Burhanuddin Firoz

Cloud & DevOps Engineer specializing in scalable AWS infrastructure, Terraform/Docker automation, and CI/CD pipelines. AWS Certified (Solutions Architect, SysOps, Developer). Complements this with hands-on security testing — penetration testing of web apps, APIs, and cloud environments, OWASP Top 10 assessments, and AWS security posture reviews. Builds infrastructure and knows how to break it, enabling security-first DevOps and faster remediation.

Cloud and Security engineer at Dawat-e-Hadiyah (2025-11 – Present)

• Designed and managed highly available, scalable cloud infrastructure aligned with business and performance requirements.
• Built and maintained CI/CD pipelines to automate build, testing, and multi-environment deployments.
• Automated infrastructure provisioning using Terraform and CloudFormation, reducing manual effort and deployment errors.
• Containerized applications with Docker and managed AWS environments including EC2, Auto Scaling, ALB, and VPC.
• Implemented monitoring and observability using CloudWatch, Prometheus, and Grafana to improve reliability and proactive issue detection.
• Implemented IAM, encryption, and policy controls while optimizing infrastructure costs through right-sizing and scaling strategies.
• Designed backup and disaster recovery strategies and collaborated with development teams to improve deployment reliability and release cycles.

Security Engineer at Dawat-e-Hadiyah (2025-11 – Present)

• Performed authorized penetration testing of web applications, APIs, and cloud infrastructure using Burp Suite, Nmap, and Kali Linux.
• Identified and validated critical vulnerabilities including SQL Injection, authentication/authorization flaws, IDOR/BOLA, path traversal, subdomain takeover, and insecure configurations.
• Conducted OWASP Top 10 and API security testing, including session management, access controls, input validation, and privilege escalation testing.
• Assessed AWS security posture, including IAM permissions, exposed services/resources, network configurations, encryption, and access controls.
• Documented vulnerabilities with technical evidence, reproduction steps, severity/impact, and remediation guidance, collaborating with development and DevOps teams.
• Performed vulnerability retesting and remediation validation to ensure identified security issues were effectively resolved.

Devops Engineer at Nine A Business Connect Pvt.Ltd (2024-07 – 2025-10)

• Designed and implemented scalable Cloud architectures by selecting appropriate services based on workload requirements.
• Architected highly available and cost-optimized solutions using EC2, RDS, S3, VPC, and Auto Scaling.
• Defined infrastructure standards and implementation strategies to improve performance, security, and scalability.
• Applied Cloud best practices including IAM least privilege, network segmentation, and monitoring.
• Managed end-to-end CI/CD pipelines to automate build, test, and deployment workflows across staging and production environments.
• Configured and orchestrated deployment pipelines using Jenkins / GitHub Actions.
• Automated infrastructure provisioning using Terraform and CloudFormation.
• Reduced manual deployment efforts by implementing infrastructure as code and pipeline automation.

AWS/Devops Engineer - Freelance at Bharatteleclinic

• Led end-to-end CI/CD pipeline implementation across staging and production environments, ensuring reliable and automated application deployments.
• Administered and managed AWS infrastructure including EC2, EBS, VPC, S3, IAM, RDS, Auto Scaling, and Elastic Load Balancers.
• Designed and maintained secure, scalable, and highly available cloud architecture aligned with AWS Well-Architected Framework.
• Architected VPC networking including subnets, route tables, NAT Gateways, security groups, and NACLs to ensure secure and optimized connectivity.
• Configured and optimized Auto Scaling Groups and ALB/ELB/NLB to improve application performance and cost efficiency.
• Implemented security best practices including IAM least-privilege policies, KMS encryption, GuardDuty monitoring, AWS Config compliance checks, and CloudWatch alerting.

Project Management & Technical Leadership at Dawat-e-Hadiyah (2025-11 – Present)

• Evaluated software project requirements and recommended appropriate cloud architecture and technology stacks based on scalability, security, and cost considerations.
• Conducted comprehensive project evaluations from an overall technical perspective, assessing application architecture, technology stack selection, feasibility, scalability, and long-term maintainability — beyond just infrastructure planning.
• Participated in project planning, effort estimation, and infrastructure design discussions with stakeholders.
• Defined infrastructure implementation strategies aligned with application architecture and business objectives.
• Managed infrastructure-related project tasks, ensuring timely delivery and alignment with technical standards.

BE in Information Technology – MH Saboo Siddik College of Engineering (2020 – 2024)