My Professional Journey

→ Cloud Migrations & Infrastructure Management

Led zero-downtime migration of 50+ production servers from Ubuntu 18.04 → 22.04/24.04 LTS, including Plesk upgrades and full post-migration validation.
Upgraded Azure Load Balancers from Basic to Standard SKU — improving availability, zone redundancy, and SLA coverage.
Administered Linux and Windows servers across production, staging, and development environments with VNet segmentation and NSG-based network controls.
Provisioned and maintained Azure infrastructure using Terraform — version-controlled, peer-reviewed, and consistent across all environments.

⊞ Multi-Stack Application Hosting & Deployment

Built and maintained CI/CD pipelines for Node.js, .NET, and PHP (Laravel) applications using Azure DevOps and GitLab CI/CD — automated via Git webhooks and deployment gates.
Diagnosed and resolved Microsoft-hosted agent regressions, including Python 3.14 deadlocks affecting Azure CLI authentication in live pipelines.
Supported hosting and deployment of Node.js, .NET, PHP, and Python applications — resolved 50+ production build and deployment issues.
Managed containerised workloads using Docker for application isolation and scalable deployments.
Implemented Ansible for configuration management and consistent server provisioning across environments.
Performed full production recovery of habtoorpalace.com following a deleted MongoDB Atlas cluster — rebuilt cluster, restored databases, and resolved PM2 crash loops and nested route 404s.

◉ Monitoring, Performance & Reliability

Deployed and managed a full observability stack — Prometheus, Grafana, Loki, Promtail, and Site24x7 — across all production environments.
Conducted LoadRunner performance testing to identify bottlenecks and optimise system throughput.
Performed root cause analysis on production incidents — implemented preventive measures that reduced incident recurrence by 40%.

⊘ Security, Compliance & Cost Optimization

Contributed to ISO 9001 & ISO 27001 documentation and audit preparation.
Implemented Active Directory for centralised authentication — managed 200+ user accounts and group policies.
Contained an AWS IAM key compromise involving LLMjacking attempts — performed full credential rotation, access audit, and policy hardening.
Conducted CVE vulnerability scanning across 200+ Node.js/Next.js client deployments for CVE-2025-55182 (React2Shell, CVSS 10.0) and the July 2026 Next.js security release — identified affected applications and produced structured remediation reports.
Architected and documented a Google reCAPTCHA Enterprise rollout across ~200 client sites — produced a 12-page formal implementation guide covering Node.js, PHP, WordPress, Laravel, and .NET.
Tuned ModSecurity/OWASP CRS WAF rules across Plesk-hosted client sites to eliminate false positives without reducing coverage.
Investigated and resolved an Azure CSP cost spike for a Marriott microsites VM — traced root cause to a high-traffic background video asset consuming disproportionate egress.
Reduced hosting licensing costs by 30% by migrating from Plesk to Cloud Panel.
Migrated object storage to AWS S3 with secure transfer validation.

⊟ Enterprise IT & Identity Management

Installed and managed Active Directory environments on Windows Server for centralised authentication and policy enforcement.
Managed user provisioning, group policies, and secure onboarding/offboarding processes for 200+ accounts.
Deployed IT Asset Management systems for tracking hardware, licenses, and software usage.
Restructured GitLab organisation from personal namespace to group-based structure — resolved subscription linkage issues and established branch management SOPs across all repositories.

◈ Internal Platform — InfraMatrix

Architected and delivered InfraMatrix — a full-stack internal platform (NestJS + React/Vite, MySQL/TypeORM) replacing a legacy Laravel tool.
Unified infrastructure tracking, vendor management, and billing operations across 150+ projects, 19 servers, and 117 vendors into a single system.
Designed the complete security layer — JWT access/refresh tokens, RBAC, TOTP MFA with admin-enforced grace-period policy, AES-256-GCM encryption at rest, and a zero-vulnerability dependency gate on every release.

Managed multi-cloud Linux infrastructure across AWS, Azure, Digital Ocean, and Contabo for 30+ client deployments.
Deployed and maintained Odoo ERP instances for enterprise clients; managed 50+ instances across environments.
Built Docker-based Odoo environments enabling multi-instance deployments on single servers (40% cost reduction).
Performed zero-downtime database migrations; managed PostgreSQL backup/restore for 20+ databases.
Implemented full monitoring stack: Prometheus, Grafana, Loki, Promtail.
Configured Nginx reverse proxy and automated SSL issuance via Certbot for 100+ applications.

Delivered first-line cloud and IT support in a customer-facing environment, ensuring timely issue resolution, system reliability, and smooth user operations across enterprise platforms.

Acted as the primary point of contact for IT and cloud-related inquiries, handling troubleshooting, incident assessment, and resolution across servers, networks, and end-user systems.
Diagnosed and resolved issues related to AWS-based infrastructure, virtual desktops, and enterprise applications, ensuring minimal downtime and improved user experience.
Escalated complex technical issues to L2/L3 teams with detailed analysis, logs, and impact assessment to accelerate resolution time
Provided recommendations on system performance, network stability, and security improvements based on recurring issues and observed patterns.
Supported and maintained key enterprise systems including HR platforms, Digital Signature solutions, and Virtual Desktop Infrastructure (VDI) environments.
Created and maintained technical documentation, user guides, and troubleshooting manuals to streamline support processes and improve knowledge sharing.
Conducted user training sessions and onboarding support, helping teams effectively use internal systems and tools.
Proactively communicated system updates, known issues, and best practices to users, improving overall IT awareness and reducing repeated incidents.
Collaborated with internal IT and cloud teams to ensure service availability, system health, and continuous improvement of support operations.

Worked in a client-facing technical role delivering network infrastructure solutions, combining field engineering with customer support and operational coordination.

Conducted RF surveys, drive tests, and network optimization to ensure reliable connectivity and performance across deployments.
Led end-to-end implementation of IWAN/UBR network solutions, including installation, configuration, and commissioning.
Supervised on-site cable routing and infrastructure setup, ensuring alignment with technical standards and project requirements.
Collaborated directly with clients during deployments to understand requirements, troubleshoot issues, and provide technical guidance.
Provided ongoing customer support, including issue diagnosis, resolution, and performance tuning of deployed networks.
Prepared detailed technical reports, documentation, and performance analysis for clients and internal teams.
Coordinated with cross-functional teams to ensure timely delivery, quality assurance, and smooth project execution.