Tariq Al-Mansoor
Lead DevOps / Senior Platform & SRE Engineer
Professional Summary
Lead DevOps / Platform Engineer with 7+ years architecting multi-region AWS cloud infrastructure, Kubernetes (EKS) orchestration, and GitOps pipelines using Terraform, ArgoCD, and Helm. Scaled container platforms to 180+ microservices, automated canary deployments reducing production rollback incidents by 82%, and maintained 99.99% service availability across 3.2M active users. Spearheaded FinOps cloud cost optimization initiatives saving $420k annually through Karpenter intelligent node autoscaling.
Technical Skills
Work Experience
- •Architected multi-region AWS infrastructure using modular Terraform (IaC) and Terragrunt across 6 production accounts, achieving 100% reproducible disaster recovery environments.
- •Engineered enterprise Kubernetes (EKS) platform running 180+ microservices, replacing static EC2 clusters with Karpenter autoscaling to cut monthly compute spend by 32% ($420k/year).
- •Implemented GitOps deployment model with ArgoCD and Argo Rollouts, enabling automated progressive canary releases with automated Prometheus metrics-driven rollbacks.
- •Designed end-to-end observability stack utilizing Prometheus, Thanos, Grafana, and OpenTelemetry, establishing four golden signals monitoring and dropping MTTR from 45m to 8m.
- •Instituted DevSecOps guardrails by embedding HashiCorp Vault secrets management, Trivy container vulnerability scanning, and OPA/Gatekeeper admission controllers into CI/CD.
- •Modernized legacy Jenkins build farms into automated GitHub Actions CI/CD workflows, reducing average pull request build and test validation times from 35 minutes to 7 minutes.
- •Provisioned resilient database topologies with Amazon RDS PostgreSQL Multi-AZ and Aurora Global Databases, ensuring RPO < 1 minute and RTO < 15 minutes.
- •Constructed centralized log ingestion platform processing 2.4TB of daily telemetry using Vector and Loki, reducing log storage retention expenditures by 45%.
- •Authored 25+ reusable internal Helm charts and Docker multi-stage build templates, standardizing container delivery practices across 65 backend engineers.
- •Participated in on-call rotation as primary incident commander, authoring blameless post-mortems and managing SLI/SLO error budget burn rates.
Selected Technical Projects
Self-healing multi-cluster GitOps orchestration engine synchronizing declarative application states across staging, production, and DR clusters.
- •Automated zero-touch cluster provisioning in under 18 minutes using Terraform modules and ArgoCD ApplicationSets.
- •Integrated automated drift detection and Slack alerting for unauthorized manual kubectl interventions.
Automated dynamic namespace provisioning engine that spins up complete ephemeral preview environments on pull request creation.
- •Saved $85k annually by automatically terminating idle preview clusters after 2 hours of developer inactivity.
- •Accelerated product designer and QA feature sign-off velocity by 35%.
Education
University of Washington, Seattle, WA (2014 - 2018)
Specialization in Distributed Systems and Cloud Computing Networks.
Certifications
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- AWS Certified Solutions Architect – Professional (SAP-C02)
- HashiCorp Certified: Terraform Associate
