Edge Status: Operational
DNS Routing: 4x Anycast Nodes
Domain: deploywithzaeem.tech
CI/CD Pipeline: Passing (GitHub Actions)

Zaeem Akhtar

Cloud & DevOps Engineer

Architecting reliable, scalable cloud infrastructure and zero-downtime deployment pipelines. Passionate about GitOps, Infrastructure as Code, Kubernetes orchestration, and DevSecOps best practices.

zaeem@cloud-node-01:~
zaeem@infra:~$ curl -s https://deploywithzaeem.tech/api/profile
{
  "name": "Zaeem Akhtar",
  "role": "Cloud & DevOps Engineer",
  "domain": "deploywithzaeem.tech",
  "focus": ["Kubernetes", "Terraform", "AWS", "CI/CD"],
  "status": "Available for opportunities",
  "uptime": 99.99
}

Core Competencies & Toolchain

Tools and frameworks leveraged to build resilient, automated, and observable cloud environments.

☁️

Cloud Architecture

Compute, Storage & Networking

AWS EKS VPC & Subnets RDS PostgreSQL S3 Bucket Policies IAM Least-Privilege CloudWatch Route 53
☸️

Container Orchestration

Microservices & Scaling

Kubernetes (K8s) Docker Helm Charts Ingress NGINX HPA / Autoscaling ConfigMaps & Secrets
📐

Infrastructure as Code

Declarative Provisioning

Terraform OpenTofu Terraform Modules Remote State (S3/DynamoDB) Ansible Configuration Drift Control
🚀

CI/CD & GitOps

Continuous Delivery Pipelines

GitHub Actions ArgoCD GitLab CI Automated Testing Semantic Versioning Canary Deployments
📊

Observability & SRE

Metrics, Logs & Alerting

Prometheus Grafana Alertmanager Loki / Promtail SLO / SLA Tracking Distributed Tracing
🛡️

DevSecOps & Scripting

Shift-Left Security & Automation

Linux (Ubuntu/Debian) Bash Scripting Python Automation Trivy Vulnerability Scanner Gitleaks SSL/TLS & Cert-Manager

End-to-End Infrastructure Architecture

Real-world architectures engineered with a focus on high availability, security, and developer productivity.

GitOps & Kubernetes

Multi-Environment GitOps Deployment with ArgoCD & AWS EKS

Implemented an enterprise GitOps workflow separating application source code from deployment configurations. Changes pushed to the repository trigger automated container builds and automated pull requests into the GitOps repo, where ArgoCD reconciles the cluster state declaratively.

Pipeline Architecture Flow
💻
Git Push
App Code
➔
⚙️
GitHub Actions
Test & Build Image
➔
📦
AWS ECR
Image Registry
➔
🔄
ArgoCD
GitOps Sync
➔
☸️
Amazon EKS
Zero Downtime Pods
Lead Time to Deploy
↓ 82% Reduction
Deployment Downtime
0 Seconds (Rolling)
Mean Time to Recovery
< 90 Seconds
Infrastructure as Code

Modular Multi-AZ Cloud Architecture via Terraform

Designed and provisioned a production-ready AWS environment using modular Terraform scripts. Features a multi-AZ VPC with public and private subnets, NAT Gateways, least-privilege IAM roles with OIDC provider for GitHub Actions, and encrypted RDS databases. State is managed centrally with S3 and DynamoDB state locking.

Infrastructure Topography
📝
Terraform HCL
Modular Config
➔
🔒
S3 + DynamoDB
State Locking
➔
🌐
Multi-AZ VPC
Public / Private Subnets
➔
🛡️
IAM & Security
Least Privilege
Environment Spin-up
15 Mins (Automated)
Configuration Drift
0% (Strict IaC)
Availability SLA
99.95% Target
DevSecOps & Compliance

Automated Shift-Left DevSecOps Security Pipeline

Embedded automated security enforcement directly inside the pull request lifecycle. Every commit runs secret scanning (Gitleaks), static analysis, container base image CVE scanning (Trivy), and Terraform security policy checks (tfsec). Pull requests with Critical or High severity CVEs are blocked automatically.

Security Gates Flow
🔍
Gitleaks
Secret Detection
➔
🛡️
Trivy Scan
Container CVEs
➔
📋
tfsec
IaC Policies
➔
✅
PR Status Check
Enforced Policy
Production Vulnerabilities
0 High/Crit CVEs
Secret Leak Incidents
100% Pre-commit Catch
Scan Overhead
< 45 Seconds in CI

Reliability by Design, Automation by Default

I treat infrastructure as software: version-controlled, automated, and continuously tested. My goal is to eliminate manual operational toil so development teams can ship features with speed and confidence.

Whether designing self-healing Kubernetes clusters, implementing cost-effective cloud architectures, or securing container supply chains, I focus on clean engineering practices and measurable business outcomes.

01

Declarative Everything

No manual click-ops in web consoles. Everything from DNS and VPCs to container deployments is codified and version-controlled.

02

Shift-Left Security

Security is not an afterthought before a release; it is embedded into every automated commit and pull request check.

03

Observability Over Assumptions

Systems are continuously monitored with structured logs, metrics, and actionable alerts to detect anomalies before users notice.

Let's Build & Deploy Together

Interested in discussing cloud architecture, DevOps pipelines, or potential engineering opportunities? I'm always open to connecting.

Location: Open to Remote / Hybrid Roles Worldwide