about, skills, or projects to explore.obeyda@portfolio: ~/portfoliomain
WELCOME TO OBEYDA.TUI // PORTFOLIO TERMINAL
Type a command, or press Tab to complete it. Or switch to .
Senior Platform Engineer • PLATFORM · CLOUD · DEVELOPER EXPERIENCE
Obeyda Djeffal
I build cloud platforms, delivery systems, and developer tooling that help engineers and data teams ship reliable software and compute workloads across Azure, GCP, and AWS.
platform / evolving
ls work/ for all case studiesBuilding Azure Landing Zones, Then Expanding Across Clouds
Azure landing zones rebuilt from an unusable Pulumi prototype, with the first development environment delivered in 10 days before extending the foundation to staging, production, GCP, AWS, and on-prem.
Azure · GCP · AWS · Pulumiplatform / evolvingKubernetes & GitOps Delivery Platform
Delivery standardized across AKS, GKE, and EKS with Argo CD, Helmfile, and Kustomize. Progressive rollouts and Vault-backed secret sync gave teams a consistent release path without committing secrets to Git.
Kubernetes · Argo CD · Argo Rollouts · Helmobservability / evolvingUnified Observability Platform
Metrics, logs, traces, and profiles unified across multi-cloud Kubernetes clusters in Grafana. Prometheus, Loki, Tempo, and Pyroscope support workload investigation, complemented by New Relic infrastructure and cluster instrumentation.
Grafana · Prometheus · Loki · Tempotooling / evolvingInternal Platform Tooling & Controllers
Developed custom Go CLIs, Kubernetes admission controllers, and image lifecycle controllers to automate operations and enforce policy as code.
Go · Python · Kubernetes · Admission Webhooks / completedBuilding Azure landing zones after a failed Pulumi prototype
A failed Pulumi prototype rewritten into an Azure development environment delivered in 10 days, followed by staging and production.
Pulumi · Azure · Infrastructure as Code · Landing Zones / completedRebuilding a brittle CI runner factory
How a stale image pipeline became a controlled Packer lifecycle for CPU and GPU Azure DevOps runner pools.
Azure DevOps · Azure VMSS · Azure Compute Gallery · Packer / completedMoving a live Kubernetes platform to GitOps incrementally
How Kubernetes delivery moved from pipeline control to Argo CD through explicit, workload-by-workload handoffs.
Argo CD · ApplicationSet · Kubernetes · Helmplatform / completedConnected Mobility Infrastructure : Stellardian
A governed Azure delivery platform for Stellardian’s revamped connected-mobility and fleet workflows.
Azure · Terraform · Azure Kubernetes Service (AKS) · Azure Monitorplatform / completedConnected Rental Platform : KIRRK
Terraform-managed Azure environments and governed AKS delivery for KIRRK’s connected rental and fleet platform.
Azure · Terraform · Azure Kubernetes Service (AKS) · Azure Monitor / completedAutomating the lifecycle of cloud development machines
How identity-driven provisioning and scheduled lifecycle controls turned varied cloud workstations into a managed platform capability.
GCP · Pulumi · Microsoft Entra ID · Google OS Loginplatform / completedAutomated Tenant Provisioning : qomben
Terraform and Kubernetes delivery automation reduced tenant and environment setup from days to minutes.
Azure · Terraform · Azure Kubernetes Service (AKS) · Azure Monitor / completedReducing GPU scheduling waits from days to minutes
How generated ComputeClasses matched workload constraints to GPU and provisioning fallbacks instead of waiting on one capacity source.
GKE · Kubernetes · GPU · ComputeClass / completedGiving pull requests preview environments on demand
How a pull-request label triggered an isolated Kubernetes application environment for focused review and testing.
Azure Pipelines · Kubernetes · Helm · Preview EnvironmentsTools shown in context: each area pairs the work with the platforms behind it.
Cloud
Cloud landing zones, hub networking, and workload dependencies kept local to each provider.
