Mohammad Khaled Abu Mattar
DevOps Engineer · Solutions Architect
info@mkabumattar.com·+962 790 650 332·Amman, Jordan
mkabumattar.com·linkedin.com/in/mkabumattar·github.com/mkabumattar
Professional Summary
DevOps Engineer and AWS-Certified Solutions Architect with 6+ years building automated, reliable platforms across large, regulated cloud estates. I run multi-cloud infrastructure across AWS, Huawei Cloud, and Hetzner: 15+ AWS accounts and 20+ microservices serving 1M+ users, held to 99.999% uptime, a 96% security posture, and PCI-DSS/SOC2 compliance. My day-to-day is Infrastructure as Code (Terraform), Kubernetes, and GitOps, with a track record of cutting infrastructure cost by 20% and deployment time by 60% without trading away reliability.
Experience
Cloud & DevOps Manager · Jeddah, KSA · Amman, Jordan
Motory · Full-time · Mar 2026 to Present
- Platform & Multi-Cloud Leadership: Own cloud strategy and platform engineering across AWS, Huawei Cloud, and Hetzner for an automotive marketplace serving 1M+ users; lead the DevOps team while staying ~70% hands-on with architecture and code.
- Infrastructure as Code & GitOps: Moved infrastructure to 100% Terraform with GitOps via ArgoCD and Helm, making every deployment consistent and auditable.
- Modernization: Led the monolith-to-microservices shift for 1M+ users, authoring a multi-runtime Helm chart that standardized scaling, probes, and networking across all services.
- Custom Tooling & CI/CD: Built a Go Kubernetes operator for bespoke provisioning integrated into Helm/ArgoCD delivery; Jenkins + ArgoCD pipelines with a private OCI registry and Kong gateway improved deployment speed by 60%.
- Reliability, Cost & Security: Achieved 99.999% uptime with automated cross-region DR (Ansible, Huawei SDK) and a Prometheus/Grafana/Loki stack; cut infrastructure cost 20% while meeting PCI-DSS and SOC2 (Keycloak, WAF/VPN, KMS).
- Team Leadership: Lead the DevOps team and platform roadmap, run internal Kubernetes and Docker training for product teams, and own vendor relationships and overall cloud strategy.
Assistant Manager DevOps Engineer · Amman, Jordan
Jordan Ahli Bank · Full-time · Oct 2024 to Feb 2026
- Platform Governance: Platform Owner for the bank's cloud ecosystem: 15+ AWS accounts and 20+ production microservices, focused on high availability, disaster recovery, and fintech workload optimization in a regulated environment.
- Infrastructure as Code & GitOps: Standardized deployments with Terraform and GitOps (ArgoCD via Atlantis) for consistent, repeatable releases; managed autoscaling and resource optimization for production workloads.
- Security & Compliance: Reached a 96% security posture across all accounts via IAM Identity Center, AWS Organizations, and PCI-DSS controls (CloudTrail, AWS Config, Security Hub).
- Automated CI/CD: Orchestrated end-to-end delivery pipelines with AWS CodePipeline and GitHub Actions, automating testing and security scanning from development through production.
- Release Engineering: Led weekly zero-downtime releases and hotfix strategies with rollback and go/no-go decision frameworks across dev, QA, and production.
- Production Support & Monitoring: Supported production microservices through centralized monitoring (Prometheus, Grafana, CloudWatch), incident response workflows, and long-term platform roadmap planning.
DevOps Engineer · Amman, Jordan
cirrusgo (AWS Partner) · Full-time · Mar 2023 to Sep 2024
- Solution Architecture: Architected AWS hybrid and on-premises solutions for 8+ enterprise clients including fintech; designed microservices, event-driven, and serverless architectures and cut cloud costs 25% to 40% through right-sizing and reserved instances.
- IaC Foundation & Standards: Built foundational Terraform/Terragrunt patterns and multi-account AWS Organizations setups, plus reusable modules and Python/JavaScript libraries for infrastructure automation and DevOps documentation standards.
- Container Platforms: Managed containerized workloads across ECS, Fargate, and EKS spanning dev, UAT, and prod, deploying with GitOps practices and hardened container images.
- CI/CD & Compliance: Implemented secure pipelines (GitHub Actions, CodePipeline/CodeBuild) with canary deployments, automated testing, and security scanning across multi-region and on-premises environments.
