CI/CD
Herborn, Germany | [téléphone] | [e-mail]
[lien] | [lien] | [lien]
Residence permit with full work authorization in Germany | No visa sponsorship required | Available immediately
EXPERIENCE · CERTIFICATIONS · CORE STACK · KUBERNETES IN PRODUCTION
6+ Years · 4 Certified · AWS + Terraform · 6M+ Calls / Month
Production infrastructure, 5 · AWS Solutions Architect · CEH · · Kubernetes · Docker · Helm · · Docker + Kubernetes
years in DevOps · Huawei HCIA R&S + Security · Jenkins · GitHub Actions · · workloads run end-to-end for
Ansible · 4,000+ business clients
SUMMARY
DevOps Engineer with 5 years of DevOps and 6+ years of production infrastructure experience, building and running
AWS and Kubernetes platforms, CI/CD pipelines and Infrastructure as Code (IaC) for live production systems. Currently delivers DevOps for a US crypto-asset platform (KresusLabs); previously owned the infrastructure of a telecom cloud contact center processing 6M+ calls/month for 4,000+ business clients. Cut deployment time by 40% and runs 100+
AWS resources at 99.9% uptime. Networking and security background (AWS Solutions Architect, CEH) applied to the security and high availability of production systems.
SKILLS
Cloud & IaC: AWS (EC2, VPC, IAM, ALB, S3), Terraform, Ansible, Azure, Vultr
Containers & Orchestration: Kubernetes (Deployments, StatefulSets), Docker, Helm, MicroK8s
CI/CD & GitOps: Jenkins, GitHub Actions, Argo CD, Git, GitHub, GitLab; multi-environment pipelines
Observability: Prometheus, Grafana, ELK Stack, Splunk, Nagios
Security: AWS IAM & VPC security, firewalls, VPN, IDS/IPS; penetration testing (Nmap, Metasploit, Burp Suite)
Linux & Scripting: Ubuntu, CentOS, Red Hat Enterprise Linux, Nginx; Bash, Python, Go, JavaScript (Node.js)
Networking & VoIP: TCP/IP, BGP, OSPF, VLANs, HSRP/VRRP, NAT, VPN (Cisco, Huawei); Asterisk, Kamailio, SIP
WORK EXPERIENCE
DevOps Engineer
TekHQS | Remote | Feb 2024 – Present
DevOps engineer for KresusLabs Inc. (USA), Kresus Crypto Vault crypto-asset platform, plus further Web3/SaaS client platforms.
Redesigned the CI/CD pipelines for Kresus Crypto Vault with Jenkins, Docker and Helm, reducing deployment time by 40%, with image and container scanning and AWS Secrets Manager.
Diagnosed recurring production pod evictions on EKS, built a hardened replacement cluster and rebuilt monitoring as code with Amazon Managed Grafana and CloudWatch (20 dashboards, 35 alert rules).
Manage 100+ AWS resources (EC2, VPC, subnets, IAM, ALB load balancers, S3) as code with Terraform and Ansible for scalability and security compliance, maintaining 99.9% infrastructure uptime.
Built and maintain 20+ multi-environment CI/CD pipelines (Jenkins, GitHub Actions) delivering containerized services to Kubernetes through Helm charts and GitOps workflows.
Mentor junior DevOps engineers and standardize CI/CD conventions across cross-functional development teams.
Implemented monitoring, centralized logging and alerting with Prometheus and the ELK Stack for proactive detection and faster troubleshooting of production issues.
Delivered DevOps for 10+ further client projects (AI, Web3 and SaaS products for international clients) on AWS, Azure and Vultr.
Stack: AWS, Kubernetes, Docker, Helm, Jenkins, GitHub Actions, Terraform, Ansible, AWS Secrets Manager, Prometheus, Grafana, ELK, Linux, Azure, Vultr
Senior VoIP & DevOps Engineer
LastingSales (HadiTelecom) | Lahore, Pakistan | Nov 2021 – Feb 2024
Zong vPBX cloud contact-center platform delivered with Zong (China Mobile Pakistan) to 4,000+ corporate clients, plus the LastingSales CRM.
Owned the complete on-premises production infrastructure of a platform processing 6M+ calls/month for clients in banking, hospitality, education, healthcare and automotive.
