Ameer Hamza

• Part of the infrastructure team that runs and maintains 350+ servers (bare-metal hosts, VMs, containers and cloud VMs across multiple providers), covering builds, patching, monitoring, incident response and disaster recovery.
• Run a 4-node Proxmox VE cluster with HA, watchdog fencing and ZFS replication every 15 minutes, keeping 16 critical VMs and containers on automatic failover; upgraded it from Proxmox VE 8 to 9 one node at a time.
• Built the infrastructure for a six-application telecom messaging platform across 20+ servers: OS installs, networking, HAProxy load balancing and replicated MySQL and MongoDB.
• Provisioned an 18+ server, multi-zone environment on VMware Cloud Director with edge firewalls, NAT and IPsec VPN tunnels between zones, plus cross-zone replication for disaster recovery.
• Deployed a 3-node Wazuh SIEM cluster and onboarded 70+ servers, with log collection matched to each server's services, active response for brute-force and web attacks, file-integrity monitoring with YARA scanning, vulnerability detection and WhatsApp alerts.
• Wrote and open-sourced Prometheus exporters for Kannel, smppbox and KSMPPD with Grafana dashboards and 29 alert rules, giving per-customer and per-operator-link visibility across the SMS gateway fleet.
• Brought 18 bare-metal servers and 40+ LXC containers under Grafana monitoring, and centralised logs with Loki, Graylog and ELK, with alerts on critical log patterns.
• Support A2P/P2P messaging traffic for national mobile operators and enterprise customers: SMPP routing, load balancing and log analysis.
• Maintain backup servers and disaster-recovery runbooks; automate builds and configuration with Ansible, Bash and Python.

• Completed 67 orders on Fiverr and Upwork with a 5.0★ average across 23 reviews, including repeat clients who came back for months.
• Took three AI-infrastructure projects open source for a US startup: the client handed over the code, and I handled history audits, repository structure and GitHub SEO (names, descriptions, topics), licensing, Conventional Commits and squash-merge rules, branch rulesets with CODEOWNERS, Dependabot, secret scanning and private vulnerability reporting, CI and release workflows, and community files.
• Taught penetration testing with Kali Linux one to one to students in the US, UK, Poland and the Gulf.
• Built and hardened Linux servers, fixed Docker and container problems, and ran web and Active Directory penetration tests with written reports.

• Deployed containerised applications with Docker and Kubernetes and practised CI/CD with Jenkins and infrastructure as code with Terraform.
• Administered Linux servers and deployed workloads on AWS (EC2, ELB, Auto Scaling, Route 53).

• Completed a six-month cybersecurity programme (NAVTTC, grade A+) covering penetration testing methodology and Linux administration.
• Configured, deployed and hardened Cisco ASA/ASAv, Huawei NGFW, WSA, ESA and WAF, plus switches and routers.

A 4-node production cluster where every critical service has a failover partner and storage replicates every 15 minutes, upgraded from Proxmox VE 8 to 9 one node at a time. 16 guests under HA · ≤15 min replication · 3 cluster links

Prometheus exporters, Grafana dashboards and alert rules for Kannel, smppbox and KSMPPD. Built for production, then open-sourced under Apache-2.0. 3 exporters · 70+ panels / dashboard · 29 alert rules

Infrastructure for a six-application enterprise messaging platform across 20+ servers: OS builds, HAProxy, replicated MySQL and MongoDB, monitoring and disaster recovery. 20+ servers · 6 applications · 18 + 40 hosts monitored

An 18+ server environment for a telecom communications platform across availability zones, with edge firewalls, NAT, IPsec tunnels between zones and cross-zone replication. 18+ servers · Multi-zone · IPsec between zones

One place to search every log (Apache, syslog, SSH sessions, network devices, Kannel and custom apps) with retention rules, dashboards and alerts on critical patterns. Loki + Promtail · Graylog / ELK · Alerts on log patterns

A segmented lab with pfSense, an Active Directory domain, Linux and Windows clients and OpenVAS, where I practise the attacks I test for. Plus my method for client web and AD assessments. pfSense + AD domain · OpenVAS / GVM · Web & AD testing

A four-year computer science degree with a strong systems core: operating systems, computer networks, databases and algorithms, the foundations I now use every day on production servers.