Skip to content

Available · Remote · US / Canada

DevSecOps engineer who makes releases safer and faster.

AWS Certified Security – Specialty · Kubernetes · Terraform · CI/CD · AWS IAM. 7+ years building secure delivery pipelines and cloud platforms.

Based in Hyderabad, India · Worked US hours with a US team (Philadelphia, PA) · Flexible for EST / PST overlap

Contact meDownload resumeLinkedInGitHub

Security gates I build into every pipeline

  1. Commit
  2. SAST
  3. SCA
  4. Build
  5. Image scan
  6. DAST
  7. Deploy

  • Lorvenk · DevSecOps

    40%

    fewer production release failures

    SAST + SCA + container scan + DAST in pipelines

  • 25%

    fewer audit findings

    Lorvenk

  • 35%

    better deploy throughput & stability

    KMZee

  • 4

    production-grade EKS environments

    Lorvenk

  • 7+

    years in production engineering

    Career

  • AWS
  • EKS
  • Kubernetes
  • Terraform
  • Ansible
  • Docker
  • Jenkins
  • GitHub Actions
  • SonarQube
  • Trivy
  • OWASP ZAP
  • Checkov
  • Prometheus
  • Grafana
  • IAM
  • Secrets Manager
  • Helm
  • Python
  • Bash
  • Frappe / ERPNext

Experience

Where I've shipped

  1. Jul 2025 – Present

    EasyCloud

    Hyderabad

    Project Lead — DevOps & Platform

    • Sole owner of infrastructure, deployments and production operations for a self-hosted Frappe/ERPNext CRM on Hetzner Cloud with Docker Compose.
    • Built an isolated speech-to-text service (FastAPI + Faster-Whisper, Redis-backed async queues) with cross-browser media capture.
    • Designed deal-lifecycle automation that auto-provisions customers, projects and tasks, with idempotency guards.
    • Led the Zoho Bigin migration: entity mapping, stage-history reconstruction, integrity validation. Mentor junior engineers.
    • Packaged the whole stack as repeatable infrastructure: Docker-based ERPNext, a scripted installer for the transcription service run under systemd, and a one-command install path for fresh benches.
    • Built add-only release tooling for live production sites: backup first, install or upgrade-in-place, idempotent re-runnable migrations, and a diagnostic log line on every migrate. Never touches other apps’ data.
    • Run multiple client ERPNext/Frappe app deployments (manufacturing, healthcare, facility management and consultancy) from one platform practice, with pre-commit linting (ruff, eslint, prettier) on every app.
    • Integrated Meta Lead Ads webhooks into the CRM, with patched and rebuilt frontend assets kept as versioned patch files.
    • Keep a public daily production-operations log (GitHub Pages, searchable by day and workstream) so every infra change and incident is traceable.

  2. May 2024 – Jun 2025

    Lorvenk Technologies

    Philadelphia, PA · Hybrid

    DevOps Engineer

    • Embedded SAST, SCA, container scanning and DAST in Jenkins and GitHub Actions pipelines: 40% fewer production release failures.
    • Ran Amazon EKS across Dev, QA, Stage and Prod with RBAC, Network Policies, Helm and HPA. Infra as code with Terraform and Ansible.
    • Moved secrets to AWS Secrets Manager and Kubernetes secrets: 25% fewer audit findings. Prometheus + Grafana: 25% lower MTTR.

  3. Feb 2022 – May 2024

    KMZee Holding

    Hyderabad · Hybrid

    Senior Software Developer

    • Standardized CI/CD for APIs and microservices (Jenkins, GitHub, Nexus, SonarQube): 35% better throughput and stability.
    • Terraform and Ansible across AWS and Azure; Docker and Kubernetes deployments with artifact governance.
    • Designed secure cloud-native architectures with US stakeholders, cutting time-to-market by 3 weeks.

  4. Jul 2019 – Feb 2022

    Saksham Strategy Group

    Hyderabad · On-site

    Software Developer

    • Moved teams from manual deploys to Jenkins/Git CI/CD; automated provisioning with Terraform and shell.
    • Linux production support, OAuth 2.0 and SSL/TLS integrations, early containerization groundwork.

  5. Mar 2018 – Jun 2019

    Freelance

    Remote

    Mobile Application Developer

    • Flutter apps for e-commerce, health and fintech: custom widgets, secure REST auth, camera/storage/notifications.

Selected work

Hiring for something specific?

Pick a focus and the case studies below filter to match. 7+ years shipping secure CI/CD, Kubernetes and Terraform platforms on AWS.

