Hi, I'm Mohammad Abu Mattar

AWS-certified DevOps engineer. I build and run multi-account AWS platforms for fintech, under PCI-DSS.

See My ResumeExplore Content
8+Years experience
7Roles
11Projects shipped
45Certs & badges
banner
About Me

About Me

I look after 15+ AWS accounts and 20+ production microservices for fintech, under PCI-DSS. Day to day that means Terraform, GitOps with ArgoCD, and the compliance work most people would rather skip: IAM boundaries, evidence that survives an audit, controls that hold when someone is in a hurry. Production security posture currently sits at 96%.

Work Experience

Cloud & DevOps Manager

Motory · Full-timeMar 2026 - PresentAl Hamra, Jeddah · Amman, Jordan

I run the cloud strategy and platform engineering for Motory, a large automotive marketplace. I manage a multi-cloud environment across AWS, Huawei Cloud, and Hetzner, staying about 70% hands-on with the architecture and code. I lead a DevOps team responsible for the reliability, scalability, and security of our production microservices serving 1M+ active users. I also drive our CI/CD practices, cost optimization efforts, and compliance initiatives in a high-availability, multi-region setup.

Contributions & Responsibilities

  • Infrastructure as Code: Moved everything from manual console clicks to 100% Terraform. I set up GitOps using ArgoCD and Helm to keep our deployments consistent and auditable.
  • Modernization: Led the shift from a monolith to microservices for 1M+ users. I wrote a multi-runtime Helm chart that standardized how we handle scaling, probes, and networking across all services.
  • Custom Tooling: Built a custom Kubernetes operator in Go to solve a specific provisioning problem that standard controllers couldn't handle. It plugs into the existing Helm and ArgoCD delivery flow, so the resources it manages deploy the same way everything else does.
  • CI/CD & Delivery: Built pipelines using Jenkins and ArgoCD that improved deployment speed by 60%. This includes a private OCI registry and a Kong API gateway. I also implemented multi-arch builds and automated chart publishing to streamline our release process.
  • Reliability & SRE: We hit 99.999% uptime. I automated cross-region disaster recovery between the Middle East and China using Ansible and the Huawei SDK, and I run our observability stack (Prometheus/Grafana/Loki). On-call runbooks and regular DR drills are part of our routine.
  • Cost & Security: Cut infra costs by 20% while tightening security to meet PCI-DSS and SOC2 standards. This involved identity-as-code via Keycloak and hardening our WAF and VPN. We also use KMS/CSMS for secrets management to ensure our sensitive data is protected.
  • Team Leadership: I lead the DevOps team, focusing on the platform roadmap and internal training for our developers on K8s and Docker. I also handle vendor relationships and ensure our cloud strategy aligns with our business goals.

Assistant Manager DevOps Engineer

Jordan Ahli Bank · Full-timeOct 2024 - Feb 2026Amman, Jordan

Serving as Platform Owner for the bank's cloud ecosystem, managing 15+ AWS accounts and 20+ production microservices with a focus on high availability, disaster recovery, and fintech workload optimization in a regulated financial environment. Leading security and compliance efforts with 96% security posture achievement while orchestrating GitOps practices and Infrastructure as Code implementations.

Contributions & Responsibilities

  • Platform Governance & Reliability: Managing 15+ AWS accounts and 20+ production microservices focusing on high availability, disaster recovery, and fintech workload optimization in regulated environments.
  • Infrastructure as Code & GitOps: Standardized cloud deployments using Terraform, implementing GitOps practices with ArgoCD via Atlantis for consistent, repeatable releases. Managed autoscaling and resource optimization for production workloads.
  • Security & Compliance Leadership: Achieved 96% security posture across all AWS accounts implementing IAM Identity Center, AWS Organizations, and strict PCI-DSS compliance controls with CloudTrail, AWS Config, and Security Hub.
  • Automated CI/CD: Orchestrated end-to-end delivery pipelines using AWS CodePipeline and GitHub Actions, streamlining banking workloads from development to production with automated testing and security scanning.
  • Release Engineering: Leading weekly releases and hotfix strategies, ensuring zero-downtime deployments through robust rollback and go/no-go decision frameworks across dev, QA, and production.
  • Production Support & Monitoring: Supporting production microservices through centralized monitoring (Prometheus, Grafana, CloudWatch), incident response workflows, and long-term platform roadmap planning.

