Which clouds and platforms do you work across?

AWS, Azure, and GCP (plus DigitalOcean and OpenStack), with Kubernetes on EKS, AKS, GKE, and OpenShift. Infrastructure is codified with Terraform, CloudFormation, and Ansible.

Are you available for freelance, contract, or full-time work?

Yes. I take on DevSecOps, cloud architecture, and platform-engineering work — from securing pipelines and hardening clusters to multi-cloud builds and full-time roles.

Which time zones and locations do you work across?

I'm based in Islamabad and remote-ready across PKT, GST, CET, and EST, and open to relocation in the UAE, KSA, and Qatar.

What measurable results can you point to?

On production systems: 40% fewer vulnerabilities, 30% faster deployments, 99.99% uptime, 50% less manual configuration, and 35% faster incident response.

What about compliance frameworks?

I implement and evidence controls for ISO 27001, SOC 2, GDPR, PCI-DSS, and HIPAA — with automated scanning and regular security assessments.

Available for freelance, consulting & full-time roles

Security engineered into everything you ship.

DevSecOps engineer specializing in security automation, multi-cloud architecture, CI/CD, infrastructure as code, and Kubernetes — shipping fast without trading away integrity.

View Projects Contact Me

Download résumé

Currently: Senior DevSecOps Engineer @ Verdant Soft

6 years experienceDevSecOps & CloudGlobal

Production uptime

0.99% uptime

Sustained on hardened Kubernetes (EKS) workloads.

Fewer vulnerabilities

-0%

SAST · DAST · policy gates

Faster deployments

+0%

Automated, gated CI/CD

Multi-cloud

0 clouds as code

AWSAzureGCPIaC

Core stack deployed

DockerKubernetesEKSAKSSnykOWASP ZAPNessus

By the numbers · production results

Measured impact, not just shipped features.

Security automation, cloud architecture, and reliability work that moved real numbers for production teams.

Vulnerability reduction

Fewer security vulnerabilities by embedding automated SAST/DAST and policy gates directly into CI/CD pipelines.

Deployment speed

JenkinsGitLab CIGitHub ActionsAzure DevOps

Faster releases with fewer errors through automated, security-gated CI/CD pipelines.

Faster incident response

Less manual configuration

Platforms and products I've helped build

Secure CI/CD Automation

Security shifted left into every pipeline, without slowing delivery.

JenkinsGitLab CISnyk

Multi-Cloud IaC Platform

Repeatable, secure infrastructure across AWS, Azure, and GCP.

TerraformCloudFormationAnsible

Kubernetes Platform & RBAC Hardening

Production-grade EKS with least-privilege access by default.

DockerKubernetesAmazon EKS

Observability & Incident Response

Full-stack visibility that turns incidents into fast, calm recoveries.

PrometheusGrafanaELK Stack

References from past collaborators are available on request - and client testimonials will land here soon.

Request references →

Expertise

A DevSecOps toolkit for shipping securely at scale

From security automation and CI/CD to multi-cloud architecture, Kubernetes, and the observability that keeps it all reliable.

Security Automation

SAST/DAST, dependency scanning, and policy gates woven into CI/CD so vulnerabilities surface early — a 40% reduction in practice.

CI/CD Engineering

Jenkins, GitLab CI, and GitHub Actions pipelines that ship 30% faster with fewer errors and built-in security.

Cloud Architecture

Highly available, secure, cost-efficient design across AWS, Azure, and GCP.

Containers & Kubernetes

Production EKS/AKS/GKE platforms with hardened RBAC and 99.99% uptime.

Infrastructure as Code

Terraform, CloudFormation, and Ansible for reproducible, drift-free infrastructure.

Observability

Prometheus, Grafana, ELK, and Datadog for real-time visibility and 35% faster incident response.

Compliance & Governance

ISO 27001, SOC 2, GDPR, PCI-DSS, and HIPAA controls implemented and evidenced.

Incident Response

SLO-based alerting, runbooks, and root-cause analysis that minimize downtime and risk.

Career

Six years securing and scaling production systems.

A track record across DevOps, cloud architecture, and security - consistently focused on automation, resilience, and measurable outcomes.

Now → 2020

Verdant Soft

Mar 2024 – Present

Senior DevSecOps Engineer | Lead DevOpsSoftware & Cloud ServicesRemote

Developed and integrated security automation into CI/CD pipelines, reducing security vulnerabilities by 40% and improving overall system integrity.
Architected and deployed highly available, scalable, and secure cloud solutions across AWS, Azure, and GCP, enhancing infrastructure reliability and performance.
Designed and managed CI/CD pipelines with Jenkins and GitLab CI, achieving a 30% increase in deployment speed and a 20% decrease in deployment errors.