Azure
ROLE IN STACK
Build landing zones, hub networking, and shared services for Azure workloads.
GCP
ROLE IN STACK
Run GKE and GPU workloads while keeping their runtime dependencies cloud-local.
AWS
ROLE IN STACK
Extend the platform with isolated AWS accounts, services, and Kubernetes capacity.
Kubernetes
Consistent AKS, GKE, and EKS operations through GitOps, reusable charts, progressive delivery, and admission policy.
AKS
ROLE IN STACK
Run application and platform workloads on Azure Kubernetes Service.
GKE
ROLE IN STACK
Run platform management and GPU workloads on Google Kubernetes Engine.
EKS
ROLE IN STACK
Extend multi-cluster operations to Amazon Elastic Kubernetes Service.
Helm
ROLE IN STACK
Package and version Kubernetes applications as reusable charts.
Helmfile
ROLE IN STACK
Declare and coordinate releases across multiple Helm charts.
Kustomize
ROLE IN STACK
Maintain environment-specific Kubernetes overlays without copying manifests.
Argo CD
ROLE IN STACK
Continuously reconcile cluster state from Git repositories.
Argo Rollouts
ROLE IN STACK
Deliver changes with canary and blue-green rollout strategies.
Istio
ROLE IN STACK
Manage service-to-service traffic, security, and telemetry with a service mesh.
Traefik
ROLE IN STACK
Route external traffic into Kubernetes services through ingress and gateway configuration.
Open Policy Agent
ROLE IN STACK
Enforce policy-as-code at Kubernetes admission boundaries.
Infrastructure as Code
Cloud infrastructure defined through repeatable Pulumi and Terraform programs; shared services packaged as reusable resources.
Pulumi
ROLE IN STACK
Provision cloud platforms with reusable, versioned infrastructure programs.
Terraform
ROLE IN STACK
Define and manage repeatable cloud infrastructure from declarative plans.
Crossplane
ROLE IN STACK
Expose cloud infrastructure as Kubernetes-managed platform resources.
CI/CD
Reusable delivery pipelines, CPU/GPU runner images, and pull-request preview environments.
Azure Pipelines
ROLE IN STACK
Build reusable pipelines and self-hosted CPU/GPU runner pools.
GitHub Actions
ROLE IN STACK
Automate build, validation, and release workflows across repositories.
GitLab CI
ROLE IN STACK
Run repository-native build, test, and deployment pipelines.
Cloud Build (GCP)
ROLE IN STACK
Connect GCP source, build, and deployment steps for cloud workloads.
CodePipeline (AWS)
ROLE IN STACK
Coordinate source, build, and deploy stages in AWS delivery workflows.
CodeBuild (AWS)
ROLE IN STACK
Run managed build and test jobs as part of AWS delivery workflows.
CodeDeploy (AWS)
ROLE IN STACK
Automate application rollout steps to AWS compute targets.
Observability
Metrics, logs, traces, and profiles brought into one investigation workflow alongside cloud-native monitoring.
Grafana
ROLE IN STACK
Correlate dashboards for metrics, logs, traces, and profiles across clusters.
Prometheus
ROLE IN STACK
Collect and query platform and workload metrics for alerting and capacity analysis.
Loki
ROLE IN STACK
Aggregate and query Kubernetes logs alongside Grafana metrics and traces.
Tempo
ROLE IN STACK
Store and explore distributed traces across services and clusters.
Pyroscope
ROLE IN STACK
Profile continuous CPU and memory usage to find application hot spots.
New Relic
ROLE IN STACK
Monitor application performance and service health with APM telemetry.
Elastic Stack (ELK)
ROLE IN STACK
Use Elasticsearch, Logstash, and Kibana alongside metrics and tracing for log investigations.
Jaeger
ROLE IN STACK
Inspect distributed traces to follow requests across service boundaries.
CloudWatch
ROLE IN STACK
Inspect AWS service health, logs, and operational signals.
