Freelancer profile translated to English.
Back to original languageAbout Mohammed
Is your AWS bill climbing faster than your businessand no one on the team has time to deal with it?
That's exactly the problem I solve.
Cloud architect specializing in FinOps and Platform Engineering**, **I help scale-ups and large enterprises**regain control of their AWS and Kubernetes infrastructure**: reduce costs, secure, and make the platform governable — without degrading performance or slowing down teams.
Last assignment: €200,000 in annual savings**on the AWS bill**, in a few months.Zero production incidents.
MY SPECIALTY— FinOps AWS & Kubernetes
Up to -50% on your compute bill:
→ Kubernetes bin packing with Karpenter: the right node, at the right time, at the right price
→ Automatic workload rightsizing with VPA
→ Shutting down inactive resources (EC2, RDS) at night and on weekends
→ Graviton migration, S3 storage and network optimization
→ Cost governance: enforced tagging, clear cost allocation by product and by team
I CAN ALSO ASSIST YOU WITH
→ Cloud migration & adoption: moving to AWS, production-ready EKS architectures (multi-account, hub-and-spoke), and supporting your teams in DevOps practices
→ Kubernetes security & governance: Kyverno policies, secret management with Vault, Okta / Keycloak SSO, CrowdSec protection
→ Observability: Prometheus, Grafana, ELK — dashboards your teams will actually use
→ Infrastructure as Code & GitOps: Terraform, ArgoCD, GitLab / Jenkins CI/CD
WHY CHOOSE ME
FinOps referent in fintech for 3 years, reporting directly to management: I design architectures that are technically AND financially sound, and I know how to justify them in
euros — to your engineers as well as your decision-makers.
8 years of production experience.
AWS Solutions Architect Certified.
Let's talk about your infrastructure!
English
Native or bilingual
French
Native or bilingual
Arabic
Native or bilingual
Can work on-site
Nice (up to 50km)
Experience
- LinxoSenior Cloud Engineer / Solutions ArchitectTECHJuly 2023 - Today (3 years and 1 month)Aix-en-Provence, FrancePlatform / Cloud Engineerresponsible for the entire cloud infrastructure of a fintech company handling sensitive banking data.AWS Solutions Architect Certificationobtained during this role.Key result**: **-€200,000 on the AWS bill in 6 months.FinOps & Cost Optimization
- End-to-end FinOps strategy management: building Cost Explorer dashboards, leading monthly cost reviews with stakeholders, justifying every variation and saving achieved
- Migration from Cluster Autoscaler to Karpenter for intelligent node provisioning and reduced compute costs
- Deployment of AWS Instance Scheduler to shut down inactive RDS/EC2 instances at night and on weekends
- Kubernetes cost optimization via bin packing (VPA, KEDA, etc.), Gateway Endpoints, resource tagging, cleanup of unused resources, and custom FinOps dashboards
Kubernetes & Infrastructure- Maintenance and upgrade of production and staging EKS clusters with Istio, Cilium, and CoreDNS
- Implementation of deployment governance and compliance with Kyverno on EKS
- Management of the complete AWS infrastructure using Terraform in IaC mode across 20+ services
Security & Access- Maintenance of WAF, GuardDuty, and Inspector on AWS
- Secret management (Vault), SSO (Keycloak), and server/database access management (Teleport)
- Implementation of change management with client synchronization before each production deployment
Observability- Building a comprehensive monitoring stack: Prometheus, Grafana, ELK
- Incident response and infrastructure troubleshooting management
Collaboration & CI/CD- Collaboration with development, architecture, and SecOps teams on platform reliability
- Maintenance of CI/CD pipelines (Jenkins, Git, Maven) and deployments (Docker, Kubernetes, Helmfiles)
- Agile Methodology
- SantianeCloud Engineer / DevOpsBANKING AND INSURANCEDecember 2020 - June 2023 (2 years and 6 months)Nice, FranceAutomation of build and deployment pipelinesfor software products on **production and staging environments**, ensuring reliability, scalability, and velocity for development teams.Key achievements:
- Design and deployment of the complete ELK monitoring stack (Elasticsearch, Logstash, Kibana, Metricbeat, Auditbeat, Heartbeat) providing end-to-end observability across all services
- Building and maintaining CI/CD pipelines with GitLab CI and Rancher for smooth application delivery
- Implementing ArgoCD on Kubernetes for continuous deployment in GitOps mode
- Migrating security infrastructure from Fail2ban to CrowdSec for better threat detection and response
- Managing AWS infrastructure (EC2, RDS PostgreSQL, ElastiCache, EKS, S3, Route53, NLB) via Terraform in IaC mode
- Configuring Cloudflare WAF, Okta SSO, and Vault for security hardening and secret management
- Ensuring maximum autonomy and ownership for development teams by maintaining self-service production environments
Stack:AWS · Terraform · Kubernetes · EKS · Rancher · ArgoCD · Docker · GitLab CI · ELK Stack · CrowdSec · Cloudflare · Okta SSO · Vault · Apache · PHP 8 · Teleport - AmadeusSoftware Development Engineer DevOpsAVIATION AND AEROSPACEFebruary 2020 - August 2020 (6 months)Biot, FranceWithin theCSS BUILD INFRASTRUCTUREdepartment, responsible for thedevelopment and maintenance of Jenkins pipeline librariesbased on Groovy and Java. These libraries (also known as Software Workbench Solutions) are used by Amadeus clients and developers in their build processes.Stack:Elastic Stack (ELK) · Jenkins · Bitbucket · Groovy
Recommendations
Be the first to recommend Mohammed
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Engineer's Degree in Computer Science3iL Ingénieurs2019
Certifications
- AWS Certified Solutions Architect – AssociateAWS2025