Noman is available for hire
Hire NomanNoman Ahmed
Verified Expert in Engineering
DevOps Engineer and Developer
Dubai, United Arab Emirates
Toptal member since September 7, 2026
Bio
Noman is a senior DevOps and site reliability engineer with over 12 years of experience building mission-critical infrastructure for clients such as Accumed Practice Management, Infrastructurebox, and Crossover for Work. His primary expertise is in AWS, Kubernetes, and Terraform for SaaS and cloud-native platforms, where he thrives in multi-tenant and high-availability environments. Noman cut the mean time to resolution by 40% while at Accumed Practice Management.
Portfolio
Accumed Practice Management
Kubernetes, RKE2, kubeadm, Keycloak, Kafka, Ceph, OpenID Connect (OIDC)...
Infrastructurebox s.r.o.
Terraform, Ansible, AWS IoT, Jenkins, AWS CodePipeline, Kubernetes, Prometheus...
Crossover for Work (Aurea Software LLC)
AWS IoT, EC2, ECS, Amazon EKS, AWS ALB, AWS NLB, Amazon CloudFront CDN...
Experience
- Docker - 8 years
- CI/CD Pipelines - 8 years
- Grafana - 8 years
- Ansible - 6 years
- Terraform - 6 years
- Kubernetes - 5 years
- AWS IoT - 5 years
- DevSecOps - 3 years
Preferred Environment
Kubernetes, Azure DevOps, AWS IoT, Docker, Linux, Terraform, Ansible, CI/CD Pipelines, Bash, Grafana
The most amazing...
...observability platform I've built consolidated metrics, logs, and traces across 15 VMs, cutting mean time to resolution by 40%.
Work Experience
DevOps Engineer
2023 - PRESENT
Accumed Practice Management
- Designed and built a four-cluster Kubernetes topology (RKE2 and kubeadm) on self-hosted Proxmox VE, separating Tier-0 shared services from product workloads across roughly 65 VMs in production and non-production.
- Architected Kong Gateway, Keycloak multi-realm identity, and Kafka event streaming as a dedicated shared-services cluster running to a 99.9% SLA for a multi-tenant SaaS environment.
- Consolidated metrics, logs, and traces onto Mimir, Loki, Tempo, Grafana HA, and Alertmanager across 15 VMs, backed by Ceph storage and OpenBao secrets.
- Instrumented distributed Java and Python services with OpenTelemetry SDKs behind a multi-node Collector architecture, wiring trace and span identifiers into structured logs for Loki and Tempo correlation, cutting MTTR by 40%.
- Delivered an enterprise secret management platform on OpenBao with Azure AD OIDC integration and role-based access across nine engineering teams.
- Authored a Terraform, Ansible, and Helm repository covering VM provisioning, HAProxy and Keepalived VIP failover, MetalLB, Patroni PostgreSQL HA, and GitLab Runner integration, with Helm charts versioned and published via the GitLab package on CI.
- Directed a wave-based Docker Engine upgrade across 16 servers through a formal architecture review board and ADR process, eliminating version drift with zero unplanned downtime.
- Rebuilt deployment pipelines in Azure DevOps with self-hosted runners spanning UAE and KSA Alibaba Cloud ECS environments, reducing deployment time and improving reliability across environments.
- Migrated monolithic Windows-hosted services into dockerized Linux containers via Docker Compose, improving scalability, density, and maintainability.
- Embedded automated security gates into CI/CD pipelines, enforcing secrets management and running container image vulnerability scans before promotion.
Technologies: Kubernetes, RKE2, kubeadm, Keycloak, Kafka, Ceph, OpenID Connect (OIDC), Terraform, Ansible, Helm, HAProxy, Keepalived, MetalLB, GitLab Runner, Azure DevOps, Grafana, OpenTelemetry, Docker, Linux, DevOps, Containerization, Amazon Web Services (AWS), PostgreSQL, Microservices, Bash Script, SSH, AI DevOps, Infrastructure, Observability, Machine Learning Operations (MLOps), Graphics Processing Unit (GPU), Large Language Models (LLMs), Architecture, Cloud Architecture, Cloud Infrastructure, Cost Reduction & Optimization (Cost-down), Regulatory Compliance, Site Reliability Engineering (SRE), Monitoring, Distributed Systems, CI/CD Pipelines, Cloud Networking, Cloud Engineering, Cloud Platforms, API Management, Cloud, APIs, Product Ownership, Virtual Cloud Network (VCN), Azure
Senior IT Technical and DevOps Engineer
2022 - 2023
Infrastructurebox s.r.o.
- Built reusable Terraform modules and Ansible roles to provision and configure environments consistently on AWS, eliminating manual build steps and configuration drift across clients.
- Provisioned and operated AWS compute, networking, storage, and IAM resources for client production workloads, with infrastructure state and change flow managed entirely through code.
- Streamlined build and release processes on Jenkins and AWS CodePipeline, significantly reducing deployment cycle times across client projects.
- Managed Kubernetes clusters and microservice orchestration to ensure high availability and dynamic scaling, including rollout and rollback procedures.
- Automated Prometheus alert rules paired with auto-recovery scripts, reducing repeat manual intervention on known failure modes.
- Implemented automated backup strategies and conducted regular recovery drills across multi-cloud environments.
- Orchestrated OS and application patching across distributed Linux and Windows estates, including legacy-to-modern Windows migrations and bulk Linux upgrades, with minimal user disruption.
- Resolved escalated L3 infrastructure, application, and network issues alongside the helpdesk team for geographically distributed clients.
- Mentored junior DevOps and helpdesk engineers for team building.
- Spearheaded cross-departmental workshops on CI/CD, containerization, and monitoring.
Technologies: Terraform, Ansible, AWS IoT, Jenkins, AWS CodePipeline, Kubernetes, Prometheus, Grafana, Docker, Linux, AWS CloudFormation, DevOps, Containerization, Amazon Web Services (AWS), PostgreSQL, Microservices, Bash Script, SSH, Infrastructure, Observability, Architecture, Cloud Architecture, Cloud Infrastructure, Cost Reduction & Optimization (Cost-down), Regulatory Compliance, Site Reliability Engineering (SRE), Monitoring, Distributed Systems, CI/CD Pipelines, Cloud Networking, Cloud Engineering, Cloud Platforms, API Management, Cloud, APIs, Product Ownership, Virtual Cloud Network (VCN)
SaaS Engineer | SaaS Architect
2018 - 2021
Crossover for Work (Aurea Software LLC)
- Built scalable, highly available AWS infrastructure using EC2, ECS, EKS, Auto Scaling groups, ALB and NLB, CloudFront, S3, RDS, DynamoDB, ElastiCache, Route 53, VPC, IAM, KMS, and CloudWatch aligned to the AWS Well-Architected Framework.
- Delivered a multi-tenant SaaS platform on Docker and Kubernetes using microservice patterns with Terraform and Ansible environment provisioning and Jenkins pipelines, increasing release frequency.
- Designed Terraform modules, Ansible templates, and Jenkins pipelines to standardize how releases were built and promoted across a large service portfolio.
- Managed Kubernetes cluster observability with New Relic, ELK, and PagerDuty, including alert routing and escalation paths for production incidents.
- Conducted DR drills and validated backup and restore procedures for business continuity, including high-availability failure testing in Kubernetes and cloud environments.
- Architected custom dashboards for real-time cloud spend monitoring and produced right-sizing and reservation recommendations that reduced ongoing infrastructure cost.
- Supported migration of suitable workloads to AWS Lambda for cost reduction and faster deployment.
- Operated hybrid cloud and on-premises infrastructure across multiple regions, keeping legacy on-premises systems and AWS-hosted services running as one operational estate.
- Mentored junior engineers on automation practices and cloud-native adoption.
- Authored the supporting technical documentation, runbooks, and SOPs.
Technologies: AWS IoT, EC2, ECS, Amazon EKS, AWS ALB, AWS NLB, Amazon CloudFront CDN, Amazon S3 (AWS S3), Amazon RDS, Amazon DynamoDB, ElastiCache, Amazon Virtual Private Cloud (VPC), AWS IAM, AWS Key Management Service (KMS), Amazon CloudWatch, Docker, Kubernetes, Terraform, Ansible, Jenkins, New Relic, ELK (Elastic Stack), PagerDuty, Grafana, Linux, AWS CloudFormation, DevOps, Containerization, Amazon Web Services (AWS), PostgreSQL, Microservices, Bash Script, SSH, Infrastructure, Observability, Architecture, Cloud Architecture, Cloud Infrastructure, Regulatory Compliance, Site Reliability Engineering (SRE), Monitoring, Distributed Systems, CI/CD Pipelines, Cloud Networking, Cloud Engineering, Cloud Platforms, API Management, Cloud, APIs, Product Ownership, Virtual Cloud Network (VCN)
Cloud Network Admin and Helpdesk Engineer
2016 - 2018
Networks360
- Automated testing and release workflows in an Agile environment, reducing deployment time by 50%.
