HAKIM ARHAZZAL

– I architected a fully automated, multi-cloud Kubernetes platform, using Terraform to manage the entire infrastructure lifecycle. This IaC approach ensures consistent, compliant, and repeatable deployments across both AWS and Oracle Cloud, eliminating vendor lock-in. – I engineered the platform to support mission-critical stateful services by deploying MinIO for S3-compatible object storage and integrating PostgreSQL/RabbitMQ operators for automated failover, backups, and scaling. All secrets are centrally and securely managed across both clouds using HashiCorp Vault. – I designed a robust networking fabric using Cilium as the core CNI for enhanced security and eBPF-based observability. I implemented Tailscale for secure, zero-trust inter-cluster communication (east-west) and leveraged Cloudflare for optimized and protected ingress traffic (north-south). – I established a comprehensive, multi-cloud observability stack with Datadog, Prometheus, and Grafana for deep, real-time insights into system performance. I also built automated CI/CD workflows using GitHub Actions, enabling the secure and rapid deployment of applications across the entire platform. – To meet rigorous ISO 27001 security standards, I engineered a multi-layered defense strategy. This involved implementing Kyverno as a policy engine to enforce cluster-wide security rules, integrating Trivy for automated vulnerability scanning within our CI/CD pipelines, and deploying the K8up operator to ensure robust, automated backups and disaster recovery for all critical stateful workloads.

– I led the complete design and implementation of the AWS environment using Terraform for a fully automated, version-controlled infrastructure. This included architecting the core networking (VPCs, subnets, ALBs/NLBs), hardening security with WAF and granular security groups, and ensuring adherence to the AWS Well-Architected Framework. – I engineered a highly resilient compute layer using Auto Scaling Groups with standardized Launch Templates for consistent instance provisioning. To protect sensitive data, I implemented a robust secrets management strategy integrating AWS Secrets Manager, Parameter Store, and HashiCorp Vault. – I built a comprehensive monitoring stack with Datadog and ELK, providing deep visibility into application performance and infrastructure health. Concurrently, I applied cost optimization best practices, including intelligent instance selection and automated scaling policies, to reduce operational expenses without compromising performance.

– Spearheaded the organization's IaC practice with Terraform, creating reusable modules to standardize infrastructure across all environments. This initiative drastically reduced manual errors, enforced compliance, and accelerated project delivery timelines. – Initially designed and managed highly scalable Amazon ECS clusters for our microservice architecture. I then successfully led the strategic, end-to-end migration from ECS to a multi-AZ Amazon EKS architecture, enhancing scalability and operational efficiency. Hardened the new EKS environment by implementing RBAC, network policies, and pod security policies. – Engineered and optimized GitLab CI/CD pipelines for automated deployment of microservices and AI-based educational tools. I configured scoped GitLab runners for different environments to ensure a secure and efficient software delivery lifecycle. – Implemented robust AWS security controls, including strict IAM policies, Secrets Manager, and VPC security groups, to safeguard sensitive student and institutional data. I also led cost-saving initiatives that resulted in a 20% reduction in monthly AWS expenses through strategic resource optimization. – Established centralized monitoring and logging using Datadog and CloudWatch to ensure high availability and proactive performance tuning. As a senior member, I mentor junior engineers, define team-wide best practices for cloud operations, and foster a culture of continuous improvement.

– Successfully led the end-to-end migration of an extensive infrastructure to AWS, spanning 39 distinct accounts. I collaborated closely with all stakeholders to develop the migration strategy, ensuring minimal business disruption and seamless operational continuity. – Designed and implemented the core AWS architecture, leveraging a wide range of services including EC2, S3, RDS, Lambda, VPC, Transit Gateway, and AWS Organizations to build a secure, scalable, and resilient foundation for all workloads. – Championed Infrastructure as Code (IaC) with Terraform to automate the provisioning, configuration, and management of all AWS resources, resulting in significant improvements in deployment speed and operational efficiency. – Collaborated with DevOps teams to build and integrate robust GitLab CI/CD pipelines. I led the setup of GitLab runners on Amazon EKS across multiple organization accounts, engineering tailored configurations that enforced strict permission models and enabled scalable, container-based CI/CD workflows. – Directed the strategic migration of key AWS workloads to Microsoft Azure to establish a resilient multi-cloud environment. This involved designing secure network architectures using Azure Virtual Networks, ExpressRoute, and Azure Firewall to ensure seamless connectivity between clouds. – Deployed and managed core Azure services, including Azure Kubernetes Service (AKS), Azure SQL Database, and Azure Storage, while successfully modernizing legacy applications for the new platform.

– Using Terraform (IaC), I designed, provisioned, and manage all essential infrastructure on the Exoscale cloud platform, creating a stable and automated foundation for our services. – Engineered a highly available, multi-AZ Kubernetes cluster on Exoscale. I implemented automated scaling policies for both nodes and applications and hardened cluster security using network policies, RBAC, and Pod Security Policies. – Built and maintained robust GitLab CI/CD pipelines to fully automate the software delivery lifecycle. I integrated Helm and ArgoCD to establish a GitOps workflow, ensuring consistent and streamlined application deployments. – Implemented a comprehensive observability solution using the ELK Stack with Elastic Fleet agents. This provided critical insights into system performance, and I established ILM policies for efficient, automated log management.

– Gained extensive experience working with various Docker components such as Docker Engine, Hub, Machine, Compose, and Docker Registry. – Authored Terraform templates to construct staging and production environments, significantly enhancing infrastructure efficiency and scalability. – Built and managed a wide array of AWS services including IAM, VPC, EC2, ELB, S3, EBS, RDS, ASG, CloudFormation, Route 53, CloudWatch, CloudFront, and CloudTrail. – Managed AWS infrastructure using CloudFormation and implemented configuration management with Ansible, streamlining operational processes. – Responsible for the implementation of Continuous Integration and Continuous Delivery processes using Jenkins, complemented by Python and Shell scripts for automation. – Implemented Amazon RDS multi-AZ for enhanced database tier availability and automatic failover. – Optimized volumes and EC2 instances, managed multiple VPC instances, and ensured robust security by configuring IAM accounts, roles, S3 policies, and network security measures. – Designed and implemented both public and private-facing websites on AWS, ensuring high performance and reliability. – Created SNS topics to efficiently manage and send notifications to subscribers. – Managed Amazon RDS databases and automated functionalities for instance creation. Wrote Ansible Playbooks with Python SSH for AWS node configuration management and testing. – Comprehensive AWS Management