Abdelrahman Nasser Fathi
DevOps Engineer building production-grade, cloud-native platforms — scalable Kubernetes, Terraform and GitOps delivery, end-to-end observability, and centralized secrets management.
Keeping infrastructure boring, on purpose
I'm a DevOps Engineer based in 6th of October, Egypt, specializing in designing, building, and operating production-grade cloud-native infrastructure. I architect scalable, highly available Kubernetes platforms, automate infrastructure and deployments through Terraform and GitOps, and implement end-to-end observability and centralized secrets management — with a focus on reliability, security, performance, and operational excellence.
Where I've worked
Things I've built
- Architected and maintained a production multi-tenant LMS serving 21 live enterprise tenants on DOKS with strict database-per-tenant isolation.
- Automated tenant provisioning with Argo CD ApplicationSet + Kustomize, enabling <2-minute deployments from a single Git commit and cutting onboarding time by 95%.
- Managed production infrastructure with Terraform (DOKS, VPC, Managed MySQL, Spaces), with ESO for secrets and cert-manager for automated TLS.
- Integrated Bunny.net Stream for adaptive HLS delivery across 500GB+ / 2,000+ videos in isolated tenant libraries — ~70% lower delivery costs and 90% origin offload.
- Implemented Cloudflare Enterprise (CDN, WAF, rate limiting, tiered cache), reducing TTFB by ~60% while maintaining 99.9% availability with HPA, PDBs, and health probes.
- Built observability with OpenTelemetry, Prometheus, Grafana, Loki, and Tempo, with SLO-based Slack alerting — MTTR from ~30m to <5m.
- Architected and operated a production exam platform on DOKS supporting 150K+ concurrent students, on a dedicated 10-node Kubernetes pool built for exam traffic.
- Engineered event-driven autoscaling with KEDA + HPA + Cluster Autoscaler, scaling from 3 to 100+ pods during live exams — 99.95% uptime and 80% lower off-peak costs.
- Built production Docker images (Nginx, PHP-FPM, Supervisor, multi-stage builds): 60% smaller images and <10s cold starts.
- Implemented GitOps with Helm + Argo CD — health-based rollouts, rollback, zero-downtime releases; deploy time from 15 min to <3 min.
- Delivered real-time exam dashboards and SLO-based alerting with OpenTelemetry, Prometheus, Grafana, Loki, and Tempo — MTTR from ~25m to <3m.
- Architected and deployed a highly available, centralized HashiCorp Vault platform serving 7 Kubernetes clusters, automated through Terraform and GitOps.
- Automated multi-cluster Kubernetes authentication, role provisioning, and least-privilege access policies with Terraform for secure, identity-based secrets access.
What I work with
Cloud Platforms & IaC
AWS, Microsoft Azure, DigitalOcean (DOKS, Spaces), Terraform, Ansible
Containers & Orchestration
Docker, Kubernetes (K8s), Helm, Argo CD, KEDA, HPA, Nginx
CI/CD & GitOps
GitHub Actions, GitOps, Bash Scripting, Python
Observability & Monitoring
Prometheus, Grafana, OpenTelemetry, Loki, Tempo, Elasticsearch, Kibana (ELK)
Secrets Management & Security
HashiCorp Vault, External Secrets Operator (ESO), cert-manager, Cloudflare
Databases & Messaging
MySQL, PostgreSQL, MongoDB, Redis, Object Storage, RabbitMQ, Kafka
Web & Networking
Nginx, Apache, DNS, SSL/TLS, TCP/IP, Load Balancing, CDN
Credentials
Let's talk infrastructure
Open to DevOps and cloud infrastructure roles. Based in 6th of October, Egypt.