--- title: "Mohammad Khaled Abu Mattar · Résumé" author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/resume --- Résumé [Download PDF](/assets/pdf/mohammad_abu_mattar_cv.pdf) # Mohammad Khaled Abu Mattar DevOps Engineer · Solutions Architect [info@mkabumattar.com](mailto:info@mkabumattar.com)·[+962 790 650 332](tel:+962790650332)·Amman, Jordan [mkabumattar.com](https://mkabumattar.com)·[linkedin.com/in/mkabumattar](https://linkedin.com/in/mkabumattar)·[github.com/mkabumattar](https://github.com/mkabumattar) ## Professional Summary DevOps Engineer and AWS-Certified Solutions Architect with 6+ years building automated, reliable platforms across large, regulated cloud estates. I run multi-cloud infrastructure across AWS, Huawei Cloud, and Hetzner: 15+ AWS accounts and 20+ microservices serving 1M+ users, held to 99.999% uptime, a 96% security posture, and PCI-DSS/SOC2 compliance. My day-to-day is Infrastructure as Code (Terraform), Kubernetes, and GitOps, with a track record of cutting infrastructure cost by 20% and deployment time by 60% without trading away reliability. ## Experience Cloud & DevOps Manager · Jeddah, KSA · Amman, Jordan Motory · Full-time · Mar 2026 to Present - **Platform & Multi-Cloud Leadership:** Own cloud strategy and platform engineering across AWS, Huawei Cloud, and Hetzner for an automotive marketplace serving 1M+ users; lead the DevOps team while staying ~70% hands-on with architecture and code. - **Infrastructure as Code & GitOps:** Moved infrastructure to 100% Terraform with GitOps via ArgoCD and Helm, making every deployment consistent and auditable. - **Modernization:** Led the monolith-to-microservices shift for 1M+ users, authoring a multi-runtime Helm chart that standardized scaling, probes, and networking across all services. - **Custom Tooling & CI/CD:** Built a Go Kubernetes operator for bespoke provisioning integrated into Helm/ArgoCD delivery; Jenkins + ArgoCD pipelines with a private OCI registry and Kong gateway improved deployment speed by 60%. - **Reliability, Cost & Security:** Achieved 99.999% uptime with automated cross-region DR (Ansible, Huawei SDK) and a Prometheus/Grafana/Loki stack; cut infrastructure cost 20% while meeting PCI-DSS and SOC2 (Keycloak, WAF/VPN, KMS). - **Team Leadership:** Lead the DevOps team and platform roadmap, run internal Kubernetes and Docker training for product teams, and own vendor relationships and overall cloud strategy. Assistant Manager DevOps Engineer · Amman, Jordan Jordan Ahli Bank · Full-time · Oct 2024 to Feb 2026 - **Platform Governance:** Platform Owner for the bank's cloud ecosystem: 15+ AWS accounts and 20+ production microservices, focused on high availability, disaster recovery, and fintech workload optimization in a regulated environment. - **Infrastructure as Code & GitOps:** Standardized deployments with Terraform and GitOps (ArgoCD via Atlantis) for consistent, repeatable releases; managed autoscaling and resource optimization for production workloads. - **Security & Compliance:** Reached a 96% security posture across all accounts via IAM Identity Center, AWS Organizations, and PCI-DSS controls (CloudTrail, AWS Config, Security Hub). - **Automated CI/CD:** Orchestrated end-to-end delivery pipelines with AWS CodePipeline and GitHub Actions, automating testing and security scanning from development through production. - **Release Engineering:** Led weekly zero-downtime releases and hotfix strategies with rollback and go/no-go decision frameworks across dev, QA, and production. - **Production Support & Monitoring:** Supported production microservices through centralized monitoring (Prometheus, Grafana, CloudWatch), incident response workflows, and long-term platform roadmap planning. DevOps Engineer · Amman, Jordan cirrusgo (AWS Partner) · Full-time · Mar 2023 to Sep 2024 - **Solution Architecture:** Architected AWS hybrid and on-premises solutions for 8+ enterprise clients including fintech; designed microservices, event-driven, and serverless architectures and cut cloud costs 25% to 40% through right-sizing and reserved instances. - **IaC Foundation & Standards:** Built foundational Terraform/Terragrunt patterns and multi-account AWS Organizations setups, plus reusable modules and Python/JavaScript libraries for infrastructure automation and DevOps documentation standards. - **Container Platforms:** Managed containerized workloads across ECS, Fargate, and EKS spanning dev, UAT, and prod, deploying with GitOps practices and hardened container images. - **CI/CD & Compliance:** Implemented