~/portfolio $ whoami

Haris Ali

Multi-cloud DevOps Engineer | Terraform · Kubernetes · AWS · GCP

Experienced in setting up and improving CI/CD pipelines, automating infrastructure, and enhancing developer workflows. Proficient in Terraform, Ansible, Docker, Kubernetes, Jenkins, and GitHub Actions, with hands-on production experience across AWS and GCP. Gold Medalist in Software Engineering (3.96/4.00 CGPA), KCNA certified. Let's orchestrate solutions for seamless delivery.

view projects read case studies download resume

Email/

GitHub/

Lahore, Pakistan

visitor@harisali — bash

Welcome to Haris Ali's portfolio terminal.
Type help to see available commands.

visitor@harisali:~$

copied!

./skills

Technical Skills

Kubernetes

AWSAWS

GCP

Docker

Terraform

CI/CD

›full toolkit (30 tools across 11 categories)

Cloud Platforms

›AWS: EC2, VPC, CloudWatch, ECS, Lambda, API Gateway, RDS
GCP: Cloud Run, Cloud SQL, Cloud Build, Pub/Sub, IAM, DLP, Secret Manager, GCS

IaC

Terraform
OpenTofu
Ansible

CI/CD

Jenkins
GitHub Actions
›AWS CodePipeline
GCP Cloud Build

Containerization

Docker
Kubernetes

Monitoring & Observability

New Relic
›CloudWatch
›CrowdSec

Scripting

Bash
Python
PowerShell

Databases

›Amazon RDS
MySQL
MongoDB

Virtualization

VMware
Proxmox

Version Control

GitHub
›AWS CodeCommit

Web Servers / Middleware

Nginx
Apache Tomcat

Other

Cloudflare Tunnels
WireGuard
Docker Compose
n8n (self-hosted)

./projects

Projects

PrivyMesh

Creator — Final Year Project

Quantum-resistant peer-to-peer VPN using WireGuard with post-quantum cryptography.

WireGuardPost-quantum cryptoDockerGitHub Actions

Built and containerized a fully functional mesh VPN with an automated CI/CD pipeline.

frontend ↗app ↗app-releases ↗relay ↗backend ↗

Self-Hosted Infrastructure

Owner / Operator

10+ self-hosted services on Hetzner/AWS including n8n, AFFiNE, and a Kubernetes cluster on Talos OS.

Docker ComposeTalos OSKubernetesCloudflare TunnelsHetznerAWS

Cost-optimized personal infrastructure running production-grade services.

tfvars_sync.py

Author

GCS-backed Terraform tfvars synchronization tool for secure secret management.

PythonGCSTerraform

136 passing tests, passed principal-engineer code review, adopted for production tfvars workflow.

./case-studies

Incident Case Studies

Real production issues I diagnosed and resolved — written up as short incident reports.

Cloud Armor false positive blocking production PDF uploads

GCPCloud ArmorWAFOWASP CRS

problem: Users could not upload PDF files in production — requests were being silently blocked with no clear error surfaced to the application layer.
investigation: Traced the failures to Cloud Armor's OWASP Core Rule Set, where a SQLi detection rule was flagging benign byte patterns inside binary PDF content as malicious input.
resolution: Identified the specific triggering rule, scoped a targeted exclusion so PDF upload traffic bypassed the false-positive rule without weakening the WAF posture elsewhere, and verified the fix against real production traffic.

Pub/Sub 403 errors traced to a missing IAM binding

GCPPub/SubIAM

problem: A service was intermittently failing to trigger downstream Cloud Run jobs, returning 403 errors with no obvious configuration change to point to.
investigation: Walked the IAM policy chain for the Pub/Sub push subscription and found the service account was missing the roles/run.invoker binding required to invoke the target Cloud Run service.
resolution: Granted the correct least-privilege IAM binding, confirmed message delivery resumed, and documented the IAM dependency so it wouldn't regress on the next service redeploy.

RDS migration feasibility investigation for a client CRM platform

AWSRDSMySQL

problem: A planned RDS migration for a client's production CRM platform needed a safe feasibility check before any change was made.
investigation: Conducted a careful, non-disruptive investigation of the production database and discovered a MySQL version discrepancy between the running instance (5.7) and the target (8.4) that would have caused compatibility issues if migrated blind.
resolution: Surfaced the version gap ahead of the migration window, preventing a production incident, and provided the findings to inform a revised migration plan.

./experience

Experience

release/2025.06 — HEADnow

RolusTech

Associate DevOps Engineer

Jun 2025 → present · 1y 2m · Lahore, Pakistan

›Managed multi-environment GCP infrastructure with Terraform — Cloud Run, Cloud SQL, Cloud Storage, Cloud Build, Pub/Sub, and Secret Manager — for production workloads.
›Debugged and resolved production incidents including Cloud Armor OWASP false positives, Pub/Sub IAM failures, and Cloud Build trigger misconfigurations, with documented root cause analysis.
›Configured AWS infrastructure (EC2, VPC, API Gateway, Lambda) and streamlined deployments with Auto Scaling Groups and CodeDeploy for high availability.
›Identified critical security issues — plaintext secrets, unversioned state buckets, SOC-2 gaps — and hardened server access controls.
›Containerized and orchestrated application deployments with Docker and Kubernetes across Jenkins, GitHub Actions, and AWS CodePipeline pipelines.
›Resolved a 54-resource Terraform state drift across environments and built an automated tfvars sync utility with comprehensive test coverage.
›Contributed 40+ Terraform PRs; introduced Git flow and versioning practices, and deployed CI/CD across Python, PHP, and Node.js stacks.

release/2025.03

AXA Business Technologies

DevOps Intern

Mar 2025 → May 2025 · 3m · Islamabad, Pakistan

›Created and managed virtual machines using VMware and Proxmox, including resource provisioning and snapshot management.
›Performed Linux storage expansion and system administration tasks.
›Installed and configured Apache Tomcat, Nginx, and Jenkins for web services and CI/CD.
›Installed Docker and deployed custom container images.

./education

Education

BSc Software Engineering

University of Lahore

Feb 2022 – Feb 2026

›CGPA: 3.96 / 4.00 — Gold Medalist
›Dean's Honor List: 2023, 2024, 2025

./certifications

Certifications

KCNA — Kubernetes and Cloud Native Associate ↗

The Linux Foundation

Certified

Kubernetes for the Absolute Beginners with Hands-on-Labs

KodeKloud (Coursera)

Completed

AWS Cloud Technical Essentials

AWS (Coursera)

Completed