Fady Mounir Zaghloul
Fady Mounir ZaghloulIT & Security Manager · Cairo, Egypt Open to EU / Germany / Remote
Platform · Infrastructure · Security

Build for the failure path.

AWS · Kubernetes · Terraform · GitOps · DevSecOps · SRE

I design, secure, automate and operate infrastructure with rollback, observability and least privilege treated as engineering requirements — not afterthoughts.

Explore engineering ↓Platform docs ↗Case studies ↗
fady@platform: ~/engineering
$ whoami --engineering
roleIT & Security Manager
focusplatform / cloud / DevSecOps / SRE
principlerollback-first · identity-first · observable

$ platform status
identityOIDC / short-lived credentials
supply-chainscan → SBOM → sign → policy
reliabilitySLOs / burn alerts / runbooks
operationsGitOps / observability / cost controls
SOURCE→CI→SIGN→GITOPS→SLO
12+ yrsInfrastructure & security
7 releasesFlagship platform roadmap
AWS SAACloud architecture
SC-100/200Security architecture & ops
01 — Public engineering

Systems, not screenshots.

These repositories are the public proof layer: architecture, automation, security controls, failure handling and documented trade-offs. The flagship is intentionally broader than a single application.

Current flagship · Platform engineering

AWS EKS GitOps Platform

Production-style platform reference covering Terraform, GitHub OIDC, Argo CD, signed artifacts, policy enforcement, runtime security, SLOs, cost visibility, right-sizing and DR patterns. A disposable Kubernetes 1.36 runtime now proves Argo reconciliation, admission controls, Prometheus/SLOs, Trivy, Falco, VPA and OpenCost without overstating AWS/EKS activation.

IDENTITYOIDC · IAM
DELIVERYBuildKit · Cosign
RUNTIMEKyverno · Falco
OPERATESLO · OpenCost
TerraformEKSArgo CDCosignKyvernoPrometheus
Documentation ↗Runtime evidence ↗Repository ↗v0.7.1 ↗
DevSecOps · Reference platform

MIND DevSecOps

End-to-end lab with Jenkins, Gitleaks, SonarQube, Docker, Trivy, Argo CD, K3s, CodeQL, PostgreSQL and observability. Dependency baseline is maintained with Dependabot and vulnerability checks.

JenkinsK3sCodeQLTrivyArgo CD
Repository ↗Security release ↗
Infrastructure as Code

AWS EKS Infrastructure v2

Modular Terraform reference for VPC, IAM, security groups, EKS and managed nodes with validation CI and sanitized inputs.

AWSTerraformEKSIAM
Repository ↗
Configuration management

Multi-EC2 Ansible Automation

Role-based automation for a split AWS application/database architecture with Nginx, service management, backups and syntax validation.

AnsibleEC2NginxFlask
Repository ↗
Open source · Upstream contributions

OpenCost + Kyverno

Submitted evidence-backed documentation improvements to tools used by the public platform lab: an existing in-cluster Prometheus integration example for OpenCost and a corrected keyless identity-regex example for Kyverno ImageValidatingPolicy.

OpenCostKyvernoHelmSigstoreKubernetes
OpenCost PR #386 ↗Kyverno PR #2175 ↗
02 — Sanitized production engineering

Decisions under constraints.

Reusable architecture lessons without exposing production credentials, live administrative endpoints, customer data or private network plans.

CASE 01

Multi-tenant SaaS Platform

Isolation, releases, backups, observability and capacity.

 CASE 02

PostgreSQL Replication

Private connectivity, replication health, lag and rollback.

 CASE 03

Cloud Migration + Rollback

Replication-first cutover, dependency validation and failback.

 CASE 04

Observability Baseline

Signals, alerts, runbooks and actionable telemetry.

 CASE 05

Identity Hardening

MFA, mail security, sharing controls and rollout safety.

 CASE 06

Local-first Internal AI

Data boundaries, RBAC, RAG and plugin/network risk.
03 — Experience

From support to platform ownership.

A career progression across operations, cloud, security, infrastructure leadership and delivery automation.

IT & Security Manager

Current
AsusCard FinTech · Cairo, Egypt
  • Lead end-to-end IT operations spanning support, systems, infrastructure, cloud, DevOps and security.
  • Report directly to the CTO on incidents, risk, operational status and improvement roadmaps.
  • Drive cloud/DevOps automation, security controls, platform reliability and infrastructure lifecycle decisions.

IT Supervisor

DKT International · MENA
  • Led regional IT operations and cross-functional delivery across cloud, virtualization, security and office infrastructure.
  • Built hybrid cloud patterns and disaster-recovery processes, with regional office implementation and operational automation.
  • Managed a technical team and translated business requirements into secure, supportable infrastructure.

IT Specialist

DKT International · Cairo
  • Administered hosting, VPS/cloud services, collaboration systems and user support operations.
  • Maintained Microsoft Exchange and core IT services across regional teams.

Senior IT Specialist / IT Engineer

Open Business Solutions · Cairo
  • Delivered Tier 1/2 infrastructure support, root-cause troubleshooting, VPS/hosting administration and technical documentation.
  • Mentored junior engineers in systems administration and troubleshooting.

Junior IT Engineer

Wood Equipment Co. · Alexandria
  • Operated company networking, servers, endpoints, websites and physical infrastructure.
04 — Stack

Tools with operational context.

The stack reflects systems I administer, automate, secure or use in public reference implementations — grouped by engineering responsibility rather than badge count.

Cloud & Platform

AWS · OCI · Linux · Terraform · Kubernetes / EKS / K3s · Argo CD · Nginx · Proxmox · VMware

Delivery & Automation

GitHub Actions · Jenkins · Docker / BuildKit · Ansible · Bash · Python · PowerShell · PM2

Security

Microsoft Defender · Sentinel · FortiGate · CodeQL · Gitleaks · Trivy · Cosign · Kyverno · Falco · Tailscale

Observability & Reliability

Prometheus · Grafana · SLOs · error budgets · OpenCost · game days · backup / restore testing · runbooks

Networking

CCNA · routing & switching · VPN · DNS / DHCP · NAT · firewalls · WAN / SD-WAN · wireless

Data

PostgreSQL · MySQL / MariaDB · SQL Server · Redis · logical replication · backup / restore

Systems

Windows Server · Ubuntu / Debian · Active Directory · Exchange · storage / NAS · Veeam · NAKIVO

Applications / AI

Node.js · NestJS · FastAPI · .NET · React · local LLM / RAG · AI infrastructure

05 — Delivered engagements

Selected client & internal systems.

Commercial and internal delivery stays distinct from the reproducible public engineering labs above.

View selected delivered engagements +
DevOps / VPS

Salla Orders Dashboard

React/Vite deployment with PM2, Nginx, TLS and production recovery on Ubuntu.

Full-stack automation

Reseller Sourcing Scraper

FastAPI/React workflow integrating metasearch, anti-bot scraping, Telegram automation and Docker Compose.

SaaS architecture

CardIntel

FastAPI, PostgreSQL, React/TypeScript and WebSocket-driven price intelligence architecture.

CI/CD

Admin Application Deployment

GitHub Actions, SSH deployment, Vite builds, Nginx validation and release troubleshooting.

Business continuity

Power & Connectivity Continuity

UPS/failover connectivity design with implementation runbook and operational cost analysis.

Full-stack SaaS

AutoCare

Vehicle maintenance platform using React/TypeScript, Vite, Supabase, realtime data and storage.

06 — Credentials

Selected certifications.

Credentials support the engineering work; they do not replace it. The complete verified set is available on Credly.

AWSSolutions Architect — AssociateSAA-C03 · valid through Nov 2027
MicrosoftCybersecurity Architect ExpertSC-100
MicrosoftSecurity Operations AnalystSC-200
CiscoCCNAEnterprise networking & security
CiscoCyberOps AssociateSecurity operations
IBM / Google / MCITCloud, SRE & Cybersecurity30+ verifiable credentials → Credly
View all verified credentials ↗
07 — Education

Academic foundation.

Computer engineering fundamentals extended through postgraduate work in AI and modern technologies.

NTI · 2021–2023

Post Graduate Diploma — AI & Modern Technologies

60 ECTS · EQF Level 7 · Distinction. Thesis focus: HPC optimization using AI-driven methods.

2009–2013

B.Sc. Computer Engineering

240 ECTS · EQF Level 6 · Grade B+. Graduation project focused on autonomous/embedded vehicle systems.

08 — Contact

Build something resilient.

Open to infrastructure/platform leadership, cloud/platform engineering, DevOps/SRE and security architecture/operations opportunities across EU, Germany and remote teams.

Email me →
GitHub↗LinkedIn↗Credly↗Case Studies↗