Open to DevOps · SRE · Platform roles

Baasil Mirza

DevOps & Cloud Engineer

I build the pipelines, infrastructure, and guardrails that let teams ship fast without breaking things — AWS, Kubernetes, Terraform, and Python, with everything as code and nothing done twice by hand.

Get in touch GitHub
  • AWS Solutions Architect
  • CKA
  • Terraform Associate
  • Security+

bass@prod:~$ whoami

DevOps & Cloud Engineer — CKA · AWS SAA · Terraform

bass@prod:~$ terraform apply -auto-approve

Apply complete! Resources: 128 added, 0 changed, 0 destroyed.

bass@prod:~$ kubectl get engineer bass -o wide

NAME   STATUS  ROLES       UPTIME

bass   Ready   devops,sre  6+ yrs

bass@prod:~$ ./deploy.sh --env your-team

✓ Pipeline green — let's talk.

bass@prod:~$

Multi-region failover RTO
15min

↓ 90% vs. manual recovery

AWS spend after migration
−40%

right-sizing + managed services

Uptime during live cutover
99.5%

three-tier app → AWS

Endpoints on zero-touch automation
200+

scripted enrollment & compliance

About

I'm a DevOps and cloud engineer with production experience building CI/CD pipelines, containerized platforms on AWS, and infrastructure automated with Terraform and Python. My operating principle is simple: if it's done twice, it gets scripted; if it's scripted, it lives in Git and ships through a pipeline.

That principle has carried me from automating help-desk workflows to architecting multi-region disaster recovery (15-minute RTO), leading cloud migrations with 99.5% uptime through cutover, and cutting infrastructure cost 40% post-migration. I hold the AWS Solutions Architect Associate, Certified Kubernetes Administrator, and HashiCorp Terraform Associate certifications — and I treat reliability, observability, and security as features, not afterthoughts.

Right now I'm deepening the platform side of the craft — GitOps workflows, Kubernetes operations, and MLOps — while pursuing an M.S. in Computer Science (Machine Learning) at Georgia Tech.

Experience

  1. 2025 — Present

    Senior Systems Administrator

    Rural Municipalities of Alberta · Alberta, CA

    Owning the automation and cloud-readiness roadmap for municipal infrastructure.

    • Brought 200+ corporate devices under zero-touch management by automating Microsoft Intune enrollment and compliance with PowerShell — no more per-device manual setup.
    • Migrated 25+ production VMs from VMware to Hyper-V with scripted preflight validation and cutover orchestration instead of checklists.
    • Improved MTTR for infrastructure issues by shipping Python/Bash automation for health checks, log aggregation, and alerting.
    • Driving the strategic shift to a cloud-centric, automated operating model; mentor junior engineers on scripting, automation practice, and cloud security.
    • PowerShell
    • Python
    • Bash
    • Intune
    • Hyper-V
    • Entra ID
  2. 2025

    IT Project Specialist Contract

    Crayon · Client: TAQA · Remote

    Global identity migration for an international energy company.

    • Coordinated an Active Directory migration spanning 5,000+ users across Europe and the Middle East, building PowerShell validation tooling that caught issues before each wave.
    • Replaced manual status reporting with Python-generated real-time dashboards, eliminating hours of weekly hand-built updates.
    • Co-authored runbooks and rollback procedures with distributed engineering teams — the migration completed with zero data loss.
    • Packaged the entire methodology into reusable playbooks the client's internal IT team still runs.
    • PowerShell
    • Python
    • Active Directory
    • Runbooks
  3. 2022 — 2025

    Cloud Infrastructure Consultant Contract

    Dry Cleaning 2 Go · 12-location retail operation

    End-to-end AWS migration: architecture, build, monitoring, and DR.

    • Architected and led the migration of legacy multi-store systems to AWS, retiring every on-prem server and the maintenance burden with them.
    • Designed for availability with EC2 + Auto Scaling and Elastic IPs, automated S3 backup pipelines, and scripted disaster-recovery procedures.
    • Stood up CloudWatch and CloudTrail monitoring and auditing, turning reactive break/fix into proactive management across all locations.
    • Cut follow-up support calls 60% by training store managers on the new centralized platform.
    • AWS
    • EC2
    • Auto Scaling
    • S3
    • CloudWatch
    • CloudTrail
  4. 2022 — 2025

    Junior Systems Administrator

    Energy Safety Canada

    Automation-first administration of a hybrid Windows/Linux estate.

    • Took user onboarding from 45 minutes to under 5 (−89%) by automating lifecycle management with PowerShell.
    • Reduced monthly incidents 25% by root-causing recurring outages and shipping automated remediation instead of repeat fixes.
    • Ran configuration, patch orchestration, and log analysis for Windows/Linux servers with Bash and PowerShell.
    • Remediated security-audit findings — server hardening and access-control cleanup — and wrote the SOPs the team adopted.
    • PowerShell
    • Bash
    • Linux
    • Windows Server
    • Patching
  5. 2019 — 2022

    Help Desk Lead

    Dry Cleaning 2 Go

    Where the automation habit started — running IT for 12 locations.

