Muhammad R

DevOps Engineer

Feb 2026 - Present • 9 mos

Designed and deployed a centralized security scanning pipeline (Semgrep, Trivy, Gitleaks, ClamAV) covering ~52 repositories across the organization's GitHub org, automatically polling for new commits and uploading findings as build artifacts. Deployed and managed multiple applications on shared hosts using Nginx as a reverse proxy, routing incoming traffic to the correct backend service based on domain/path-based rules and upstream configs. Uncovered hardcoded AWS credentials and third-party API keys during a security audit of a production .NET service; led remediation, including credential rotation and git history purge. Diagnosed a recurring production EC2 outage traced to a Java-based vulnerability scanner exhausting memory on an under-resourced instance; resolved via swap configuration, per-container memory limits, and PSI-based monitoring. Architected an AWS ECS Fargate migration plan for three containerized .NET microservices (Web BFF, Mobile BFF, SSO) to replace a single shared EC2 host, enabling independent autoscaling per service. Built and maintained CI/CD pipelines using GitHub Actions with self-hosted runners across multiple production codebases (.NET APIs, Vue.js frontends, Next.js apps), resolving pipeline issues spanning dependency versioning, encrypted environment management, and container registry authentication. Administered AWS infrastructure (EC2, ECR, RDS, S3, CloudWatch/SNS alerting) and Azure infrastructure (VMs, Automation Runbooks with Managed Identity, Container Instances) for production workloads. Led incident response for a compromised developer IDE account and an identified supply-chain malware injection across org repositories, producing formal remediation documentation and preventive tooling.

Cloud Infrastructure Engineer

Apr 2025 - May 2025 • 1 mo

Configured Azure VNets, VNet Peering, and Load Balancers. Implemented Application Gateway with WAF. Automated deployments using Terraform and ARM templates. Managed WireGuard VPN across multiple VPS environments. Supported CI/CD pipelines for infrastructure changes.