secure pipelines (GitHub Actions, CodePipeline/CodeBuild) with canary deployments, automated testing, and security scanning across multi-region and on-premises environments. Software Engineer, Microservices · Remote Nagarro · Contract · Feb 2022 to May 2022 - **Fintech Microservices:** Built secure, scalable Spring Boot microservices with PostgreSQL for financial transaction processing across the full SDLC. - **Full-Stack Development:** Developed Angular front-end components and resolved production bugs and performance issues to improve system stability. - **Technical Documentation:** Authored detailed technical documentation to support long-term maintainability and knowledge transfer across teams. Full Stack Developer · Amman, Jordan · Remote Freelance · Jan 2020 to Feb 2023 - **Client Consultations:** Ran end-to-end client consultations to align requirements and solutions, managing timelines, deliverables, and expectations through delivery. - **Backend & Fintech:** Designed and built Spring Boot microservices with PostgreSQL for fintech clients, integrating databases for reliable data persistence. - **Responsive Web:** Built responsive React, HTML, and CSS interfaces focused on user experience and performance. ## Certifications **AWS Certified Developer, Associate**, _Amazon Web Services_ · Issued Feb 2024, expires Feb 2027 **AWS Certified Cloud Practitioner**, _Amazon Web Services_ · Issued Oct 2023, expires Feb 2027 **AWS Academy Graduate, Cloud Foundations**, _Amazon Web Services_ · Nov 2022 **Advanced Software Development**, _Code Fellows_ · Sep 2021 ## Technical Skills - **Cloud & IaC:** AWS (EC2, EKS, ECS, Fargate, S3, RDS, IAM, VPC, Organizations, IAM Identity Center, Lambda, CloudFormation, CloudWatch), Well-Architected Framework, multi-region HA/DR; Terraform, Terragrunt, Atlantis; Linux administration; working knowledge of Azure and OCI. - **Containers & Orchestration:** Docker, Kubernetes (EKS), ECS/Fargate, Helm, ArgoCD (GitOps), custom operators, multi-environment workload management. - **CI/CD & Automation:** GitHub Actions, AWS CodePipeline/CodeBuild, Jenkins, GitLab CI; blue-green and canary deployments, automated testing, and multi-environment promotion. - **Security & DevSecOps:** PCI-DSS, SOC2, CIS Benchmark, NIST; Trivy, Vault, Secrets Manager, KMS, IAM least privilege, CloudTrail, AWS Config, Security Hub. - **Observability:** Prometheus, Grafana, Loki, CloudWatch, ELK Stack; dashboards, centralized logging, alerting, and incident response. - **Languages & Data:** Python, Bash, PowerShell, JavaScript/TypeScript, Java, Go; Spring Boot, Node.js, React; PostgreSQL, MySQL, MongoDB, DynamoDB, S3. - **Release Engineering:** Release calendars, go/no-go decisions, hotfix management, rollback strategies, versioning, and cross-team coordination. ## Education Bachelor of Software Engineering · Amman, Jordan Isra University · Oct 2014 to June 2018 **Achievements:** First place in the individual project at the annual Technology Day contest; contributed to founding and growing the Faculty of Information Technology Club. ## Open Source Projects - **QuenchWorks: 0-CVE Hardened Images & Helm Charts** ([quench-works.com](https://quench-works.com/)): A from-scratch, security-first replacement for the Bitnami catalog: container images and Helm charts built entirely from source on Wolfi, hardened under a strict 0-CVE build gate, cryptographically signed, and pinned by digest. _apko, melange, Wolfi, Helm, Kubernetes._ - **sysdesign: System Design Knowledge for AI Agents** ([sysdesign.mkabumattar.com](https://sysdesign.mkabumattar.com/)): A Claude Code plugin that wires tradeoff-first system design knowledge into an AI agent: one skill, eleven commands, and fourteen self-contained reference files, MIT-licensed and fully offline. _Claude Code, Markdown, Python, Mermaid._ - **Rawi: AI CLI Documentation Tool** ([rawi.mkabumattar.com](https://rawi.mkabumattar.com/)): AI that reads a command-line app and writes structured, multi-format documentation for it; published on npm. _TypeScript, Node.js._ - **NetCalc Pro: Cloud Engineering Suite** ([netcalc-pro.mkabumattar.com](https://netcalc-pro.mkabumattar.com/)): Zero-backend subnetting, CIDR, and VLSM toolkit with shareable state and IaC export (Terraform HCL, JSON). _Astro, TypeScript._ - **igntui: .gitignore Generator TUI** ([github.com/MKAbuMattar/igntui](https://github.com/MKAbuMattar/igntui)): A fast terminal UI that builds .gitignore files from 571+ gitignore.io templates, with fuzzy search and live preview. _Python._