Mahmoud hossam

Sole owner of all infrastructure, delivery, and production operations
• Design and maintain a Kubernetes-based platform end to end: a 9-node production cluster built from scratch (kubeadm,
containerd, Calico) with a highly available control plane (HAProxy + Keepalived, dual floating VIPs) that survives master-node
loss with zero downtime — 27 Helm releases across 27 namespaces plus a mirrored UAT cluster.
• Deliver every release through GitOps with ArgoCD, paired with multi-environment GitHub Actions pipelines
(dev/data/staging/UAT/prod) built as reusable workflows rather than one-off scripts — every build gated by secret detection,
SAST, and dependency scanning before Cosign signing and SBOM/provenance atestation.
• Develop infrastructure entirely as code with Terraform: a full disaster-recovery environment (20+ resources — VPC, subnets,
security groups, ELB, NAT, managed Kubernetes) provisioned by a single command, with Python SDK hooks handling cluster
bootstrap and data restoration.
• Implement observability that gives every team visibility into their own services: kube-prometheus-stack (Prometheus,
Alertmanager, Grafana), Loki + Fluent Bit + Grafana Alloy, Slack alert routing, and log shipping to object storage.
• Standardize deployment, security, and operational practices across every team I support: bastion-only SSH, least-privilege
security groups, Sealed Secrets for GitOps-safe secret management, and TLS lifecycle management applied uniformly rather
than per-project.
• Support engineering enablement through reusable platform components and documentation: authored 20+ incident reports
and runbooks (etcd disk migration, Calico-Typha thundering-herd outage, node OOM, TLS chain fixes) so operational knowledge
doesnt stay locked to one person.
• Continuously improve platform performance and resilience: recovered a critical production database migration failure with no
data loss, and designed a multi-layer backup strategy achieving zero file loss in production.
• Automate infrastructure provisioning and application deployment through Python, Bash, and lifecycle scripts, reducing manual
operational work; cut cloud storage spend via API-driven billing analysis and a tiered storage strategy.

• Developed and maintained Jenkins CI/CD pipelines with Bash automation, significantly reducing manual deployment time.
• Built and managed a production 3-node ELK stack with Kafka, APM Server, Logstash, and Kibana for centralized logging and
observability across microservices.
• Implemented Prometheus and Grafana monitoring with custom dashboards, reducing mean time to resolution; administered
Linux servers and MySQL/PostgreSQL databases with backup strategies.
• Configured and administered an OpenStack private cloud on 3 bare-metal servers from scratch, managing VM provisioning and
resource allocation.

• Automated Linux server provisioning and configuration with Ansible playbooks; built Jenkins CI/CD pipelines and containerized
applications with Docker for consistent multi-environment deployment.