Alaeddine Harb

– Migrated enterprise observability from legacy stack (Grafana, Prometheus, Loki) to unified Datadog platform, deploying agents declaratively across 11+ AKS clusters via ArgoCD App-of-Apps with per-cluster value injection, enabling full-stack observability (APM, Distributed Service Mapping, synthetic monitoring) – Automated Datadog agent deployment and integration configuration (RabbitMQ, PostgreSQL, Redis) across on-premises infrastructure using idempotent Ansible playbooks with Azure Key Vault integration for secure credential management – Delivered Monitoring-as-Code through Terraform-managed Datadog monitors, synthetics, and SLOs, deployed via Pipeline-as-a-Service (Azure DevOps), enabling teams to self-service observability configuration with automated plan/apply workflows and environment promotion – Pioneered observability shift-left methodology through developer workshops, co-designing service state machines and producing observability contracts (SLIs/SLOs, custom metrics with cardinality budgets, alerting rules, structured logging standards, dashboard specifications) enabling teams to define instrumentation at design time and controlling metric cardinality at source – Architected and deployed cloud-native platform infrastructure from ground up, establishing naming conventions, network segmentation strategy, and executing phased migration from legacy to modern Azure architecture with zero downtime – Developed production-grade Terraform module library covering compute (AKS, VM, VMSS), data layer (PostgreSQL Flexible Server, Storage Accounts, CDN, ACR), security (Key Vault), and custom integrations (Keycloak, FTPS/SFTP), establishing organizational IaC standards across 4 solution lines – Collaborated with Cloud team to deliver Pipeline-as-a-Service, streamlining infrastructure provisioning using state isolation per resource type and reducing deployment time by 70% – Architected GitOps platform using ArgoCD App-of-Apps with hierarchical Helm chart structure, managing 8+ Kubernetes clusters deploying 20+ system components with per-cluster/per-component value injection, eliminating manual deployments and configuration drift – Implemented automated release workflows using semantic-release, conventional commits, and Azure DevOps pipelines – Modernized on-premises Kubernetes infrastructure: eliminated SPOFs (single HAProxy/NFS, single Redis), implemented MetalLB dual-VIP + Ceph distributed storage + Redis Sentinel HA cluster, upgraded Kubernetes 1.21 → v1.33 and CentOS 7 → RHEL 9.3 with zero downtime – Established cluster governance framework using Kyverno policies (resource enforcement, quotas, Datadog label enforcement) and KEDA autoscaling for capacity optimization – Designed and implemented cross-region disaster recovery strategy using Azure Site Recovery (VMs), Velero + Terraform (AKS), and PostgreSQL cross-region replication - achieving RTO=3h / RPO=5min with zero-downtime production region migration (client commitment: RTO 5-7h)

– import, deploy various gcp legacy/new resources with terraform. – collaborate with different product teams to help them move to containers. – Develop CI/CD pipelines with gitlab-ci. – Implement semantic versioning and automatic changelog generation for our infrastructure stack. – Deploy traefik as ingress controller with Cert manager and Google Certificate Authority for ssl certifications management. – Deploy External DNS for dns management (integrated with cloud DNS) – Deploy Vault injector using Google Cloud Auth method with a trust relationship configured based on Workload Identity to authenticate with Vault. – Deploy External Secrets Operator integrating GCP Secret Manager for secret management using Workload Identity to authenticate. – Deploy Datadog monitors, synthetics and slo's to monitor clusters with terraform. – Deploy kyverno as cluster governance solution. – Migrate legacy applications from Kustomize to Helm.

– Administrate multi-tenant clusters. – Deployment of Litmus Chaos (Chaos Engineering). – Onboarding, initiations and collaboration of/with various teams on Litmus Chaos. – Analyze and debug nginx ingress latency problems with wireshark/kubeshark. – Development of kubernetes operator to manage chaos agents lifecycle with Kopf. – Implement Kyverno policies for cluster governance. – Implement grafana Dashboards. – Template and deploy helm charts with jsonnet. – Maintain and upgrade Rancher. – Implement terraform scripts to provision production grade AKS clusters. – Maintain and upgrade various components of the system. – Level 3 support. – On call support.

– Administrate multi-tenant clusters. – Creation of custom terraform provider with go. – Deploy velero as a backup tool across kubernetes clusters (GKE,YKS, AKS). – Deploy wpa (watermark podautoscaler) as pod autoscaler for kubernetes. – Lead and implement scripts to provision k8s clusters in yandex cloud. – Implements custom rules for Gatekeeper using rego. – Maintain and upgrade various components of the system. – Level 3 support. – On call support.

– Design and implementation of system architecture. – Built fully automated CI/CD pipelines on GithubActions for containerized applications using Docker, helm, Kubernetes and Argocd as a gitops engine. – Built fully automated CI/CD pipelines on GithubActions for terraform scripts. – Provisioned eventstore cluster on Digital ocean droplets using terraform and shell scripts. (auto discovery via round robin DNS) – Provisioned microsevice oriented architecture on kubernetes as code using terraform and argoCD(apps of apps) – Automated backups plans (velero,space) – Helm charts development. – Deploy a production grade Apache Airflow on k8s. – Provision Monitoring stack EFK + APM + Metricbeat. – Deploy Falco for runtime security monitoring. – Image vulnerability scanning with trivy. – Impose governance over clusters with Gatekeeper. – Secret management with bitnami sealed-secrets. – Auth management with oauth2_proxy. – SSL certs management with cert-manager

– Implemented TPC-H benchmark for PostgreSQL using sql and docker. – Automated kubernetes clusters provisioning to application deployments on cluster creation using terraform, argocd (apps of apps). – Helm charts development. – Deployed Falco for Runtime security monitoring. – Worked on internal benchmarks with julia.

– Migrated infrastructure from AWS Cloud to Digital Ocean Cloud utilizing IaC(Infrastructure as Code) tool Terraform. – Built fully automated CI/CD pipelines on Gitlab for containerized applications using Docker, helm and Kubernetes. – Provisioned utilizing IaC(Infrastructure as Code) tool Terraform and administered multiple DOKS (DigitalOcean Kubernetes service) clusters. – Migrated application from Docker Swarm to kubernetes (kubernetes applications development). – Deployed a production grade Gitlab server on Kubernetes. – Reduced infrastructure bill cost by more than 50%

– Lead from infrastructure perspective, the transition from monolith to micro-service architecture. – AWS cloud infrastructure architect. – EKS (amazon kubernetes service) clusters Administrator. – kubernetes applications developer. – Deployed monitoring systems (EFK [elastic-cloud-kubernetes], Prometheus + grafana). – CI/CD (continuous deployment to EKS clusters) pipelines development and maintenance (jenkins, ArgoCD) – Setup disaster recovery strategies and scripts (terraform, shell). – Automated backups plans (velero,s3) – Establishing and Organizing development culture and guideline regarding Software Versioning, environments (dev|preprod|prod) and git work-flow. – Gradually introduce Devops philosophy (CI/CD flow, Gitops, containerization) to dev teams through workshops and meetings.