HAMZA SARFRAZ
AWS DevOps Engineer · Full Stack Developer · DevSecOps
I am an AWS DevOps Engineer and Full Stack Developer focused on building secure, scalable, and automated software delivery platforms.
My engineering background spans both application and infrastructure layers — from Laravel, React, JavaScript, and Node.js to AWS, Terraform, Docker, Kubernetes, CI/CD, and DevSecOps. I enjoy turning manual deployment and infrastructure processes into reproducible, observable, and security-conscious systems.
I approach product engineering with a production mindset: understand the application, automate the delivery path, secure the infrastructure, instrument what matters, and design systems that remain maintainable as they scale.
- ☁️ AWS cloud infrastructure and production architecture
- 🏗️ Infrastructure as Code with Terraform
- 🚀 CI/CD automation with GitHub Actions, GitLab CI, Jenkins, and ArgoCD
- ☸️ Docker, Kubernetes, and Helm
- 🔐 DevSecOps, IAM, security scanning, and cloud security
- 📊 CloudWatch, Prometheus, Grafana, and centralized logging
- 💻 Laravel, React, JavaScript, Node.js, HTML/CSS, and databases
- 🤖 Applied AI tooling, local LLM workflows, and RAG fundamentals
DevOps Engineer · Cloud Engineer · DevSecOps Engineer · Platform Engineer · Cloud Security Engineer
Security & DevSecOps: IAM · GuardDuty · Security Hub · CloudTrail · AWS Config · Inspector · Macie · Trivy · OWASP ZAP · SonarQube · Snyk · Secrets Manager · KMS
GitOps: ArgoCD · Helm · Kubernetes
| Domain | Proficiency | Details |
|---|---|---|
| LLM Application Tooling | Working | Local model workflows using Ollama and developer-focused AI tooling |
| RAG Fundamentals | Working | Vector-store concepts and experimentation with ChromaDB / Qdrant |
| Local AI Infrastructure | Working | Containerized local AI environments and model-serving workflows |
| AI-Assisted Engineering | Strong | Using AI tooling to accelerate development, debugging, documentation, and infrastructure workflows |
| ML Model Development | Foundational | Not positioned as a primary specialization; current focus remains cloud, DevOps, and platform engineering |
☁️ Production AWS Cloud Platform — Terraform
A production-style AWS infrastructure project designed around Infrastructure as Code, security, availability, and repeatable environments.
| Area | Implementation |
|---|---|
| Stack | AWS · Terraform · VPC · ECS Fargate · ALB · RDS · Redis · ECR · IAM · CloudWatch |
| Scale | Multi-environment architecture with reusable Terraform modules across development, staging, and production-shaped roots |
| Performance | ECS autoscaling, ALB health checks, Redis caching, and private service connectivity; no unverified public benchmark is claimed |
| Security | IAM separation · KMS · Secrets Manager · private resources · encrypted storage · optional WAF · OIDC-ready CI/CD design |
| Impact | Reproducible infrastructure with reduced manual configuration and documented security, cost, reliability, and rollback decisions |
| Repository | View Repository |
Professional project explanation
- Reusable Terraform modules with clear ownership boundaries
- Environment separation for development, staging, and production
- Remote-state and state-locking strategy
- Secure secrets handling and least-privilege IAM design
- Network segmentation with public and private subnets
- High-availability and backup considerations
- Infrastructure designed for review through
terraform planbefore deployment - Cost-aware VPC endpoint strategy for development environments
☸️ Kubernetes Full Stack Platform
A containerized full-stack platform demonstrating Kubernetes orchestration, application delivery, failure handling, and observability concepts.
| Area | Implementation |
|---|---|
| Stack | Kubernetes · Docker · Helm · React · Node.js · MongoDB |
| Scale | Multi-node local Kubernetes environment with production-style workload patterns |
| Performance | Resource management, probes, and scalable workload patterns |
| Security | Secrets · namespace isolation · containerized workloads · RBAC concepts |
| Impact | Demonstrates Kubernetes deployment, troubleshooting, scheduling, and operations knowledge |
| Repository | View Repository |
Professional project explanation
- Deployments and ReplicaSets
- Services and workload networking
- ConfigMaps and Secrets
- Liveness and readiness behavior
- CrashLoopBackOff and ImagePullBackOff troubleshooting
- Node failure and scheduling concepts
- Helm-based deployment patterns
- Prometheus/Grafana observability direction
🚀 DevSecOps CI/CD Platform
An automated delivery pipeline connecting source control, security scanning, containerization, and AWS deployment.