- Configured and monitored AWS EC2 and S3 for development and production workloads.
- Scripted user and group provisioning and role assignment with PowerShell and Group Policy, removing repetitive manual onboarding work.
- Served as a scrum master for the engineering team overseeing code freezes and release schedules administering Jira Confluence GitHub.
- Managed Windows Server roles (AD DHCP DNS IIS GPM) TMG firewall Office 365 MikroTik router configurations.
- Led procurement of IT hardware across multiple offices.
Technologies: PowerShell, Group Policy, Windows Server, Office 365, MikroTik, Grafana, Docker, Linux, Terraform, Ansible, AWS IoT, DevOps, Containerization, Amazon Web Services (AWS), Bash Script, SSH, Infrastructure, Observability, Regulatory Compliance, Site Reliability Engineering (SRE), Monitoring, CI/CD Pipelines, Cloud Networking, Cloud Engineering, Cloud Platforms, Cloud, Product Ownership, Virtual Cloud Network (VCN)
Network and System Administrator
2014 - 2016
Aptech Computer Education
- Managed the full on-premises estate including domain controller file server proxy server firewall server switches routers end user support.
- Produced daily weekly audit reporting on network health performance usage for internal stakeholders.
- Trained junior network faculty interns, raising technical proficiency across the department.
Technologies: Systems, Networks, Windows Server, Linux, SSH, Infrastructure, Product Ownership
Experience
Multi-cluster Kubernetes Infrastructure for Multi-Tenant SaaS Platform
I designed and documented a four-cluster Kubernetes (kubeadm) topology on Proxmox VE, separating shared services from product-specific workloads, with full non-production and production VM sizing of approximately 65+ VMs.
Unified LGTM Observability Platform Rollout
I architected a shared observability platform using Mimir, Loki, Tempo, Grafana, and Alertmanager across 15+ VMs spanning production and test tiers, including Ceph-backed storage and OpenBao secrets management with leadership-facing architecture decks.
Infrastructure-as-code Repository Scaffolding
I generated a complete Terraform, Ansible, and Helm repository with 45+ files for a new platform buildout, covering VM provisioning, HAProxy, Keepalived VIP failover, MetalLB, Patroni PostgreSQL HA, and GitLab Runner integration.
Kafka and Redpanda Deployment and Migration
I administered multi-node Kafka clusters on Linux and migrated topics to Redpanda, fronted by Nginx and firewalls, with secure SSL/TLS access and network segmentation. I automated deployment and configuration using Ansible, Terraform, and shell scripts, integrating with Jenkins for GitOps-style
infrastructure changes.
infrastructure changes.
Blue-green and Canary Deployment Implementation
I automated blue-green and canary deployments for dockerized microservices on Kubernetes using Azure DevOps pipelines for GitOps workflows. I enabled zero-downtime releases with rollback strategies, integrated SonarQube-style code quality checks, and container image scanning for secure distroless images.
IT Infrastructure Overhaul for EU Institution
I led a large-scale infrastructure revamp, including Windows Server and Linux upgrades, Zimbra mail setup, IIS and Apache web servers, and firewall/VPN redesign. I applied project management and Agile practices to coordinate cross-functional teams, enforcing security baselines, GPOs, and compliance-focused OS patching.
Monitoring Stack Modernization
I replaced a commercial monitoring stack with self-managed Prometheus, Grafana, and ELK for Linux and Windows workloads, including IIS, application servers, databases, and firewalls. I set up alerting and dashboards for CI/CD, Kubernetes clusters, networks, and business-critical microservices, improving MTTR and supporting ITIL-aligned incident processes.
Cloud Migration and Containerization of Legacy Apps
I directed on-prem to AWS migrations of legacy web applications running on Apache and Tomcat-like stacks to containerized deployments with Docker and Kubernetes. I performed database export/import and schema migration (MSSQL/PostgreSQL), added SSL/TLS and firewall rules, and automated infrastructure with Terraform and Ansible.
Disaster Recovery Automation for Hybrid Environments
I designed DR automation for hybrid cloud/on-prem infrastructure with scripted failover, backup validation, and database export/import for SQL workloads and used Terraform, Ansible, and Python/Bash scripts integrated with Jenkins pipelines to regularly test recovery scenarios while maintaining compliance and auditability.
Education
2017 - 2022
Bachelor's Degree in Computer Science
Ilma University - Karachi, Pakistan
Certifications
JANUARY 2021 - PRESENT
AWS Certified Developer – Associate
Sherdil IT Academy
JANUARY 2021 - PRESENT
AWS Certified SysOps Administrator – Associate
Sherdil IT Academy
JANUARY 2021 - PRESENT
AWS Certified Solution Architect – Associate
Sherdil IT Academy
OCTOBER 2016 - PRESENT
CompTIA Linux+ and the Linux Professional Institute (LPI) LPIC-1 and LPIC-2
Onwire Education
JANUARY 2014 - PRESENT
CCNA R&S (Cisco Certified Network Associate)
Computer Collegiate
NOVEMBER 2012 - PRESENT
Microsoft Certified IT Professional (MCITP)
Computer Collegiate
Skills
Libraries/APIs
Node.js
Tools
Terraform, Ansible, Grafana, ELK (Elastic Stack), AWS CloudFormation, NGINX, Apache, Apache Tomcat, Git, GitHub, GitLab, GitLab Runner, Shell, Zimbra, Amazon Elastic Container Registry (ECR), Keycloak, Helm, Keepalived, Jenkins, Amazon EKS, Amazon CloudFront CDN, Amazon Virtual Private Cloud (VPC), AWS IAM, AWS Key Management Service (KMS), Amazon CloudWatch, Jira, Confluence, Rundeck, GitLab CI/CD, SonarQube, Loki, Pingdom, VMware, Hyper-V, VirtualBox, Vagrant, pfSense, Bitbucket
Languages
Bash Script, Bash, Python, Java, SQL
Paradigms
DevOps, Microservices, DevSecOps, Cisco Certified Network Associate Routing & Switching, Agile, Azure DevOps
Platforms
Linux, Kubernetes, AWS IoT, Docker, Amazon Web Services (AWS), Proxmox, Red Hat Linux, Ubuntu, Confluent Kafka, Windows Server, Amazon EC2, AWS ALB, AWS NLB, New Relic, PagerDuty, JBoss, CentOS, Debian, Azure
Storage
PostgreSQL, SUSE, Ceph, Amazon S3 (AWS S3), Amazon DynamoDB, Alibaba Cloud, Datadog, Microsoft SQL Server, MySQL, MongoDB
Frameworks
.NET, Angular
Other
Observability, CI/CD Pipelines, Containerization, SSH, Infrastructure, Cloud Architecture, Regulatory Compliance, Site Reliability Engineering (SRE), Monitoring, Cloud Networking, Cloud Engineering, Cloud Platforms, Cloud, Product Ownership, Virtual Cloud Network (VCN), Architecture, OpenTelemetry, IIS, AI DevOps, Machine Learning Operations (MLOps), Graphics Processing Unit (GPU), Large Language Models (LLMs), Cloud Infrastructure, Cost Reduction & Optimization (Cost-down), Distributed Systems, API Management, APIs, Computer Science, Networks, Systems, Servers, Cisco Switches, kubeadm, VM, Production, Microsoft Certified IT Professional ﴾MCITP﴿, AWS Certified Developer, AWS Certified SysOps Administrator, AWS Certified Solution Architect, alert manager, SaaS Monitoring, SSL, Group Policy Objects (GPOs), Firewalls, Operating Systems, Compliance, Hybrid Apps, Disaster Recovery (DR), RKE2, Kafka, OpenID Connect (OIDC), HAProxy, MetalLB, AWS CodePipeline, Prometheus, EC2, ECS, Amazon RDS, ElastiCache, PowerShell, Group Policy, Office 365, MikroTik, GoCD, Mimir, Tempo, Alertmanager, SigNoz, Redpanda, Redis Sentinel, Azure Repos
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring