Senior DevOps & Cloud Engineer · Platform Engineer

Tasib Ali

9+ years building secure, highly available cloud platforms for fintech, healthcare and blockchain — proven by a full regional DR failover restored in a single day with zero data loss.

AWS multi-account Terraform Kubernetes CI/CD HA & DR

View Projects Download CV Contact

Manama, Bahrain

tasib@platform: ~

click & type help ↵

terraform✦kubernetes✦aws✦azure✦jenkins✦gitlab ci✦github actions✦argo cd✦docker✦prometheus✦grafana✦elk✦datadog✦ansible✦postgresql✦redis✦fortigate✦haproxy✦nginx✦linux✦python✦bash✦rust✦ terraform✦kubernetes✦aws✦azure✦jenkins✦gitlab ci✦github actions✦argo cd✦docker✦prometheus✦grafana✦elk✦datadog✦ansible✦postgresql✦redis✦fortigate✦haproxy✦nginx✦linux✦python✦bash✦rust✦

01 · whoami

About

I'm a Senior DevOps and Cloud Engineer with 9+ years building and operating secure, highly available cloud platforms across fintech, healthcare and blockchain. I specialise in AWS multi-account architecture (Organisations, Control Tower), Infrastructure as Code with Terraform, Kubernetes and CI/CD automation.

Most recently I built an entire production platform from scratch — multi-environment, multi-region with European disaster recovery — and led a full DR failover during a regional crisis that restored all services in a single day with zero data loss.

I combine hands-on engineering with platform ownership, vendor management and mentoring, and I'm looking for a Senior DevOps, Platform Engineering or DevOps Lead role.

everything-as-code

Whole platforms provisioned with Terraform modules & workspaces — repeatable, replicable, multi-environment.

built-for-failure

Multi-AZ, multi-region topologies with tested disaster recovery — not just diagrams.

automation-first

Self-service provisioning, CI/CD pipelines and guardrails so teams ship without tickets.

own-it-end-to-end

From landing zones to firewalls to vendor circuits — platform ownership, documentation and mentoring.

02 · the platform, live

Architecture in motion

The topology I run in production — Bahrain primary, European DR. Press the button and watch the failover I led for real: one day, zero bytes lost.

all systems operational · primary: bahrain (3× AZ) · dr: europe (standby)

based on the real failover of Jul 2025–26 platform · illustrative topology

03 · tech stack

Skills

Grouped as on my CV — AWS-primary, everything automated.

Cloud Platforms

AWS — primary

AWS OrganisationsControl TowerLanding ZonesService CatalogEC2EKSECS FargateVPCRDSS3Route 53CloudFrontCloudWatchCloudTrailTransit GatewayAzure · AKS / ACR / VNets / WAFGCPDigitalOceanLinode

Infrastructure as Code

Terraform modulesTerraform workspacesMulti-environment IaCAnsibleAnsible PlaybooksBash automationPython automation

CI/CD & Automation

JenkinsGitLab CIGitHub ActionsArgo CDAzure DevOps

Containers & Orchestration

DockerDocker ComposeKubernetes · EKSKubernetes · AKSBare-metal · kubeadmRancherECS Fargate

Observability & SRE

PrometheusGrafanaAWS CloudWatchELK / ElasticsearchDatadogNew RelicSplunkDynatraceMulti-AZ HADisaster recovery

Databases

PostgreSQLAuroraMySQLMSSQLDynamoDBRedis

Networking & Security

VPC designFortiGate firewallsMPLS / MPLS-over-IPSecIPSec / IKEv2 / OpenVPNHAProxyNginxApacheIAMSecurity hardening

Microsoft 365 & Endpoint

Microsoft 365 adminIntuneDevice managementExchangeEntra IDDomain management

Scripting & Languages

PythonBashRustGo · workingC++ · workingJava · working

04 · systemctl list-units --type=service

Services

What I take end-to-end — as a platform owner, consultant or extra pair of senior hands.

CI/CD Pipelines

Continuous integration & delivery, end to end — Jenkins, GitLab CI, GitHub Actions and Argo CD across the full build/release/deploy lifecycle.

Infrastructure as Code

Whole platforms in Terraform — modules, workspaces, multi-environment — plus Ansible playbooks and Bash/Python automation.

Cloud Migration & Management

AWS-first (Organisations, Control Tower, landing zones), with Azure and GCP experience — from greenfield builds to governed multi-account estates.

Containers & Orchestration

Docker and Kubernetes — EKS, AKS, bare-metal kubeadm, Rancher, ECS Fargate — from first Dockerfile to production clusters.

Monitoring & Alerting

End-to-end observability with Prometheus, Grafana, CloudWatch and ELK — proactive alerting instead of user-reported outages.

DevOps Automation

Self-service provisioning, Service Catalog products, scripted operations — removing tickets and toil with Python and Bash.

Security & Compliance

IAM, SCP guardrails, security hardening, FortiGate firewalls and VPNs — built for regulated fintech-grade environments.

Performance Optimization

Auto-scaling, load balancing (HAProxy, Nginx), caching and right-sizing — faster systems at lower cost.

Version Control & Collaboration

Git workflows, branching strategy and code-review culture across GitHub, GitLab and Bitbucket — plus Agile/Scrum ways of working.

Incident Management & Recovery

Multi-AZ HA, tested disaster recovery and incident response — proven by a live regional failover restored in one day with zero data loss.

DevOps Consulting & Strategy

Architecture reviews, platform roadmaps, vendor and third-party management, documentation — platform ownership beyond the pipelines.

Training & Team Enablement

Workshops, mentoring and hands-on upskilling for engineering teams, with network and system administration support included.

Want something that isn't on the menu?Multi-region DR drills, FinOps cleanups, platform audits — ask away.

Let's talk

05 · history --oneline

Experience

Jul 2025 — Present
Senior DevOps & Cloud Engineer

Pay10 · Manama, Bahrain
- Designed and built the organisation's entire production cloud platform from scratch on AWS — fully provisioned with Terraform modules and workspaces for repeatable multi-environment deployments.
- Architected a highly available multi-region topology — primary in Bahrain, disaster recovery in Europe — with multi-AZ resilience across all critical services.
- Led a full DR failover during a regional crisis, restoring all production services within a single day with zero data loss — versus comparable organisations that took weeks.
- Single-handedly established the AWS Organisations + Control Tower landing zone (guardrails, SCPs, baselines) with custom Service Catalog products for automated account provisioning; built end-to-end observability with Prometheus, Grafana and CloudWatch.
AWSTerraformControl TowerPrometheus · GrafanaFortiGate · MPLS
Jul 2022 — Jul 2025
Senior DevOps Engineer

Aramis Enterprise Solutions → BEYON Money (Batelco) · Remote, Bahrain
- Outsourced senior engineer delivering AWS platform and DevOps services to BEYON Money, a regulated fintech under Batelco.
- Designed and managed multi-account governance with Control Tower — landing zones, SCPs, guardrails and OUs — for a secure, compliant baseline.
- Delivered self-service provisioning via AWS Service Catalog, giving dev and QA teams pre-approved templates and cutting manual provisioning effort.
- Automated infrastructure with Terraform across EKS, ECS, VPC, RDS, S3/EBS/EFS, CloudFront, Route 53 and Direct Connect; ran Jenkins master/agent CI/CD with custom Docker images.
FintechControl TowerService CatalogTerraformJenkins
Mar 2021 — Jul 2022
Senior DevOps Engineer

Digitify (YAP) · Lahore, Pakistan
- Architected public/private AWS environments spanning DEV, TEST, UAT and PROD (VPC, EC2, S3, RDS, CloudFront, EFS, Route 53, CloudFormation).
- Provisioned with Terraform and launch templates; enforced security best practices at instance, subnet and VPC level.
- Engineered for HA, fault tolerance and auto-scaling — Route 53 for HA/DR, CloudWatch alarms for proactive incident response; segmented networking with Transit Gateways, IGW and NAT.
AWSTerraformHA / DRNetworking
Aug 2019 — Mar 2021
DevOps Engineer

Cognitive Health International · Islamabad, Pakistan
- Designed and managed AWS infrastructure across multiple environments for a healthcare product (VPC, EC2, S3, RDS, EFS, CloudFront, Route 53).
- Automated provisioning with Terraform and shell scripting; operated Jenkins master/agent CI/CD.
- Containerised applications with Docker; deployed on Nginx, Apache and Caddy; implemented IAM policies, roles, security groups and ACLs.
HealthcareTerraformJenkinsDocker
Dec 2018 — Jul 2019
System Administrator / DevOps Engineer

ZEPTO Systems · Lahore, Pakistan
- Built virtualised environments for dozens of VMs; administered Ubuntu, CentOS and Fedora servers.
- Deployed highly available LAMP-stack applications; configured AD services (DHCP, DNS, NFS, NTP, SSH); automated operations with cron and Bash.
LinuxVirtualisationLAMPBash
Mar 2017 — Mar 2021
Freelance DevOps & IT Support

EEIZO IT Solutions · Remote, Pakistan
- Delivered cloud infrastructure, automation, CI/CD, containerisation and web-hosting projects for clients across Linux and Windows environments.
FreelanceCloudCI/CD
Mar 2016 — Feb 2017
Network & System Administrator

ClickMatters UK · Sahiwal, Pakistan
- Supported Windows Server and enterprise network troubleshooting; managed users, OUs, file shares, IIS and server security compliance.
Windows ServerNetworkingIIS

06 · git log --stat

Projects & Highlights

Real engagements from my CV — no side-project filler.

Pay10 · 2025 — present

Production cloud platform, from zero

Designed and built an entire production platform from scratch on AWS — multi-environment, multi-region (Bahrain + European DR), multi-AZ — fully provisioned with Terraform modules and workspaces. Includes a single-handedly built Organisations/Control Tower landing zone with custom Service Catalog products.

AWSTerraformControl TowerMulti-region

Pay10 · live incident

One-day DR failover, zero data loss

Led a full disaster-recovery failover to the European DR region during a regional escalation. All production services restored within a single day with zero data loss — comparable organisations took weeks to recover.

Disaster recoveryMulti-regionZero data loss

BEYON Money · 2022 — 2025

Multi-account landing zone for a regulated fintech

AWS Control Tower governance — landing zones, SCPs, guardrails, OUs — plus Organisations with automated account creation, consolidated billing and tagging strategies for cost visibility in a regulated environment.

GovernanceControl TowerFinOps

BEYON Money · 2022 — 2025

Self-service infrastructure catalog

AWS Service Catalog products giving development and QA teams pre-approved infrastructure templates — cutting manual provisioning effort and keeping every account on the compliant baseline.

Service CatalogSelf-serviceCompliance

Pay10 · 2025 — present

End-to-end observability stack

Prometheus, Grafana, AWS CloudWatch and custom/IoT metrics across multi-AZ environments — proactive monitoring and alerting for the whole platform, not just the app tier.

PrometheusGrafanaCloudWatchIoT metrics

COMSATS · final-year project

Smart dumpster monitoring & garbage collection (IoT)

IoT-based monitoring and collection-routing system — the final-year project of a silver-medalist BS in Telecommunication & Networking.

IoTNetworking

07 · foundations

Education

BS, Telecommunication & Networking

COMSATS Institute of Information Technology · 2013 — 2017

Final-year project: Smart Dumpster Monitoring & Garbage Collection System (IoT)

Silver Medalist CGPA 3.61

08 · open a connection

Contact

Hiring for a Senior DevOps, Platform Engineering or DevOps Lead role? Let's talk.

Email
hello@tasibali.com Phone
+973 3361 8010 LinkedIn
tasib-ali-35187631 GitHub
tasibali1 Website
tasibali.com

Location
Manama, Bahrain