Open to Cloud / DevOps Engineer roles

DevOps engineer for AWS platforms, CI/CD, and observable production systems.

I help teams deploy and operate cloud infrastructure with AWS, Linux, Terraform, Docker, GitHub Actions, HAProxy, PostgreSQL, Wazuh, and monitoring stacks. My strongest fit is hands-on platform work where automation, troubleshooting, and reliability matter every day.

AWS operations EC2, VPC, IAM, S3, Route 53, load balancers, and EBS.
CI/CD delivery GitHub Actions, GitLab CI/CD, Jenkins, Docker, and Bash.
Security visibility Wazuh IaC project with Terraform, Packer, private DNS, and recovery workflows.
Reliability support HAProxy, PostgreSQL, monitoring, backup, and DR support.
Download CV View Projects Email Me
  • Based in Dhaka, Bangladesh
  • Cloud and DevOps operations
  • AWS, Linux, CI/CD, monitoring
  • Production support mindset

Production deployment pattern

A multi-account Terraform pipeline built for safety, not speed.

This is the deploy pattern I run at work across separate test and prod AWS accounts: nothing touches an account without either an MFA-gated session or a scoped role, every Terraform run is explicit about which account and which action it's taking, and recovery is a workflow input instead of a manual rebuild.

Deploy workflow

workflow_dispatch
  1. 01 Dispatch Engineer picks the target account and one action: plan, apply, rollout_only, destroy, or restore_from_snapshot.
  2. 02 MFA session Test-account runs exchange a hardware MFA code for a short-lived STS session token, masked in every log line.
  3. 03 Role assumption Prod runs authenticate straight into a dedicated deploy role instead of a standing admin user.
  4. 04 Terraform Each account resolves its own S3 state backend and tfvars file from the same input that picked the account.
  5. 05 Packer + rollout A Packer AMI is baked and health-checked first, then rolled out through an Auto Scaling Group instance refresh.

Workflow core

MFA-gated 
workflow_dispatch:
  inputs:
    target_account: [test, prod]
    action: [plan, apply, rollout_only, destroy, restore_from_snapshot]

# test account: trade a hardware MFA code for a 30-minute session
aws sts get-session-token \
  --serial-number "arn:aws:iam::<account>:mfa/<user>" \
  --token-code "$MFA_CODE" --duration-seconds 1800

# prod account: assume the scoped deploy role directly, no MFA relay
terraform init -backend-config="backend.$ACCOUNT.s3.tfbackend"
terraform "$ACTION" -var-file="$ACCOUNT.tfvars"
Access MFA-gated STS sessions

Test-account changes require a fresh hardware MFA code exchanged for a 30-minute session, not a standing key.

Isolation Per-account state and roles

Test and prod each resolve their own S3 backend, tfvars, and deploy role, so nothing prod-facing shares credentials with test.

Actions plan / apply / rollout_only / destroy / restore

The workflow defaults to plan; the destructive actions are explicit choices, never implicit side effects.

Recovery Snapshot-based restore

restore_from_snapshot rebuilds an environment from a chosen EBS snapshot set instead of a from-scratch rebuild by hand.

About

Practical DevOps support for teams that need reliable delivery.

My experience spans AWS environments, Linux administration, multi-tenant production support, Java and PHP application deployment, Docker-based delivery, load balancing, database operations, backup and disaster recovery planning, and monitoring. I focus on making infrastructure easier to operate, more repeatable, and more dependable for the teams using it every day.

AWS infrastructure operations

Provision and support EC2, VPC, IAM, Auto Scaling, EBS, S3, Route 53, and load-balanced application environments.

CI/CD and release automation

Build and maintain GitHub Actions, GitLab CI/CD, Jenkins, and Bash-driven automation for more stable releases.

Monitoring and security visibility

Implement and troubleshoot Wazuh, Nagios, Grafana, ELK Stack, and Zabbix to improve alerting, diagnostics, log analysis, and platform insight.

High-availability platform support

Work with HAProxy, PostgreSQL clusters, Linux services, and operational runbooks to keep services available and recoverable.

Skills

Skills organized around real infrastructure work.

Instead of a flat keyword list, these are the tools and platforms I work with across cloud infrastructure, operations, automation, networking, and observability.

Cloud and infrastructure

  • AWS EC2, Lightsail, VPC, IAM, Auto Scaling, Route 53, S3, load balancers, and EBS
  • Infrastructure design for web applications, security groups, DNS, and production hosting

IaC and automation

  • Terraform for repeatable provisioning and security monitoring deployments
  • Bash scripting for operational automation and database backup workflows
  • Ansible at a foundational level

CI/CD and delivery

  • GitHub Actions, GitLab CI/CD, and Jenkins pipeline setup and maintenance
  • Docker-based application deployment and release process support

Linux and platforms

  • Red Hat, CentOS, SUSE, Oracle Linux, and Windows Server administration
  • Apache, Nginx, HAProxy, VMware ESXi, Hyper-V, and Oracle VirtualBox

Monitoring and security

  • Wazuh, Nagios, Grafana, ELK Stack, and Zabbix for monitoring, alerting, log analysis, and security visibility
  • Operational troubleshooting, service checks, log review, and incident support

Databases and networking

  • PostgreSQL 14, MySQL, Microsoft SQL Server, Oracle 19c, and Microsoft Access
  • TCP/IP, DNS, static IP configuration, MikroTik, Cisco switching, and CCNA fundamentals

Featured security IaC project

Wazuh on AWS with repeatable rollout and safer recovery.

