Ghulam M.

Cloud Architect and Senior DevOps Engineer with 6+ years building, migrating, and operating AWS and Azure platforms for startups and enterprises. I help teams design scalable, secure, cost-optimized cloud architecture and deliver reliable CI/CD so features ship faster with fewer incidents. My focus areas include Kubernetes (AKS/EKS), Docker, Terraform, Ansible, Helm, GitHub Actions, GitLab CI, Azure DevOps, and automated environment promotion (dev/uat/prod) with blue-green and canary strategies. I architect VPC/VNet networking, subnets, routing, NAT, VPN/peering, security groups/NSGs, WAF/App Gateway, private endpoints, and zero-trust IAM/RBAC/ABAC. I implement observability with CloudWatch, Azure Monitor, Prometheus, Grafana, OpenSearch/ELK, structured logging, metrics, tracing, SLO/SLAs, runbooks, and alerting. I also handle HA/DR, backups, replication, failover, and disaster recovery testing. On AWS I work daily with EC2, EKS, ECS/Fargate, Lambda, API Gateway, RDS/Aurora, DynamoDB, ElastiCache/Redis, S3, CloudFront, Route 53, SES/WorkMail, IAM, KMS, Parameter Store/Secrets Manager, CloudWatch, CloudTrail, CodePipeline/CodeBuild, and CloudFormation. On Azure I deliver AKS, App Services, Functions, API Management, Storage, SQL/PostgreSQL for Azure, Traffic Manager/Front Door, Application Gateway/WAF, Monitor/Log Analytics, Key Vault, Entra ID SSO, Virtual Network, and ARM/Bicep. I write infrastructure as code with Terraform, Ansible, CloudFormation, and ARM/Bicep for reproducible, reviewable, policy-guarded deployments. I containerize legacy apps, design microservices, create secure ingress with Nginx, tune autoscaling (HPA/VPA/pod disruption budgets), and optimize images and build pipelines for speed and reliability. Recent work includes a legal AI platform on AKS with multi-environment CI/CD, secure ingress, HPA tuning, and deep observability; cloud-to-cloud cPanel migrations; email infrastructure on AWS; and adoption of open-source collaboration tools. I built a Grafana Dashboard Schema Tool to auto-generate dashboards from infra metadata, improving visibility and reducing manual effort. I routinely run cost reviews and FinOps optimization: right-sizing, storage tiering, autoscaling policies, CDN/caching, reserved/savings plans, and spend forecasting. How I engage: Clear scoping and architecture diagrams, IaC from day one, automated pipelines with tests and policy guardrails, proactive monitoring, strong documentation, and responsive communication. I’m comfortable with regulated and security-sensitive workloads and can align to best practices like CIS Benchmarks, OWASP, least privilege, encryption at rest/in transit, and audit trails. Certifications include AWS Solutions Architect Associate, Microsoft Azure Developer Associate (AZ-204), and Red Hat Specialist in Ansible Automation. If you need to stabilize production, accelerate releases, migrate to the cloud, harden Kubernetes, or stand up CI/CD the right way, I can help. Core skills and keywords: AWS, Azure, Kubernetes, AKS, EKS, Docker, Terraform, Ansible, Helm, GitHub Actions, GitLab CI, Azure Pipelines, CloudFormation, ARM/Bicep, Nginx Ingress, API Gateway, Lambda, App Services, RDS, PostgreSQL, MySQL, S3, Blob Storage, VPC, VNet, WAF, CloudWatch, Azure Monitor, Grafana, Prometheus, CI/CD, IaC, SRE, Platform Engineering, HA/DR, Security Hardening, Cost Optimization.