Azure Monitor
ROLE IN STACK
Track Azure resource health, metrics, and alerts.
Application Insights
ROLE IN STACK
Trace application behavior and diagnose service issues with Azure telemetry.
Security & Identity
SSO and workload identity integrated with cluster services; Vault-backed secrets synchronized without storing values in Git.
HashiCorp Vault
ROLE IN STACK
Provide centralized secret storage and Kubernetes workload authentication.
External Secrets
ROLE IN STACK
Sync secrets from external stores into Kubernetes without committing values to Git.
Microsoft Entra ID (Azure AD)
ROLE IN STACK
Integrate workforce sign-on and workload identity with cloud services.
Okta
ROLE IN STACK
Connect workforce identity and single sign-on to application access.
Auth0
ROLE IN STACK
Add managed authentication and authorization to application services.
Keycloak
ROLE IN STACK
Operate self-hosted identity, SSO, and federation for platform applications.
Data
Managed databases, local caches, and retrieval stores selected to fit workload needs and runtime boundaries.
PostgreSQL
ROLE IN STACK
Run relational workloads with dependable transactions and query flexibility.
AlloyDB
ROLE IN STACK
Use managed PostgreSQL-compatible services for cloud-hosted data workloads.
RDS
ROLE IN STACK
Run managed relational databases close to AWS-hosted services.
Azure SQL
ROLE IN STACK
Use managed SQL databases integrated with Azure application platforms.
Cosmos DB
ROLE IN STACK
Support globally distributed applications with managed document data.
MongoDB Atlas
ROLE IN STACK
Run managed document databases for flexible application data.
Redis
ROLE IN STACK
Keep frequently accessed data close to services with an in-memory cache.
Memcached
ROLE IN STACK
Cache hot application data to reduce repeated backend reads.
Qdrant
ROLE IN STACK
Index embeddings for semantic search and retrieval workflows.
SurrealDB
ROLE IN STACK
Explore document and graph relationships for connected-data applications.
AI & Agentic Systems
Retrieval and multi-step LLM workflows composed, traced, and evaluated.
LangChain
ROLE IN STACK
Compose retrieval and model calls into reusable LLM application flows.
LangGraph
ROLE IN STACK
Represent multi-step, stateful agent workflows as explicit graphs.
LangSmith
ROLE IN STACK
Trace runs and evaluate LLM workflow behavior.
Languages
Go, Python, TypeScript, and C# for platform CLIs, controllers, infrastructure code, and backend services.
Go
ROLE IN STACK
Build platform CLIs, services, and automation tooling.
Python
ROLE IN STACK
Automate infrastructure workflows and build backend and data tools.
TypeScript
ROLE IN STACK
Develop web interfaces, APIs, and infrastructure automation.
C# / .NET
ROLE IN STACK
Build backend services and internal platform applications.
Senior DevOps Engineer · Ordaos Bio
Built Azure landing zones from existing subscriptions and an unreliable Pulumi prototype, then expanded the platform across GCP, AWS, and on-prem infrastructure for Kubernetes and GPU-backed compute.
Cloud DevOps Engineer · RedFabriQ
Built a repeatable Azure delivery foundation across Qomben, KIRRK, and Stellardian: Terraform-managed environments, governed AKS, and secure CI/CD. KIRRK and its Stellardian evolution added connected-device and event-processing workloads.
Backend Engineer · RedFabriQ
Built the application services behind RedFabriQ client products, then carried software-engineering practices into the platform work that followed.
Software Engineer · Freelance
Delivered end-to-end application work for freelance clients, spanning Windows desktop software, backend APIs, and deployment automation.
Junior Software Engineer · RedFabriQ
Started in product engineering, building shared mobile experiences across iOS, Android, and Windows Phone with Apache Cordova and Ionic.
NEXT STEP
Have a platform challenge?
Let’s talk about infrastructure, delivery systems, and developer experience.