ES Ejaz Shaikh Cloud DevOps

AWS infrastructure / Kubernetes / automation

Ejaz Shaikh

Cloud DevOps Engineer

Cloud DevOps engineer focused on AWS, Kubernetes, Terraform, CI/CD, and observability. The work below is shaped for the questions interviewers actually ask: how the app is deployed, how traffic moves, how failures are handled, and how the system is operated after launch.

Review project systems Contact me
AWS Kubernetes Terraform CI/CD Observability

Profile

A cloud engineer with an operator's mindset.

My strongest work sits between cloud architecture and DevOps execution. I enjoy taking an application from "it runs on my machine" to a setup with VPC design, IAM boundaries, container builds, Kubernetes manifests, CI/CD, health checks, monitoring, and cost awareness.

The portfolio is written for hiring teams that want evidence, not buzzwords. Each project highlights the infrastructure decisions, security boundaries, deployment path, and operating habits behind the build.

Cloud signal

Hands-on AWS portfolio work across VPC, EC2, S3, RDS, IAM, CloudFront, Route 53, EKS, ECR, CloudWatch, Lambda, and Bedrock fundamentals.

  • Secure network layouts with public/private subnet thinking.
  • Managed database and load-balancing patterns.
  • Cost-aware decisions for small production-style workloads.

DevOps signal

Comfortable with Linux, Docker, Kubernetes, Terraform, GitHub Actions, Jenkins, Prometheus, Grafana, Loki, Python, Bash, and practical release automation.

  • Container builds, orchestration, scaling, and ingress.
  • Infrastructure as Code with repeatable provisioning.
  • Monitoring and troubleshooting habits built into projects.

Main work

Project systems for inspection.

The visuals below show system behavior: source to deploy, request path, scaling controls, security points, and operational visibility. The GitHub links are there, but the portfolio leads with engineering signal first.

Project 01 / Kubernetes deployment

Production-Grade Student Attendance System

A full-stack attendance application treated as a real Kubernetes workload: containerized services, ingress, persistent storage, access control, autoscaling, and monitoring.

Open GitHub repo
React Spring Boot Docker Kubernetes Actions Prometheus Grafana
K8s Orchestrated workloads Deployments, Services, Ingress, HPA, RBAC
CI Automated delivery GitHub Actions builds and deployment flow
OBS Operational visibility Prometheus metrics and Grafana dashboards
Source GitHub Actions build, test, image flow
Container Docker images multi-stage builds
Cluster K8s workloads deployments, services, ingress
Operate HPA + Grafana scale and observe
cluster operating snapshot
namespaceattendance-prod replicas3/3 healthy scalingHPA enabled accessIngress + RBAC

Implementation

  • Containerized React and Spring Boot services with optimized Docker builds.
  • Used Kubernetes Deployments, Services, Ingress, ConfigMaps, Secrets, PV, PVC, RBAC, and HPA.
  • Built CI/CD automation with GitHub Actions and added Prometheus/Grafana observability.
  • Applied cost monitoring habits instead of ignoring infrastructure spend.

Project 02 / AWS 3-tier architecture

Student Attendance Management System

A classic AWS architecture project with a secure VPC layout, public and private subnets, load balancing, EC2 application capacity, managed MariaDB, and CloudWatch visibility.

Open GitHub repo
AWS VPC EC2 ALB RDS CloudWatch MariaDB
AWS Network design VPC, subnets, NAT, NACLs, security groups
ALB Traffic routing Load balancer to scaled EC2 application tier
RDS Managed persistence Private database tier with CloudWatch visibility
Edge Route 53 + ALB domain and traffic entry
Public EC2 app tier auto scaling group
Private Amazon RDS managed MariaDB storage
Control CloudWatch metrics and alarms
aws request path
computeAuto Scaling Group databaseMariaDB on RDS monitoringCloudWatch securityPrivate subnet controls

Implementation

  • Designed VPC, public/private subnets, NAT Gateway, Network ACLs, and security boundaries.
  • Migrated from a monolithic deployment pattern to a distributed multi-instance architecture.
  • Used ALB and Auto Scaling Groups for availability and controlled traffic routing.
  • Managed persistence with Amazon RDS and monitored infrastructure through CloudWatch.

Project 03 / Infrastructure as Code

Amazon EKS Deployment Using Terraform

Infrastructure provisioning shaped around repeatability: Terraform modules for VPC, subnets, IAM roles, security groups, EKS, worker nodes, and Kubernetes access.

Open GitHub repo
Terraform AWS EKS IAM Security Groups kubectl
TF Repeatable builds Terraform modules and state-backed changes
IAM Access boundaries AWS IAM roles aligned with cluster access
EKS Managed Kubernetes Worker nodes, networking, and kubectl operations
Plan Terraform state repeatable changes
Network VPC + subnets cluster foundation
Platform EKS + IAM secured cluster access
Deploy K8s workloads kubectl operations
terraform delivery flow
networkVPC + subnets identityIAM roles clusterEKS workers controlstate-managed changes

Implementation

  • Provisioned AWS infrastructure as code instead of manual console setup.
  • Connected VPC, IAM, node networking, and EKS cluster configuration into one deployment path.
  • Used Terraform state and modules to keep the infrastructure reproducible.
  • Connected AWS IAM permissions with Kubernetes access controls for safer operations.