Migrated legacy applications to Kubernetes, improving fault tolerance and reducing hosting costs; ran Docker-containerized microservices and stateful databases (Deployments, StatefulSets).
[nom] | Page 1
Built Jenkins CI/CD pipelines that build Docker images on every push to the development branch and deploy them to AWS, enabling zero-downtime releases of the VoIP management portal.
Implemented centralized monitoring and logging with Prometheus, Grafana and the ELK Stack across all production services.
Automated server installation and configuration with Ansible playbooks, replacing manual setup with repeatable provisioning.
Supervised the team developing custom SIP applications and Asterisk dialplans for enterprise call routing.
Stack: Kubernetes, Amazon EKS, Docker, Jenkins, Ansible, AWS, Prometheus, Grafana, ELK, CentOS/Ubuntu, Asterisk, Kamailio, SIP
KEY PROJECTS
Kresus Crypto Vault: Secure CI/CD & Release Automation | Private, client project (TekHQS)
Redesigned the build-and-release pipelines of a US crypto-asset platform with image and container vulnerability scanning, environment configuration kept out of code and secrets from AWS Secrets Manager delivered as Kubernetes
Secrets; services ship across environments via Helm and GitOps. Deployment time cut by 40%.
Stack: Jenkins, GitHub Actions, Docker, Helm, Kubernetes, AWS, AWS Secrets Manager
Digital-Asset Platform: Multi-Region Disaster Recovery | Private, client project (TekHQS)
Hot DR copy in a second AWS region, created, validated and removed with one click: 16 region-portable Terraform stacks and continuous replication of databases, storage, images and secrets. Max replica lag 37 s in the DR test.
Stack: Terraform, Amazon EKS, RDS, DynamoDB, S3, GitHub Actions
RYT Blockchain Platform: Cloud Infrastructure | Private, client project (TekHQS)
Ran five isolated blockchain environments on AWS (Graviton nodes) and rebuilt the security-test environment into private subnets behind load balancers and a bastion host, with Prometheus, Grafana and Loki for observability.
Stack: AWS (EC2, VPC, ALB, RDS), Prometheus, Grafana, Loki
Telecom Contact-Center Platform: Kubernetes Migration | Private, LastingSales
Moved legacy applications into Docker containers on Kubernetes (Deployments, StatefulSets for databases), improving fault tolerance and reducing hosting costs for a platform handling 6M+ calls/month.
Stack: Kubernetes, Docker, Prometheus, Grafana, ELK Stack
LastingSales CRM: Microservices on EKS & vPBX Integration | Private, LastingSales
Deployed the CRM as containerized microservices on Amazon EKS with Jenkins pipelines in Groovy, Prometheus and Grafana monitoring and backup scripts; connected it to Zong vPBX so call records flow into the CRM automatically.
Stack: Amazon EKS, Docker, Jenkins (Groovy), Prometheus, Grafana
EARLIER ROLES
Network & VoIP Administrator | Marhaba Laboratories Pvt Ltd, Lahore | Aug 2020 – Oct 2021
Administered network, servers, backups and disaster recovery; deployed a Linux/Asterisk VoIP exchange with Cisco IP phones.
Network & VoIP Engineer (Freelance) | Ramada Hotel, Radisson, Wasif Traders, Lahore | Feb 2021 – Oct 2021
Designed a hotel network (Cisco switching); deployed containerized Asterisk VoIP, mail and FTP servers.
Network Administrator (Internship) | HadiTelecom, Lahore | Dec 2020 – Mar 2021
Monitored CentOS VoIP servers and Cisco devices; deployed Splunk for network monitoring.
CERTIFICATIONS
AWS Certified Solutions Architect | Amazon Web Services
Certified Ethical Hacker (CEH) | EC-Council
Huawei Certified ICT Associate: HCIA Routing & Switching, HCIA Security | Huawei
Certified Kubernetes Administrator (CKA) | in preparation
EDUCATION
B.Sc. Computer Science | Virtual University of Pakistan, Lahore · 2016 – 2020
LANGUAGES
English: Professional working proficiency | German: A2 and improving | Urdu: Native
[nom] | Page 2
