DevOps & Cloud Engineer

Shahzaib Mehmood

Cloud and infrastructure engineer with 2+ years of experience in AWS, CI/CD pipelines, containerised deployments, Terraform, and security-integrated automation workflows. Focused on building reliable, automated, and maintainable infrastructure.

View Projects Download CV Contact Me
LinkedIn GitHub

About

I am a DevOps and Cloud Engineer with over two years of hands-on experience designing and maintaining AWS-based infrastructure, building CI/CD pipelines, and deploying containerised applications using Docker and Kubernetes. My work spans infrastructure-as-code with Terraform and CloudFormation, pipeline automation with Jenkins and GitHub Actions, and integrating security tooling throughout the software delivery process.

I have worked on compliance automation, cloud cost monitoring, vulnerability assessment, and documentation of hardening standards. I am comfortable working across Linux environments, writing Bash and Python scripts, and managing cloud resources efficiently.

I am currently seeking mid-level DevOps or Cloud Engineer roles where I can contribute to infrastructure reliability, deployment automation, and continuous improvement of engineering workflows.

2+ Years of Experience
10+ CI/CD Pipelines Built
5 Certifications
40+ Security Findings Documented

Technical Skills

Cloud Platforms

AWS EC2 AWS VPC AWS S3 AWS IAM AWS ECS AWS ECR AWS Lambda Amazon RDS DynamoDB EventBridge SNS Route 53 CloudWatch Cost Explorer

Containers & Orchestration

Docker Docker Compose Kubernetes Pods & Deployments Services & Ingress AWS ECS

Infrastructure as Code

Terraform AWS CloudFormation Ansible HashiCorp Vault

CI/CD & Automation

Jenkins GitHub Actions GitHub OIDC Git Bitbucket

Operating Systems & Scripting

Linux Bash Python VMware

Monitoring, Security & Compliance

Prometheus Grafana AWS CloudWatch SonarQube Trivy Snyk OWASP ZAP Checkov Nessus Nmap Burp Suite Vanta JumpCloud

Databases & Caching

MySQL PostgreSQL MongoDB Amazon RDS DynamoDB Redis

Experience

Junior DevOps Engineer

IT Services Company — Pakistan
Mar 2025 – Present
  • Built and maintained 10+ CI/CD pipelines using Jenkins and GitHub Actions, automating build, test, security scanning, Docker image creation, and deployment for AWS-hosted applications.
  • Integrated code quality and security scanning tools (SonarQube, Trivy, Snyk, OWASP ZAP) into pipelines with automated quality gates to block deployments on critical findings.
  • Optimised Docker and Docker Compose configurations using multi-stage builds, reducing container image sizes by up to 40% and improving build times.
  • Managed AWS infrastructure using Terraform and CloudFormation, including importing unmanaged cloud resources into Terraform state to reduce configuration drift.
  • Supported AWS Foundational Technical Reviews and compliance initiatives by aligning infrastructure and documentation with AWS Well-Architected best practices.
  • Administered identity and compliance tooling (Vanta, JumpCloud) to automate device compliance checks, configure SSO and MDM policies, conduct access reviews, and maintain audit readiness.
  • Developed a Python-based internal tool using the AWS Cost Explorer API and Slack integration to deliver automated daily spend summaries and monthly cost forecasts.
JenkinsGitHub ActionsTerraform DockerAWSSonarQube TrivyVantaJumpCloud

DevOps Intern

Technology Company — Pakistan
Aug 2024 – Feb 2025
  • Configured and hardened VMware-based virtual environments using Linux system administration, firewall rules, network isolation, and patch validation procedures.
  • Conducted vulnerability assessments and web application security testing using Nessus, Nmap, Burp Suite, and OWASP ZAP, documenting 40+ findings covering OWASP Top 10 risks, misconfigurations, and exposed services.
  • Reviewed cloud and network exposure through port scanning and service enumeration, and recommended improvements to AWS Security Groups, firewall rules, and access control policies.
  • Authored technical documentation including hardening standards, remediation playbooks, and deployment workflow guides to support security compliance readiness.
VMwareLinuxNessus NmapBurp SuiteOWASP ZAP AWS Security Groups

Projects

DriftGuard

GitHub

AWS Infrastructure Monitoring

An internal drift detection tool that monitors AWS infrastructure changes in real time using CloudTrail, EventBridge, Lambda, and S3. Sends Slack notifications for unauthorised changes and supports approval-based remediation workflows.

AWS CloudTrailEventBridge LambdaS3Slack

CostRadar

GitHub

Cloud Cost Visibility Tool

A serverless cost monitoring solution using Lambda, Cost Explorer API, SSM Parameter Store, DynamoDB, and SNS. Automates daily cost summaries, tracks budget forecasts, and sends threshold breach alerts via email and Slack.

AWS LambdaCost Explorer DynamoDBSNSPython

MediStack

GitHub

Three-Tier Application Deployment

End-to-end deployment of a three-tier application (React frontend, Python backend, RDS database) on AWS using GitHub Actions with OIDC, ECR, and ECS. Pipeline includes SonarQube code analysis, Trivy image scanning, and SNS deployment notifications.

ECSECRGitHub Actions SonarQubeTrivyAmazon RDS

InfraForge

GitHub

Terraform Infrastructure Framework

A collection of reusable Terraform modules for provisioning AWS networking, compute, container, database, and storage resources. Improves deployment consistency, environment repeatability, and simplifies infrastructure change tracking across environments.

TerraformAWS VPC ECSRDSS3

SecureDeploy

GitHub

Security-Integrated CI/CD Pipeline

A deployment pipeline for containerised AWS applications that integrates SonarQube, Snyk, Trivy, and OWASP ZAP at separate stages. Automates code quality checks, dependency scanning, container image scanning, and dynamic application security testing before each release.

SonarQubeSnyk TrivyOWASP ZAPJenkins

Certifications

AWS Certified Solutions Architect – Associate

Amazon Web Services

AWS

Red Hat Certified System Administrator (RHCSA)

Red Hat

Linux

Certified Ethical Hacker (CEH)

EC-Council — via NAVTTC

Security

DevOps Engineer Training

Corvit Systems

DevOps

Networking & Cloud Computing Training

University of Engineering & Technology (UET)

Cloud

Education

Bachelor of Science in Computer Science

Virtual University of Pakistan

Covers software engineering, computer networks, algorithms, database systems, and information security.

B.Sc CS

Contact

I am open to new DevOps and Cloud Engineer opportunities. Feel free to reach out via email, LinkedIn, or the form below.

Email shahzaib0mehmood@gmail.com Phone +92 317 433 6955 LinkedIn linkedin.com/in/shahzaib-mehmood GitHub github.com/Shahzaib175
Location Pakistan