AWSAzureGCPTerraformJenkinsGitLab CISnykOWASP ZAP

Verdant Soft

Aug 2023 – Feb 2024

Senior DevOps Engineer | Security ArchitectSoftware & Cloud ServicesRemote

Implemented comprehensive monitoring and logging with Prometheus, Grafana, and the ELK Stack, improving incident response times by 35%.
Led cross-functional teams in adopting DevSecOps practices across development, operations, and security.
Coordinated incident response and root-cause analysis, minimizing downtime and mitigating risk.

PrometheusGrafanaELK StackAWSAnsibleTerraform

Devsinc

Sep 2022 – Aug 2023

DevOps Engineer | Cloud ArchitectSoftware ConsultancyLahore, Pakistan

Built automated deployment and scaling processes with AWS EC2, S3, and RDS, improving application performance and scalability.
Monitored and optimized infrastructure with Nagios, Site24x7, New Relic, and Datadog, ensuring reliability and quick issue resolution.
Created publicly accessible CloudWatch dashboards for real-time visibility into system metrics for stakeholders.

AWS EC2S3RDSCloudWatchDatadogNew Relic

Devsinc

Jan 2022 – Sep 2022

DevOps EngineerSoftware ConsultancyLahore, Pakistan

Wrote Python and Bash scripts to automate operational tasks, reducing manual effort across teams.
Collaborated with development teams to integrate application code with CI/CD pipelines, streamlining deployment.
Implemented infrastructure monitoring and alerting with Nagios and Zabbix for timely detection and resolution.

PythonBashNagiosZabbixCI/CDLinux

Wisdom Coders

Feb 2021 – Dec 2021

Senior DevOps EngineerSoftware ConsultancyLahore, Pakistan

Designed and maintained containerized applications with Docker and orchestrated them on Amazon EKS, implementing RBAC for secure access control.
Streamlined Jenkins and GitLab CI/CD pipelines, reducing deployment times by 40%.
Automated AWS provisioning (EC2, VPC, Lambda, S3, RDS, DynamoDB, CloudFormation) for scalability and efficiency.

DockerKubernetesAmazon EKSJenkinsCloudFormationPrometheus

Wisdom Coders

Mar 2020 – Feb 2021

Associate DevOps EngineerSoftware ConsultancyLahore, Pakistan

Managed and optimized AWS services (EC2, Lambda, VPC, IAM, RDS) for scalable, reliable, secure infrastructure.
Automated deployment pipelines with Jenkins and Git, reducing deployment times by 30%.
Established IAM role-based access policies, reducing unauthorized-access incidents by 40%.

AWSIAMJenkinsGitBashPowerShell

Services

Outcomes I deliver

Not a list of technologies - the concrete results I help teams and founders ship.

Start a project

Who I work withStartupsScale-upsEnterprisesPlatform TeamsSecurity Teams

Most requested

Shift security left into your pipelines

Automated SAST/DAST, dependency scanning, and policy gates embedded into CI/CD — catching vulnerabilities early without slowing delivery.

SAST/DAST & dependency scanning (Snyk, OWASP ZAP)
Policy-as-code gates in Jenkins / GitLab CI
Automated remediation guidance
Compliance evidence on every build

StartupsSecurity Teams

Secure my pipeline

Architect resilient multi-cloud infrastructure

Highly available, secure, cost-efficient environments on AWS, Azure, and GCP — codified as reusable infrastructure as code.

Terraform / CloudFormation modules
Secure landing zones & IAM design
Right-sizing & cost optimization
Disaster recovery & high availability

Scale-upsEnterprises

Plan my cloud

Automate infrastructure with IaC

Replace manual, drift-prone provisioning with reproducible, reviewable infrastructure as code — cutting manual effort by half.

Terraform & Ansible automation
Remote state & environment standardization
Configuration management
GitOps workflows

Platform TeamsScale-ups

Automate my infra

Most requested

Run production-grade Kubernetes

Secure, scalable container platforms on EKS/AKS/GKE with hardened RBAC and CI/CD-driven deployments at 99.99% uptime.

EKS / AKS / GKE platform design
RBAC & network-policy hardening
Helm-based deployment workflows
Autoscaling & reliability engineering

Platform TeamsEnterprises

Harden my cluster

Gain full-stack observability

Metrics, logs, and alerting with Prometheus, Grafana, ELK, and Datadog — turning incidents into fast, calm recoveries.

