I'm a Cloud Architect and DevOps Engineer based in Pakistan (APAC), working remotely with clients worldwide and available for onsite roles in the EU. I design, deploy, and rescue AWS infrastructure, from serverless pipelines to 173-bucket cross-account replication setups for SaaS platforms serving clients like Novartis, Roche, and UBS.
- 🔭 Currently freelancing as an AWS Solutions Architect & DevOps Engineer on Upwork
- ☁️ Core stack: AWS (Lambda, S3, ECS Fargate, RDS, IAM, EventBridge) + Python / Go / Node.js
- 🚨 I like production incidents. Restored a 3.8GB image library in under an hour, and traced a 15-day silent data-loss bug to a rogue cron job in just 6 hours
- 🐛 Two of my bug reports made it into upstream open source, one merged by the founder himself (details below)
- 📜 AWS Certified Solutions Architect · Associate · AWS Certified DevOps Engineer · Professional · ISC2 CC
- 📫 Reach me at Rafay@abdulrafay.tech
Cloud & Infra
Languages
Frontend
Databases
CI/CD & Monitoring
Two production bugs I diagnosed on client engagements turned into confirmed fixes in upstream repos:
| Project | What happened | Proof |
|---|---|---|
| Forem (the engine behind DEV.to) | Found a Ruby constant-scoping bug crashing the admin panel with a 500 error. Filed the report, a contributor submitted the fix, and it was merged into forem:main by Forem's founder, Ben Halpern. |
Issue #23386 · PR #23491 |
| RedAmon (security automation platform) | Diagnosed a Docker Compose dependency-ordering race condition breaking GVM/PostgreSQL on every boot. Filed a detailed report; the maintainer's fix was merged within 4 days. | Issue #115 · Commit 6a75ce1 |
|
Architected cross-account S3 replication across 173 bucket pairs / 206K+ objects (~140GB). Built a 5-script Python/boto3 automation suite, deployed an EventBridge → Lambda pipeline for new tenants, and later traced a silent 15-day data-loss incident to a rogue cron job in 6 hours using delete-marker forensics.
|
Emergency-recovered a 3.8GB / 200K+ file image library on a revenue site (~$1K/day) within one hour, scripting bulk delete-marker removal and eliminating 80K+ duplicate objects from a sync-plugin bug.
|
|
Designed least-privilege IAM + Secrets Manager architecture for API keys backing $1M+/day in trading exposure. My credential-fetch recommendation was adopted over the dev team's own implementation plan.
|
Audited a 21-service ECS Fargate environment, cut ECR storage from 3TB down to a lifecycle-managed state ($89 → $3/mo), and flagged $25.9K/year in optimization opportunities in an out-of-scope cost report.
|
|
Diagnosed a
|
Deployed Forem on DigitalOcean via Fedora CoreOS/Podman, engineered a snapshot-transfer workaround for API-key restrictions, and got a Ruby scoping bug fix merged into
|
