Raza

Cloud Automation and Platform Engineer

Self Employed • Período integral

Oct 2022 - Present • 4 yrs

▪ Enterprise Infrastructure-as-Code ecosystems using Terraform, OpenTofu and Pulumi delivering modular multi-account infrastructure provisioning with policy enforcement through HashiCorp Sentinel and OPA/Gatekeeper. ▪ Scalable EKS clusters with Rancher and Istio. ▪ Modular production-grade Python automation platforms using object-oriented programming principles, reusable packages, type hints, centralized exception handling, environment-aware configuration, and automated testing; built internal Flask/FastAPI REST services for AWS infrastructure provisioning, Terraform validation, deployment approvals, IAM policy validation, Secrets Manager integration; enforced code quality through Ruff, Black, and Flake8, and containerized services using secure Docker multi-stage builds deployed through GitLab CI/CD pipelines onto Amazon EKS. ▪ Event-driven cloud automation using EventBridge, SQS, SNS, CloudWatch Events, GitLab/GitHub webhooks, and S3 event notifications to automate provisioning, governance, compliance validation, infrastructure documentation, Kubernetes manifest validation, Terraform template generation, and AI-assisted platform insights through Amazon Bedrock APIs. Produced OpenAPI specifications and reusable automation frameworks supporting secure cloud operations, Infrastructure-as-Code, Kubernetes platforms, CI/CD workflows, and enterprise DevSecOps practices. ▪ GitOps delivery frameworks leveraging Argo CD. ▪ Advanced Ansible automation frameworks integrated into CI pipelines to produce hardened RHEL8-based AMIs, enabling repeatable and security-compliant EC2 provisioning across multi-account and multi-VPC environments. ▪ Secrets management architectures integrating AWS Secrets Manager and Azure Key Vault, enabling secure runtime credential injection, automatic rotation policies, and environment-agnostic secret governance. ▪ CI-driven automated quality and resilience testing with Pytest integration testing.

Cloud Architect/Consultant

Fiverr • Autônomo

Mar 2022 - Apr 2023 • 1 yr 1 mo

Delivered over 50 discrete scripting, automation and cloud enablement tasks for international clients, with a focus on infrastructure provisioning, configuration, and security automation within AWS environments. ▪ Authored and maintained dozens of Python and Bash scripts for automating AWS operations, log processing, cron-driven tasks, and EC2 lifecycle control. ▪ Delivered IaC artifacts using Terraform, AWS CloudFormation, and shell scripts for VPCs, IAM policies, S3 lifecycle rules, security groups, and Lambda triggers. ▪ Designed and implemented secure and compliant AWS service configurations including advanced S3 bucket policies with public access blocks and object lock, automated backup plans via AWS Backup, and integrated EventBridge rules for event-driven triggers. Additionally configured Route 53 routing policies, Transit Gateway attachments, CloudFront distributions with WAF protections, and SSM-based automation documents for operational consistency across hybrid environments. ▪ Automated EC2 environment bootstrap and application deployment using user-data scripts, cloud-init, and parameterized template logic. ▪ Built lightweight DevSecOps workflows for auditing, patching, and logging using AWS CLI, Boto3, AWS Config, and Amazon Inspector.