Khadirullah Mohammad

Professional Summary

Infrastructure engineer with 4+ years of hands-on Linux administration, networking, and systems experience, now working in DevOps. Builds CI/CD pipelines with Jenkins and GitHub Actions, provisions AWS infrastructure with modular Terraform, and runs Kubernetes workloads on self-managed kubeadm clusters. Spent 4 years 5 months as the sole IT engineer at a small company, owning every workstation, network device, and camera on site. Used to being the only person responsible for the infrastructure.

Experience

DevOps & Cloud Engineer Dec 2023 – Present

Independent DevOps Practice (Self-Directed) · Remote

Built uptime-checker, a six-service website monitor in Python and Go, and the GitHub Actions DevSecOps pipeline around it. Tests, hadolint, a Trivy gate on fixable HIGH and CRITICAL findings, GHCR push by commit sha, and pull-request deploys into a Kustomize overlay that ArgoCD syncs in waves with the migration job as a hook. Sealed Secrets, default-deny NetworkPolicies and an HPA in the cluster.
Built a 3-node kubeadm Kubernetes cluster on QEMU/KVM provisioned entirely by Terraform with the libvirt provider. Cloud-init installs containerd and kubeadm, Calico runs as CNI via the Tigera operator, and workers fetch the join token over HTTP, so the build needs no SSH. One terraform apply, roughly 7 minutes to a ready cluster.
Built end-to-end CI/CD pipelines using Jenkins and GitHub Actions — GitHub webhook trigger, SonarQube static analysis, Docker multi-stage builds, Trivy image scanning, registry push, and deployment to Kubernetes behind an AWS ELB.
Provisioned AWS infrastructure (VPC with public and private subnets, EC2, Security Groups, ELB, S3, IAM, Route 53) using modular Terraform with variable files and outputs.
Configured Kubernetes workloads — Deployments, ReplicaSets, Services, NGINX Ingress, ingress and egress NetworkPolicies, certificate-based users with verb-level RBAC, and SecurityContext capability control.
Built an AI-powered DevOps Incident Investigator that correlates GitHub PRs, Sentry errors, and Slack messages using cross-source SQL JOINs via Coral, with Gemini for automated root-cause analysis. Selected as a Top 50 showcase project at the Coral x WeMakeDevs hackathon.
Built and published DiagView, an open-source npm package (v1.2.0, 1228 unit and 1008 browser tests), with a fully automated CI/CD pipeline: lint → test → build → publish to npm → deploy docs to GitHub Pages.

Engineer (Programmer, Network & System Admin) Jul 2019 – Nov 2023

Bizrak Web Solutions · India · 4 yrs 5 mos

Sole IT engineer for the organization, owning every employee workstation, network device, and surveillance camera from procurement through daily support.
Planned and carried out a full workstation OS migration from Windows to Linux across all company endpoints.
Wrote Bash and AutoHotkey scripts for automations, software deployment, patching, and recurring maintenance, replacing a multi-hour manual build with a scripted one.
Replaced stock TP-Link router firmware with OpenWRT for better control and throughput, and planned WiFi channel allocation using spectrum analysis.
Assigned and documented static IP addressing for all endpoints, configured firewall filtering rules, and segmented the local network.
Assembled and maintained desktop hardware, and deployed and configured the CCTV surveillance system.

Technical Skills

Cloud & IaC AWS (EC2, VPC, Subnets, Security Groups, ELB, EKS, S3, IAM, Route 53, CloudWatch), Terraform (modular IaC, variables, outputs, state), Ansible Containers & Orchestration Docker (Dockerfiles, multi-stage builds, Compose), Kubernetes (Deployments, ReplicaSets, Services, RBAC, Ingress, NetworkPolicies, SecurityContexts, ConfigMaps, Secrets, HPA), ArgoCD (GitOps, sync waves), Kustomize, Sealed Secrets, kubeadm, kops CI/CD & Build Jenkins (declarative pipelines), GitHub Actions, SonarQube, Trivy, hadolint, Maven, Gradle, npm, Docker Hub / GHCR / Quay / Nexus, Git Scripting & Automation Bash, Python (API integration, Flask), AutoHotkey, SQL, YAML, cron and systemd timers Monitoring & Incident Tooling Sentry (error tracking), Slack (incident alerting), Coral SQL (cross-source queries), CloudWatch Systems & Networking Linux Administration (Fedora, Debian/Ubuntu), systemd, QEMU/KVM and libvirt, DNS, TCP/IP, OpenWRT, iptables, SSL/TLS Security SPF/DKIM/DMARC, IAM Policies, Fernet Encryption, Cloudflare, Token Management

Projects

Uptime Checker, DevSecOps Pipeline with a Real Application · GitHub · Blog

Six-service website monitor (FastAPI api, Go worker, nginx board, migration job, Postgres, Redis) built so a DevSecOps pipeline has something real to build, scan and deploy. A path-filtered GitHub Actions pipeline runs tests and hadolint, gates every image on Trivy for fixable HIGH and CRITICAL findings, pushes to GHCR by commit sha, and deploys through pull requests into a Kustomize overlay. ArgoCD syncs it in waves, with Sealed Secrets, default-deny NetworkPolicies and an HPA in the cluster.

Python · Go · FastAPI · Docker · GitHub Actions · Trivy · GHCR · Kustomize · ArgoCD · Sealed Secrets · Kubernetes

DevOps Incident Investigator · GitHub

Full-stack incident correlation tool that JOINs GitHub PRs, Sentry errors, and Slack messages using cross-source SQL via Coral. Features a web dashboard with real-time incident timeline, AI-powered root-cause analysis (Gemini 2.0 Flash), one-click Slack alerting, natural-language-to-SQL queries, encrypted token storage (Fernet AES), and a custom Coral source spec for internal API monitoring. Dual interface: CLI (Python stdlib only) + Flask web dashboard. Dockerized with auto-configuring entrypoint.

Python · Flask · Coral SQL · Gemini AI · Docker · GitHub Actions · Slack API · Sentry API

Local K8s Terraform — Automated Kubernetes Lab · GitHub

Fully automated local Kubernetes cluster provisioning using Terraform and Libvirt/QEMU/KVM. Deploys a multi-node cluster (1 control plane + N workers) with Calico CNI via the Tigera operator, cloud-init configuration, and automated kubeadm setup. Workers fetch the join token over HTTP, so the build needs no SSH. Supports Ubuntu and Fedora. One-command deploy and teardown, roughly 7 minutes to a ready cluster.

Terraform · Libvirt · QEMU/KVM · Kubernetes · Calico · Cloud-Init · Bash

DiagView — Open Source npm Package · GitHub · Live Demo

Lightweight interactive SVG/Mermaid diagram viewer with zoom, pan, search, minimap, and export. Published to npm (v1.2.0) with a fully automated GitHub Actions CI/CD pipeline — linting, 1228 unit and 1008 browser tests, semantic versioning, and automated npm publishing on tagged releases.

JavaScript · GitHub Actions · npm · Jest · Rollup · CI/CD

Education

B.Tech in Computer Science Engineering 2022

Andhra University

Additional

Hackathon: Top 50 Showcase — Pirates of the Coral-Bean (WeMakeDevs, May 2026) — Solo developer
Blog: khadirullah.com — Technical articles on DevOps, CI/CD, Kubernetes, Git security, and Linux troubleshooting
Open Source: Maintainer of DiagView — npm package with automated CI/CD, 1228 unit and 1008 browser tests, GitHub Pages docs
Lab Environment: QEMU/KVM + virt-manager for local DevOps labs on Fedora & Debian
Certifications: Kestra Fundamentals (Jun 2026)