Mohamed is available for hire
Hire MohamedMohamed ElSayed
Verified Expert in Engineering
DevOps Engineer and Developer
Melbourne, Victoria, Australia
Toptal member since October 11, 2022
Bio
Mohamed is a senior AWS platform engineer specializing in multi-account architecture, cloud security, and cost optimization. He has reduced Amazon EC2 costs by 40%, Amazon S3 by 50%, and total AWS bills by 25%. Mohamed is experienced in Terraform, EKS, Control Tower, and CI/CD across fintech, SaaS, and energy sectors.
Portfolio
Uptick
Python, Terraform, Terragrunt, Cost Analysis, Cost Cutting (Cost-out)...
Everest Engineering
Ansible, Packer, Terraform, Jenkins, Buildkite, AWS CloudFormation...
Qsic
Amazon Elastic Container Service (ECS), Buildkite, AWS CloudFormation...
Experience
- Linux - 7 years
- Cloud Infrastructure - 5 years
- AWS CloudFormation - 5 years
- Docker - 5 years
- CI/CD Pipelines - 5 years
- Amazon Elastic Container Service (ECS) - 4 years
- Python - 3 years
Preferred Environment
Terraform, AWS Control Tower, Amazon EKS, Multi-account Architecture, Cloud Cost Optimisation, Kubernetes, CI/CD Pipelines, Infrastructure as Code (IaC), AWS Security Hub, Access Control
The most amazing...
...thing I built was a full AWS multi-account architecture with Control Tower, cutting Amazon EC2 costs 40%, Amazon S3 50%, and total AWS bill by 25%.
Work Experience
Senior DevOps Engineer
2023 - PRESENT
Uptick
- Reduced S3 cost by more than 50% using lifecycle management policies, EC2 compute cost by more than 40% using UsageAi, and reduced total AWS bill by 25%.
- Streamlined the IaC deployment process, allowing direct deployment to AWS from code by implementing a Git-based workflow with GitHub Actions, Terragrunt, and Spacelift.
- Successfully implemented and automated a new AWS multi-account structure using AWS Control Tower Account Factory for the Terraform module, allowing automated AWS account provisioning and customization through code.
- Implemented robust AWS cost-monitoring system using AWS cost anomaly monitor, AWS budgets, SNS, AWS chatbot, and Slack.
- Successfully implemented in-house image-transformation solution to replace third-party tools (Cloudinary) and further reduce S3 cost by eliminating cross-region data transfer costs.
- Negotiated and obtained AWS credits covering the implementation of AWS data sync service without extensive cost analysis, which would have cost 33,000 USD, resulting in significant cost savings and enhanced service capabilities.
Technologies: Python, Terraform, Terragrunt, Cost Analysis, Cost Cutting (Cost-out), Networking, SSL Certificates, SSL Configurations, Amazon EKS, Kubernetes, Amazon EC2, SysOps, Server Administration, Amazon Simple Queue Service (SQS), Amazon Simple Email Service (SES), Cloud Architecture, PostgreSQL, NAT
Senior DevOps Engineer
2022 - 2023
Everest Engineering
- Led a team of two as a technical lead to migrate SEEK Asia's apps to AWS.
- Secured the apps and workloads by migrating them from on-premise networks to AWS.
- Wrote IaC for applications infrastructure in Terraform and built pipelines using Buildkite.
- Mentored and coached developer teams on AWS and CI/CD pipelines.