Monitoring & logging stack
SLO-based alerting & dashboards
Incident response & runbooks
Root-cause analysis workflows

Platform TeamsSecurity Teams

See my systems

Reach compliance with confidence

ISO 27001, SOC 2, GDPR, PCI-DSS, and HIPAA controls implemented and evidenced through automation and regular assessments.

Control mapping & gap assessment
Vulnerability scanning & audits
Automated compliance evidence
Policy & access governance

EnterprisesSecurity Teams

Get compliant

Selected work

Case studies, not screenshots.

Real DevSecOps engagements - the challenge, the engineering decisions, and the measurable results that followed.

All projects

$ secure-ci-cd-automation

Headline result

40% reduction in security vulnerabilities

30% faster deployments, 20% fewer deploy errors

ISO 27001 & SOC 2 evidence automated

2024Senior DevSecOps Engineer

Secure CI/CD Automation

Security shifted left into every pipeline, without slowing delivery.

Challenge

Security checks lived at the end of the release cycle, surfacing vulnerabilities late and slowing every deployment while teams scrambled to remediate.

Solution

Embedded automated SAST/DAST and dependency scanning (Snyk, OWASP ZAP) directly into Jenkins and GitLab CI pipelines, with policy gates, automated remediation guidance, and compliance evidence captured on every build.

40% reduction in security vulnerabilities30% faster deployments, 20% fewer deploy errors

JenkinsGitLab CISnykOWASP ZAPTerraformAnsible

$ multi-cloud-iac-platform

Headline result

50% less manual configuration effort

30% cloud cost reduction via right-sizing

Consistent, auditable multi-cloud environments

2024Lead DevOps & Cloud Architect

Multi-Cloud IaC Platform

Repeatable, secure infrastructure across AWS, Azure, and GCP.

Challenge

Manual, drift-prone provisioning across three clouds made environments inconsistent, slow to stand up, and hard to audit for compliance.

Solution

Built a modular Terraform and Ansible platform with reusable modules, remote state, and policy-as-code — codifying highly available, secure landing zones across AWS, Azure, and GCP.

50% less manual configuration effort30% cloud cost reduction via right-sizing

TerraformCloudFormationAnsibleAWSAzureGCP

$ kubernetes-platform-rbac-hardening

Headline result

99.99% application uptime

50% fewer unauthorized-access incidents

40% faster container deployments

2021Senior DevOps Engineer

Kubernetes Platform & RBAC Hardening

Production-grade EKS with least-privilege access by default.

Challenge

Containerized workloads needed a secure, scalable orchestration platform with tight access control and reliable uptime under real traffic.

Solution

Designed and operated an Amazon EKS platform with hardened RBAC, network policies, and CI/CD-driven deployments — backed by Prometheus and CloudWatch observability for proactive incident response.

99.99% application uptime50% fewer unauthorized-access incidents

DockerKubernetesAmazon EKSRBACHelmPrometheus

How I work

Seven deliberate stages - each one de-risks the next and keeps quality measurable.

Assess

Map the threat surface, infrastructure, and pipeline before changing anything.

Architect

Design secure, resilient cloud and platform foundations that scale.

Codify

Express infrastructure and policy as reviewable, reproducible code.

Automate

Embed security and delivery into CI/CD so the right thing is the easy thing.

Harden

Apply least-privilege access, scanning, and compliance controls.

Observe

Instrument metrics, logs, and SLO-based alerting end to end.

Respond

Runbooks and incident response that turn outages into fast recoveries.

FAQ

Questions, answered

Working out whether we're a fit? Start here, then reach out.

It moves security from a final gate to a continuous, automated part of delivery. Scanning, policy checks, and compliance evidence run on every build — so vulnerabilities are caught early, releases stay fast, and audits stop being fire drills.

Remote-ready worldwide, across all time zones

Let's secure and scale your systems.

Pipelines to harden, infrastructure to automate, clusters to secure, or a DevSecOps role to fill? I'd love to hear about it.

Start a Conversation View My Work

Loading…

Security engineered into everything you ship.

DevSecOps engineer specializing in security automation, multi-cloud architecture, CI/CD, infrastructure as code, and Kubernetes — shipping fast without trading away integrity.

Currently: Senior DevSecOps Engineer @ Verdant Soft

6 years experienceDevSecOps & CloudGlobal