A production-style Wazuh deployment built with Terraform, Packer, GitHub Actions, Docker, EBS, internal DNS, and snapshot-based recovery workflows.

Terraform / Packer / GitHub Actions / AWS

Built an IaC-driven Wazuh platform with persistent data outside the Auto Scaling lifecycle.

The stack separates Wazuh indexer, manager, and dashboard into their own Auto Scaling Groups while keeping each role's data on standalone EBS volumes. Instances can be refreshed or replaced from a new AMI without throwing away security monitoring data.

  • Terraform modules
  • Packer AMI builds
  • Docker Compose runtime
  • Internal NLB
  • Route 53 private DNS
  • MFA-based GitHub Actions
  • Snapshot restore
Roles Indexer, manager, dashboard
Recovery Snapshot set restore flow
Safety EBS prevent-destroy guardrails
  • Created a shared Debian 12 Wazuh AMI with Docker Engine, Compose, baked runtime files, certificates, and version metadata.
  • Automated plan, apply, rollout-only, destroy, and restore-from-snapshot workflows through GitHub Actions.
  • Preserved role data volumes during instance refreshes and destructive workflows to reduce accidental data loss risk.
View source Discuss Wazuh IaC work Open CV PDF

Projects

Project evidence for hiring conversations.

These examples come directly from the kinds of systems I have deployed, maintained, or improved in production-style environments.

Packer + Terraform

OneTimeSecret self-hosted secret sharing on AWS

Packer / Terraform / ASG

Built and operate a self-hosted OneTimeSecret deployment across test and prod AWS accounts, baking a Docker-based Packer AMI and rolling it out through an Auto Scaling Group behind a shared ALB.

  • Packer-built AMI installs Docker, Valkey, and Nagios NRPE health checks
  • Terraform provisions the ASG, target group, security groups, and Route53 record with rolling instance refresh
  • GitHub Actions workflows drive AMI builds and plan/apply/refresh/destroy with MFA-gated role assumption per account
Outcome Reproducible, MFA-gated build and deploy pipeline replaced manual server setup across environments.
Open live site View source

Security monitoring

Wazuh IaC on AWS with Terraform and Packer

Terraform / Packer / Wazuh

Built a repeatable Wazuh security monitoring platform on AWS with role-based Auto Scaling Groups, persistent EBS data volumes, AMI automation, private DNS, and GitHub Actions deployment workflows.

  • Separated indexer, manager, and dashboard roles across dedicated ASGs and internal endpoints
  • Used Packer to build a shared Debian 12 AMI with Docker, Wazuh runtime files, and generated certificates
  • Added snapshot, rollout-only, destroy-with-preserved-data, and restore-from-snapshot operations
Outcome Wazuh became easier to upgrade, recover, and operate without rebuilding monitoring data by hand.
View featured case study Open live site View source See full CV

Lightsail + Docker Compose

Built and self-hosted eboighar.com, an online bookstore, on AWS

AWS Lightsail / Nginx / Docker Compose

Built eboighar.com, an online book-selling platform, from scratch on a single AWS Lightsail instance with a static Elastic IP and Route 53 DNS — no load balancer in front. a1queue.com runs on the same pattern.

  • App, database, and Nginx reverse proxy run together from one Docker Compose file on the instance
  • Route 53 handles DNS directly against the instance's Elastic IP
  • Replaced manual SSL certificate renewal with a Certbot cron job
Outcome SSL renewal stopped depending on someone remembering to do it by hand.
Open eboighar.com Open a1queue.com Open CV PDF

Release automation

Jenkins and GitLab CI pipeline for a legacy PHP 7.4 app

Jenkins / GitLab CI / Docker

Built a sync-then-restart deployment pipeline for a PHP 7.4 + Apache app running in Docker: clone, rsync the checked-out files into the host path bind-mounted into the container, fix permissions, restart. No build step or artifact registry — the codebase didn't need more than that.

  • Jenkins declarative pipeline as the original implementation, with an equivalent GitLab CI job
  • rsync with --delete --checksum keeps the deployed copy exactly in sync with the repo
  • One Apache vhost serves two PHP codebases from the same host via separate aliases
Outcome Deploys went from a manual file copy to a one-branch-push pipeline run.
View source

Observability and resilience

Monitoring, HAProxy, PostgreSQL, and DR support

Monitoring

Supported platform reliability with monitoring dashboards, service checks, HAProxy load balancing, PostgreSQL cluster operations, backup workflows, and disaster recovery exercises.

