Muhammad Jaffar

DevOps Engineer with 1.5+ years of experience building cloud-native infrastructure and automated deployment platforms on AWS. Proficient in Terraform, Kubernetes (EKS), ECS, Jenkins, and GitHub Actions. Experienced in DevSecOps, GitOps with ArgoCD, and zero-trust network architecture. Focused on secure, scalable, and highly available production environments.

DevOps Engineer - Que Cloud Solutions - Lahore, Pakistan

(2024-12)

• Provisioned private EKS clusters using Terraform with no public API endpoint; control-plane access routed through VPC.
• Scoped IAM roles to individual workloads via IRSA enforcing least-privilege — no wildcard policies across any service account.
• Enforced network segmentation using VPC isolation, private subnets, and security groups to prevent cross-environment lateral movement.
• Integrated ArgoCD for GitOps-based continuous deployments, enabling version-controlled automated rollouts across clusters.
• Embedded Trivy and SonarQube scans into CI/CD pipelines to catch vulnerabilities before production deployment.
• Deployed full-stack applications on Amazon ECS with ALB, CloudFront CDN, RDS, and Secrets Manager integration.
• Configured CloudWatch dashboards, ECS service monitoring, and ALB access logs for full production observability.

DevOps Engineer - Self-Directed / Freelance - Lahore, Pakistan

(2024-07 - 2024-11)

• Built production-style multi-environment EKS platform (dev/staging/prod) on AWS using Terraform with VPN-secured private access.
• Configured Jenkins on Kubernetes with Helm, EBS-backed storage, and Kubernetes-native dynamic build agents.
• Implemented PR-triggered pipelines with SonarQube static analysis and Trivy container image scanning.
• Integrated External Secrets Operator with AWS Secrets Manager for secure secret injection into Kubernetes workloads.
• Automated infrastructure provisioning and teardown via Bash scripts with environment variable management across all environments.

BS - Information Technology - University of Education, Lahore (2021 - 2025)