Muhammad Zubair

Lead multi-cloud DevOps operations across AWS and GCP for AI/ML and SaaS production platforms serving users
across Saudi Arabia and beyond.
Architect, deploy, and maintain GPU-accelerated GKE node pools for AI inference workloads; install and configure GPU
drivers, resource quotas, and scheduling policies.
Deploy and operate production HashiCorp Vault on GKE with dynamic secrets, Kubernetes auth backend, and IAM role
binding — eliminating hardcoded credentials across all services.
Design and enforce zero-trust cloud security posture: configure GCP Cloud Armor WAF rules, AWS WAF policies, realtime SIEM pipelines, insider threat anomaly detection, and endpoint activity monitoring.
Establish and maintain encrypted VPN tunneling between AWS and GCP with Google SSO integration for secure crosscloud service-to-service connectivity.
Build and own CI/CD pipelines (GitHub Actions + ArgoCD) with automated SonarQube quality gates, container image
scanning, and multi-environment promotion workflows.
Automate infrastructure provisioning with Terraform across AWS and GCP — covering EKS/GKE clusters, RDS, S3, EC2,
networking, and IAM — using modular, version-controlled IaC.
Deploy and manage self-managed Elasticsearch cluster (3 master + 2 data nodes) with GCP BigQuery log ingestion;
write PowerShell scripts to stream Windows Server 2016 event logs to Kibana in real time.
Administer Windows Server 2016 environments: user and permission management, task scheduling, and MSSQL Server
2019 installation and ongoing maintenance.
Configure and support Asterisk / FreePBX VoIP telephony infrastructure with multi-ISP failover and load balancing using
Mikrotik and pfSense.
Reduce production infrastructure costs by replacing managed services with self-managed open-source alternatives
(Hetzner, self-hosted ELK, on-prem Kafka).
Deploy Node.js and AI inference services to both AWS EKS and GKE GPU nodes using fully automated GitHub Actions
pipelines with build, scan, and rollout stages.

Manage and optimize 40+ AWS instances across Dev, PreProd, and Production environments spanning EC2, EKS, ECS,
ECR, RDS, Lambda, SNS, SQS, DynamoDB, Cognito, Secrets Manager, and Route 53.
Design, build, and maintain Jenkins CI/CD pipelines with Python and Bash automation scripts; enforce SonarQube code
quality gates on all build pipelines across multiple client projects.
Install, configure, and harden a self-managed GitLab server; administer Git repositories, access controls, and CI runner
infrastructure for development teams.
Build and manage Ansible-orchestrated multi-master Kubernetes cluster on AWS with autoscaling worker nodes;
configure Nginx ingress with sticky session affinity for stateful workloads.
Deploy .NET applications to Azure Web Apps via Azure Pipelines; configure Azure Active Directory SSO integration and
manage Android/iOS mobile CI/CD build pipelines.
Configure WAF rules, Elastic IP assignments, and security group policies across all AWS environments; deliver
repeatable infrastructure via CloudFormation templates.
Install, configure, and support Asterisk / FreePBX VoIP server with multi-ISP failover using Mikrotik Router and pfSense
firewall for network-level redundancy.
Provide high-level troubleshooting and resolution for hardware, software, and network issues across UNIX/VMware
platforms and dedicated server infrastructure.

uild and manage multi-node self-managed Kubernetes cluster hosting .NET and Node.js workloads; configure NodePort,
ClusterIP, and load-balanced Nginx ingress with sticky session affinity.
Deploy and operate self-managed Kafka, Zookeeper, Redis, Elasticsearch, and Kibana as standalone services and within
Docker; tune Kafka partitioning and consumer group offsets for high-throughput message processing.
Design and maintain database high availability: MSSQL Always-On, MySQL master-slave replication, and MongoDB
replica sets with Pacemaker/Corosync-automated failover (RTO 2 min / RPO 30 sec).
Implement DRBD block-level data synchronization for Elastix v4 VoIP failover; configure pfSense and Mikrotik for 3-ISP
load balancing and network-level high availability.
Manage Hetzner Cloud (dedicated servers, Storage Box, IP keepalive) and Oracle Cloud (OCI) infrastructure including
instances, block storage, gateways, and public/private IP configuration.
Configure Nginx reverse proxy, Cloudflare DNS (A records), and automate SSL certificate provisioning with Certbot / Lets
Encrypt across all hosted domains.
Integrate SonarQube into GitLab CI/CD pipelines for .NET projects; enforce automated quality gates and deliver
developer feedback on every commit.
Automate deployment and database backup workflows using Bash scripts; administer MySQL, MongoDB, and MSSQL
databases with native CLI tools and GUI clients.

nstall, configure, and secure a self-hosted GitLab server on dedicated infrastructure; build and maintain CI/CD pipelines
for automated application deployments.
Deploy and manage Laravel applications in Docker containers using Laravel Sail; provision Redis, Kafka, MeiliSearch,
and MailHog as supporting services for background job processing and search.
Provision and manage AWS EC2 instances (t3a.medium, Red Hat OS) with AWS Network Load Balancer for production
traffic distribution.
Create and configure Hetzner Cloud servers for Node.js, Next.js, and Laravel applications; set up server-level firewalls
and network access controls.
Configure and maintain self-hosted GitHub Actions runners for automated pipeline execution and deployment triggers.
Monitor background job queues using Laravel Horizon dashboard; ensure reliability of throughput, runtime, and failure
alerting for all queue workers.
Conduct server security audits and implement firewall hardening across all managed infrastructure.

Install, configure, and administer Red Hat Linux 8/9 and other Linux distributions; manage VMware ESX 8 hypervisor for
development and test environments.
Configure LVM (volume groups, logical volumes), NFS server and clients, and auto-mounting mappings for distributed file
system access across teams.
Deploy Node.js backend APIs and React.js frontends following microservices architecture; containerize applications with
Docker and deploy to AWS ECS (Fargate) using ECR for image storage.
Build and maintain GitHub Actions CI/CD pipelines for automated build, test, and multi-environment deployment workflows
across development, staging, and production.
Configure AWS ALB for traffic routing and AWS WAF for web application protection; enable CloudWatch logging and
monitoring with dashboards and metric alarms.
Deploy and manage Prometheus and Grafana on self-managed Linux servers for infrastructure health monitoring and
application performance observability.
Set up Kickstart install, configuration, and boot servers for mass OS provisioning across multiple workstations and server
fleets.
Manage user accounts, schedule and appl

Deploy .NET applications to dedicated Linux servers across Dev, UET, and Production environments; design and maintain
infrastructure layouts with proper network segmentation.
Write Dockerfiles for .NET projects; manage full Docker lifecycle including image builds, versioning, and deployment to
dedicated server environments.
Install, configure, and maintain OpenVPN for secure remote access to internal systems and services across all
environments.
Deploy and configure Sonatype Nexus Repository Manager as a private Docker image registry; integrate with GitHub
Actions pipelines for secure image push and pull workflows.
Author Bash scripts for automated MySQL database backups, log rotation, and cron-scheduled jobs; enforce backup
integrity and retention policies.
Administer NFS server and clients with auto-mounting configurations for distributed file system access shared across
engineering teams.
Schedule, test, and apply OS patches and upgrades across Linux-based server fleets; manage MySQL databases
including tuning, user management, and integrity checks.
Manage network infrastructure (switches, routers); create and maintain internal documentation covering deployment
runbooks, VPN setup, and server configuration guides