About
I'm a production-focused DevOps engineer with demonstrated expertise in designing and operating cloud infrastructure for modern applications. My specialization includes Kubernetes cluster orchestration, AWS cloud services, CI/CD automation with GitHub Actions and Argo CD, secure secret management, and GitOps workflows. I've successfully deployed and managed complete production environments featuring containerized services, managed databases, monitoring systems, and secure access controls using industry best practices and zero-trust security principles.
Featured Experience
Egypt · Remote
Worked on the DevOps and production deployment side of a full-stack technology platform
Key Achievements:
- ▸Deployed and operated backend on production k3s Kubernetes cluster hosted on AWS EC2
- ▸Configured production and staging Kubernetes environments using namespaces, Deployments, Services, Ingress, secrets, and image pull secrets
- ▸Integrated AWS RDS PostgreSQL with backend and supported safe database operations, schema validation, and production queries
- ▸Used AWS Secrets Manager with External Secrets Operator to manage application secrets securely inside Kubernetes
- ▸Built and pushed Docker images for backend, admin, and services using Docker and Docker Hub/ECR workflows
- ▸Implemented GitOps deployment flow using Argo CD, Kustomize overlays, and GitHub Actions for automatic immutable image deployments
- ▸Configured PreSync migration jobs in Argo CD to run database migrations before application deployment
- ▸Deployed FastAPI services on Kubernetes with Docker image build, secret configuration, ingress routing, and health checks
- ▸Configured Cloudflare Tunnel and ingress-nginx to expose services securely without directly exposing worker nodes
- ▸Managed public routing for production and staging domains, backend APIs, and operational tools
- ▸Deployed and secured Argo CD and Grafana behind Cloudflare Access with email-based OTP protection
- ▸Set up Prometheus and Grafana monitoring for k3s cluster and node-level metrics
- ▸Supported frontend hosting through AWS Amplify for production and staging environments
- ▸Troubleshooted production issues and prepared infrastructure handover documentation
Remote
Managed marketing systems infrastructure and VPS server operations
Key Achievements:
- ▸Supported and maintained mailing and marketing automation systems
- ▸Deployed and managed Linux VPS servers on Contabo infrastructure
- ▸Configured DNS, domain settings, and email infrastructure
- ▸Performed server troubleshooting and reliability engineering
- ▸Managed server updates, security patches, and performance optimization
Featured Case Study
This case study demonstrates a complete, production-grade DevOps architecture for an enterprise SaaS platform. It showcases real-world infrastructure decisions, security implementations, deployment strategies, and operational practices. The system handles multiple environments (staging and production), automatic deployments, secure secret management, and comprehensive monitoring—all while maintaining zero-trust security principles.
Architecture Highlights:
This is a sanitized production case study that does not expose private code, credentials, customer data, or confidential details. See detailed architecture diagrams below.
Architecture Deep Dive
Click on any diagram to view the full architecture details
Production Architecture
Complete infrastructure design with Kubernetes cluster, AWS services, and security layers
CI/CD + GitOps Deployment Flow
Complete deployment pipeline from code to production using GitHub Actions and Argo CD
Monitoring & Secure Operations
Production visibility with Prometheus, Grafana, and secure access controls
Technical Skills
Core DevOps Principles
All infrastructure defined and versioned in Git
Git as single source of truth for infrastructure and deployments
Production-grade Kubernetes cluster management and scaling
Encrypted secrets with zero-trust access patterns
CI/CD pipelines enabling safe, repeatable releases
Real-time visibility into system health and performance
Multiple layers of authentication and network isolation
Managed, backed-up, privately-networked data persistence
Secure ingress routing with centralized access control
Clear documentation for team continuity and scaling