Open to opportunities

Muhammad Waqas Ashraf

@muhammadwaqasashraf

Message

I build secure, resilient cloud infrastructure and DevSecOps pipelines across AWS, Azure, GCP, Kubernetes, and GitLab.

Pakistan

Message

What I'm looking for

I'm looking to build secure, scalable cloud platforms and strengthen DevSecOps practices through automation, threat detection, compliance, and security-first collaboration across development and operations teams.

I've built and secured cloud infrastructure, CI/CD pipelines, and production platforms for InAllMedia, TechnologyEastern, VerdantSoft, and Emerssive. My work spans AWS, Azure, GCP, Kubernetes, GitLab, Jenkins, Docker, and infrastructure automation.

At TechnologyEastern, I designed cloud security architectures for AWS and Azure that reduced vulnerabilities by 30% while supporting NIST and ISO 27001 compliance. At VerdantSoft, I deployed and managed firewalls, IDS/IPS, VPNs, and CI/CD pipelines, helping reduce incident response time by 20%.

I bring a security-first approach to delivery, from IAM, vulnerability assessment, and incident response to SAST/DAST, API security, forensic analysis, and security automation.

Experience

Work history, roles, and key accomplishments

DevOps Engineer

InAllMedia

Sep 2025 - May 2026 (8 months)

Managed and maintained CI/CD pipelines on self-hosted GitLab servers, ensuring reliable software delivery. Provided on-call support and monitored infrastructure across GitLab, Kubernetes, AWS, Nexus, and Marvin.

Gitlab AWS Kubernetes Marvin CI CD Infrastructure Monitoring

Senior DevOps Engineer

TechnologyEastern

Oct 2022 - Aug 2025 (2 years 10 months)

Designed and implemented cloud security architectures for AWS and Azure, reducing vulnerabilities by 30% and ensuring compliance with NIST and ISO 27001. Conducted penetration testing and developed automated test suites for security integration.

AWS Azure Cloud Security Penetration Testing Vulnerability Assessment NIST ISO 27001 Testing Automation

DevOps Engineer

VerdantSoft

Dec 2019 - Sep 2022 (2 years 9 months)

Led deployment of firewalls, IDS/IPS, and VPNs for network security. Implemented CI/CD pipelines using Jenkins, Docker, and Kubernetes, and reduced incident response time by 20%.

Firewalls IPS VPN Jenkins Docker Kubernetes CI CD Security Assessments

Junior Security Engineer

Emerssive

Mar 2017 - Nov 2019 (2 years 8 months)

Implemented secure coding practices and integrated SAST/DAST tools into CI/CD, reducing vulnerabilities by 50%. Conducted security code reviews, vulnerability scans, and incident response using SIEM tools.

SAST DAST CI CD Code Review Vulnerability Scanning SIEM Penetration Testing API Testing