Nadir Arfi

• Led the migration of 30+ services to a newly built AKS platform, delivering a zero-downtime cutover.
• Architected secure, highly available routing with AKS, NGINX Ingress, Azure Front Door, and Private Link.
• Standardized deployments across dev, staging, and production using Kapp/Ytt manifests and GitLab CI/CD pipelines.
• Integrated Elasticsearch, PostgreSQL, and Liferay CMS, improving platform stability and performance.
• Administer multiple production AKS clusters, performing regular CVE remediation and controlled version upgrades.
• Integrated Azure Front Door WAF with managed bot detection and Microsoft Threat Intelligence for endpoint hardening.
• Automated PostgreSQL and Elasticsearch backup and restore, authoring upgrade runbooks and a disaster recovery plan for the MSP team.

• AKS
• Kubernetes
• NGINX Ingress
• Azure Front Door
• GitLab
• Elasticsearch
• PostgreSQL

Zero-downtime migration of 30+ services onto a new AKS platform with hardened, highly available routing.

• Designed and deployed a full-stack application using Azure Static Web Apps, App Services, and Event Hub for medical report automation.
• Configured Keycloak and Azure Entra ID single sign-on across two client tenants, integrating MongoDB Atlas and Azure Front Door.

• Azure
• Keycloak
• Azure Entra ID
• MongoDB
• Azure Front Door

Unified SSO and a working medical report automation pipeline across two healthcare tenants.

• Led a 3-person CloudOps team, including two junior engineers, through 180+ tickets, designing a hub-and-spoke network architecture.
• Built reusable Terraform modules and Azure DevOps pipelines, cutting provisioning time for new environments.
• Managed Azure subscriptions and Policy assignments, enforcing least-privilege access via Entra ID and RBAC.
• Onboarded and mentored two junior engineers on Azure operations and Terraform-based infrastructure as code.

• Azure
• Terraform
• Azure DevOps
• Entra ID
• RBAC

180+ tickets resolved with reusable Terraform modules that cut environment provisioning time.

• Deliver 24/7/365 on-call support for 10+ enterprise clients across Luxembourg as an escalation point for critical incidents.
• Resolved over 1,300 Jira tickets spanning incidents, service requests, and infrastructure changes, consistently meeting SLA.
• Manage Kubernetes clusters (AKS/EKS) across clients, performing version upgrades and CVE patching.
• Implement infrastructure as code using Terraform, Terragrunt, CloudFormation, and Ansible to standardize provisioning.
• Build CI/CD pipelines in Azure DevOps, GitLab CI, and Jenkins, and tune AWS WAF for production.
• Automate recurring operational workflows with Python (FastAPI), Bash, and the Datadog API, reducing manual toil.
• Onboard and mentor engineers on cloud operations, CI/CD practices, and Python automation.
• Manage incident response and escalation across concurrent clients including Bancontact, the ECB, and the Publications Office of the EU.
• Monitor workloads with Datadog, CloudWatch, and Azure Monitor, building dashboards for proactive detection.
• Implemented procedures for Kubernetes component upgrades and ongoing cluster maintenance.
• Introduced Kubernetes Operators to streamline upgrades and reduce operational overhead.

• AWS
• Azure
• Kubernetes
• Terraform
• Terragrunt
• CloudFormation
• Ansible
• Python
• Bash
• Datadog
• Azure DevOps
• GitLab
• Jenkins

1,300+ Jira tickets resolved across 10+ clients with 24/7/365 production coverage.