I build CI/CD pipelines, containerized deployments, and cloud infrastructure that are fast, secure, and repeatable.
I'm passionate about DevSecOps, cloud automation, and shifting security left — so bugs never reach production.

🎓 BS Information Technology — BZU Multan  |  📍 Lahore, Pakistan  |  💼 Open to opportunities

💡 Self-taught in Docker, Jenkins, GitHub Actions, AWS & Terraform — applied in real production deployments.
🚀 Always exploring how IaC + DevSecOps + Kubernetes can make delivery pipelines bulletproof.

Two-Workflow DevSecOps Pipeline on Oracle Cloud VM

• Personal finance app with signup/login, income & expense tracking with categories, RBAC, and live PKR/USD currency conversion
• Interactive dashboard with Chart.js category breakdown, current balance, and filtering by month, category, type, and date
• Full CRUD on transaction records — add, edit, update, and delete entries
• 2-workflow chained GitHub Actions pipeline:
  • CI → flake8, bandit, gitleaks, pip-audit, pytest
  • CD → hadolint, pip-audit, Trivy image scan, DockerHub push, deploy via SSH

Stack: Python · Flask · PostgreSQL · Docker Compose · GitHub Actions · Oracle Cloud · Chart.js · Trivy · Bandit · Gitleaks · Hadolint · pip-audit · DockerHub

Three-Stage DevSecOps Pipeline on AWS EC2

• Hotel booking platform with user auth, RBAC, property listings, and booking management
• Remediated HIGH CVEs in Flask & Werkzeug; branch protection with required status checks on main
• 3-stage chained GitHub Actions pipeline:
  • CI → flake8, bandit, pytest, gitleaks
  • Docker Security → hadolint, pip-audit, Trivy, DockerHub push
  • Deploy → SSH to EC2, docker pull & compose up

Stack: Python · Flask · PostgreSQL · Docker Compose · GitHub Actions · AWS EC2 · SonarQube · Trivy · Bandit · Gitleaks · Hadolint · pip-audit · DockerHub

End-to-End Jenkins CI/CD on AWS EC2

• URL shortener with user auth, 3-char short code generation, and click analytics dashboard
• RBAC with Admin & User roles; PostgreSQL with full CRUD and health-checked Docker Compose setup
• Jenkins pipeline stages:
  • Checkout SCM → SonarQube Analysis → Trivy Scan
  • OWASP Check → Deploy to Staging → Verify → Post Actions

Stack: Python · Flask · PostgreSQL · Docker Compose · Jenkins · AWS EC2 · SonarQube · Trivy · OWASP

Code Push ──► GitHub Actions CI ──► Docker Security Scan ──► Deploy to AWS EC2
               │                      │                         │
           flake8/bandit           hadolint/pip-audit        SSH → docker pull
           pytest/gitleaks         Trivy CVE scan            docker compose up
                │                      │
           ❌ Fail = Block PR      ❌ Fail = Block Push

No vulnerable code reaches production. Ever.