Showing 8 case studies

Lorvenk Technologies

Shift-left security pipeline

Problem
Vulnerabilities were found late, after release candidates were already built.
What I did
Added SAST, SCA, container image scanning and DAST stages as reusable GitHub Actions workflows and Jenkins shared libraries.
Result
40% fewer production release failures.
  • GitHub Actions
  • Jenkins
  • SAST
  • SCA
  • DAST
  • Docker

Lorvenk Technologies

Secrets & audit hardening

Problem
Credentials were hardcoded in configs, creating recurring audit findings.
What I did
Centralized secrets in AWS Secrets Manager and Kubernetes secrets, removed hardcoded credentials, enforced image hardening.
Result
25% fewer audit findings.
  • AWS Secrets Manager
  • Kubernetes
  • IAM
  • Docker

Lorvenk Technologies

Multi-environment EKS platform

Problem
Need consistent, auditable, highly available environments from Dev to Prod.
What I did
Built EKS clusters for Dev, QA, Stage and Prod with RBAC, Network Policies, Helm and HPA; provisioned with Terraform and Ansible; observability with Prometheus and Grafana.
Result
4 environments, 25% lower MTTR.
  • EKS
  • Terraform
  • Ansible
  • Helm
  • Prometheus
  • Grafana

KMZee Holding

Org-wide CI/CD standardization

Problem
Each team shipped differently; releases were slow and unpredictable.
What I did
Designed reusable pipeline templates and libraries on Jenkins, GitHub, Nexus and SonarQube for APIs and microservices.
Result
35% better deployment throughput and stability.
  • Jenkins
  • SonarQube
  • Nexus
  • Docker
  • Kubernetes

EasyCloud (current)

EasyCloud CRM platform

Problem
Replace Zoho Bigin with a self-hosted CRM the business fully controls.
What I did
Run Frappe/ERPNext on Hetzner with Docker Compose. Built a Faster-Whisper transcription microservice, idempotent deal-to-project automation, Meta lead intake, and the full data migration.
Result
Sole owner of a live production platform.
  • Frappe
  • ERPNext
  • Docker Compose
  • FastAPI
  • Redis
  • Python

Open source

DevSecOps Starter Kit

Problem
Show how DevOps and security combine end to end, for teams adopting DevSecOps.
What I did
Three-tier app on Vagrant and Docker, Kubernetes workloads, Terraform on AWS (EC2, S3, IAM), GitHub Actions CI/CD.
Result
Public reference architecture.
  • Terraform
  • AWS
  • Kubernetes
  • GitHub Actions
  • Docker
View source on GitHub →

Open source

CI to Jenkins via presigned S3

Problem
Hand artifacts from CI to CD without long-lived credentials or shared storage access.
What I did
GitHub Actions builds a Maven WAR, uploads to S3, creates a short-lived presigned URL, and triggers Jenkins to deploy to Tomcat with a smoke check.
Result
Auditable, least-privilege hand-off.
  • GitHub Actions
  • S3
  • Jenkins
  • Tomcat
  • Maven
View source on GitHub →

Freelance

Mobile apps for clients

Problem
Clients in e-commerce, health and fintech needed polished, secure mobile apps.
What I did
Built Flutter apps with custom widgets, REST integrations with secure auth flows, and native camera, storage and notifications.
Result
Delivered across three domains.
  • Flutter
  • Dart
  • REST
  • Node.js

Certified

AWS Certified Security – Specialty

Amazon Web Services · Issued Sep 2025 · Valid to Sep 2028

ID bf8283350aad434399add1334ecba785

Education

  • Rowan University

    MS, Computer and Information Systems Security / Information Assurance · 2022 – 2024

  • Jawaharlal Nehru Technological University

    B.Tech, Information Technology · 2015 – 2019

Toolbox

What I work with

Cloud & Security

  • AWS (EC2, S3, IAM, VPC, CloudWatch, Route53, Lambda, RDS)
  • IAM
  • SIEM
  • Compliance automation
  • Secrets management
  • Azure

Containers & IaC

  • Kubernetes / EKS
  • Helm
  • Docker
  • Terraform
  • Ansible

CI/CD & DevSecOps

  • GitHub Actions
  • Jenkins
  • SonarQube
  • Nexus / JFrog
  • SAST · SCA · DAST
  • Container scanning

Observability & Scripting

  • Prometheus
  • Grafana
  • Python
  • Bash
  • Linux

Platforms & Apps

  • Frappe / ERPNext
  • FastAPI
  • Redis
  • Flutter / Dart
  • Node.js

Open source and side builds

Need security built into delivery?

DevSecOps, AWS security and Kubernetes platforms. Open to remote and hybrid roles in the US and Canada.

mohammed.inzi@gmail.com