Muhammad Bilal

DevOps Engineer

Credit First Financial • Período integral

Sep 2024 - Present • 1 yr 9 mos

In my role as a DevOps engineer, I took full ownership of the organization's AWS infrastructure and Kubernetes cluster administration. My responsibilities included managing core AWS services like IAM, RDS, API Gateway, and WAF, as well as performing critical EKS upgrades for Kubernetes versions, node groups, and core components like CoreDNS and kube-proxy. Recognizing that all environments (UAT and PROD) were originally provisioned manually, I spearheaded the adoption of Infrastructure as Code (IaC) by introducing Terraform. I authored comprehensive Terraform configurations to define the platform's infrastructure and successfully imported the existing, manually created resources into this new state management system, establishing a consistent and version-controlled foundation. A key initiative was migrating our code analysis from SonarCloud to SonarQube, deploying it via Helm on EKS and integrating it with GitHub Actions to enhance code quality and vulnerability scanning. I also enabled the Data Engineering team by deploying and configuring Airbyte and Dagster across UAT and PROD environments using Helm on EKS. To strengthen security, I implemented OAuth2 Proxy for internal application authentication and integrated AWS GuardDuty and Inspector to scan the EKS cluster and EC2 instances, taking necessary steps to mitigate identified risks and vulnerabilities. I supported and evolved our CI/CD pipeline by troubleshooting build issues in GitHub Actions and managing Docker image publication to ECR. I automated the infrastructure provisioning process by implementing GitHub Actions workflows to execute terraform plan and terraform apply commands, ensuring reliable and auditable deployments. For application deployments, we adopted a GitOps model using ArgoCD. I authored Helm charts and ArgoCD manifests for microservices, later deploying a separate ArgoCD instance for Production and migrating applications from UAT with zero downtime. To standardize deployments, I created a ge

DevOps Engineer

ActiveSG • Período integral

Jul 2020 - Oct 2021 • 1 yr 3 mos

Responsible for handling software and infrastructure-related tasks including front-end, back-end, cloud infrastructure, and data processing pipelines. Containerized applications such as Laravel, Python apps, and MySQL databases, improving deployment efficiency by 30%. Developed Kubernetes resources including deployments, services, persistent volume claims, network policies (ingress & egress), environment configmaps, and secrets, reducing deployment time by 25%. Bootstrapped clusters using Kubeadm and managed them using Kubectl utility. Deployed applications on Google Cloud in development environments using Kubectl. Created Kubernetes ingress resources to expose applications to the internet with SSL termination, enhancing security and availability. Utilized Kubernetes cronjob resources to collect data from various API gateways, improving data collection efficiency by 40%. Developed scalable architecture using Kubernetes horizontal pod autoscaling with GKE auto-scaling features, leading to 50% improvement in system scalability. Created custom health checks using Kubernetes backend config resources. For production deployments, utilized AWS Fargate and Pulumi to provision infrastructure including AWS ECS, ECR, and RDS with MySQL engine. Automated the entire cycle from testing changes to pushing to production, reducing deployment times by 40%.

DevOps Engineer

Upwork • Freelance

Sep 2018 - Jun 2020 • 1 yr 9 mos

Provided comprehensive DevOps services in the freelance market, from full-stack web application development to implementing DevOps practices for rapid development, deployment, and feature releasing through automated CI/CD pipelines. Assisted various clients in cloud adoption and modernizing application development techniques using tools like Docker, GitHub Actions, Cloud Build, Azure Container Instance, and AKS.