a
amjad22291

Syed Amjad Ali

@amjad22291

DevSecOps Engineer, Kubernetes, Linux Hardening and Firewalls

Pakistan
English, Urdu
About me
DevSecOps engineer with 5+ years securing and automating Linux servers, Kubernetes and cloud infrastructure on AWS, Azure and on-prem. I designed a production firewall automation platform (iptables/ipset, Python, Ansible) that made fleet deployments 3x faster, and I build hardened Kubernetes platforms with ArgoCD, Helm and Istio. I harden servers to CIS benchmarks, put sites behind Cloudflare WAF, and set up GitOps CI/CD. Every control I deliver is tested by trying to break it, and documented so your team owns it.... Read more

Skills

a
amjad22291
Syed Amjad Ali
Offline • 
Average response time: 1 hour

See my services

Cloud Network & Security
I will secure and harden your linux server with firewall, fail2ban and cis
From$40 / projectMore details
Cloud Network & Security
I will set up cloudflare waf, ddos protection and bot blocking for your site
From$35 / projectMore details

Portfolio

Work experience

Curve_Digital Solutions

DevOps and DevSecOps Engineer

Curve Digital Solutions • Full-time

Jan 2026 - Sep 2026 • 8 mos

Designed and built a centralized firewall automation and governance platform managing iptables and ipset rules across a large Linux fleet (Python, MySQL, Ansible). Per-server deploys dropped from about 16s to 4-5s, making fleet rollouts 3x faster. Built a token-authenticated Python REST API for remote rule regeneration, running as a non-root service user with one scoped sudoers entry. Added safe-deployment controls: automatic backups, iptables-restore validation, rollback and post-apply verification, so a bad rule never locks anyone out. Hardened the fleet with default-deny firewalls, SSH hardening, brute-force protection and DDoS mitigation. Led incident response and root-cause analysis for an outage on 7 of 8 production mail nodes and rebuilt the provisioning behind it. Hardened SSL, Nginx, DNS and mail node templates with SHA-256 verified deployments and install-time smoke tests. Shipped a queue-driven proxy checker testing more than 7,000 servers (FastAPI, Nginx) at about 100 checks per minute.

itechnets

DevOps Engineer

itechnets • Full-time

Jun 2023 - Jun 2024 • 1 yr

Automated infrastructure provisioning with Terraform (Infrastructure as Code) and cut manual configuration time by 60% with reusable Ansible playbooks. Designed CI/CD pipelines with Jenkins, GitLab CI and Tekton for zero-downtime deployments. Built and deployed Kubernetes clusters on bare metal and cloud, and managed workloads with Helm and Kustomize. Implemented Prometheus and Grafana monitoring for proactive issue detection and resource optimization. Led an AWS to Azure migration and disaster recovery project using AWS MGN and Azure Site Recovery with minimal downtime.