05/21/2026 updated
MK
100 % available
Senior Cloud / SRE / DevSecOps Engineer
cairo, Egypt
Only remote
Bachelor Degree in Computers & NetworksAbout me
Skilled DevOps Engineer with 11+ years of hands-on experience supporting, automating, and optimizing mission compliance-aligned operations across AWS, Azure, GCP, and Oracle OCI . Familiar with Saudi Arabia cloud/security including NCA ECC/CCC-aligned controls and data protection requirements.
PHPDotNetNukePython (Programming Language)Golang
Cloud Platforms & Infrastructure
Expertise across AWS, Azure, GCP, OCI, and on-premises infrastructure, including design, implementation, and operation of highly available, scalable, and resilient environments. Proven track record in building Azure landing zones, VPC design, NAT gateways, VPN connectivity, firewall policies, and secure workload connectivity.
CI/CD & Automation
Deep knowledge of CI/CD tooling including Azure DevOps, Jenkins, GitHub Actions, GitLab CI/CD, and Argo CD. Automation of infrastructure provisioning and application delivery using Terraform, Ansible, Helm, and reusable Infrastructure as Code modules across multiple environments and teams.
DevSecOps & Security
Application of DevSecOps practices across the full delivery lifecycle, including SAST, DAST, SCA, IaC scanning, container image scanning, secret scanning, SBOM, policy as code, RBAC, IAM, KMS, vulnerability management, runtime security, and compliance-aligned baselines. Experience with Prisma Cloud, SIEM integrations, and Nessus-based vulnerability workflows.
Containers & Orchestration
Extensive use of Docker, Kubernetes, Helm, OpenShift, Rancher, and GKE for containerized workload management, multi-environment deployments, cluster configuration, workload rollout, scaling, and operational support.
Observability & Reliability
Setup and management of centralized observability stacks using Prometheus, Grafana, Loki, ELK, Datadog, Dynatrace, Zabbix, Sentry, Jaeger, Cloud Monitoring, and Cloud Logging. Definition of SLIs/SLOs, alert tuning, and structured incident response including runbooks and postmortem practices.
Data & Platform Services
Design and provisioning of data platform infrastructure using BigQuery, Dataflow, Pub/Sub, Cloud Storage, S3, Glue, EMR, Redshift, Athena, SageMaker, and Azure ML to support scalable data processing, analytics, and machine learning workloads.
Linux Administration & System Hardening
Administration of Linux-based servers including advanced system hardening, patch management, PAM configuration, SSH security policies, file system permissions, auditd configuration, and user access control enforcement. Performance analysis and tuning across CPU, memory, and I/O.
Scripting & Automation Tools
Development of automation tools and scripts using Python and Bash to streamline infrastructure operations, reduce manual workload, and build reusable automation modules supporting infrastructure provisioning and environment standardization.
Networking & Connectivity
Design and management of secure network architectures for cloud and hybrid environments, including VPC design, NAT gateways, VPN connectivity, firewall policies, subnet segmentation, DNS, SSH, FTP, NTP, and iptables/firewalld configuration.
Expertise across AWS, Azure, GCP, OCI, and on-premises infrastructure, including design, implementation, and operation of highly available, scalable, and resilient environments. Proven track record in building Azure landing zones, VPC design, NAT gateways, VPN connectivity, firewall policies, and secure workload connectivity.
CI/CD & Automation
Deep knowledge of CI/CD tooling including Azure DevOps, Jenkins, GitHub Actions, GitLab CI/CD, and Argo CD. Automation of infrastructure provisioning and application delivery using Terraform, Ansible, Helm, and reusable Infrastructure as Code modules across multiple environments and teams.
DevSecOps & Security
Application of DevSecOps practices across the full delivery lifecycle, including SAST, DAST, SCA, IaC scanning, container image scanning, secret scanning, SBOM, policy as code, RBAC, IAM, KMS, vulnerability management, runtime security, and compliance-aligned baselines. Experience with Prisma Cloud, SIEM integrations, and Nessus-based vulnerability workflows.
Containers & Orchestration
Extensive use of Docker, Kubernetes, Helm, OpenShift, Rancher, and GKE for containerized workload management, multi-environment deployments, cluster configuration, workload rollout, scaling, and operational support.
Observability & Reliability
Setup and management of centralized observability stacks using Prometheus, Grafana, Loki, ELK, Datadog, Dynatrace, Zabbix, Sentry, Jaeger, Cloud Monitoring, and Cloud Logging. Definition of SLIs/SLOs, alert tuning, and structured incident response including runbooks and postmortem practices.
Data & Platform Services
Design and provisioning of data platform infrastructure using BigQuery, Dataflow, Pub/Sub, Cloud Storage, S3, Glue, EMR, Redshift, Athena, SageMaker, and Azure ML to support scalable data processing, analytics, and machine learning workloads.
Linux Administration & System Hardening
Administration of Linux-based servers including advanced system hardening, patch management, PAM configuration, SSH security policies, file system permissions, auditd configuration, and user access control enforcement. Performance analysis and tuning across CPU, memory, and I/O.
Scripting & Automation Tools
Development of automation tools and scripts using Python and Bash to streamline infrastructure operations, reduce manual workload, and build reusable automation modules supporting infrastructure provisioning and environment standardization.
Networking & Connectivity
Design and management of secure network architectures for cloud and hybrid environments, including VPC design, NAT gateways, VPN connectivity, firewall policies, subnet segmentation, DNS, SSH, FTP, NTP, and iptables/firewalld configuration.
Experience
Professional experience10+ years
Freelancer since2019
Languages
ArabicNative speakerEnglishFluent
Project history
Designed and implemented monitoring, scaling, and performance improvement solutions for cloud-native workloads across AWS, Azure, GCP, and on-prem infrastructure. Built and maintained Azure landing zones, CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD, and Argo CD. Automated infrastructure provisioning using Terraform and Helm. Managed Kubernetes workloads, provisioned GCP services including GKE, BigQuery, Dataflow, and Pub/Sub. Implemented IAM, KMS, and Secret Manager controls. Configured centralized observability using Prometheus, Grafana, ELK, and Cloud Monitoring. Applied DevSecOps practices including SAST, DAST, SCA, IaC scanning, container image scanning, and compliance-aligned baselines. Supported GPU-enabled workloads and ML platforms. Developed automation scripts using Python and Bash.
Designed, implemented, and optimized monitoring, scaling, and performance solutions for cloud-native workloads across AWS, Azure, and GCP. Built, deployed, and managed containerized applications using Docker, Kubernetes, Argo CD, Jenkins, and Ansible. Developed and maintained CI/CD pipelines and GitOps workflows. Implemented DevSecOps controls including vulnerability scanning, compliance checks, and secrets management. Introduced API security, container security, and public cloud security practices using Prisma Cloud, SIEM, and Nessus. Supported ML/data platform operations and GPU-enabled workloads. Defined and implemented SLIs/SLOs for critical services integrating with Prometheus and Grafana. Improved incident response processes with structured runbooks and postmortem practices.
Designed and automated cloud infrastructure across Microsoft Azure, AWS, and GCP. Provisioned and managed infrastructure using Terraform and IaC principles. Built and maintained CI/CD pipelines integrating DevSecOps practices including vulnerability scanning, compliance validation, and secure release controls. Implemented security controls covering IAM policies, API security, container security, and workload protection. Utilized Prisma Cloud, SIEM/SOAR integrations, Nessus, and CrowdStrike for threat detection and vulnerability management. Implemented centralized observability using CloudWatch, ELK Stack, and Prometheus. Led cost optimization initiatives and contributed to compliance alignment with PCI-DSS and CCPA frameworks.