status: open to new roles

I build the AWS infrastructure and pipelines that ship code safely.

AWS Certified SysOps Administrator. I automate multi-account AWS governance with Terraform, run containerized workloads on ECS, and standardize CI/CD across an entire engineering org.

  • 0
    AWS accounts governed with Terraform + AWS Organizations
  • 0+
    Production services containerized on ECS
  • 0%
    All company repositories on a standardized CI/CD pipeline
  • ~0%
    Faster DB queries (Django era)
// 01 — work

Featured projects

Production infrastructure built at Clustox. Each card shows the context and the architecture; open How it works for the numbered walkthrough that matches the diagram.

AWS Multi-Account Migration & Governance

Client workloads consolidated from DigitalOcean into AWS, with every project isolated in its own account.

GOVERN ACCESS MIGRATE Terraform AWS Organizations mgmt account SCPs region + type project account · 01 · tag project account · 02 · tag project account · …25 · tag Bitbucket repo A OIDC token account · project A IAM role · project A account · project B cannot reach other projects DigitalOcean AWS EC2 Route 53 brief validation window final DB sync DNS cutover
deploy / build live traffic config / secrets / scrape alerts
TerraformAWS OrganizationsSCPsIAM / OIDCEC2Route 53

CI/CD System — Commit to Live

One standard deployment path for every company repository.

BOOTSTRAP DEPLOY Provisioning script EC2 instance ready for app one-time git push Bitbucket pipeline self-hosted runner Snyk gate scan Deploy → EC2 Route 53 + ACM SSL + DNS Slack pass fail production untouched
deploy / build live traffic config / secrets / scrape alerts
Bitbucket Pipelinesself-hosted runnerSnykRoute 53ACMCertbotSlack

GPU Automation Platform — Self-Hosted CI

Several automation projects share one GPU server and need isolation, scheduling and visibility.

ONBOARD RUN OBSERVE ALERT New project per project Linux user virtualenv MCP server · systemd repeatable per project Jenkins scheduled Docker container Claude Code uses Node Exporter host / GPU Pushgateway Prometheus Grafana query layer push metrics scrape scrape query Slack failures only · throttled
deploy / build live traffic config / secrets / scrape alerts
JenkinsGroovyDockersystemdPrometheusNode ExporterPushgatewayGrafanaLinux

Email Verification Service

A Rails + PostgreSQL service deployed onto auto-scaling EC2 capacity.

PROVISION DEPLOY Ansible playbooks EC2 · Rails app PostgreSQL Release AWS CodeDeploy Auto Scaling Group EC2 instance EC2 instance new instances get the current revision automatically
deploy / build live traffic config / secrets / scrape alerts
CodeDeployAuto ScalingEC2AnsibleRailsPostgreSQL
// 02 — labs

Lab & open-source builds

Built during training — not production

Terraform

Modular Terraform with reusable modules for VPC, subnets, security groups, ALB, target groups, EC2 and S3 — plus separate DigitalOcean droplet configs.

github.com/nexusameer/Terraform

Pipelines

Bitbucket Pipelines definitions — a build/deploy pipeline, a test pipeline, and a pull-request merge pipeline authored as reusable YAML.

github.com/nexusameer/Pipelines

PolyKubeNexus

Kubernetes deployment and service manifests plus an ingress for six containerized Django apps, with a Dockerfile and a PowerShell deploy script.

github.com/nexusameer/PolyKubeNexus
// 03 — experience

Experience

Apr 2025 – Present · Lahore

DevOps Engineer

Clustox

Governed 25 AWS accounts with Terraform + Organizations; standardized CI/CD on a self-hosted runner with Snyk and automated SSL/DNS across all repos; operate production infra across Rails, Django and Node.js stacks.

Aug 2024 – Mar 2025

DevOps Engineer — ITM Program

Systems Limited

Intensive project-based program: Terraform provisioning, Docker & Kubernetes, CI/CD on Linux.

Sep 2023 – Aug 2024

Django Developer

Tintosh Technologies

Built and deployed Django apps end to end; rewrote slow queries (~40% faster); automated notification workflows.

B.S. Computer Science · 2019 – 2023
// 04 — stack

Stack

Every tool mapped to where it lives between commit and production.

Focus or hover a tool to highlight the projects that use it.

  1. 01 provision

    Provision

    accounts, access, config

  2. 02 build & secure

    Build & Secure

    test, scan, package

  3. 03 ship

    Ship

    registry, release, DNS/TLS

  4. 04 run

    Run

    compute, secrets, data

  5. 05 observe

    Observe

    metrics, dashboards, logs

LANGUAGES & SYSTEMS Python · Bash · Groovy · Linux (Ubuntu)

// 06 — contact
Muhammad Ameer Hamza

Hiring for DevOps / Cloud / Platform roles? Let's talk.

Lahore, Pakistan · open to remote.