Software Engineer, Microservices · Remote
Nagarro · Contract · Feb 2022 to May 2022
- Fintech Microservices: Built secure, scalable Spring Boot microservices with PostgreSQL for financial transaction processing across the full SDLC.
- Full-Stack Development: Developed Angular front-end components and resolved production bugs and performance issues to improve system stability.
- Technical Documentation: Authored detailed technical documentation to support long-term maintainability and knowledge transfer across teams.
Full Stack Developer · Amman, Jordan · Remote
Freelance · Jan 2020 to Feb 2023
- Client Consultations: Ran end-to-end client consultations to align requirements and solutions, managing timelines, deliverables, and expectations through delivery.
- Backend & Fintech: Designed and built Spring Boot microservices with PostgreSQL for fintech clients, integrating databases for reliable data persistence.
- Responsive Web: Built responsive React, HTML, and CSS interfaces focused on user experience and performance.
Certifications
AWS Certified Developer, Associate, Amazon Web Services · Issued Feb 2024, expires Feb 2027
AWS Certified Cloud Practitioner, Amazon Web Services · Issued Oct 2023, expires Feb 2027
AWS Academy Graduate, Cloud Foundations, Amazon Web Services · Nov 2022
Advanced Software Development, Code Fellows · Sep 2021
Technical Skills
- Cloud & IaC: AWS (EC2, EKS, ECS, Fargate, S3, RDS, IAM, VPC, Organizations, IAM Identity Center, Lambda, CloudFormation, CloudWatch), Well-Architected Framework, multi-region HA/DR; Terraform, Terragrunt, Atlantis; Linux administration; working knowledge of Azure and OCI.
- Containers & Orchestration: Docker, Kubernetes (EKS), ECS/Fargate, Helm, ArgoCD (GitOps), custom operators, multi-environment workload management.
- CI/CD & Automation: GitHub Actions, AWS CodePipeline/CodeBuild, Jenkins, GitLab CI; blue-green and canary deployments, automated testing, and multi-environment promotion.
- Security & DevSecOps: PCI-DSS, SOC2, CIS Benchmark, NIST; Trivy, Vault, Secrets Manager, KMS, IAM least privilege, CloudTrail, AWS Config, Security Hub.
- Observability: Prometheus, Grafana, Loki, CloudWatch, ELK Stack; dashboards, centralized logging, alerting, and incident response.
- Languages & Data: Python, Bash, PowerShell, JavaScript/TypeScript, Java, Go; Spring Boot, Node.js, React; PostgreSQL, MySQL, MongoDB, DynamoDB, S3.
- Release Engineering: Release calendars, go/no-go decisions, hotfix management, rollback strategies, versioning, and cross-team coordination.
Education
Bachelor of Software Engineering · Amman, Jordan
Isra University · Oct 2014 to June 2018
Achievements:First place in the individual project at the annual Technology Day contest; contributed to founding and growing the Faculty of Information Technology Club.
Open Source Projects
- QuenchWorks: 0-CVE Hardened Images & Helm Charts (quench-works.com): A from-scratch, security-first replacement for the Bitnami catalog: container images and Helm charts built entirely from source on Wolfi, hardened under a strict 0-CVE build gate, cryptographically signed, and pinned by digest. apko, melange, Wolfi, Helm, Kubernetes.
- sysdesign: System Design Knowledge for AI Agents (sysdesign.mkabumattar.com): A Claude Code plugin that wires tradeoff-first system design knowledge into an AI agent: one skill, eleven commands, and fourteen self-contained reference files, MIT-licensed and fully offline. Claude Code, Markdown, Python, Mermaid.
- Rawi: AI CLI Documentation Tool (rawi.mkabumattar.com): AI that reads a command-line app and writes structured, multi-format documentation for it; published on npm. TypeScript, Node.js.
- NetCalc Pro: Cloud Engineering Suite (netcalc-pro.mkabumattar.com): Zero-backend subnetting, CIDR, and VLSM toolkit with shareable state and IaC export (Terraform HCL, JSON). Astro, TypeScript.
- igntui: .gitignore Generator TUI (github.com/MKAbuMattar/igntui): A fast terminal UI that builds .gitignore files from 571+ gitignore.io templates, with fuzzy search and live preview. Python.