Qamar Chaudhry
Senior AWS Cloud Engineer & AI SRE | Outside IR35 Contractor
About
AWS Certified GenAI & DevOps Professional with 13 years architecting enterprise cloud infrastructure, secure RAG pipelines, and LLM Ops monitoring platforms using Amazon Bedrock, SageMaker, and Kubernetes (EKS).
Core Strengths: GenAI/LLM Ops: Built enterprise AI observability platforms tracking real-time token utilization, P99 inference latency, and RAG query performance across multi-region deployments EKS/Kubernetes SRE: Managed 60+ production EKS clusters with centralized observability (Prometheus, Grafana, OpenSearch), achieving 99.9% uptime Data Lake Engineering: Architected AWS Glue/Athena/Lake Formation data platforms for petabyte-scale analytics with HIPAA/NIST compliance built-in Infrastructure-as-Code: Terraform expert (modules, workspaces, remote state) delivering production-ready accelerators for EKS observability and GenAI monitoring Multi-Account Governance: AWS Control Tower, Organizations, IAM Identity Center (SSO) for enterprise-scale secure cloud environments
Experience
Senior AI SRE / AWS Cloud Engineer - IAGL (Client: Aer Lingus) - Full-Time Remote
(2025-08)
Project: Enterprise GenAI Observability & LLM Ops Platform for Production Bedrock/SageMaker Deployments Challenge: Every enterprise Kubernetes and GenAI deployment starts in a high-risk state—production workloads running blind with zero centralized telemetry, exposing teams to silent model throttling, undetected RAG knowledge base failures, and unmonitored inference latency.
- Identified that initial Bedrock and SageMaker rollouts lacked real-time observability for P99 inference latency, token cost spikes, and silent guardrail failures
- Established unified remote-write paths from distributed EKS clusters and GenAI gateways into multi-region Amazon Managed Prometheus (AMP) workspaces
- Designed architecture for centralized observability across 15+ AWS accounts
- Engineered modular, production-ready Terraform accelerator provisioning Amazon Managed Grafana (AMG) workspaces with secure SigV4 authentication and dynamic PromQL templating—reducing setup from weeks to minutes
- Automated PrivateLink endpoints, least-privilege IRSA roles, and cross-account AMP remote-write architectures ensuring 100% compliance with security standards
- Delivered reusable Terraform modules adopted across enterprise for rapid EKS observability deployment
- Deployed 13+ specialized Prometheus alerting rules and Grafana dashboards tracking real-time token utilization, cost-anomaly attribution per model, and RAG query response times
- Configured predictive capacity forecasting (predict_linear()) for Kubernetes persistent volumes
- Automated incident workflows eliminating unexpected cloud bill inflation and downtime
- Reduced MTTR by 40% through unified "Single Source of Truth" dashboards for SRE teams
- Aligned GenAI infrastructure with NIST Cybersecurity Framework and CIS benchmarks
- Established AWS Backup governance for cross-account, multi-region disaster recovery (RPO/RTO compliance)
- Business Impact: 99.9% uptime for production GenAI workloads; 60% reduction in unplanned GenAI infrastructure costs through proactive monitoring; Zero security incidents through least-privilege IRSA and PrivateLink architecture
Senior AWS Cloud Engineer / SRE - IAGL (Client: Aer Lingus Rewards Platform) - Full-Time Remote
(2022-09 - 2025-08)
Project: AWS Platform for Loyalty Program with Earn/Burn Partnerships (Hotels, Car Hire)
- Led Terraform adoption enterprise-wide, developing modular HCL code, managing remote states (S3/DynamoDB), and enforcing DRY principles across multi-tier environments
- Reduced environment spin-up time by 30% through automated multi-account AWS provisioning with Terraform workspaces
- Acted as Design Authority for complex, high-availability AWS infrastructure, delivering High-Level (HLD) and Low-Level Designs (LLD)
- Defined and executed robust AWS Backup, disaster recovery (DR), and multi-region restoration strategies across complex multi-account environments, ensuring strict alignment with RPO/RTO targets
- Established centralized AWS Backup platforms with cross-account and cross-region governance using AWS Control Tower, Organizations, and AWS RAM
- Architected AWS Glue/Athena/Lake Formation data lake for customer loyalty analytics processing petabyte-scale data
- Built ETL pipelines with Apache Spark for real-time data ingestion from Hotels and Car Hire partner APIs
- Optimized Athena queries reducing query costs by 50% through partition pruning and columnar storage (Parquet)
- Defined user-centric SLIs (latency, error rates) and established SLOs with Error Budgets to balance feature delivery with system reliability
- Architected centralized observability stack using AWS Managed Prometheus, Grafana, and OpenSearch, reducing MTTR by 35%
- Developed custom Python-based automation and Slack/Teams integrations for proactive alerting, achieving 99.9% uptime for critical services
- Represented infrastructure team at Change Advisory Board (CAB) meetings, providing risk assessment and rollback strategies for high-impact production releases
- Technical mentor for team of 4+ engineers, conducting regular code reviews for Terraform and Python scripts
- Aligned cloud architectures with NIST Cybersecurity Framework and CIS benchmarks across regulated aviation and financial projects
- Implemented AWS WAF, GuardDuty, and Secrets Manager for defense-in-depth security posture
AWS DevOps / Platform Engineer - Royal Bank of Scotland - Hybrid (Glasgow)
(2020-04 - 2022-09)
Project: Kubernetes Migration & CI/CD Automation for Financial Services Applications
- Designed and deployed multi-node Kubernetes clusters (EKS) for HA, resilient containerized applications in greenfield/brownfield banking environments
- Built AWS infrastructure with Terraform IaC, creating reusable modules for VPC, EC2, S3, RDS, and EKS deployments across Dev, QA, Prod environments using Terraform Workspaces
- Managed Terraform state with S3, DynamoDB Lock ID, and KMS encryption ensuring secure, collaborative infrastructure management
- Deployed complete CI/CD pipeline with Jenkins, Ansible automating build, test, and delivery for banking applications
- Created metrics and monitoring dashboards using ELK, Prometheus, and Grafana for real-time cluster health visibility
- Migrated on-prem banking workloads to AWS using AWS Migration Hub and DMS (Database Migration Service)
- Wrote Python Lambda functions for system automation and event-driven workflows
- Full participation in Scrum ceremonies (Daily Scrum, Sprint Planning, Retrospective) as part of Agile delivery team
AWS Platform Engineer - NHS Digital - Remote
(2019-01 - 2020-03)
Project: Three-Tier Application Deployment with Terraform IaC for NHS Healthcare Systems
- Migrated NHS Digital's entire IT infrastructure to Terraform IaC, documenting and codifying existing privately-accessed SSH/NACL-based infrastructure
- Configured CloudWatch agent on all EC2 servers, creating centralized logging and alerting for NHS production environments
- Set up Slack notifications via CloudWatch for 24/7 infrastructure alerts ensuring immediate incident response
- Configured alerting and monitoring system for security and service issues: application compromise/failure, service outages, disk/CPU/memory threshold exceeded
- Automated Docker image creation using Jenkins and Docker supporting DevOps team with containerization
- Automated infrastructure activities (continuous deployment, application server setup, stack monitoring) using Ansible playbooks integrated with Jenkins CI
- Documented system configurations, AMI build practices, backup procedures, and troubleshooting guides in Confluence
- Delivered infrastructure provisioning for Test, Prod, and Non-Prod environments following AWS Well-Architected Framework best practices
AWS Cloud Engineer - Borderlight AB, Sweden - Sweden
(2015-11 - 2018-12)
Contract Type: Permanent (Precursor to Consulting Work)
- Developed Ansible playbooks/inventories for configuration management across Linux estates (RHEL 6/7/8, SUSE, Solaris)
- Built, monitored, and supported Patch and Upgrade Linux servers ensuring security compliance
- Established complete DevOps pipeline using Git, Jenkins, Maven, Docker, Ansible
- Provided AWS infrastructure for deployment of web applications (EC2, S3, VPC, RDS)
- Set up Jenkins master/slave architecture for scalability and agility
- Monitored systems and diagnosed/fixed technical hardware/software/application issues
IT Support - Keolis, Sweden - Sweden
(2012-04 - 2015-10)
- Studied BI (SQL Databases and Programming) at Nackademin Technical College, Solna, Stockholm
- Performed ETL for incremental loads, SQL Server patching and updates
- User/group administration in Windows/Linux environments
Education
Bachelor of Science - Computer Engineering - Derby University
BI (SQL Databases and Programming) - Nackademin Technical College, Solna, Stockholm