I design, automate, and operate cloud infrastructure on AWS and Azure — Kubernetes platforms on Amazon EKS, Terraform-driven Infrastructure as Code, and CI/CD pipelines that take a commit all the way to a verified release. My work has covered a national-scale digital identity system handling high-volume verification traffic, a high-traffic ticketing platform for a nationwide cricket league, and serverless products for clients in Norway. AWS Certified Solutions Architect and CloudOps Engineer (Associate).
Education
B.Sc. in Software Engineering
University of Dhaka · CGPA 3.41 / 4.00
2020 — 2024
HSC, Science
Dhaka Residential Model College · GPA 5.00 / 5.00
2017 — 2019
SSC, Science
Bogra Zilla School, Bogra · GPA 5.00 / 5.00
2009 — 2017
What I do
kubernetes
Platform engineering
EKS and ECS Fargate clusters with autoscaling, ingress, and health checks that keep multi-service workloads available under variable load.
terraform
Infrastructure as Code
Reusable modules for compute, networking, IAM, databases, and serverless resources, with every change reviewed as a plan before it lands.
ci/cd
Delivery automation
Pipelines on GitHub Actions, CodePipeline, and CodeBuild with blue/green and rolling rollouts, automated migrations, and rollback.
observability
Security & operations
WAF, mutual TLS, KMS, least-privilege IAM, and centralized secrets, instrumented with CloudWatch, Prometheus, Grafana, and Fluent Bit.
Experience
06/2025 — Present
DevOps Engineer II
Brain Station 23 · Dhaka, Bangladesh
Architected and managed Kubernetes platforms on Amazon EKS and ECS Fargate, configuring autoscaling, ingress, and health checks to keep multi-service workloads highly available under variable load.
Automated cloud infrastructure provisioning with Terraform using reusable modules for compute, networking, IAM, databases, and serverless resources, cutting manual configuration and deployment time.
Designed CI/CD pipelines with GitHub Actions, AWS CodePipeline, and CodeBuild, implementing blue/green and rolling deployments with automated migrations and rollback.
Hardened platform security through AWS WAF, mutual TLS, KMS encryption, IAM least-privilege policies, and centralized secrets management via Parameter Store, Secrets Manager, and Azure Key Vault.
Established observability across services using CloudWatch, Prometheus, Grafana, and Fluent Bit, improving incident detection and root-cause analysis in production.
Conducted load testing with k6 to validate system capacity under peak traffic, and led cost and security optimization audits across AWS accounts.
02/2025 — 06/2025
DevOps Engineer I
Brain Station 23 · Dhaka, Bangladesh
Provisioned serverless and container infrastructure on AWS with Terraform, covering Lambda, DynamoDB, VPC, Cognito, and IAM with fully isolated resource boundaries.
Built and maintained CI/CD workflows integrating automated testing, linting, and SonarCloud security analysis into every release.
Containerized applications with Docker and Docker Compose, applying health checks, resource limits, and non-root execution for production readiness.
01/2024 — 02/2025
Associate Software Engineer
Brain Station 23 · Dhaka, Bangladesh
Built Docker-based deployment workflows and CI/CD pipelines, progressively taking ownership of cloud infrastructure for client platforms.
Automated server provisioning, configuration, and routine operational tasks on Linux using Bash scripting.
Supported production deployments and troubleshooting alongside development teams, resolving container startup, networking, and database connectivity issues.
Selected work
OneID — National Digital Identity & eKYC Platform
A national identity and eKYC platform providing NID and passport verification, biometric MFA, and single sign-on to first-party and third-party services. I own the Kubernetes infrastructure, the release pipelines, and the security posture.
Amazon EKSCodePipelineAWS WAFmutual TLSKMSRDSElastiCacheFluent Bit
Scalable Ticket Booking Platform for a Nationwide Cricket League
A high-traffic ticketing platform built to stay available through the demand surges that follow a fixture announcement. I managed the AWS infrastructure, automated provisioning with Terraform, and led load testing to prove the capacity before match day.
An enterprise travel and loyalty platform on .NET microservices with Angular portals, integrated with Sabre GDS and Stripe. I built the container pipelines, the EKS deployments, and the smoke testing that gates each release.
DevOps support for a Norway-based healthcare client, running the GitHub Actions workflows that deploy a Vue 3 frontend and a Django backend, with Microsoft Entra ID authentication and Key Vault-managed certificates.
GitHub ActionsAzure VMsStatic Web AppsKey VaultEntra IDSonarCloud
A fully serverless reseller and catalog platform for a Norway-based client, defined end to end in Terraform. I lead the infrastructure and deployment automation, from module design to monitoring and rollback.