| Area | Implementation |
|---|---|
| Stack | GitHub Actions · Docker · ECR · AWS · OIDC · Trivy · OWASP ZAP |
| Scale | Automated application delivery pipeline with repeatable build and deployment stages |
| Performance | Reported deployment workflow improvement from 30–45 minutes to under 5 minutes; validate with published workflow-run evidence |
| Security | OIDC · image scanning · application security testing · least-privilege IAM |
| Impact | Reported automation of approximately 90% of manual deployment steps and reduced static AWS credential dependency |
| Repository | View Repository |
Professional project explanation
Git Push
↓
GitHub Actions
↓
Security Checks
├── Trivy
├── OWASP ZAP
└── Code Quality
↓
Docker Build
↓
Amazon ECR
↓
AWS Deployment
↓
Monitoring & Rollback
🛡️ AWS Security & DevSecOps Automation
A cloud-security focused implementation combining preventive controls, detection, least privilege, and monitoring.
| Area | Implementation |
|---|---|
| Stack | IAM · CloudTrail · GuardDuty · Security Hub · AWS Config · Inspector · Macie · EventBridge |
| Scale | Multi-service AWS security architecture and policy repository |
| Performance | Automated security visibility and event-driven security workflows |
| Security | IAM controls · encryption · logging · threat detection · security findings · MFA guardrails |
| Impact | Centralized security visibility and documented security operations patterns |
| Repository | View Repository |
Professional project explanation
- IAM policy hardening
- MFA and conditional access concepts
- CloudTrail auditing
- GuardDuty threat detection
- Security Hub findings
- AWS Config compliance controls
- Event-driven security automation
- KMS and Secrets Manager integration patterns
💻 Full Stack Production Application
Application engineering experience spanning frontend, backend, APIs, databases, containerization, and cloud delivery.
| Area | Implementation |
|---|---|
| Stack | Laravel · PHP · HTML · CSS · JavaScript · React · Node.js · MySQL |
| Scale | Full-stack web application architecture with managed database integration |
| Performance | API-driven architecture and containerized deployment workflows |
| Security | Authentication · secrets management · security groups · secure deployment practices |
| Impact | Connects application engineering knowledge with modern DevOps and AWS delivery |
| Repository | View Repository |
Professional project explanation
- Laravel backend development
- React and JavaScript frontend engineering
- REST API integration
- MySQL-backed applications
- Dockerized application workflows
- AWS EC2 and RDS deployment concepts
- CI/CD-oriented delivery and operational documentation
Independent Engineering Projects
2025 — Present
Engineering focus across AWS cloud infrastructure, CI/CD automation, containerization, security, and production delivery.
Scope of work
- Designed and automated AWS infrastructure using Terraform
- Built CI/CD pipelines with GitHub Actions
- Implemented OIDC-based AWS authentication to remove static credentials
- Containerized applications with Docker
- Worked with Kubernetes and Helm for workload orchestration
- Integrated security scanning into delivery workflows
- Implemented monitoring and observability practices
- Worked across application and infrastructure layers to improve delivery reliability
Engineering impact
- Deployment time reduced from 30–45 minutes to under 5 minutes
- Approximately 90% of manual deployment steps automated
- Static AWS credential dependency eliminated through OIDC
- Focus on secure, repeatable, and low-downtime delivery
Skills
AWS Terraform Docker Kubernetes GitHub Actions ArgoCD DevSecOps IAM CloudWatch Prometheus Grafana
Independent Engineering Projects
2022 — 2025
Built and maintained web applications across frontend and backend layers while developing strong application architecture and software engineering fundamentals.
Scope of work
- Laravel backend development
- React and JavaScript frontend development
- REST API integration
- MySQL database development
- Node.js-based backend work
- Responsive HTML/CSS interfaces
- Git-based development workflows
- Application debugging and production support
Skills
Laravel PHP React JavaScript HTML5 CSS3 Node.js MySQL REST API Git
| Recognition | Details |
|---|---|
| 🚀 Deployment Automation | Reduced reported deployment workflow from 30–45 minutes to under 5 minutes |
| ⚙️ Automation | Automated approximately 90% of manual deployment processes |
| 🔐 Cloud Security | Eliminated static AWS credential dependency using OIDC |
| 🛡️ DevSecOps | Integrated security scanning into CI/CD workflows |
| ☸️ Kubernetes | Built production-style Kubernetes workloads and troubleshooting workflows |
| 🏗️ Infrastructure as Code | Designed reusable Terraform modules and multi-environment infrastructure patterns |
| 📊 Observability | Worked with CloudWatch, Prometheus, and Grafana monitoring workflows |
Keep only credentials that are actually held, and add the exact certificate title, issuer, date, and verification link before publishing.
learning:
- Advanced AWS architecture
- Kubernetes production operations
- Cloud security and DevSecOps
- Platform engineering
- Advanced Terraform patterns
building:
- Production-style AWS infrastructure
- Terraform multi-environment platforms
- Secure CI/CD pipelines
- Kubernetes application platforms
- Cloud security automation
exploring:
- GitOps with ArgoCD
- Advanced observability
- Event-driven cloud automation
- AI-assisted engineering workflows
- RAG and local LLM infrastructure
open_to:
- DevOps Engineer
- Cloud Engineer
- DevSecOps Engineer
- Platform Engineer
- Cloud Security Engineer