Mohammad Tarhini

• Led the planning and architectural design for a robust, secure, and scalable GitOps-based solution to automate the management of Kubernetes clusters running on bare-metal servers within internal networks
• Engineered a comprehensive architecture leveraging GitLab for version control and CI/CD, Crossplane for declarative infrastructure management, and Kubernetes for application deployment
• Designed and documented detailed infrastructure-as-code (IaC) repositories for Kubernetes manifests and Crossplane configurations, including environment-specific configurations for development, staging, and production
• Developed and configured GitLab CI/CD pipelines to automate the build, test, and deployment of applications and infrastructure changes, adhering to GitOps principles
• Integrated key security considerations into the design, including secrets management strategies, Role-Based Access Control (RBAC), and policy enforcement using tools like OPA/Gatekeeper
• Established observability and monitoring frameworks with recommendations for tools like Prometheus, Grafana, and Loki, along with alerting mechanisms
• Formulated a detailed action plan encompassing implementation steps, tool recommendations, and best practices for CI/CD, repository structuring, and performance optimization
• Created foundational CI/CD pipelines on Azure DevOps to accelerate developer deployments while the comprehensive GitOps solution was being developed
• This proactive measure improved team efficiency and delivery speed
• Stack: Kubernetes, IaC, Azure Devops, Gitlab, .NET, TFS

• Developed and maintained integration APIs using .NET, enabling seamless communication between internal and external systems
• Engineered a complete payment processing system in .NET, handling transaction flows, security, and third-party integrations
• Designed and implemented an AI-powered Retrieval-Augmented Generation (RAG) application using Python, leveraging large language models for smart query responses
• Built and managed cloud infrastructure using DevOps best practices, including CI/CD pipelines, infrastructure-as-code, containerization, and monitoring
• Collaborated cross-functionally with developers and stakeholders to ensure scalable, secure, and high-performance delivery
• Applied agile methodologies and contributed to sprint planning, code reviews, and continuous improvement of team workflows

Stack: .NET, Python, Docker, CI/CD, Infrastructure as Code, Cloud platforms (specify if AWS/Azure), Git, Agile/Scrum

• Spearheaded the development and maintenance of infrastructure for SaaS and Edge deployments, utilizing DevOps and DevSecOps principles to ensure secure, efficient operations
• Actively involved in the strategic planning and execution of migrating from on-premise infrastructure to cloud environments, demonstrating in-depth knowledge of cloud technologies and best practices
• Played a pivotal role in designing and implementing automation solutions, leading to significant improvements in system reliability and performance
• Provided expert-level support for edge customers and mentored junior team members, fostering a collaborative and knowledge-sharing environment
• Showcased comprehensive expertise in modern infrastructure technologies including Kubernetes, AWS, and Azure, along with proficiency in automation tools like Terraform, Ansible, CloudFormation, Pulumi, and Helm
• Led the migration from Bamboo to GitHub, designing and implementing reusable workflows in GitHub Actions, streamlining development processes, and enhancing team productivity
• Proven ability in an Agile, DevOps-oriented setting, with a strong track record of independent project management and innovative problem-solving skills
• Orchestrated a successful migration of repositories, artifacts, and projects from Nexus to JFrog Artifactory, ensuring seamless transition and alignment with best practices in repository management
• Stack: Kubernetes, AWS, Azure, Terraform, Ansible, CloudFormation, Pulumi, Helm, Bamboo, GitHub, GitHub Actions, Nexus, JFrog Artifactory

• Manage the full infrastructure of the integration HUB using Terraform, create AWS resources (Lambda functions, SQS, SNS, AppSync, etc.), update needed configurations and managing environment deployments
• Create AWS AppSync GraphQL schemas, queries and mutations to manipulate data needed for integrations
• Monitor and debug AWS resources using Cloudwatch and AWS Xray
• Use different types of APIs for the various integrations (REST, Soap, etc..)
• Use AWS Lambda and Node.js to build a microservices backend, integrating several APIs together to create a full solution called the integration HUB to standardize the communication of hundreds of services, using both Async and Synchronous methods
• Deploy and monitor solutions throw Jenkins Pipelines
• Create and manage Google Apigee proxies and applications to act as a gateway for many of the integrations in the HUB
• Implement Amazon Simple Notification Service and Amazon Simple Queue Service to create Async integrations
• Use several AWS database services for integration: DynamoDB, Aurora…
• Coaching of the new Dev and DevOps team members
• Coordinate with other teams to do testing sessions for integrations for all environment releases and providing support and documentation for the process
• Stack: AWS Lambda, AWS AppSync GraphQL, Node.js, microservices, REST API, Terraform, AWS Secrets Manager, Amazon Simple Notification Service, Amazon Simple Queue Service, Helm, 8KS, Jenkins, Amazon DynamoDB, Aurora, Google Apigee

• Manage and upgrade Kubernetes Cluster (Kubectl, Helm)
• Install Prometheus + Grafana cluster monitoring
• Add dynamic health checks, limits, and requests for deployments in Kubernetes (Jsonnet)
• Install and administer RabbitMQ Cluster on Kubernetes
• Install and Manage Rancher 2.6.3 with Monitoring
• Upgrade microservices from .Net 5 to 6, and support in the CI/CD pipelines
• Add support for different environment in Gitlab pipelines
• Install and manage PostgreSQL cluster
• Stack: .Net / C#, Kubernetes, Docker, Prometheus, Grafana, Helm, RabbitMQ, Rancher, Gitlab, microservices

• Integrate Azure ad with on premise ad for office 365 applications
• Creating, updating and fixing Azure CI/CD pipelines for Javascript applications
• Directed the implementation and performance tuning of company's local and offshore servers including AWS infrastructure
• Lead development team in designing/migrating AWS cloud-based solutions including serverless infrastructure and MySQL Galera clusters
• Performed manual security testing (PenTesting) on critical applications, Experience in different web application security testing tools
• SIEM and MDM Configuration, and Reporting (Alienvault, IBM MaaS360)
• Developing CI/CD pipelines for build, test, and deployment, using Jenkins, Bitbucket, AWS CodePipeline, AWS CodeBuild, and AWS CodeDeploy
• Automated environment provisioning and configuration using container technologies (Docker, Kubernetes)
• Maintain metrics and reporting on the PCI governance and compliance
• Integrating GitOps processes, practices, and tools
• Used Ansible and Ansible Tower as Configuration management tool, to automate repetitive tasks, quickly deploys servers, and proactively manages changes
• VMWare ESXi Infrastructure Administration and management
• Managing business-critical IT tasks and systems and monitoring the performance of servers (PRTG, Icinga, Office365, AD, Exchange, etc)
• Increased team productivity using .NET, Python, and PowerShell to automate departments tasks (e.g.: AD and Exchange management system)
• Database Development, Administration, Maintenance, Replication
• Assisting the development team on punctual needs: Designed and documented REST/HTTP, SOAP APIs, including JSON data formats and API versioning strategy
• Using Laravel, NodeJS and Angular to build the company web applications: client-facing portals and an internal BackOffice system so we have centralized client management for our global business
• Integrating worldwide online payment services such as Perfect Money, Ecommpay, Bridger, PayQuay, GlobepayInc, etc

• Created and trained a course about security and penetration testing (for the Certified Ethical Hacker)
• Coaching people to improve their skills
• Offensive IT Security: launching full penetration testing attacks against various kinds of servers and websites to find out security weaknesses on targeted systems
• Security vulnerabilities research (latest vuln, password cracking…) and development (Webshells, Trojans…)
• Defensive Security: consulting and setting up policies and rules for specified server environments and setting up hardened Linux servers
• Stack: Kali, Nessus, Acunetix, Nmap, beef, Wireshark, Netcat, Metasploit, Linux, Bash, Immunity Canvas, Cain & Abel, Aircrack-ng, Hping, John The Ripper, Brutus, Ettercap…