Secure EKS Platform with GitOps
Six-service EKS platform with Multi-AZ networking, IRSA on every workload, one shared ALB, and declarative zero-downtime delivery via Argo CD.
- CloudFormation
- EKS
- Argo CD
- IRSA
2026
DevOps · Cloud · Security
Abdul Munaim Dar
Senior DevOps & Cloud Engineer
I design and run secure, cost-efficient cloud platforms — from Kubernetes at scale to CI/CD that ships with confidence.
- ~50%
- cost reduction
- 6+ yrs
- AWS · K8s
- ISO 27001
- compliance
AWS Certified Solutions Architect – Associate
Portfolio
Selected work
CloudFormation
GitHub Actions
Reusable CI/CD Workflows
Reusable GitHub Actions pipelines with SonarQube quality gates, Trivy scanning, and zero-downtime deployment controls.
- GitHub Actions
- SonarQube
- Trivy
AWS
AWS Cost Optimization
Cut AWS spend ~50% ($6K to $3-3.5K/month) via rightsizing, Reserved Instances/Savings Plans, and log/metric cleanup.
- AWS
- FinOps
- Cost Optimization
Ansible
Self-Hosted LLM Inference Endpoint
Ansible automation that turns a bare Ubuntu GPU server into a TLS-terminated, Bearer-authenticated vLLM endpoint — with instant key rotation and no model reload.
- Ansible
- vLLM
- Nginx
- NVIDIA GPU
ISO 27001
ISO 27001 Certification
Owned the technical controls, monitoring, and audit remediation behind Allsorter's ISO 27001 certification — from Stage 1 readiness through the Stage 2 verification audit.
- ISO 27001
- ISMS
- Security Controls
- Incident Response
Cyber Essentials Plus
Cyber Essentials Plus Certification
Implemented the five technical control themes and led remediation ahead of the external Cyber Essentials Plus audit — a separate certification effort from ISO 27001, with its own preparation.
- Cyber Essentials Plus
- IASME
- Vulnerability Management
- Patch Management
About
Reliable infrastructure, shipped with confidence.
I have 6 years of experience building secure AWS/GCP infrastructure, enterprise Kubernetes platforms, CI/CD ecosystems, and Terraform/CloudFormation environments. I specialize in EKS/ECS, GitOps, and trunk-based development, with a focus on zero-downtime delivery. Beyond shipping infrastructure, I care about observability and cloud cost optimization — making systems both reliable and efficient to run.
- AWS & GCP infrastructure
- Kubernetes at scale
- GitOps & CI/CD
- Cost optimization
Toolbox
Skills
Cloud
- AWS (EC2, ECS, EKS, Lambda, S3, RDS, VPC, CloudFront, Cognito, IAM, KMS, GuardDuty, CloudWatch)
- GCP (Cloud Run, App Engine, Cloud SQL)
Containers & Orchestration
- Kubernetes
- Docker
- EKS
- ECS
- Traefik
- Nginx
CI/CD & GitOps
- GitHub Actions
- Bitbucket Pipelines
- Jenkins
- Argo CD
- Trunk-Based Development
Infrastructure as Code
- Terraform
- CloudFormation
Security & Compliance
- ISO 27001
- Cyber Essentials Plus
- IRSA
- Trivy
- SonarQube
Observability
- Prometheus
- Grafana
- CloudWatch
- Elasticsearch
- Graylog
Credentials
Certifications
Contact
Let’s talk
Open to freelance engagements and full-time roles. The fastest way to reach me is email or LinkedIn.