Ali – AWS, Kubernetes, Terraform

This project focused on operating and improving a secure AWS/EKS-based DevOps and SRE platform supporting CI/CD, release management, artifact management, code quality, observability, Linux-based infrastructure and production operations. The platform included four Jenkins controller instances, Digital.ai Deploy, Digital.ai Release, Nexus Repository Manager, SonarQube and other DevOps tooling running on Kubernetes.

• Set up and operated a Kubernetes-based DevOps toolchain on EKS, including four Jenkins controller instances, Digital.ai Deploy, Digital.ai Release, Nexus Repository Manager, SonarQube and supporting platform services;
• supported CI/CD and release management tooling for multiple teams and environments, including platform configuration, integrations, access controls, storage, certificates, networking and operational troubleshooting;
• improved reliability of the DevOps platform through monitoring, alerting, automation, runbooks and incident response for failed builds, degraded pipelines and release-blocking issues.

This project focused on running and optimizing high-performance computing (HPC) workloads. It involved designing scalable infrastructure, handling large-scale data processing, and enabling efficient resource utilization for computationally intensive tasks such as simulations, modeling, and advanced analytics.

Ali was responsible for the following:

• deployed and automated HPC clusters for CryoSPARC and Posit Workbench;
• integrated S3 with FSx Lustre for high-performance storage;
• leveraged RDS for backend databases and event-driven Lambda functions for operational automation (e.g., auto-expanding EBS volumes);
• supported large-scale scientific workloads with secure, cost-optimized cloud storage and compute strategies.

The main goal of this project was building a secure, compliant, and well-governed AWS environment. It involved defining cloud security policies, implementing identity and access management controls, ensuring compliance with industry standards, and automating governance practices to safeguard sensitive data and resources.

The main scope included, but was not limited to the following:

• collaborated with enterprise IT governance teams to establish multi-account AWS structures across dev/QA/prod;
• implemented Service Control Policies (SCPs), encryption standards with AWS KMS, and centralized logging/monitoring for audit compliance;
• enabled secure workload deployment while aligning with CIS benchmarks and industry regulatory requirements;
• built hardened AMIs with Packer;
• reduced environment build times from weeks to hours, enabling consistent, reproducible infrastructure deployments across global regions.

The Secure and Scalable AWS EKS Platform project focused on designing and implementing a Kubernetes-based container orchestration platform on AWS. It emphasized scalability, resilience, and security by integrating best practices in IAM, networking, monitoring, and automation, enabling teams to efficiently deploy, manage, and scale containerized applications.

Among others, the contributions included:

• designed and automated a private-only AWS EKS cluster using Terraform and Helm;
• implemented Cilium for pod networking and fine-grained Kubernetes network policy enforcement;
• configured IAM, OIDC integration and secure access patterns for workloads and platform services;
• implemented monitoring and alerting for EKS cluster health using Grafana and Prometheus;
• supported Azure Entra ID SSO and OIDC app registrations for SSO capability for various apps;
• worked on set up of secure ECR repositories with enhanced scanning using AWS Inspector for real-time vulnerability assessment for all container images being used throughout the EKS cluster components and tooling.

This project focused on automating cloud infrastructure, Kubernetes platform components and CI/CD operations for enterprise application environments. The work involved Infrastructure as Code, configuration automation, deployment reliability, observability and secure platform operations.

• managed infrastructure environments using Terraform and configuration-as-code practices;
• delivered automated provisioning and deployment workflows for microservices and Kubernetes/EKS infrastructure;
• supported Jenkins-based CI/CD pipelines and release automation for application teams;
• enhanced monitoring and observability using New Relic and Splunk, including real-time alerts published to Slack;
• supported Linux-based infrastructure, including troubleshooting, configuration, patching and operational support;
• improved security through IAM policy updates, network segmentation and vulnerability scanning in CI/CD workflows;
• worked on incident response and troubleshooting across infrastructure, deployment pipelines and application runtime environments.