    • Cut workstation setup time 75% by automating PC imaging with Windows Deployment Services and PowerShell.
    • Reduced ticket volume 40% by building the ITSM knowledge base used for first-call resolution.
    • Led the rollout of a cloud CRM replacing legacy infrastructure — a first cloud migration, and the escalation point for Tier 1 along the way.
    • PowerShell
    • WDS
    • ITSM

Projects

Production-grade builds, each with a repo and a write-up.

~/projects/dr-as-code

Disaster Recovery as Code

Multi-region AWS DR platform: Terraform provisions an identical standby region, Route53 health checks flip DNS, Velero restores Kubernetes state, and Python (Boto3) orchestrates the failover sequence. Chaos-tested on a schedule with AWS Fault Injection Simulator so the plan never goes stale.

15 min RTO — ↓90% < 5 min RPO
  • AWS
  • Terraform
  • Kubernetes
  • Velero
  • Python
  • Route53
Read the build log

~/projects/cloud-migration

Hybrid Cloud Migration Pipeline

Moved a three-tier application to AWS with zero drama: Docker for containerization, AWS DMS continuous replication for the database, both environments defined in Terraform, and deployments shipped by a GitHub Actions CI/CD pipeline with automated rollback at every phase.

99.5% uptime in cutover −40% run cost 2 wks vs 3-mo estimate
  • AWS
  • Docker
  • Terraform
  • GitHub Actions
  • DMS
Read the build log

~/projects/vaultwarden

Hardened Self-Hosted Secrets

Private Vaultwarden (Bitwarden-compatible) password manager on EC2 — Docker Compose deploy, Let's Encrypt certificates on auto-renewal, encrypted daily backups to versioned S3 with 30-day retention, CloudWatch alarms, and enforced MFA.

< $2/month to run 100% automated certs & backups
  • EC2
  • Docker Compose
  • Let's Encrypt
  • S3
  • CloudWatch
Read the build log

Skills

core — used in production working knowledge — labs & coursework

Cloud Platforms

  • AWS — EC2, EKS, S3, RDS, Lambda
  • VPC · IAM · Route53
  • CloudWatch · DMS · Auto Scaling
  • Azure — Entra ID, Intune, Hyper-V
  • GCP fundamentals

Infrastructure as Code

  • Terraform — modules, remote state
  • CloudFormation
  • Ansible
  • Pulumi

CI/CD & GitOps

  • GitHub Actions
  • Git — PR-reviewed infra changes
  • GitLab CI
  • Jenkins
  • ArgoCD

Containers & Orchestration

  • Docker & Compose
  • Kubernetes (CKA)
  • EKS · Helm
  • Velero
  • Kustomize

Monitoring & Observability

  • CloudWatch · CloudTrail
  • Prometheus · Grafana
  • Alert design & runbooks
  • ELK stack
  • Datadog

Languages & Automation

  • Python — Boto3, tooling
  • Bash
  • PowerShell
  • HCL · YAML
  • Go

Security & Systems

  • IAM least-privilege
  • Linux administration
  • Hardening & patch automation
  • AD / Entra ID
  • Secrets Manager · SSM

Certifications

AWS Solutions Architect — Associate

SAA-C03

Certified Kubernetes Administrator

CKA · CNCF

HashiCorp Terraform Associate

003

CompTIA Security+

SY0

  • AWS Cloud Practitioner (CLF-C02)
  • CompTIA Network+
  • CompTIA A+
  • Linux Essentials
  • ITIL 4 Foundation

Writing

Build logs from the projects above — decisions, mistakes, and metrics.

Nov 2025 · 5 min

Building a Production-Ready Disaster Recovery Platform on AWS

Cross-region failover in 15 minutes with Terraform, Velero, Route53 — and why chaos testing with AWS FIS is the part that actually matters.

Read

Oct 2025 · 6 min

Modernizing Legacy Applications: A Hybrid Cloud Migration Journey

How containers, DMS replication, and a CI/CD pipeline turned a 3-month migration estimate into 2 weeks at 99.5% uptime.

Read

Sep 2025 · 4 min

Security & Self-Hosting: A Private Password Manager with Vaultwarden

Enterprise-grade security posture — automated certs, encrypted backups, MFA — for under $2 a month.

Read

Education

M.S. Computer Science — Machine Learning in progress

Georgia Institute of Technology (OMSCS) · 2024 — exp. 2028

Deep learning, reinforcement learning, statistical ML, and AI system design — building toward the MLOps side of platform engineering.

B.S. Information Technology

Western Governors University

Competency-based program aligned to industry certifications — networking, security, cloud computing, and systems administration.

Let's build something reliable.

Open to DevOps, SRE, and Platform Engineering roles — remote, or hybrid in Alberta, Canada. Email gets the fastest response.

bass@baasilmirza.com
/in/baasilmirza /baasilmirza