I build cloud infrastructure that is secure, cost-efficient, and resilient by design. Background in networking and Linux system administration. Currently focused on Kubernetes, GitOps, cloud security hardening, and infrastructure observability.
Production-grade task manager on AWS built to demonstrate cost-aware infrastructure from day one. Auto Scaling Group with scale-out at 70% CPU and scale-in at 30%. Two-layer self-healing: Docker restarts crashed containers in seconds, ASG replaces failed instances in minutes. RDS password lives only in Secrets Manager, fetched at boot via IAM role scoped to that single secret ARN. Full network isolation, GitHub Actions CI/CD, CloudWatch alarms wired to scaling policies.
End-to-end GitOps platform running on a local k3s cluster. Declarative multi-environment deployments via ArgoCD with app-of-apps pattern. Helm-packaged services with per-environment value overrides. GitHub Actions CI pipeline builds, tags, and pushes images; ArgoCD handles the rest automatically. Prometheus and Grafana observability stack deployed as a Helm release with custom dashboards. Zero cloud cost.
Calculator app used as a vehicle for a full production-grade DevOps stack. FastAPI backend, nginx frontend, PostgreSQL — all containerized. Traefik handles TLS termination with automatic Let's Encrypt certs. Prometheus, Loki, Promtail, and Grafana give full metrics and log visibility. Live at homelab.skander.cc and grafana.skander.cc.
One ./deploy.sh provisions the full AWS stack and leaves it ready to receive deploys. Terraform creates EC2, ECR registries, IAM role, security group, and Cloudflare DNS. Ansible configures Docker, ECR auth, and environment secrets. GitHub Actions builds only changed images, pushes to ECR, and deploys to EC2 via SSH.
Full-stack web app that takes a LinkedIn PDF and job description and outputs a tailored, ATS-clean Word document in under 15 seconds. 4-step AI pipeline via Groq. Stateless by design — no database, no stored data. Rate limiting per IP, bot guard, CORS restricted to production origins. GitHub Actions CI/CD deploys backend to Render and frontend to Vercel on every merge. Live at readytoapply.work.
Led all technical operations at a Tunisian EdTech startup as CTO and Cloud Engineer. Managed cloud infrastructure on AWS, built and maintained CI/CD pipelines, integrated payment systems, and automated back-office operations. Led a small engineering team, set architecture decisions, and kept the platform running in production. End-to-end ownership from infra to delivery.
4-server Linux environment built from a single golden image template. All configuration managed through Ansible playbooks and roles — nothing configured manually twice. System hardening across all servers: SSH key-only auth, UFW firewall rules, Fail2ban. 3-tier application stack where each tier only accepts connections from the previous tier. Node exporter on all servers for centralized metrics collection via Prometheus and Grafana.
Open to DevOps, cloud infrastructure, and SRE roles. Available for full-time opportunities and freelance projects worldwide.