AR
DevSecOps Engineer๐Ÿ“ Islamabad, Pakistan

Hi, I'mAbdur Rehman.

Building secure, automated, and scalable
infrastructure for the modern cloud.

Secure Automate Deploy
AWS Kubernetes Terraform Docker DevSecOps Linux
secure@abdur-rehman:~$
$
Abdur Rehman โ€” DevSecOps Engineer
Abdur Rehman โ€” DevSecOps Engineer
3+Internships &
Roles
5+Certifications
Earned
About Me

A DevSecOps Engineer
passionate about secure systems

I'm Abdur Rehman, a DevSecOps Engineer with strong expertise in cloud security, penetration testing, and secure CI/CD pipeline design. I specialize in embedding security throughout the software development lifecycle โ€” from threat modeling and vulnerability assessment to automated security testing and remediation.

Hands-on with Linux systems, I work across cloud infrastructure, containerized applications, and network security. My approach combines the rigor of a security engineer with the automation mindset of a DevOps practitioner โ€” delivering resilient, compliant systems that scale with confidence.

Cloud InfrastructureCI/CD SecurityKubernetesContainer SecurityIaC (Terraform/Ansible)MonitoringPenetration TestingLinux

Security-First Mindset

Security is embedded throughout every pipeline, not bolted on at the end. Threat modeling and vulnerability assessment are integral to every project.

Automation Enthusiast

Manual processes are technical debt. I automate infrastructure provisioning, testing, and deployments to reduce errors and accelerate delivery.

Continuous Learner

Cloud technology evolves fast. I actively pursue certifications, hands-on labs, and real-world projects to stay ahead of the curve.

Team Collaborator

DevSecOps is a team discipline. I communicate across development, operations, and security teams to align goals and deliver resilient systems.

Career

Professional Experience

My journey building secure, automated, and scalable infrastructure.

DevSecOps Engineer

Full-time
AIIT SolutionsยทRawalpindi
Mar 2026 โ€” Present

Securing CI/CD pipelines, hardening containerized applications, and managing cloud infrastructure at an enterprise scale.

  • Secured CI/CD pipeline by implementing SonarQube quality gates, Trivy vulnerability scanning, and Cosign image signing to prevent Docker image tampering; identified 645 code improvements and flagged 15% of findings as security vulnerabilities.
  • Hardened containerized AIIT application by rebuilding Docker images on Chainguard base images, eliminating root privilege execution and enforcing CPU/memory resource limits.
  • Protected an unsecured internal VPC by deploying a VPN for remote employees and monitoring network traffic with Suricata and Zeek across 8 servers, enabling detection of anomalous activity.
  • Configured Active Directory (AD) with role-based access controls to restrict external company users from accessing AIIT internal servers, enforcing least privilege access.
  • Managed product release cycles and automated deployments on AWS, ensuring smooth, low-downtime transitions between versions.
SonarQubeTrivyCosignChainguardAWSSuricataZeekActive DirectoryDocker

DevOps Engineer

Full-time
Moiz Tech HubยทIslamabad
Oct 2025 โ€” Mar 2026

Led cloud migration, containerization, and Kubernetes orchestration, establishing observability practices and managing GCP environments.

  • Migrated the application from cPanel hosting to AWS Lightsail in 1 day with zero downtime.
  • Containerized the full stack application using Docker, reducing application issues to 5%.
  • Deployed applications on Kubernetes using production-ready workloads โ€” Deployments, StatefulSets, Services, Ingress Controllers, HPA, and VPA โ€” ensuring scalability and high availability.
  • Developed Helm charts to standardize deployments and enable repeatable, consistent releases across environments.
  • Implemented monitoring and observability with Prometheus and Grafana for real-time performance tuning; used Loki with Grafana for centralized log monitoring.
  • Managed Google Cloud Platform (GCP) infrastructure and deployments for external clients.
AWS LightsailDockerKubernetesHelmPrometheusGrafanaLokiGCPkubectl

DevOps Intern

Internship
SPS IncยทIslamabad
Jun 2025 โ€” Sep 2025

Built CI/CD pipelines, deployed containerized workloads on Kubernetes, and engineered Azure cloud infrastructure as an intern.

  • Architected and implemented CI/CD pipelines using Jenkins, Docker, and Kubernetes to enable scalable, automated application deployments.
  • Deployed a containerized application on Kubernetes using Deployments, Services, and Ingress, ensuring high availability and production readiness.
  • Integrated Prometheus and Grafana for monitoring and logging within a Kubernetes environment, enhancing operational visibility.
  • Deployed containerized applications on IBM Cloud using IBM Kubernetes Service (IKS) and managed clusters with kubectl.
  • Engineered infrastructure as code on Microsoft Azure, including VM deployment, VPN setup, and App Service configuration.
JenkinsDockerKubernetesIBM CloudIKSAzurePrometheusGrafanakubectlTerraform
Expertise

Skills & Technologies

A categorized overview of the tools and platforms I work with, verified from my professional experience.

