Hey, it's me, Afiq.

I help build AWS platforms that are secure, reliable, cost-aware, observable, and easier to operate.

Cloud Engineer focused on AWS infrastructure, Terraform and OpenTofu automation, Amazon EKS operations, DevSecOps workflows, migrations, and practical production troubleshooting, guided by operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability.

Read my work or email me.

About me

Hello, I'm Afiq. I share knowledge around AWS infrastructure, Terraform and OpenTofu automation, Amazon EKS operations, DevSecOps workflows, migrations, and practical production troubleshooting.

I care about infrastructure that can be reviewed, repeated, operated, and explained clearly to the next engineer.

Certifications

Experience

Team Lead Cloud Engineer

Current — Cloud infrastructure delivery

  • Lead AWS platform delivery and operational troubleshooting.
  • Guide infrastructure-as-code standards and deployment validation.
  • Support Kubernetes, migration, networking, and production reliability work.

Kubernetes and GitOps automation

Platform milestones — EKS / Terraform / CI/CD

  • Standardized EKS platform infrastructure for CNF-style workloads.
  • Built reviewable Terraform workflows through GitHub Actions, Jenkins, and Bitbucket.
  • Documented operational patterns for networking, storage, and deployment flows.

Cloud engineering and migration

Foundation — AWS platform operations

  • Worked across compute, storage, database, IAM, monitoring, and cloud migration activities.
  • Created tooling and documentation that improve repeatability for engineering teams.

Work and case studies

A small collection of infrastructure, networking, and systems projects that show how I think through migration, operations, security, and documentation.

Building a Small AI Agent Platform with GitOps

May 2026 — GitOps Automation — Agent platform architecture

How I turned a Discord chat bot idea into a small routed agent platform with Kubernetes, GitOps, and a few practical operating rules.

Amazon EKS Platform for CNF Workloads

Dec 2025 — Telco EKS — CNF platform infrastructure

Delivered an Amazon EKS platform using Terraform and GitHub Actions, supporting self-managed node groups, Multus-based secondary networking, SR-IOV, Whereabouts IPAM, and telco-style traffic separation patterns for CNF workloads.

Terraform CI/CD for E-Wallet AWS Platform

Sep 2025 — Enterprise IaC — AWS infrastructure delivery

Implemented a Terraform-based Infrastructure-as-Code workflow for an e-wallet platform, integrating Bitbucket and Jenkins to standardize AWS infrastructure deployment across staging and production.

Other work

OpenStack to Amazon S3 Migration Utility

Repository

Built a Python-based transfer utility to migrate objects from OpenStack Swift to Amazon S3 with multi-threading, checksum validation, retry handling, and detailed logging.

pfSense TM Unifi Home Lab Guide

Guide

Documented a practical pfSense setup for Malaysia TM Unifi, covering PPPoE WAN configuration, VLAN tagging, LAN segmentation, and DHCP setup.

SA DNS Filtering System

System

Developed a Django-based DNS filtering and monitoring system for a parental control use case, including filtering, whitelist and blacklist management, dashboard views, and REST API communication.

Contact

For cloud infrastructure, automation, Kubernetes, platform engineering, or work opportunities, email is the best way to reach me.

[email protected]