Summary
Nine years building the delivery machinery for product teams on AWS: multi-account landing zones, EKS platforms, CI/CD with GitHub Actions and CDK, observability and cost control. I like boring deploys and loud dashboards.
Skills
Cloud
- AWS (EC2, EKS, Lambda, S3, RDS)100%level 5 of 5
- IAM and Organizations100%level 5 of 5
- VPC and networking80%level 4 of 5
- CloudWatch and X-Ray80%level 4 of 5
Infrastructure as code
- Terraform100%level 5 of 5
- AWS CDK100%level 5 of 5
- CloudFormation80%level 4 of 5
Delivery
- Kubernetes (EKS)100%level 5 of 5
- GitHub Actions100%level 5 of 5
- Argo CD80%level 4 of 5
- Docker100%level 5 of 5
Languages
- Go80%level 4 of 5
- Python80%level 4 of 5
- Bash100%level 5 of 5
Experience
- Jan 2017 – Feb 2019
Systems Engineer
Omantel · Muscat
Automation and monitoring for the telecom's internal platforms; first Terraform and Docker adoption.
- Mar 2019 – Apr 2022
DevOps Engineer
Gulf Bank Technology · Muscat
Built the bank's first AWS platform under regulatory constraints: private networking, encryption everywhere, audited pipelines.
- Passed the central bank's cloud review at the first attempt
- Moved 70 services from Jenkins to GitHub Actions with reusable workflows
- May 2022 – Present
Senior DevOps Engineer
Nimbus Digital · Muscat
Platform owner for 18 product teams: accounts, clusters, pipelines, observability, cost.
- Blue/green deployment platform on EKS — 1,400 production deploys a month, rollback under 60 seconds
- Multi-account landing zone with Control Tower, SCPs and centralised logging
- Cost programme cut the AWS bill 38 % in a year with Savings Plans, Graviton and right-sizing
Projects
ship-the-deployment-platform.service - ship — the deployment platform
- Loaded:
- loaded (lead; enabled)
- Active:
- active (running) since 2023 – present
- Tags:
- EKS, Argo, Go
Blue/green and canary deploys on EKS with Argo Rollouts, automatic rollback on SLO burn, a CLI and a Slack bot. 1,400 deploys a month.
landing-zone-v2.service - Landing zone v2
- Loaded:
- loaded (architect; enabled)
- Active:
- active (running) since 2022 – 2023
- Tags:
- Control Tower, CDK, governance
40 accounts, Control Tower, SCPs, centralised CloudTrail and Config, account vending in under an hour.
cost-cop.service - cost-cop
- Loaded:
- loaded (author; enabled)
- Active:
- active (running) since 2024
- Docs:
- example.com/cost-cop
- Tags:
- Lambda, Python, FinOps, open source
Open-source Lambda that tags, reports and shuts down what nobody owns. Saved the first 11 % by itself.
Certifications
- AWS Certified Solutions Architect — ProfessionalFeb 2024 · Amazon Web Services
- AWS Certified DevOps Engineer — ProfessionalMay 2023 · Amazon Web Services
- HashiCorp Certified: Terraform AssociateOct 2022 · HashiCorp
- Certified Kubernetes AdministratorNov 2021 · CNCF
Achievements
- AWS bill −38 % in twelve months2025
- 1,400 production deploys a month, rollback < 60 s2024
- Central bank cloud review passed first time2020
About
At Nimbus I own the platform that 18 teams ship through: 40 AWS accounts under Control Tower, three EKS clusters, 600 pipelines and the on-call rota that keeps them honest.
Previously I built the same thing twice — once for a telecom, once for a bank — which is why the third one is small, documented and mostly automated.
Education
B.Sc., Computer Science
Sultan Qaboos University
Publications
- Account vending in 50 minutesSep 2024 · Personal blog
- AWS Community Day Muscat — Rollbacks are a featureMar 2025 · Talk
Testimonials
Deploys used to be an event. Now nobody notices them — which is the whole point.
Laila Al Busaidi — VP Engineering, Nimbus Digital
Languages
- ArabicNative
- EnglishFluent
Interests
- Diving
- Home automation
- Arabic calligraphy