Los Angeles, CA · Open to relocation

Infrastructure that stays reliable when the system gets complicated.

I’m Huzaifa, a cloud and platform engineer with 6+ years of production AWS experience. I build repeatable infrastructure, reduce operational toil, and bring the same rigor to secure AI systems.

View resume LinkedIn GitHub
~40%less manual provisioning effort
~30%lower AWS spend contributed to
IEEEfirst-author SVCC 2026 publication
3.99UW graduate GPA

01 / About

Platform depth.
Security mindset.

I work where infrastructure, developer experience, and operational reliability meet.

My career started in enterprise AWS automation and grew into production platform ownership: reusable Terraform, self-service delivery workflows, EKS and ECS operations, observability, disaster recovery, and cost controls.

At the University of Washington, I extended that foundation into secure AI infrastructure, designing and evaluating a governed, self-hosted GenAI platform and publishing the work at IEEE SVCC 2026.

DevOpsCloud InfrastructureSite ReliabilityPlatform EngineeringDevSecOpsML / AI Infrastructure

02 / Experience

Systems built for real workloads.

Production infrastructure, automation, and research - with employment relationships stated exactly.

Mar 2022 - May 2025 Remote / Pakistan

Harri Contract through Kalam4Solutions

DevOps Engineer

  • Built reusable Terraform modules across API Gateway, CloudFront, Route53, OpenSearch, Redshift, and related AWS infrastructure, reducing manual provisioning effort by approximately 40%.
  • Supported production EKS and ECS services across RDS/Aurora, Redis, OpenSearch, S3, IAM/RBAC/SSO, VPC, CloudWatch, and Datadog.
  • Advanced reliability through OpenSearch cross-cluster replication, Redis v7 upgrades, RDS/Aurora operations, and multi-region disaster-recovery runbooks.
  • Contributed to approximately 30% lower AWS spend through rightsizing, Compute Optimizer and Trusted Advisor analysis, and reservation planning.

Recognition: Top Performer, 2023 and 2024

Jul 2019 - Mar 2022 Pakistan

Systems Limited Assigned to Visionet Systems Inc.

Cloud Infrastructure / Software Engineer

  • Built Terraform and Jenkins/CloudBees self-service workflows for provisioning and tearing down AWS EMR/Spark environments with validation, approvals, S3-backed state, and notifications.
  • Automated patching, maintenance, post-deployment configuration, and domain-join tasks with AWS Systems Manager, Lambda, Python, Bash, PowerShell, and AWS CLI.
  • Migrated UpBrainery from EC2 to Docker, ECR, and ECS Fargate with ALB, Route53, Terraform, autoscaling, networking, and observability.
  • Supported enterprise AWS operations with CloudWatch, Datadog, S3, EC2, RDS, SNS, SES, WorkSpaces, and ServiceNow.

Recognition: Best Team Award, Systems Limited, 2020

Jun 2025 - Jun 2026 University of Washington

GovernAI Graduate research

Secure AI Infrastructure Research

  • Designed a self-hosted enterprise GenAI platform with Ollama, Open WebUI, Docker, Windows Server, and a quantized Qwen model.
  • Implemented three-role RBAC, model allow-listing, local data residency, firewall controls, and approved-knowledge retrieval.
  • Validated network behavior with Wireshark and mapped controls to NIST AI RMF and ISO/IEC 27001.

First-author publication at IEEE SVCC 2026

03 / Selected work

From platform foundations to governed AI.

Six projects that show the range of my engineering work without losing the operational thread.

01

AI infrastructure / Security research

GovernAI

A secure, self-hosted enterprise GenAI platform with role separation, model allow-listing, local persistence, firewall controls, and approved-knowledge retrieval. Wireshark testing confirmed no unintended outbound communication during normal operation.

OllamaOpen WebUIDockerRBACQwen
Read the IEEE publication
02

Developer platform / AWS

Self-service EMR / Spark platform

Parameterized Jenkins/CloudBees and Terraform workflows for approved, validated EMR provisioning and teardown with S3-backed state and automated notifications.

EMRSparkTerraformJenkins
03

Cloud-native migration

UpBrainery: EC2 to Fargate

A repeatable container migration using Docker, ECR, ECS Fargate, ALB, Route53, Terraform, autoscaling, networking, and observability.

ECSFargateDockerALB
04

Cybersecurity / OT

Pierce Transit asset inventory + SBOM

A University of Washington capstone focused on OT asset visibility and software bill of materials governance.

OT securitySBOMAsset inventory
05

Open source / Terraform

Terraform AWS module contributions

Public contributions to the community modules for DynamoDB and Aurora.

DynamoDB PR Aurora PR
06

Android / Cloud

LifeTrack

A Java Android application with real-time location tracking, Circles, and last-seen features. Published on Google Play and awarded first position among GIKI final-year projects.

JavaAndroidCloud

04 / Research

Making enterprise AI governable in practice.

GovernAI translates policy expectations into infrastructure controls that can be deployed, inspected, and tested.

View on IEEE Xplore
IEEE SVCC2026
“Are You Aware of Shadow AI? GovernAI for Addressing Emerging Risks”

First author · University of Washington

70survey respondents
71.4%reported public AI use at work
97.1%would use a governed internal alternative

Local evaluation averaged 2.5 seconds on the desktop deployment and 22 seconds on the laptop across the tested task set.

05 / Capabilities

The toolkit behind the work.

Cloud

AWS: EC2, S3, VPC, Lambda, CloudWatch, IAM, RDS, DynamoDB, Route53, API Gateway, EMR, EKS, ECS, ElastiCache, OpenSearch, Redshift

Infrastructure & platform

Terraform, Docker, Kubernetes / EKS, ECS / Fargate, Jenkins / CloudBees, Git, GitHub, Bitbucket, Linux, Windows Server

Programming & automation

Python, Bash / shell, PowerShell, Java, JavaScript, C++, AWS CLI, Systems Manager, Lambda

Reliability & observability

Datadog, CloudWatch, multi-region disaster recovery, incident troubleshooting, runbooks, cost optimization

Security & AI infrastructure

IAM, RBAC, SSO, Ollama, Open WebUI, local LLM deployment, model allow-listing, RAG-style retrieval, NIST AI RMF, ISO/IEC 27001

Education

2026

University of Washington

Master of Cybersecurity & Leadership · GPA 3.99

Beta Gamma Sigma · Upsilon Pi Epsilon
2019

Ghulam Ishaq Khan Institute

B.S. Computer Science · Minor in Mathematics

Certifications

  • AWS Certified Solutions Architect - Associate
  • Oracle Cloud Infrastructure Architect - Professional
  • Oracle Cloud Infrastructure Developer - Associate
  • Foundations for Cybersecurity Analytics - University of Washington

06 / Contact

Let’s build infrastructure people can depend on.

I’m open to DevOps, cloud infrastructure, SRE, platform, DevSecOps, and AI infrastructure opportunities.

huzaifaafzal10@gmail.com
LinkedIn GitHub Resume