Multi-Cloud DevSecOps & Network Architect

Shafaqat Siddique

Senior DevOps Engineer Principal DevOps Consultant Cloud & Network Architect

Phone: +92-333-******* (WhatsApp)

Email: ****************@*****.***

Location: Islamabad (DHA), Pakistan

LinkedIn: linkedin.com/in/shafaqatsiddique

PROFESSIONAL SUMMARY

Senior DevOps Engineer and Cloud/Network Architect with 20+ years of experience across multi-cloud environments (AWS, Azure). Expert in CI/CD automation (Jenkins, GitLab CI, ArgoCD), container orchestration (Kubernetes, OpenShift, Docker), and Infrastructure as Code (Terraform, CloudFormation, Pulumi). Skilled in DevSecOps, security automation, hybrid cloud, advanced networking (VPN, VPC, cloud firewalls), and observability (Prometheus, Grafana, ELK, Datadog). Proven leader in system reliability, cost optimization, disaster recovery, and mentoring teams to align technical solutions with business objectives.

KEY SKILLS

Cloud: AWS, Azure, Multi-Cloud, Hybrid Cloud, AWS Lambda, Azure Functions, EC2, S3, VPC, CloudWatch, CloudFormation DevOps & CI/CD: Jenkins, GitLab CI, ArgoCD, Azure DevOps, CodeBuild, Git, GitLab, Nexus, Camunda, webMethods Containers & Orchestration: Kubernetes, OpenShift, Docker, Helm, Auto-Scaling, Service Discovery, Load Balancing Infrastructure as Code: Terraform, CloudFormation, Pulumi, Ansible, Puppet, Chef Security & DevSecOps: DevSecOps, SAST, DAST, Snyk, Aqua Security, SonarQube, HashiCorp Vault, AWS KMS, ISO/IEC 27001, SOC 2

Monitoring & Observability: Prometheus, Grafana, ELK Stack, Datadog, Jaeger, Zipkin, Alert Manager Networking: VPN, VPC Peering, Cloud Firewalls, DNS, Proxy Servers, Load Balancing, LAN/WAN, Active Directory Databases & Platforms: SQL Server, PostgreSQL, Liferay, CRM, ERP Integration Scripting & Development: Bash, PowerShell, PHP, C#, ASP.NET Operating Systems: Linux, Windows Server, CentOS, Ubuntu, Solaris, Kali Linux Leadership: Digital Transformation, SRE, Incident Response, Disaster Recovery, Team Mentoring, Cost Optimization PROFESSIONAL EXPERIENCE

Principal DevOps Consultant

Systems Limited, Islamabad Feb 2026 – Present

● Manage digital transformation and IT governance in large-scale, secure infrastructure projects.

● Lead technology vision and DevSecOps strategy across multi-cloud, aligning IT with business goals.

● Architect and manage multi-cloud environments (AWS, Azure) with a focus on resource optimization and high availability.

● Design microservices and serverless applications (AWS Lambda, Azure Functions).

● Build hybrid cloud solutions integrating on-premise data centers.

● Implement advanced networking (VPN, VPC peering, cloud-based firewalls).

● Develop Infrastructure as Code (IaC) with Terraform, CloudFormation, or Pulumi.

● Build and manage CI/CD pipelines and deployments across Camunda (workflow orchestration), webMethods

(integration/ESB), Liferay (portal/DXP), CRM, and Nexus artifact repositories.

● Manage secrets and credentials with HashiCorp Vault across pipelines and environments.

● Manage Kubernetes or OpenShift for container orchestration, scaling, and monitoring.

● Use Ansible, Puppet, or Chef for automated system configurations and deployments.

● Automate cloud monitoring, auto-scaling, and backups for resilience.

● Mentor junior engineers and align team objectives with business goals. Senior DevOps Engineer

Ideal Innovative Solutions, Islamabad Sep 2024 – Jan 2026

● Designed CI/CD pipelines with Jenkins and GitLab CI for automated builds and deployments.

● Enforced GitFlow, trunk-based development, and quality gates for stable releases.

● Collaborated with release managers to streamline deployments across environments.

● Integrated security into CI/CD using Snyk, Aqua Security, and SonarQube.

● Automated security testing (SAST, DAST) and managed secrets with Vault and AWS KMS.

● Worked with security teams on compliance, continuous auditing, and incident response automation.

● Implemented observability with Prometheus, Grafana, ELK Stack, and Datadog.

● Enhanced observability with distributed tracing tools including Jaeger, Zipkin, and AWS CloudWatch.

● Performed capacity planning, load testing, and resource optimization for cloud and containers.

● Managed costs through autoscaling, reserved instances, and forecasting tools.

● Led teams on DevOps and security best practices, fostering a culture of automation and collaboration.

● Led post-incident reviews, applied SRE principles for system reliability, and automated disaster recovery plans. Senior DevOps Engineer

Utility Stores Corporation of Pakistan, Islamabad May 2024 – Sep 2024

● Deployed and managed Git, Kubernetes, OpenShift, and security platforms for integrated version control, testing automation, and security checks.

● Set up and maintained Kubernetes/OpenShift clusters using Docker, Helm, auto-scaling, service discovery, and load balancing for efficient microservice management.

● Implemented automated testing (Selenium, JUnit) within CI/CD pipelines and integrated security tools (Aqua Security, SonarQube) for code quality and vulnerability management.

● Automated cloud infrastructure provisioning with Terraform and Pulumi across scalable, multi-cloud AWS and Azure environments.

● Built and maintained CI/CD pipelines using Jenkins, GitLab CI, and ArgoCD for fast, secure releases.

● Designed high-availability infrastructure, including PostgreSQL clusters, with automated failover, replication, and disaster recovery.

● Ensured security compliance (ISO 27001, SOC 2) by integrating security policies, automating checks, and conducting vulnerability assessments and audits.

DevOps Architect (Consultant)

Federal Board of Revenue, Islamabad Oct 2023 – Jun 2024 World Bank Project – “Pakistan Raises Revenue”

● Provided comprehensive support for Azure DevOps Services, including deployment of tailored on-premise solutions to meet organizational requirements.

● Developed and implemented a robust DevSecOps framework for FBR, integrating security across the development lifecycle while maintaining compliance with information security standards.

● Architected and deployed Docker and Kubernetes clusters for efficient, scalable, and sustainable application management.

● Implemented Infrastructure as Code (IaC) practices with scripting and automation tools, reducing manual deployment and operational effort.

● Ensured infrastructure was secure, reliable, scalable, and automated by applying best practices and robust security measures.

● Implemented and managed version control systems (VCS) to track changes and enable efficient collaboration on code and infrastructure.

● Fostered a DevOps culture at Pakistan Revenue Automation Limited (PRAL) FBR to encourage collaboration, innovation, and continuous improvement.

DevOps Engineer (IT Specialist)

Pakistan Air Force Headquarters, Islamabad Jan 2023 – Sep 2023

● Led a DevOps team in designing and implementing a CI/CD environment with GitLab, tailored to the Software Development Directorate’s needs and security requirements.

● Oversaw configuration management for secure, scalable settings and implemented compliance best practices to protect sensitive data.

● Developed automated scripts to streamline deployment, improving operational efficiency and minimizing errors.

● Established dedicated Software Quality Assurance environments mirroring production for accurate validation and feedback.

● Collaborated with development teams to support legacy applications, optimizing performance and ensuring smooth integration with new technologies.

● Managed web server operations for optimal performance and uptime, applying updates and redundancy measures to prevent downtime.

● Conducted training sessions for developers on DevOps best practices, CI/CD implementation, collaboration tools, and automation.

Information Technology Officer

Punjab Municipal Development Fund Committee, Burewala Nov 2022 – Jan 2023 World Bank – “Punjab Cities Program”

● Created and maintained network solutions for seamless, secure, and scalable data connectivity between local offices and World Bank modules.

● Diagnosed network issues and provided technical support, monitoring data integrity and accuracy across systems.

● Developed and oversaw processes to sync data between local systems and World Bank modules.

● Worked with finance, revenue, HR, and billing teams to understand and meet data requirements.

● Collaborated with World Bank representatives to ensure adherence to project standards.

● Oversaw development and maintenance of project-related websites aligned with project goals.

● Documented IT processes and prepared regular reports on network performance and data synchronization.

● Implemented best practices for system security and data protection per World Bank requirements. Maintenance In-charge, Mission Control Center

Pakistan Air Force, Karachi Jan 2021 – Aug 2022

● Liaised with external and internal agencies to ensure smooth operation of the Mission Control Center.

● Ensured operational security of sensors, RADAR data, connectivity, configuration, applications, and services, implementing advanced security architectures at C2I Centers.

● Managed network administration including NGN connectivity on mesh networks, routers, proxies, VPN servers, Active Directory Services, LAN/WAN, SMTP, SNMP, and DNS. In-charge, Research & Development (R&D), Mission Control Center Pakistan Air Force, Islamabad Feb 2012 – Dec 2020

● Managed 24/7 depot-level maintenance support for Command-and-Control Centers, PAF.

● Installed, configured, and troubleshot advanced server environments (CentOS, Solaris, Linux, Ubuntu, Windows) as well as NAS, VM, and RAID.

● Integrated and configured software and hardware from vendors including MOXA, TIR, SCU, FnMM, IFF, ADSB, data diode, VCP, LBIP, MPS, and SD.

● Conducted preventive maintenance and troubleshooting, repairing multilayer PCBs, UPS, SBC, and embedded system cards.

● Designed and implemented information security policies and protocols aligned with industry standards. Supervisor, Mission Control Center

Pakistan Air Force, Lahore Aug 2000 – Jan 2012

● Supervised a team responsible for day-to-day tasks and periodic maintenance of Mission Control Center systems.

● Troubleshot and repaired data-processing hardware from various vendors using the latest diagnostic tools.

● Analyzed data to interpret failure points, generate reports, and identify defect trends for continuous improvement. EDUCATION

Master of Science (MS) in Information Security

Riphah International University, Islamabad Mar 2015 – Aug 2018 Majors: Ethical Hacking, Malware Analysis, Wireless Network Security, CISSP, CISM Bachelor of Science (BS) in Information Technology Virtual University of Pakistan, Lahore Feb 2005 – May 2010 Diploma in Associate Engineering (DAE)

School of Electronics, Pakistan Air Force, Karachi Aug 2000 – Nov 2003 Specialization in RADAR

CERTIFICATIONS & TRAINING

● Honorary Speaker, DevSecOps — Atlantic University, Canada (2021): UAV Wireless Communication, Docker in Hacking, DevOps Tools, Wireshark, Hacking and Programming, Operating Systems for Penetration Testing, Git & GitLab, Modern Application Deployment

● Amazon Web Services (AWS) Conference

● Cyber Defense & Pre-Security Learning Path — TryHackMe

● MCITP (Microsoft IT Professional) Training — NETS, Lahore

● CCNA Routing & Switching Training — Corvit, Islamabad

● A+ Hardware Certification Training — NICON, Rawalpindi

● ASP.NET, C# Programming Course — EVS, Lahore

● Network Reconfiguration & Management Course — PAF, Islamabad

● Command and Control Intelligence System (MCC) Maintenance — Project VISION, PAF

● Windows & Linux Servers MCC Training — Project VISION, PAF

● RADAR Maintenance Course (Depot Level) — Pakistan Air Force KEY PROJECTS & ACHIEVEMENTS

● Awarded “Star of the Quarter” at Systems Limited in the first quarter of the current role, recognizing outstanding performance and contribution.

● Base Commander Certification for implementation of security architecture at C2I Center.

● Decoded SPADA Missile system communication.

● Barco Vista family Display system modification (POC and serial production).

● Developed automatic software recovery and installation platform server to mitigate security loopholes in Mission Control Centers (Linux and Windows).

● Developed CMC Web-based System Configuration & Monitoring (MIS) application.

● Research: analysis of UAV MAVLink wireless communication protocol — identified and exploited vulnerabilities to hack a UAV (drone).

● Multiple Appreciation Letters from Pakistan Air Force. LANGUAGES

English — Professional proficiency (Spoken, Written, Reading) Urdu — Native / Fluent (Spoken, Written, Reading)

Contact this candidate