Technologies: Ansible, Packer, Terraform, Jenkins, Buildkite, AWS CloudFormation, Linux CentOS 7, Linux, Infrastructure as Code (IaC), CI/CD Pipelines, DevOps, Continuous Integration (CI), Amazon Web Services (AWS), Docker, GitHub, Jira, AWS Lambda, Containerization, HashiCorp, Cloud Security, Cloud Computing, Architecture, Amazon EC2, Amazon S3 (AWS S3), Amazon CloudWatch, Amazon Virtual Private Cloud (VPC), Security, Scripting, DevSecOps, Identity & Access Management (IAM), AWS Command Line Interface (CLI), AWS ELB, Solution Design, Cloud Infrastructure, Git, Makefile, AWS IAM, Continuous Deployment, Linux Server Administration, Linux Server Configuration, Cloud Migration, Access Control, Role-based Access Control (RBAC), Continuous Delivery (CD), Automation, Shell Scripting, DevOps Engineer, Lambda Functions, Amazon Route 53, Amazon CloudFront CDN, Load Balancers, Continuous Development (CD), AWS Deployment, AWS Cloud Architecture, Provisioning Tools, Platform as a Service (PaaS), Cloud, Networking, Apache, SSL Certificates, SSL Configurations, SysOps, Server Administration, Amazon Simple Queue Service (SQS), Amazon Simple Email Service (SES), Cloud Architecture, NAT
Senior DevOps Engineer
2021 - 2022
Qsic
- Led Qsic's DevOps engineering and implemented best practices in AWS infrastructure, containerization, CI/CD pipelines, source control, security, and deployment workflows.
- Mentored and upskilled developers in AWS CloudFormation and Cloud Development Kit (CDK), Amazon ECS, CI/CD pipelines using Buildkite, and deployment workflows.
- Architected and rebuilt a scalable, highly available AWS solution for one of three Django APIs using CDK and migrated from Elastic Beanstalk to Amazon ECS on AWS Fargate.
- Deployed advanced networking solutions to connect environments in multiple AWS accounts using AWS Transit Gateway.
- Wrote IaC for all infrastructure using Terraform and AWS CDK with Python.
- Managed all cloud infrastructure on AWS, including CDK, Make, Bash, and Python.
- Built CI/CD pipelines using Terraform, Make, Bash, Buildkite, AWS, and CDK.
- Configured AWS Control Tower and a landing zone for all AWS accounts in the organization.
Technologies: Amazon Elastic Container Service (ECS), Buildkite, AWS CloudFormation, Cloud Infrastructure, Docker, Python, Makefile, Terraform, Linux, Git, Bash, Datadog, Sumo Logic, CI/CD Pipelines, Django, AWS Elastic Beanstalk, AWS Fargate, AWS Transit Gateway, Infrastructure as Code (IaC), AWS Control Tower, DevOps, Continuous Integration (CI), Amazon Web Services (AWS), Amazon RDS, Jira, AWS Lambda, Containerization, Cloud Security, Cloud Computing, Architecture, Amazon EC2, Amazon S3 (AWS S3), Amazon CloudWatch, Amazon API Gateway, Amazon Virtual Private Cloud (VPC), Security, Scripting, DevSecOps, Identity & Access Management (IAM), AWS Command Line Interface (CLI), AWS ELB, Solution Design, Python 3, AWS IAM, Continuous Deployment, Relational Database Services (RDS), Linux Server Administration, Linux Server Configuration, Cloud Migration, Access Control, Role-based Access Control (RBAC), Continuous Delivery (CD), Serverless, Serverless Architecture, Automation, Shell Scripting, DevOps Engineer, Lambda Functions, Amazon Route 53, Amazon CloudFront CDN, Load Balancers, Amazon Simple Notification Service (SNS), Cost Analysis, Cost Control, Continuous Development (CD), AWS Deployment, AWS Cloud Architecture, Provisioning Tools, Platform as a Service (PaaS), Cloud, Networking, Apache, SSL Certificates, SSL Configurations, SysOps, Server Administration, ECS, Amazon Simple Queue Service (SQS), Amazon Simple Email Service (SES), Cloud Architecture, PostgreSQL, NAT
Cloud Engineer
2021 - 2021
ANZ Group
- Managed and supported Google Cloud Platform environments using Terraform.
- Deployed apps and configuration to Kubernetes clusters.
- Built Codefresh CI/CD pipelines as Terraform code and automated pipeline creations.
Technologies: Google Cloud, Terraform, Codefresh, Google Cloud Platform (GCP), Kubernetes, CI/CD Pipelines, DevOps, Continuous Integration (CI), Jira, Docker, Containerization, HashiCorp, Cloud Computing, Infrastructure as Code (IaC), Scripting, Identity & Access Management (IAM), Google Cloud Console, Cloud Infrastructure, Git, Makefile, Continuous Deployment, Access Control, Role-based Access Control (RBAC), Continuous Delivery (CD), Automation, Shell Scripting, DevOps Engineer, Load Balancers, Continuous Development (CD), Provisioning Tools, Platform as a Service (PaaS), Cloud, Networking, SSL Certificates, SSL Configurations, SysOps
Senior Cloud Engineer
2019 - 2021
Latitude Financial Services
- Added zero-downtime ECS deployments during ECS cluster changes.
- Handled and supported AWS environments, including a portfolio for all teams' workloads using AWS Service Catalog.
- Provided round-the-clock support for Latitude's origination platform.
- Managed and maintained GitHub Enterprise and Buildkite.
- Built reusable patterns and standardized and promoted best practices.
Technologies: Amazon Elastic Container Service (ECS), AWS CloudFormation, Makefile, Bash, Docker, Python, Buildkite, Linux, Datadog, Sumo Logic, GitHub, DevOps, Continuous Integration (CI), Amazon Web Services (AWS), Amazon RDS, Jira, AWS Lambda, AWS DevOps, Containerization, Cloud Security, Cloud Computing, Amazon EC2, Amazon S3 (AWS S3), Amazon CloudWatch, Amazon API Gateway, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Security, Scripting, DevSecOps, Identity & Access Management (IAM), AWS Command Line Interface (CLI), AWS ELB, Cloud Infrastructure, Git, CI/CD Pipelines, Python 3, AWS IAM, Continuous Deployment, Relational Database Services (RDS), Linux Server Administration, Linux Server Configuration, Access Control, Role-based Access Control (RBAC), Continuous Delivery (CD), Serverless, Serverless Architecture, Automation, Shell Scripting, DevOps Engineer, Lambda Functions, Amazon Route 53, Amazon CloudFront CDN, Load Balancers, Amazon Simple Notification Service (SNS), Continuous Development (CD), AWS Deployment, AWS Cloud Architecture, Provisioning Tools, Platform as a Service (PaaS), Cloud, Networking, SSL Certificates, SSL Configurations, SysOps, Server Administration, ECS, Amazon Simple Queue Service (SQS), Amazon Simple Email Service (SES), Cloud Architecture, NAT
DevOps Engineer
2018 - 2019
Versent
- Designed cloud and DevOps patterns for reuse and reimplementation.
- Architected and built CI/CD pipelines using Jenkins and Groovy.
- Integrated monitoring solutions, such as Datadog and Sumo Logic.
Technologies: Bash, Makefile, Ansible, Amazon Elastic Container Service (ECS), Jenkins, Groovy Scripting, Git, Datadog, Sumo Logic, DevOps, Continuous Integration (CI), Amazon Web Services (AWS), Docker, GitHub, Amazon RDS, Jira, AWS Lambda, AWS DevOps, Containerization, Cloud Security, Cloud Computing, Amazon EC2, Amazon S3 (AWS S3), Amazon CloudWatch, Amazon API Gateway, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Security, Scripting, Identity & Access Management (IAM), AWS Command Line Interface (CLI), AWS ELB, Cloud Infrastructure, CI/CD Pipelines, AWS IAM, Continuous Deployment, Relational Database Services (RDS), Linux Server Administration, Linux Server Configuration, Access Control, Role-based Access Control (RBAC), Continuous Delivery (CD), Serverless, Serverless Architecture, Automation, Shell Scripting, DevOps Engineer, Lambda Functions, Amazon Route 53, Amazon CloudFront CDN, Load Balancers, AWS CodeBuild, Amazon Simple Notification Service (SNS), Continuous Development (CD), AWS Deployment, AWS Cloud Architecture, Provisioning Tools, Platform as a Service (PaaS), Cloud, Networking, Ubuntu, SSL Certificates, SSL Configurations, SysOps, Server Administration, ECS, Amazon Simple Queue Service (SQS), Amazon Simple Email Service (SES)
DevOps Engineer
2017 - 2018
base2Services
- Designed scalable and highly available solutions for production.
- Architected and built CI/CD pipelines using Jenkins.
- Integrated monitoring solutions, such as Icinga and New Relic.
- Provided round-the-clock support for AWS production environments of base2services' customers.
Technologies: Chef, Amazon Elastic Container Service (ECS), Amazon EC2, Python, Bash, Icinga, New Relic, DevOps, Continuous Integration (CI), Amazon Web Services (AWS), Docker, GitHub, Amazon RDS, AWS Lambda, Containerization, HashiCorp, Cloud Security, Cloud Computing, Amazon S3 (AWS S3), Amazon CloudWatch, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Security, Scripting, Identity & Access Management (IAM), AWS Command Line Interface (CLI), AWS ELB, Solution Design, Cloud Infrastructure, Git, Jenkins, Makefile, CI/CD Pipelines, Python 3, AWS IAM, Continuous Deployment, Relational Database Services (RDS), AWS Elastic File System, Linux Server Administration, Linux Server Configuration, Access Control, Role-based Access Control (RBAC), Continuous Delivery (CD), Serverless, Serverless Architecture, Automation, Shell Scripting, DevOps Engineer, Lambda Functions, Amazon Route 53, Amazon CloudFront CDN, Load Balancers, Amazon Simple Notification Service (SNS), Continuous Development (CD), AWS Deployment, Provisioning Tools, Platform as a Service (PaaS), Cloud, Networking, Ubuntu, Apache, SSL Certificates, SSL Configurations, SysOps, Server Administration, ECS, Amazon Simple Queue Service (SQS), Amazon Simple Email Service (SES)
Systems Administrator
2016 - 2017
Connexity
- Managed and maintained the software and hardware integrity of all production systems.
- Provisioned new bare metal and virtual Linux servers.
- Provided 24/7 support for all production systems and workloads.
- Configured and integrated monitoring systems, such as Nagios and Grafana.
Technologies: Hadoop, Foreman, Puppet, Git, Bash, Makefile, Unix/Linux Virtualization, Apache Airflow, Cloud Infrastructure, DevOps, Linux Server Administration, Linux Server Configuration, Automation, Shell Scripting, Provisioning Tools, Networking, Ubuntu, Apache, SSL Certificates, SSL Configurations, SysOps, Server Administration
Experience
Django Python API on ECS Fargate
A Django Python API deployed via ClickOps on AWS Elastic Beanstalk with no IaC. It controls thousands of IoT smart audio devices and serves thousands of requests per minute.
I architected and rebuilt the solution to migrate the API to ECS Fargate using AWS CDK in Python. The redesigned solution is secure, scalable, and highly available. It responds a lot more quickly to changes in load with seconds of startup time compared to minutes or hours spent in manual deployments. And it could start up with fully automated deployments with code features tested, built, and shipped to production in a matter of minutes compared to hours of manual, complex deployments, all done in code.
This solution was the first step to enable the company to achieve its target of expanding to the US market. By having the solution as code with fully automatic deployments, the entire API solution could be deployed to a different region in a matter of minutes, enabling automated, multi-region deployments.
I architected and rebuilt the solution to migrate the API to ECS Fargate using AWS CDK in Python. The redesigned solution is secure, scalable, and highly available. It responds a lot more quickly to changes in load with seconds of startup time compared to minutes or hours spent in manual deployments. And it could start up with fully automated deployments with code features tested, built, and shipped to production in a matter of minutes compared to hours of manual, complex deployments, all done in code.
This solution was the first step to enable the company to achieve its target of expanding to the US market. By having the solution as code with fully automatic deployments, the entire API solution could be deployed to a different region in a matter of minutes, enabling automated, multi-region deployments.
CI/CD Pipelines as Code
A codebase for all CI/CD pipelines and configurations used by the payments team. I made it possible to have every configuration related to CI/CD pipelines, role-based access control, and new pipeline creation as code using Terraform. I also made it possible to create new pipelines, triggers, projects, and teams on Codefresh and to modify existing ones automatically, all through code changes.
A Truely Zero-downtime ECS Cluster
An AWS Service Catalog portfolio product used by more than 10 internal teams at a big financial institution. As the DevOps engineer responsible for the ECS Cluster Service Catalog portfolio product, I enabled truly zero-downtime deployments by solving a race condition in the IaC template.
Education
2001 - 2006
Bachelor's Degree in Telecommunications and Electronics
Ain Shams University - Cairo, Egypt
Certifications
NOVEMBER 2019 - NOVEMBER 2021
Associate Cloud Engineer
Google Cloud
DECEMBER 2017 - DECEMBER 2020
AWS Certified Developer Associate
AWS
JUNE 2017 - DECEMBER 2020
AWS Certified Solutions Architect Associate
AWS
Skills
Libraries/APIs
Terragrunt
Tools
AWS CloudFormation, Terraform, Amazon Elastic Container Service (ECS), Makefile, Git, Ansible, Packer, AWS Fargate, GitHub, Jira, HashiCorp, Amazon CloudWatch, Amazon Virtual Private Cloud (VPC), AWS Command Line Interface (CLI), AWS ELB, AWS IAM, Amazon CloudFront CDN, AWS Deployment, Provisioning Tools, Amazon Simple Queue Service (SQS), Jenkins, Google Cloud Console, AWS CodeBuild, Amazon Simple Notification Service (SNS), Amazon Simple Email Service (SES), Sumo Logic, Chef, Puppet, Apache Airflow, Apache, Amazon EKS
Languages
Bash, Python, Python 3
Paradigms
DevOps, Continuous Integration (CI), DevSecOps, Continuous Deployment, Role-based Access Control (RBAC), Continuous Delivery (CD), Serverless Architecture, Automation, Continuous Development (CD)
Platforms
Linux, Docker, Buildkite, Amazon EC2, Amazon Web Services (AWS), AWS Lambda, Codefresh, Ubuntu, Linux CentOS 7, AWS Elastic Beanstalk, Google Cloud Platform (GCP), Kubernetes, Icinga, New Relic
Storage
Amazon S3 (AWS S3), Google Cloud, Datadog, AWS Elastic File System, PostgreSQL
Frameworks
Django, Hadoop
Other
Operating Systems, Computer Repair, Cloud Infrastructure, CI/CD Pipelines, Infrastructure as Code (IaC), Amazon RDS, Containerization, Cloud Security, Cloud Computing, Architecture, Scripting, Identity & Access Management (IAM), Relational Database Services (RDS), Linux Server Administration, Linux Server Configuration, Access Control, Serverless, Shell Scripting, DevOps Engineer, Lambda Functions, Amazon Route 53, Load Balancers, Platform as a Service (PaaS), Cloud, Networking, SysOps, Server Administration, ECS, AWS Transit Gateway, AWS DevOps, Amazon API Gateway, Security, Cloud Migration, Cost Analysis, Cost Control, AWS Cloud Architecture, SSL Certificates, SSL Configurations, Cloud Architecture, NAT, Electronics, Telecom Equipment & Solutions, Computer Architecture, Digital Electronics, Home Electronics, Communications Electronics, Data Communication, Solution Design, Groovy Scripting, AWS Control Tower, Foreman, Unix/Linux Virtualization, Cost Cutting (Cost-out), Multi-account Architecture, Cloud Cost Optimisation, AWS Security Hub
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring