Alaa Ahmed
Verified Expert in Engineering
Cloud Architect and DevOps Developer
Ahmed is a highly-skilled cloud, security, and DevOps engineer. He is also a certified network security professional and a talented system and Linux engineer with a solid background in Docker, Docker Compose, Docker Swarm, Kubernetes, and shell scripting. He has the know-how of various cloud service providers, such as Microsoft Azure and AWS. His experiences include implementing vulnerability scanners, DevSecOps tools, enterprise VPN scenarios, and CI/CD pipelines using Azure DevOps and Jenkins.
Portfolio
Experience
Availability
Preferred Environment
Kubernetes, DevOps, DevSecOps, Static Application Security Testing (SAST), OWASP, Amazon Web Services (AWS), Terraform, Azure DevOps, Azure, CI/CD Pipelines
The most amazing...
...project I've worked on is implementing DevSecOps for UNRWA Azure Pipelines.
Work Experience
Azure DevOps Engineer for a generative AI tool in the legal space
Syntracts, Inc.
- Migrated the application to a Dockized version, creating Docker file and testing it on Azure Virtual Machines.
- Built GitHub Actions to automate the building, testing, and deployment of various application components.
- Provisioned Azure Kubernetes Service and deployed the application for different environments, enabling Horizontal Pod Autoscaling (HPA).
DevOps Developer
GeneDx, LLC c/o Sema4
- Migrated portal services from one Azure tenant to a new one and migrated DB from VM-based to an Azure MySQL flexible server.
- Upgraded the architecture of the portal by migrating running containers to the Azure Kubernetes cluster.
- Configured and implemented Datadog alerts and monitoring rules to follow the application and its resources.
Azure DevOps Engineer
Z-Tech
- Managed Azure DevOps pipelines by creating code, building and pushing Docker, analyzing SCA security, scanning SAST, and deploying to AKS. Handled Azure resources, such as AKS, Azure VMs, Azure Vaults, Azure Functions, and Azure Logic Apps.
- Used Jira Kanban boards to follow tasks and work progress.
- Created and managed Azure DevOps pipelines to deploy application Dockers to AKS and mobile pipelines on Bitrise, code repositories on GitHub, and Terraform scripts for infrastructure automation.
DevSecOps Engineer
Woven Planet Holdings
- Configured DevSecOps tools for secret scanning, software decomposition analysis, static code testing, and dynamic application testing.
- Created GitHub Actions to automate the build and security process and deliver results.
- Created and managed AWS resources, including AWS EC2, AWS VPC, AWS ELB, AWS IAM, AWS S3, AWS RDS, AWS Fargate, CloudWatch, and CloudTrail.
DevOps Engineer
Logicteca Solutions
- Installed various Linux-based applications, including Apache, NGINX, HAproxy, Tomcat, Zimbra, Kurento, Asterisk, and many other applications and services.
- Created and managed AWS resources, including AWS EC2, AWS VPC, AWS ELB, AWS ECR, AWS S3, AWS RDS, security groups, AWS Fargate, CloudWatch, and Cloudtrail.
- Used Bash scripts, Docker, Docker Swarm, Kubernetes, and Ansible.
- Implemented DevSecOps for Azure Pipelines. Used SonarQube, WhiteSource Bolt, OWASP ZAP scanner, and the Glue framework.
- Managed a vulnerability assessment system and Azure and Office 365 advanced threat protection.
Information Security Instructor
University College of Applied Sciences
- Lectured on certified ethical hacking, pen-testing tools, network security, and wireless network security.
- Evaluated and mentored students taking the courses.
- Tested and utilized Kali Linux tools like Metasploit, ZAP, and Burp Suite.
System and Network Administrator
Islamic University of Gaza
- Conducted vulnerability scanning and took care of the application and network security.
- Served as a system and network administrator. My duties included network engineering, routing, switching, VoIP, VLAN, SAN, and network security.
- Performed security administration tasks, such as Windows Server. For virtualization, I used VMware ESXi, vCenter, vSAN, DRM, and vSphere suite.
- Conducted Linux Server administration and hardening using Apache, Tomcat, RADIUS, and Zimbra.
Experience
DevOps and Cloud Architect
• YAML files were prepared to deploy the application using customized PHP images, Nginx, and MySQL database.
• The service has been exposed to the internet using a load balancer.
• Secrets and keys were stored on Azure Key Vault and integrated with AKS.
DevSecOps for Azure Pipelines
- SonarQube was integrated with Azure pipelines to scan for vulnerabilities.
- WhiteSource Bolt has been integrated with Azure CI for the dependency check.
- OWASP ZAP was used to scan for vulnerabilities at the release stage (Azure CD pipeline).
Web Application Firewall
- Configuring and tuning of Cloudflare WAF.
- Implementing access rules based on the threat score.
- Implementing challenging rules for admin pages.
- Mitigating OWASP Top10 vulnerabilities.
- Auditing and troubleshooting of security incidents and false positives.
Education
Master's Degree in Computer Engineering
Islamic University of Gaza - Gaza, Palestine
Certifications
Microsoft Certified: Azure Security Engineer Associate
Microsoft
DevSecOps: Continuous Application Security
DevSecOps: Automated Security Testing
Fortinet Network Security Expert Level 4: Certified Professional
Fortinet
Cisco Networking: On-Premise and Cloud Solutions (OCSE)
Cisco
Certified Linux Administrator (LPIC-1)
Linux Professional Institute, Inc.
Skills
Tools
Helm, Docker Compose, Docker Swarm, Jenkins, Azure Kubernetes Service (AKS), Azure Key Vault, Terraform, AWS Fargate, CodeQL, GitHub, Azure Logic Apps, Azure Web Application Firewall, Amazon Virtual Private Cloud (VPC), CircleCI, AWS CloudFormation, Git, Amazon CloudWatch, Sentry, Logging
Paradigms
DevOps, DevSecOps, Automation, Continuous Deployment, Azure DevOps
Platforms
Windows Server, Azure, Linux, Kubernetes, Docker, Amazon Web Services (AWS), AWS ALB, Azure Functions, Azure PaaS, Google Cloud Platform (GCP)
Industry Expertise
Network Security, Cybersecurity
Other
Firewalls, VMware ESXi, Fortinet Firewall Configuration, Vulnerability Identification, CI/CD Pipelines, System Administration, Security, Containerization, Containers, DevOps Engineer, Infrastructure Security, Network Architecture, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Cloud, Application Security, Web Application Firewall (WAF), Office 365 Security, OWASP Top 10, Spam Filtering, Machine Learning, Vulnerability Assessment, GitOps, IT Security, Web Security, Security Audits, Vulnerability Management, GitHub Actions, Certified Ethical Hacker (CEH), OWASP, Cloudflare, Infrastructure as Code (IaC), AWS CodePipeline, AWS Transit Gateway, Secure Access Service Edge (SASE), Monitoring, Machine Learning Operations (MLOps)
Languages
Python, Java
Storage
Datadog, Azure Blobs, MySQL
Libraries/APIs
Azure Blob Storage API, Azure API Management
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring