Muhammad Wahaj Uddin ANSARI

Cloud Architect and engineering lead with 15+ years in software delivery and 5+ years designing production AWS platforms for large-scale IoT ecosystems. Architect of secure, highly available, cost-optimized serverless and microservices systems on AWS IoT Core, Lambda, AppSync, DynamoDB, and API Gateway serving 2M+ connected smart-lock devices. Proven track record leading cross-functional teams of 10+ engineers and QA, defining Well-Architected standards, threat models, and DR strategy, and driving FinOps initiatives that cut monthly cloud spend by 25-30%.

Skilled at translating firmware, mobile, and partner-integration requirements into resilient cloud architecture under Agile/Scrum delivery.

Senior Cloud Developer / Cloud Lead - ASSA ABLOY - Lake Forest, California, USA

(2025-08)

• Own end-to-end cloud architecture for a global smart-lock IoT platform, defining Well-Architected standards, reference architectures, threat models, and production runbooks adopted across multiple engineering teams.
• Drive multi-account FinOps initiatives with finance and engineering leadership, analyzing Cost Explorer, CUR, and tagging data to right-size Lambda memory/timeout, tune DynamoDB capacity modes, and apply S3 lifecycle/intelligent-tiering, cutting monthly cloud spend by ~25-30% with no impact to availability SLAs.
• Architected a hardened security layer for sensitive workloads using AWS Nitro Enclaves and KMS-backed key isolation, defining enclave attestation flows and encryption-in-use patterns that protect firmware signing keys, PII, and partner API secrets.
• Lead end-to-end OTA firmware delivery on AWS IoT Core using IoT Jobs and device-shadow workflows, S3-hosted versioned artifacts with compatibility matrices, enabling real-time progress and failure recovery.
• Designed the event-driven in-app inbox notification platform (IoT shadow changes through SNS/Lambda into persistent stores and AppSync GraphQL) with deduplication, localization, and read/unread state, delivered to 2M+ iOS/Android clients for firmware, access, battery, and system alerts.
• Lead incident triage and RCA across CloudWatch, X-Ray, and IoT device logs, and coordinate hotfix and cross-region DR failover exercises spanning IoT Core, AppSync, API Gateway, and RDS.
• Mentor senior engineers and QA on cloud-native patterns, run architecture and code reviews, and own sprint planning and backlog grooming with Spectrum Brands stakeholders.

Senior Consultant - Cloud Architect - Speridian Technologies - Irvine, California, USA

(2022-12 - 2025-08)

• Designed and delivered a time-based access-control system for IoT devices using AppSync, IoT Core rules, Node.js Lambdas, and SNS, enabling owners/admins to grant scoped access to guests and members, with encrypted communication and real-time connect/disconnect notifications.
• Architected and built a cross-region disaster-recovery site for existing cloud infrastructure, evaluating DR options against target availability and RTOs across IoT Core, DynamoDB, Lambda, EC2, SNS, AppSync, API Gateway, RDS, and CloudFront, then configuring replication/failover and validating recovery objectives.
• Designed federated identity integration enables users to authenticate with social identities and consume cloud APIs through third-party devices such as Siri and Brilliant.
• Led monitoring with client and team collaboration, documented impact analysis and remediation steps and partnered closely with App and Firmware teams to translate requirements into prioritized cloud deliverables.
• Led R&D of AWS services and their integration with iOS and Android, authoring design documents covering end-to-end test cases, APIs, and implementation details.

Senior Technical Lead - Cloud - Speridian Technologies - Karachi, Pakistan

(2021-03 - 2022-12)

• Designed and built the partner-to-partner integration platform enabling third-party clients to register into Spectrum Cloud and consume AWS-hosted APIs against generated usage plans, opening new integration channels.
• Designed and delivered the OTAU (over-the-air update) system for wirelessly distributing lock firmware and configuration, with cloud-hosted firmware, controlled dissemination, and forced-update enforcement.
• Built the social sign-up/sign-in backend leveraging AWS federation (Google, Apple), enabling authenticated cloud APIs to be consumed via third-party devices including Google, Alexa, and Brilliant.
• Designed Cloud-to-Cloud integrations with the IFTTT platform and the SmartThings ecosystem, allowing IoT devices to be controlled via the SmartThings app on iOS and Android.
• Led sprint planning and backlog grooming, performed code reviews and refactoring, merged team pull requests.
• Led and mentored a senior dev/QA team and partnered with DevOps to monitor and resolve production issues.

Staff Software Engineer (Level 1) - GfK Etilize - Karachi, Pakistan

(2011-12 - 2021-03)

• Planned, designed, and built the company's core PIM product on a microservices architecture using TDD, delivering independently deployable Spring Boot services on Docker containers leveraging AWS services.
• Developed services around Spring Cloud Gateway, Eureka discovery, OptaPlanner, Activiti workflow engine, and Kafka-based publish/subscribe streaming; performed JVM and code-level performance tuning; led code reviews and mentored QA on Citrus-based integration testing under Scrum.

B.C.I.T. - Bachelor of Computer Science & Information Technology - N.E.D University of Engineering & Technology (2004-01 - 2007-12)