Alamin Mahamud
Verified Expert in Engineering
AI Platform Architect, SRE, and Developer
Dhaka, Bangladesh
Toptal member since July 2, 2026
Alamin is an AI platform architect and SRE with 9+ years of experience in building infrastructure for AI-native and internet-scale systems. He specializes in Kubernetes, Terraform, and Prometheus on cloud platforms, where he excels at delivering ultra-low-latency and high reliability. Alamin drove a 62.5% cost reduction and supported $20+ million annual recurring revenue (ARR) growth.
Portfolio
Experience
- Python - 10 years
- Docker - 10 years
- GitHub Actions - 4 years
- Terraform - 3 years
- Kubernetes - 3 years
- FastAPI - 3 years
- PostgreSQL - 2 years
- Proxmox - 2 years
Preferred Environment
Google Cloud Platform (GCP), Kubernetes, Terraform, Ansible, Prometheus, Grafana, Loki, Amazon Web Services (AWS), Proxmox, Bare-metal Environment
The most amazing...
...infrastructure I've architected handled 20 billion+ DNS queries per month with sub-millisecond latency.
Work Experience
Senior DevOps Engineer
Kahf Yazılım A.Ş.
- Architected and scaled DNS filtering infrastructure serving 20+ billion queries per month across 3 regions, blocking 1.5+ billion malicious domains and protecting 2+ million monthly active users.
- Achieved sub-millisecond cache latency by optimizing custom DNSdist and infrastructure, outperforming Google Public DNS.
- Drove 62.5% cost reduction ($145,000+ annually) through strategic cloud exit by migrating 100% of Azure workloads to bare-metal infrastructure while improving latency by 83%.
- Conducted data-driven cost-benefit analysis and implemented a state-of-the-art monitoring system.
- Onboarded 3 internet service providers for nationwide safe internet deployment as part of business development and enterprise partnerships.
- Led technical discussions with mobile network operators and cloud vendors for multi-region expansion across Asia and the Middle East.
- Extended startup runway by 4 months through aggressive infrastructure optimization, hybrid architecture design, and FinOps initiatives.
- Built an enterprise-grade observability platform across 3 regions using Prometheus, Grafana, and Loki.
- Designed automated alerting, capacity planning dashboards, and real-time threat intelligence systems for a dataset of 1.6+ million domains.
Senior Software Engineer, AI Products
LeadSync.AI
- Executed the product vision of an AI-powered sales intelligence platform.
- Accelerated time to market (TTM) by 40% by architecting end-to-end MCP integration with large language models, directly contributing to $500,000 seed funding validation.
- Developed the lead generation and conversion workflow.
Senior Platform Engineer & SRE, Cloud Team
BriteCore
- Generated $20+ million ARR by designing, implementing, and maintaining highly available, cost-efficient SaaS platforms.
- Cut $1+ million in cloud spend by spearheading cloud cost-optimization initiatives across production workloads.
- Eliminated 30% of production brownouts by optimizing runtime configuration and improving state management.
- Accelerated development cycles by approximately 35% by engineering CI/CD pipelines using GitHub Actions self-hosted runners, enabling 200+ daily builds.
- Achieved SOC 2 compliance by reducing vulnerability exposure by approximately 60% through robust security controls and passing all external audits on the first attempt.
- Neutralized large-scale distributed denial-of-service attacks through proactive monitoring and advanced filtering, blocking thousands of malicious requests per day while reducing brownouts.
- Streamlined infrastructure provisioning by 80% by leveraging reusable Terraform modules and shared libraries.
- Enhanced production visibility by reducing mean time to detect by 80% using real-time Datadog operational dashboards.
Platform Engineer, Platform & Cloud Team
BriteCore
- Reduced AWS cloud costs by approximately $36,500 annually by optimizing CloudWatch log ingestion and retention strategies.
- Mitigated data breach risk and multi-million dollar churn by strengthening client data security with a cross-account read replica architecture.
- Improved platform scalability and maintainability by 40% by leading cross-functional teams to design and deliver DevOps tooling, sustaining 99.99% uptime across environments.
- Accelerated go-to-market (GTM) timelines by approximately 30% and improved application performance by approximately 15% through deep root-cause analysis and targeted cross-team fixes.
- Engineered a robust data abstraction layer by integrating staged deployments across a multi-organization AWS setup, enabling observability queries across 50+ accounts and near-instant production cloning for around-the-clock support.
Site Reliability Engineer, SRE & SysOps Team
BriteCore
- Maintained 99.99% service level agreement for 50+ clients by implementing advanced monitoring, proactive alerting, and customer-impact-driven service level objectives.
- Eliminated 30 minutes of recurring downtime by implementing blue/green deployments and enabling zero-downtime production releases.
- Improved internal team satisfaction by 20% by enabling custom production data selection at application startup.
- Reduced operational toil by 75% by automating support workflows with a serverless nightly release reporting system.
- Increased enterprise customer satisfaction to 90% by enabling continuous delivery across multiple release cadences.
Software Engineer
Pathao
- Migrated 2 million user ratings with zero data loss by architecting and deploying a scalable feedback system.
- Standardized API structure by bootstrapping a robust API aggregation service.
- Optimized order invoicing by authoring a stateless microservice to calculate invoice amounts accurately.
Software Engineer
Portonics
- Sustained 99.99% uptime for 1+ million daily users for high-traffic applications with 1+ million daily hits by restructuring the underlying infrastructure.
- Reduced page load times by 90% by implementing robust caching mechanisms and fallback support.
- Enabled equated monthly installment features in the payment module by integrating with a secure, efficient payment gateway.
- Expanded system scalability for a nationwide distribution network by decoupling a monolithic architecture into microservices, load-balancing traffic, and deploying read-write database replicas.
- Enhanced shopping experience for users by developing innovative features like cancel, re-order, and coupon refund.
Jr. Software Engineer
Cookups
- Streamlined promotional workflows by integrating enhanced promo code generation, location management, and commission management systems.
- Developed a messenger bot that can automate customer interactions for their delivery service.
- Authored APIs for our React front ends to provide a decent user experience.
Experience
Feature Flag Service
https://github.com/alamin-mahamud/feature-flag-serviceOrganizations running multiple applications, such as mobile apps, web dashboards, and admin tools, need a centralized way to manage feature flags and runtime configuration across all apps. Without this, teams resort to hardcoded feature toggles, config files baked into deployments, and no visibility into who changed what. Rolling out features gradually is impossible as it's all-or-nothing per deploy.
I developed a multi-tenant feature flag service (simplified LaunchDarkly) that lets each application:
• Register as a tenant with its own API key
• Create and manage feature flags scoped to development, staging, and production environments
• Roll out features gradually using percentage-based targeting with deterministic hashing
• Evaluate flags in real-time for specific users with context-based rules
• Audit every change for compliance and debugging
It was deployed on GCP with infrastructure-as-code (IaC), canary deployments, and production-grade observability.
Education
Bachelor's Degree in Mechanical Engineering
Chittagong University of Engineering and Technology - Chittagong, Bangladesh
Certifications
Certified Kubernetes Administrator (CKA)
Linux Foundation & CNCF
Skills
Tools
NGINX, Wireshark, Terraform, Grafana, Loki, RabbitMQ, Amazon OpenSearch, Cgroups, Strace, SARIMA, pfSense, VPN, Ansible, Traefik, Helm, Amazon CloudWatch, Jira, Amazon EKS, Google Kubernetes Engine (GKE), Azure Kubernetes Service (AKS), Istio, Kustomize, HashiCorp Vault, AppArmor, Iptables, AWS CloudFormation
Languages
Python, Go, TypeScript, Falcon, PHP, JavaScript
Frameworks
gRPC, JSON Web Tokens (JWT), Django, Next.js, NestJS, Gin, Flask
Paradigms
REST, Role-based Access Control (RBAC)
Platforms
Kubernetes, Proxmox, Amazon Web Services (AWS), Docker, Debian, Kali Linux, Arch Linux, Azure, AWS IoT, Google Cloud Platform (GCP)
Storage
MySQL, Redis, Elasticsearch, LVM, PostgreSQL, Datadog
Other
DNS, Prometheus, GitOps, FastAPI, eBPF, Performance Optimization, RAID, ZFS, MikroTik, VLANs, Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), Domain Name System Security Extensions (DNSSEC), Open-source Intelligence (OSINT), IPv6, Transport Layer Security (TLS), Firewalls, TrueNAS, HAProxy, Microsoft Azure, LLM Integration, GitHub Actions, Containerd, LXC, ECS, kubeadm, MetalLB, Calico, Longhorn, Kubebuilder, mTLS, Tempo, SOC 2, OWASP Top 10, Zero Trust, OpenID Connect (OIDC), Trivy, Snyk, SELinux, Fail2Ban, nmap, Software Development, Competitive Programming, Problem Solving, Bare-metal Environment
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring