Back to the doors
Local time—•
← Back to the doors

DevOps Engineer

Azure Kubernetes Service (AKS), Terraform IaC, 3TB+ Azure Blob Pipelines & Ansible Fleets

Architecting mission-critical cloud infrastructure for Bangladesh's top retail & FMCG distribution platforms and multi-tenant e-commerce clouds. Specializing in Azure Kubernetes Service (AKS) across Production/Staging/DR clusters, Terraform IaC, zero-disk-bloat 3TB+ PostgreSQL to Azure Blob streaming backups, GitHub Actions + AI DevSecOps gates, and Ansible orchestration across 34+ live Docker Compose sites.

01 / 08Azure AKS · Enterprise Retail Cloud

Azure Kubernetes Service (AKS) & Multi-Region DR Cluster

10+ retail distribution microservices across Production, Staging & DR · Azure Southeast Asia

Architected and operated production Azure Kubernetes Service (AKS) clusters powering nationwide retail & FMCG distribution operations (PRISM v3, PRISM 360, Iris, Lumen, HRMS, Authenticator, DataCrafter, OneView). Configured 5+ high-availability replicas with topologySpreadConstraints, 3 isolated Azure Container Registries (ACR), NGINX Ingress with cert-manager TLS, Azure Cache for Redis, and Key Vault secret injection.

  • Azure AKS (K8s)
  • 3x Azure ACR
  • NGINX Ingress & TLS
  • Azure Cache for Redis
  • Multi-Region DR
Azure Kubernetes Service (AKS) & Multi-Region DR Cluster preview

Production AKS cluster manifests, 10+ microservice deployments & DR namespace topology

02 / 08Azure Blob Storage · Zero-Disk Pipeline

3TB+ PostgreSQL to Azure Blob Streaming Backup Engine

Zero-disk-bloat psql COPY → zstd -9 → AzCopy PipeBlob across 875M+ rows · Azure Cool/Hot Tiers

Engineered a high-throughput streaming backup and restore engine for a ~3TB enterprise retail PostgreSQL database (875M+ rows across 49 live tables plus 2022–2025 partitioned archives). Streams native psql COPY through multi-core zstd -9 compression (90.6% reduction) directly into Azure Blob Storage via AzCopy PipeBlob using 0 bytes of local SSD, with Read-Replica WAL pause/resume and 10x faster Pre/Post DDL split restores.

  • Azure Blob Storage
  • AzCopy PipeBlob
  • PostgreSQL (~3TB)
  • zstd -9 Compression
  • Zero Local Disk
3TB+ PostgreSQL to Azure Blob Streaming Backup Engine preview

Streaming UNIX pipe architecture, 875M+ row partition manifests & 10x faster split-DDL restore

03 / 08Terraform IaC · Azure Southeast Asia

Terraform IaC & Full Azure Cloud Ecosystem

Declarative provisioning for AKS, ACR, PostgreSQL Read Replicas, Key Vault & VNet

Modular Terraform Infrastructure-as-Code provisioning the complete Azure Southeast Asia topology: isolated Virtual Networks (VNets), autoscaling AKS node pools, Azure Database for PostgreSQL Flexible Server with Read-Replica query routing (Spectra DB_ROUTE_KEY), Azure Cache for Redis, Key Vault secrets, and Blob Storage Hot/Cool tier lifecycle policies with immutable remote state locking.

  • Terraform IaC
  • Azure Cloud
  • PostgreSQL Read Replicas
  • Azure Key Vault
  • VNet & Subnets
Terraform IaC & Full Azure Cloud Ecosystem preview

Terraform declarative state execution, Azure resource topology & zero configuration drift

04 / 08GitOps CI/CD · AI DevSecOps Gate

GitHub Actions AKS Pipelines & "The Code Police 🚨" AI Gate

Automated ACR builds, zero-downtime kubectl rollouts & Claude AI PR code review workflows

End-to-end GitHub Actions CI/CD pipelines authenticating via Azure Service Principal (azure/login@v1 & aks-set-context@v3) to build multi-environment Docker images (Production, Staging, DR, National, Regional), push to ACR, and orchestrate zero-downtime kubectl rollouts with automated pod failure diagnostics—guarded by an automated Claude AI Pull Request reviewer ("The Code Police") with critical bug blocking and cost telemetry.

  • GitHub Actions
  • Azure AKS CI/CD
  • Claude AI PR Gate
  • Multi-Env Dockerfiles
  • Zero-Downtime Rollout
GitHub Actions AKS Pipelines & "The Code Police 🚨" AI Gate preview

Production/Stage/DR deployment workflows & automated AI pull request review gate

05 / 08Ansible IaC · 34+ Production Sites

Ansible Multi-Server & 34-Site Docker Fleet Automation

Centralized Ansible playbooks, 75+ NGINX reverse-proxy configs & automated SSL · ansible-nahid

Idempotent Ansible automation framework managing 34+ live production e-commerce and SaaS platforms (Zecommerz, Zephix, Cloudy BD, RS Leather BD, Mokkah Fabrics, Mosjid Khata, GoToTrendy) across multi-node Linux servers. Features Python pre-flight registry validation (validate_registry.py), automated Docker Compose orchestration, 75+ NGINX configs with instant nginx -t failure rollback, and non-interactive Certbot SSL renewal.

  • Ansible Playbooks
  • 34+ Live Docker Sites
  • 75+ NGINX Confs
  • Auto-Rollback Guard
  • Certbot SSL
Visit live infrastructure
Ansible Multi-Server & 34-Site Docker Fleet Automation preview

Ansible multi-server architecture, 34-site registry validation & automated SSL provisioning

06 / 08DevSecOps · VAPT & Edge Hardening

Enterprise VAPT Remediation & Hardened NGINX Edge Layer

Vulnerability assessment remediation, Key Vault secret isolation & rate-limited reverse proxies

Comprehensive DevSecOps hardening across enterprise retail backends and web portals following Vulnerability Assessment and Penetration Testing (VAPT). Implemented strict secret isolation via Azure Key Vault and Kubernetes secretRefs, non-root multi-stage Alpine container builds, Trivy vulnerability scanning, HTTP/2 TLS 1.3 cipher enforcement, and NGINX upstream DDoS rate limiting.

  • VAPT Remediation
  • DevSecOps
  • Azure Key Vault
  • Hardened NGINX TLS 1.3
  • Container Security
Enterprise VAPT Remediation & Hardened NGINX Edge Layer preview

VAPT security audit remediation matrix, container hardening & NGINX edge protection

07 / 08Observability · Dozzle, Netdata & DNS

Real-Time Container Observability & Telemetry Stack

Live WebSocket container log streaming (Dozzle), Netdata host telemetry & Pi-hole v6 DNS monitor

Full-stack infrastructure observability combining Dozzle (logs.zephix.io) with unbuffered WebSocket/SSE reverse-proxy streaming for real-time container log tailing, Netdata (monitor.zephix.io) for per-second CPU/RAM/disk I/O anomaly detection, and a Dockerized Pi-hole v6 + Node.js Collector + MongoDB TTL + Next.js network DNS telemetry dashboard.

  • Dozzle Log Streaming
  • Netdata Telemetry
  • WebSocket NGINX Proxy
  • Docker Compose
  • Network Monitoring
Real-Time Container Observability & Telemetry Stack preview

Real-time container log streaming, Netdata node metrics & Dockerized DNS telemetry stack

08 / 08Open Source CI/CD · E-Commerce Cloud

DeployOps Toolkit & Multi-Tenant E-Commerce Cloud

Open-source containerized deployment toolkit & high-traffic retail cloud · github.com/iazadur/DeployOps

Open-source containerized deployment toolkit (DeployOps) and production cloud architecture powering high-concurrency flash sales for Cloudy BD, RS Leather BD, and Zecommerz. Combines multi-stage Next.js standalone Docker builds (78% image size reduction), AWS S3/CloudFront & Azure Blob asset pipelines, PostgreSQL + MongoDB clusters, and blue-green zero-downtime NGINX switchover.

  • DeployOps Open Source
  • Docker Multi-Stage (-78%)
  • Blue-Green Rollouts
  • AWS S3 & CloudFront
  • PostgreSQL & MongoDB
Visit live infrastructure
DeployOps Toolkit & Multi-Tenant E-Commerce Cloud preview

Live GitHub repository & multi-container production e-commerce cloud topology