  • Implemented Nagios, Grafana, ELK Stack, and Zabbix-based health visibility
  • Maintained HAProxy and database components for high availability
  • Contributed to DR drills and ISO27001 and ISO22301 support work
Outcome Teams had stronger signals for incidents, availability, and recovery readiness.
Contact me about reliability work Request more details

Experience

Recent roles across infrastructure, systems, and DevOps support.

Recent work spans AWS provisioning, application delivery, observability, HAProxy, PostgreSQL, and day-to-day operational support, built on an ISP network operations foundation.

Metafour Asia Ltd Junior DevOps Engineer Dhaka, Bangladesh to Present

AWS, observability, and production platform support

  • Provision and manage AWS infrastructure across EC2, VPC, IAM, Auto Scaling, load balancers, and EBS, supporting highly available production environments.
  • Build immutable AMIs with Packer and provision them with Terraform for production services, including Wazuh security monitoring and an internal one-time-secret service.
  • Deploy Java applications to multi-tenant production environments through automated CI/CD pipelines and Auto Scaling group rollouts, using Packer-built AMIs for consistent releases.
  • Configure and maintain HAProxy load balancers and PostgreSQL 14 high-availability clusters, including failover testing and recovery procedures.
  • Support CI/CD automation in GitHub Actions and automate recurring operational tasks with Bash scripting.
  • Contribute to ISO 27001, ISO 9001, and ISO 22301 compliance, authoring SOPs and operational runbooks, and participating in disaster recovery drills.
MicroMac Techno Valley Ltd Associate System Administrator Dhaka, Bangladesh to

Systems administration, AWS hosting, and CI/CD foundation work

  • Deployed and managed AWS infrastructure (EC2, S3, Route 53) for live production systems, and containerized applications with Docker for consistent, portable environments.
  • Installed and maintained GitLab and Jenkins CI/CD environments supporting automated build and deployment workflows.
  • Administered Red Hat/CentOS, SUSE, Oracle Linux, and Windows Server 2012/2019 estates, covering installation, configuration, and ongoing maintenance.
  • Configured Zabbix monitoring and performed root cause analysis on CPU, memory, and process metrics to identify recurring faults.
  • Implemented automated backup and business continuity processes, including NAS-to-cloud data replication with backup validation, and managed MySQL, Oracle, and SQL Server backups.
IncomIT Solution (Broadband) Assistant NOC Engineer Dhaka, Bangladesh to

ISP network operations and routing support

  • Provided 24/7 monitoring of ISP network infrastructure, including routers, switches, and backbone links, responding to outages and performance alerts.
  • Configured and maintained MikroTik routers, including NAT, PAT, ACLs, DHCP, SSH, and firewall policies.
  • Configured and troubleshot static and dynamic routing across OSPF, BGP, EIGRP, and RIP.
  • Maintained incident records, technical documentation, and daily network status reports, coordinating with field engineers and vendors on service disruptions.

Credentials

Training, certifications, and education that support the practical work.

These credentials are pulled from the public LinkedIn profile and link to provider verification pages where public verification is available.

Training and certifications

Training and specialization

  • Mastering Operating Systems with IBM AIX Coursera · Issued Feb 2025 · Credential ID BAJAG60M17W0 View credential
  • AWS Cloud Technology Consultant Specialization Amazon Web Services (AWS) · Issued Jan 2025 · Credential ID JB7MZYXVD9CD View credential
  • Cybersecurity Attack and Defense Fundamentals Specialization EC-Council · Issued Dec 2024 · Credential ID 8TY2XAQ2HLCL View credential
  • DevOps Mastery Specialization KodeKloud · Issued Dec 2024 · Credential ID B0W0LD45QWII View credential

Certifications

  • AWS Cloud Solutions Architect Amazon Web Services (AWS) · Issued Feb 2025 · Credential ID GN7XQL1MPGD5 View credential
  • Google IT Support Professional Certificate (v2) Coursera · Issued Dec 2024 View credential
  • MikroTik Certified Network Associate MikroTik · Issued Dec 2023 · Expires Dec 2026 · Credential ID 2312NA2069
  • Cisco Certified Network Associate Routing and Switching (CCNA) Atova Technology · Issued Nov 2023 · Expires Nov 2025 Verify on LinkedIn

Education

Professional Diploma in Network Solutions and System Administration
IsDB-BISEW IT Project

Bachelor of Science with Honours
BGMEA University of Fashion & Technology

Contact

Hiring for AWS, Linux, monitoring, or delivery automation?

I am open to conversations around Cloud, DevOps, infrastructure operations, monitoring, and platform reliability roles.

Reach out

What I can help with

  • AWS instance, networking, DNS, and load-balancer setup
  • Linux server administration and application deployment support
  • Terraform, Bash automation, and cleaner operational workflows
  • GitHub Actions, Jenkins, and GitLab CI/CD pipeline work
  • Wazuh, Nagios, Grafana, ELK Stack, and Zabbix monitoring implementations
  • HAProxy, PostgreSQL, and production environment troubleshooting