DevOps Engineer

cirrusgo (AWS Partner) · Full-timeMar 2023 - Sep 2024Amman, Jordan

cirrusgo is an AWS partner delivering cloud solutions to businesses in the MENA region.

Architected and delivered AWS hybrid and on-premises solutions for 8+ enterprise clients including fintech organizations. Designed end-to-end solution architectures balancing cloud-native AWS services with on-premises infrastructure, achieving 25-40% cost optimization while meeting regulatory requirements.

Contributions & Responsibilities

  • Solution Architecture: Architected AWS hybrid and on-premises solutions for 8+ enterprise clients including fintech organizations. Designed end-to-end architectures (microservices, event-driven, serverless) and optimized cloud costs by 25-40% through right-sizing, reserved instances, and architecture refinements.
  • IaC Foundation & DevOps Standards: Built foundational Infrastructure as Code using Terraform/Terragrunt patterns and established comprehensive DevOps documentation standards. Implemented multi-account, multi-environment infrastructures using AWS Organizations.
  • Container Platforms & Deployment: Managed containerized workloads across AWS container services (ECS, Fargate, EKS) spanning 3 environments (dev, UAT, prod). Deployed production applications using GitOps practices and hardened container images.
  • CI/CD & Automation: Implemented secure CI/CD pipelines using GitHub Actions, AWS CodePipeline/CodeBuild with canary deployments, automated testing, manual approvals, and environment promotion (dev → UAT → prod).
  • Security & Compliance: Ensured security, access control, and compliance across multi-region cloud deployments (Middle East, US East, Europe) and on-premises environments with automated security scanning and monitoring.
View Full Career

Education & Certifications

AWS Certified Developer – Associate

Amazon Web Services (AWS)Issued Feb 2024 · Expires Feb 2027

Validated expertise in developing and maintaining AWS-based applications, including proficiency in core AWS services, application lifecycle management, and deployment best practices.

AWS Certified Cloud Practitioner

Amazon Web Services (AWS)Issued Oct 2023 · Expires Feb 2027

Demonstrated foundational knowledge of AWS Cloud concepts, services, pricing, security, and architecture ideal for technical and non-technical roles.

AWS Academy Graduate - AWS Academy Cloud Foundations

Amazon Web Services (AWS)Issued Nov 2022

Completed a comprehensive introduction to AWS Cloud, covering compute, networking, databases, and storage, aligned with industry-recognized certifications.

View All Credentials

Projects & Tools

Beyond enterprise cloud architecture and DevOps consulting, I build open-source tools that solve real developer problems. These projects showcase my expertise in automation, developer experience, and creating production-ready solutions with modern technologies.

QuenchWorks, 0-CVE Hardened Images & Helm Charts

A from-scratch, security-first replacement for the Bitnami catalog: container images and Helm charts built entirely from source on Wolfi, hardened under a strict 0-CVE build gate, cryptographically signed, and pinned by digest. Free, independent, and fully self-hostable.

apkomelangeWolfiHelm+6
View Project

sysdesign, System Design Knowledge for AI Agents

A Claude Code plugin that wires tradeoff-first system design knowledge into your AI agent: one skill, eleven commands, and fourteen self-contained reference files. Explain a concept, compare options, pressure-test an architecture, estimate capacity, or prep an interview, with every tradeoff stated, not hand-waved. Original prose, MIT-licensed, works fully offline.

Claude CodeMarkdownPythonMermaid
View Project

Mathematics - Formula Reference

A clean, searchable web reference for mathematical formulas across algebra, geometry, trigonometry, and calculus. It cuts the clutter most references bury you in, rendering formulas with server-side KaTeX on focused topic pages with no accounts, tracking, or ads.

AstroJSTypeScriptTailwind CSSReact+2
View Project
View All Projects

What I actually work with

These are the tools I reach for most weeks, not a list of everything I have opened once. Heaviest on AWS, Terraform and Kubernetes, because that is what running a regulated platform asks for.

Cloud & Infrastructure

AWS is the daily driver: EC2, EKS, ECS and Fargate, S3, RDS, IAM, VPC, Organizations, IAM Identity Center, Lambda, CloudFormation, CloudWatch. I use Well-Architected mostly for its security and cost pillars. Azure and OCI I can find my way around, and not much more than that.

Containers & Orchestration

ECS, Fargate and EKS in production, Docker everywhere, ArgoCD for GitOps. Most of the real work here is unglamorous: right-sizing requests and limits, keeping images small, and getting the same manifests to behave in dev, UAT and prod.

CI/CD & Automation

GitHub Actions, AWS CodePipeline and CodeBuild, Jenkins, GitLab CI. I wire up blue-green and canary rollouts, put tests and scanning in front of every promotion from dev to UAT to prod, and write the glue in whichever of Python, Bash, PowerShell or TypeScript the team already reads.

Security & DevSecOps

I map infrastructure to PCI-DSS, CIS Benchmark and NIST, then automate the evidence so nobody is screenshotting consoles the week before an audit. Trivy in the pipeline, Vault and Secrets Manager for secrets, least-privilege IAM, CloudTrail, AWS Config and Security Hub. Production sits at 96% posture.

Monitoring & Observability

Prometheus, Grafana, CloudWatch and the ELK stack. Dashboards people actually open, logs centralised enough to be searchable mid-incident, and alerts tuned so a page means something is wrong.

Databases & Development

PostgreSQL, MySQL, MongoDB, DynamoDB and S3 sitting behind the microservices, mostly access patterns and tuning. On the application side I have shipped Spring Boot, Node.js and React in fintech.

272 things I wrote down so I would stop re-learning them

Notes from running AWS platforms in regulated fintech. Mostly the commands I kept forgetting and the concepts I kept having to work out again from scratch. Some of it is here because a colleague asked and I did not have a good answer ready.

Browse everything, grouped by type

What I Offer

End-to-end DevOps & cloud engineering solutions for modern teams

01Cloud & DevOps Consulting

Cloud & DevOps Consulting

I set up and run multi-account AWS for fintech and other regulated shops. Usually that starts with Organizations and IAM Identity Center, then hybrid connectivity, then the bill. Cost work has come out between 25% and 40% without loosening any controls.

  • Multi-account AWS governance with Organizations & IAM Identity Center
  • Infrastructure as Code with Terraform & CloudFormation
  • PCI-DSS compliance and security automation (96% posture achievement)
  • Kubernetes and Docker orchestration for production workloads
  • Cloud cost optimization and architecture refinements
Let's talk
02Custom CI/CD Pipelines

Custom CI/CD Pipelines

I build release pipelines for places where a bad deploy is an audit finding and not just an outage. Tests and image scanning run in the pipeline, releases go out blue-green or canary, and the rollback is something a tired on-call engineer can actually run.

  • GitOps practices with ArgoCD and automated deployment tools
  • Smart deployment strategies (blue-green, canary) with rollback capabilities
  • Integration with AWS CodePipeline, GitHub Actions & Jenkins
  • Automated security scanning and compliance checks
  • Multi-environment promotion workflows (dev → UAT → prod)
Let's talk
03Infrastructure as Code (IaC)

Infrastructure as Code (IaC)

I write the Terraform and Terragrunt layer other people build on: reusable modules, a documented layout for accounts and environments, and the small automation libraries that stop five teams solving the same problem five different ways.

  • Terraform & Terragrunt automation with Atlantis for GitOps
  • Multi-account AWS Organizations architecture
  • Reusable modules and Python/JavaScript automation libraries
  • Automated provisioning with autoscaling configurations
  • Security and compliance automation (PCI-DSS, CIS Benchmark)
Let's talk
cta-image

Ready to Scale Your Cloud Infrastructure with Expert DevOps Solutions?

Partner with an AWS-Certified Senior DevOps Engineer who has successfully managed 15+ AWS accounts and 20+ production microservices in regulated fintech environments. I specialize in multi-account governance, Infrastructure as Code, PCI-DSS compliance, and achieving 96% security posture. Whether you need secure CI/CD pipelines, cloud cost optimization (25-40% savings), or zero-downtime deployment strategies, I deliver enterprise-grade solutions that ensure reliability, security, and operational excellence.

Let's Work Together