Project 04 / CI/CD & GitOps · Team Project

E-Commerce Replica Using IaC with EKS Cluster

A full-scale team project replicating a production e-commerce platform end-to-end: Terraform-provisioned AWS infrastructure, Jenkins CI pipelines with SonarQube quality gates, GitOps delivery via Argo CD, path-based microservices on EKS, and Datadog observability across the full stack.

Open GitHub repo
AWS Terraform Kubernetes Docker Jenkins SonarQube Argo CD Datadog GitHub
CI Automated pipelines GitHub → Jenkins → SonarQube gate → ECR → Argo CD
K8s GitOps delivery Argo CD syncing Kubernetes desired state from Git
OBS Full-stack observability Datadog monitoring, alerting, and OOMKilled diagnosis
01 · Source GitHub push triggers the pipeline
02 · Build Jenkins CI automation
03 · Gate SonarQube code quality gate
04 · Package Docker container image build
05 · Provision Terraform AWS infrastructure as code
06 · Cloud AWS account, network, IAM foundation
07 · Cluster EKS path-based microservices
08 · Deliver Argo CD GitOps sync to cluster
09 · Operate Datadog monitoring, alerts, traces
pipeline & cluster snapshot
CI pipelineJenkins + SonarQube gate deliveryArgo CD GitOps sync clusterEKS path-based microservices observabilityDatadog monitoring + alerts

Implementation

  • Automated end-to-end CI/CD pipelines using GitHub, Jenkins, SonarQube, and Argo CD, reducing deployment time and improving release reliability.
  • Provisioned scalable AWS infrastructure with Terraform modules, enabling reusable and reproducible infrastructure-as-code deployments across environments.
  • Containerised and deployed path-based microservices using Docker and Kubernetes on a managed EKS cluster.
  • Implemented GitOps practices with Argo CD for automated Kubernetes deployments and declarative configuration management.
  • Integrated Datadog monitoring and alerting to achieve full-stack observability across services and infrastructure.
  • Optimised application stability by troubleshooting OOMKilled events and tuning container resource requests and limits.

Project 05 / Security product build

Project Enigma - AI-Powered Scam Detection Browser Extension

A privacy-focused browser security project that checks website risk before users interact with suspicious pages. The current build combines a Manifest V3 extension, local heuristics, FastAPI backend design, rate limiting, and a path toward AI-assisted risk scoring.

Open GitHub repo
Chrome MV3 JavaScript FastAPI Python Docker AWS Generative AI
SEC Privacy-first checks URL risk analysis without storing browsing data
API Controlled backend FastAPI, CORS, rate limiting, security headers
AI AI-ready scoring Path from heuristics to generated risk analysis
Browser Extension minimal permissions
Local URL analyzer first-pass checks
API FastAPI risk service validated requests
User Warning UI actionable risk signal
risk analysis flow
extensionManifest V3 privacyNo form-value storage backendFastAPI risk service securityRate limit + headers

Implementation

  • Designed a security-first extension flow with minimal permissions and no form-value collection.
  • Built the API direction with CORS controls, rate limiting, security headers, and health checks.
  • Separated local URL heuristics from backend analysis so the product can mature in phases.
  • Shows product thinking beyond infrastructure: user trust, privacy, risk messaging, and scale path.

Technical stack

Well balanced skill set with hands on experience

I built the projects above to practice real cloud and DevOps skills, not just to have something to show. The tools and technologies below are the ones I used to build, deploy, and operate the projects Mastering the practical skills that hiring teams are looking for This was the main motivation behind the portfolio, and I continue to deepen that experience with each project.

Experience

Built from hands-on training, operations, and disciplined execution.

Sep 2025 - Jun 2026

Cloud DevOps Trainee - Cloud Blitz

Built practical experience across AWS, Linux, Docker, Kubernetes, Terraform, CI/CD automation, monitoring, logging, and cloud security fundamentals.

  • Designed and deployed cloud-native infrastructure and containerized application workloads.
  • Practiced Infrastructure as Code and deployment automation patterns.
  • Worked with observability, logging, and security controls as part of project delivery.

Credentials

Education, certification, and extra signals.

Certification

AWS Cloud and DevOps Training - Cloud Blitz

Education

B.Sc. in Zoology - HPT Arts & RYK Science College, graduated 2020.

Higher Secondary Science - Yews National Junior College, 2016.

Secondary Education - Yews Nation High School, 2014.

Achievements

Represented India in King of Iron Fist Tournament, Tekken 7 Online 2021, and secured 4th position.

Built and deployed cloud-native applications using AWS, Docker, Kubernetes, Terraform, and CI/CD automation.

Volunteering

Participated in the 100 Santa Project with Sound of Silence Foundation, supporting outreach for orphaned and differently abled individuals.

Contact

Looking for cloud and DevOps roles.

If the role needs someone who can learn fast, build hands-on, and care about the operational details, I would be happy to talk.

Email LinkedIn GitHub