Cloud Platforms

AWSMicrosoft AzureGoogle Cloud Platform (GCP)IBM Cloud

Containers & Orchestration

DockerKubernetesHelmkubectlAKSIKSEKS

CI/CD & GitOps

JenkinsArgoCDGitHub ActionsGitLab CI/CDGitGitHub

Infrastructure as Code

TerraformAnsibleBash ScriptingPython

DevSecOps & App Security

SonarQubeTrivyCosignChainguard ImagesSASTContainer SecurityImage SigningVulnerability ManagementThreat Modeling

Monitoring & Observability

PrometheusGrafanaLokiSuricataZeek

Cloud & Network Security

Cloud SecurityIAMVPN ConfigurationActive DirectoryRBAC

Penetration Testing

Penetration TestingVulnerability AssessmentNmapBurp SuiteMetasploitKali Linux

OS & Infrastructure

Linux Server AdministrationOn-Premises Server SetupWindows Server
Portfolio

Featured Projects

Selected engineering work from professional roles โ€” all details verified against real deliverables.

DevSecOps@ AIIT Solutions

Secure CI/CD Pipeline with DevSecOps Toolchain

Designed and implemented a fully secured CI/CD pipeline integrating SonarQube quality gates, Trivy image scanning, and Cosign image signing. The pipeline flags security vulnerabilities early, enforces code quality standards, and prevents tampered container images from reaching production.

  • Identified 645+ code improvement opportunities
  • Flagged 15% of findings as security vulnerabilities
  • Prevented Docker image tampering with Cosign signing
SonarQubeTrivyCosignJenkinsDockerGitHub Actions
Security@ AIIT Solutions

Docker Container Hardening with Chainguard

Rebuilt production Docker images using Chainguard distroless base images, eliminating root privilege execution, reducing the attack surface, and enforcing strict CPU and memory resource limits across all containerized workloads.

  • Eliminated root privilege execution in containers
  • Reduced container attack surface significantly
  • Enforced CPU/memory resource limits across workloads
DockerChainguardKubernetesLinux
Network Security@ AIIT Solutions

VPC Network Security with IDS/IPS

Secured an unsecured internal VPC by deploying VPN access for remote employees and implementing network intrusion detection using Suricata and Zeek across 8 servers, enabling real-time detection of anomalous network activity.

  • Monitored network traffic across 8 servers
  • Deployed VPN for secure remote employee access
  • Configured AD with RBAC for least-privilege access
VPNSuricataZeekAWS VPCLinuxActive Directory
Cloud & DevOps@ Moiz Tech Hub

AWS Migration & Kubernetes Deployment

Led a zero-downtime migration from cPanel hosting to AWS Lightsail in under 24 hours, then containerized the full-stack application with Docker and deployed production Kubernetes workloads with Helm, HPA, and VPA for scalability.

  • Zero-downtime migration completed in 1 day
  • Reduced application issues to 5% post-containerization
  • Production-grade Kubernetes workloads with auto-scaling
AWS LightsailDockerKubernetesHelmHPAVPA
Monitoring@ Moiz Tech Hub

Full Observability Stack (Prometheus, Grafana, Loki)

Implemented comprehensive monitoring and logging for containerized applications using Prometheus for metrics, Grafana for visualization, and Loki for centralized log aggregation โ€” enabling real-time performance tuning and restricted developer server access.

  • Real-time performance monitoring across clusters
  • Centralized log aggregation with Loki + Grafana
  • Managed GCP and AWS environments for external clients
PrometheusGrafanaLokiKubernetesGCPAWS
IaC@ SPS Inc

Azure Infrastructure as Code

Engineered cloud infrastructure on Microsoft Azure using IaC principles โ€” including VM deployment, VPN gateway setup, and App Service configuration โ€” alongside IBM Cloud container deployments using IBM Kubernetes Service (IKS).

  • Automated Azure VM, VPN, and App Service provisioning
  • Deployed containerized apps on IBM Cloud IKS
  • Jenkins + Docker + K8s CI/CD pipeline architecture
TerraformAzureAzure VMIBM CloudIKSkubectl

๐Ÿ’ก GitHub links will be added as repositories are made public. All projects are based on real professional work.

Background

Education

๐ŸŽ“

Bachelor of Science in Information Technology

AIR University, Islamabad

BS IT

Studying Information Technology with a focus on cloud computing, network administration, operating systems, and software development fundamentals. Active participant in technical projects bridging academic learning with real-world DevSecOps practice.

Cloud ComputingNetworkingOperating SystemsCybersecuritySoftware EngineeringDatabase Systems
Credentials

Certifications

Industry certifications earned through verified programs. Names, issuers, and dates are accurate to my CV.

Microsoft Azure

Deploy and Monitor Applications on Azure Kubernetes Service

Microsoft Azure

Deploy Containers by Using Azure Kubernetes Service (AKS)

Microsoft Azure

Secure AI Solutions in the Cloud

Cybersecurity

Cybersecurity Analyst Job Simulation

Cloud โ€” AWS

Solutions Architecture

Programming

Python-based Data Visualization

Programming

Python, NumPy & Pandas for Data Science

๐Ÿ”– Credential verification links are not shown as certificate IDs have not been provided. All certifications are real and self-reported from the CV.

Get in Touch

Let's Work Together

Have a project in mind or want to discuss opportunities? I'd love to hear from you.

Contact Details

Business Emailceo@artechops.com
LocationIslamabad, Pakistan

Open to Opportunities

Available for DevSecOps roles, cloud security consulting, and infrastructure projects.

Send a Message

๐Ÿ’ก This form opens your mail client. No data is sent to a server.