{
  "$schema": "https://cvjson.com/schema/v1.json",
  "basics": {
    "name": "Aymen Belhaj",
    "label": "Senior DevOps Engineer | Azure Platform, Kubernetes & IaC",
    "summary": "Senior DevOps Engineer with 4+ years building secure, automated cloud platforms across Azure, AWS and on-premises Kubernetes. At Linde, I manage Azure hub-and-spoke networking and hybrid DNS, delivered the migration of 15+ enterprise applications to AKS, and run Azure ML and GPU platforms with Bicep, Azure DevOps and ArgoCD GitOps, cutting development compute cost by 60%. Previously an OSS Engineer at Microsoft, resolving complex Azure networking and platform incidents for Premier and S&P 500 customers. Microsoft Certified: Azure Administrator Associate.",
    "location": "Lisbon, Portugal",
    "profiles": [
      {
        "network": "LinkedIn",
        "username": "aymen-belhaj",
        "url": "https://linkedin.com/in/aymen-belhaj"
      }
    ]
  },
  "work": [
    {
      "company": "Linde plc",
      "position": "Senior DevOps Engineer",
      "location": "Lisbon, Portugal",
      "startDate": "2023-09",
      "current": true,
      "highlights": [
        "Configured Azure hub-and-spoke networking and hybrid DNS resolution between on-premises datacentres and Azure, providing secure private connectivity for enterprise workloads",
        "Delivered the migration of 15+ enterprise applications to three environment-isolated AKS clusters (development, test and production)",
        "Standardised Azure ML infrastructure (workspaces, compute clusters, datastores) as reusable Bicep code built on Azure Verified Modules",
        "Designed Azure DevOps multi-stage pipelines with gated promotion from development to test to production",
        "Unified Helm charts with custom CRDs and per-environment overlays, deployed consistently across clusters with ArgoCD ApplicationSets",
        "Reduced development compute cost by 60% through spot node pools with automatic on-demand fallback and scheduled eviction of non-critical workloads, backed by Azure budget alerts",
        "Centralised secret management in Azure Key Vault using Secrets Store CSI Driver and Workload Identity, with automatic pod restarts on secret rotation",
        "Enforced namespace isolation with Cilium network policies and transparent pod-to-pod mTLS",
        "Designed and built a highly available on-premises Kubernetes platform for NVIDIA A100/H100 GPU workloads on Proxmox, with Kubespray, Cilium, a three-node etcd control plane and redundant HAProxy load balancers",
        "Delivered a self-hosted LLM serving platform (vLLM serving Llama 3, Mixtral and Qwen3) with a RAG pipeline using TEI embedding and reranker models and Elasticsearch",
        "Established a unified observability stack with Prometheus for cluster and GPU metrics, Loki and Tempo for log and trace correlation, and Grafana dashboards"
      ]
    },
    {
      "company": "Pixbet",
      "position": "Cloud Engineer (Part-time)",
      "location": "Lisbon, Portugal",
      "startDate": "2022-05",
      "endDate": "2023-08",
      "highlights": [
        "Designed and deployed the platform on serverless AWS Lambda using Laravel Vapor, with SQS-based asynchronous background processing",
        "Strengthened resilience and data protection with Multi-AZ RDS, encrypted S3 storage for payment certificates, and SES and SNS for email, SMS and two-factor authentication",
        "Built a layered edge defence with Cloudflare WAF and custom OWASP rule sets, rate limiting, DDoS protection and admin lockdown zones, complemented by AWS Shield and Web ACLs",
        "Implemented zero-trust source code access, restricting self-hosted GitLab to approved MDM-managed devices (Jamf, Apple Business Manager) with remote lock and wipe",
        "Deployed and operated Endpoint Protector DLP to detect and block data exfiltration through email, USB and unapproved Git repositories",
        "Reduced end-user response times with Cloudflare edge caching"
      ]
    },
    {
      "company": "Microsoft",
      "position": "OSS Engineer",
      "location": "Lisbon, Portugal",
      "startDate": "2022-07",
      "endDate": "2023-06",
      "highlights": [
        "Handled complex production incidents for Premier and S&P 500 customers across App Service, Container Apps, Spring Apps, PostgreSQL and MySQL Flexible Server and Azure Storage, from rapid mitigation to formal root-cause analysis",
        "Resolved enterprise networking issues involving VNet integration, VNet peering, Private Endpoints, Service Endpoints",
        "Investigated failures with KQL queries across Azure service telemetry, memory dump analysis, CPU profiling and network trace analysis",
        "Advised enterprise customers on automating deployments with GitHub Actions and Azure DevOps",
        "Partnered with Customer Success Account Managers and engineering swarms on high-impact cases, and refreshed outdated technical documentation"
      ]
    },
    {
      "company": "PICadvanced",
      "position": "Automation Developer (Internship)",
      "location": "Aveiro, Portugal",
      "startDate": "2022-03",
      "endDate": "2022-07",
      "highlights": [
        "Trained a YOLOv5 computer vision model to detect XFP modules, fibre optic cables and test boards, integrated with a UR5e collaborative robot for autonomous handling",
        "Built a Python socket-based control framework for real-time image evaluation and robot commands",
        "Developed a monitoring web application with live task statistics and camera feed, hosted on an Azure VM"
      ]
    }
  ],
  "education": [
    {
      "institution": "University of Tunis El Manar",
      "degree": "Bachelor of Science",
      "field": "Computer Science",
      "startDate": "2016",
      "endDate": "2019"
    },
    {
      "institution": "University of Tunis El Manar",
      "degree": "Engineering degree",
      "field": "Computer Systems, Networking and Infrastructure",
      "startDate": "2019",
      "endDate": "2022"
    },
    {
      "institution": "Universidade de Aveiro",
      "degree": "Master of Engineering",
      "field": "Computer Engineering",
      "startDate": "2022-03",
      "endDate": "2022-06"
    }
  ],
  "skills": [
    "Azure AKS",
    "Azure ML",
    "Azure App Service",
    "Azure Key Vault",
    "Azure Workload Identity Federation",
    "Azure RBAC",
    "Entra PIM",
    "Azure Cost Management",
    "VNet peering",
    "Private Endpoints",
    "Cilium network policies",
    "Cloudflare WAF",
    "Bicep",
    "Azure DevOps",
    "GitHub Actions",
    "Helm",
    "ArgoCD",
    "Prometheus",
    "Grafana",
    "Kusto",
    "KQL",
    "vLLM",
    "RAG pipelines",
    "AWS Lambda",
    "AWS RDS",
    "Rust Programming",
    "Python",
    "Hub-and-spoke networking",
    "Hybrid DNS",
    "Kubernetes",
    "Crossplane",
    "Clickhouse",
    "MDM",
    "DLP"
  ],
  "languages": [
    {
      "language": "English",
      "fluency": "Fluent"
    },
    {
      "language": "French",
      "fluency": "Fluent"
    },
    {
      "language": "Arabic",
      "fluency": "Native"
    }
  ],
  "certificates": [
    {
      "name": "Microsoft Certified: Azure Administrator Associate",
      "issuer": "Microsoft",
      "date": "2022-03"
    },
    {
      "name": "DevNet Associate",
      "issuer": "Cisco",
      "date": "2022-01"
    },
    {
      "name": "Microsoft Certified: Security, Compliance, and Identity Fundamentals",
      "issuer": "Microsoft",
      "date": "2020-03"
    },
    {
      "name": "Cybersecurity Essentials",
      "issuer": "Cisco Networking Academy",
      "date": "2021-09"
    },
    {
      "name": "Neural Networks and Deep Learning",
      "issuer": "Coursera",
      "date": "2022-02"
    },
    {
      "name": "Convolutional Neural Networks",
      "issuer": "Coursera",
      "date": "2022-03"
    }
  ],
  "availability": {
    "status": "open"
  },
  "ats": {
    "keywords": [
      "Senior DevOps Engineer",
      "Linde plc",
      "Cloud Engineer (Part-time)",
      "Pixbet",
      "OSS Engineer",
      "Microsoft",
      "Automation Developer (Internship)",
      "PICadvanced",
      "Computer Science",
      "Computer Systems, Networking and Infrastructure",
      "Computer Engineering",
      "Azure AKS",
      "Azure ML",
      "Azure App Service",
      "Azure Key Vault",
      "Azure Workload Identity Federation",
      "Azure RBAC",
      "Entra PIM",
      "Azure Cost Management",
      "VNet peering",
      "Private Endpoints",
      "Cilium network policies",
      "Cloudflare WAF",
      "Bicep",
      "Azure DevOps",
      "GitHub Actions",
      "Helm",
      "ArgoCD",
      "Prometheus",
      "Grafana",
      "Kusto",
      "KQL",
      "vLLM",
      "RAG pipelines",
      "AWS Lambda",
      "AWS RDS",
      "Rust Programming",
      "Python",
      "Hub-and-spoke networking",
      "Hybrid DNS",
      "Kubernetes",
      "Crossplane",
      "Clickhouse",
      "MDM",
      "DLP",
      "English",
      "French",
      "Arabic",
      "Microsoft Certified: Azure Administrator Associate",
      "DevNet Associate",
      "Cybersecurity Essentials",
      "Neural Networks and Deep Learning",
      "Convolutional Neural Networks",
      "Senior DevOps Engineer | Azure Platform, Kubernetes & IaC"
    ],
    "yearsOfExperience": 0,
    "seniority": "mid",
    "highestEducation": "Master's"
  },
  "verification": {
    "email": true,
    "platform": "freecv.org"
  },
  "i18n": {
    "primary": "en"
  },
  "meta": {
    "version": "1.2.2",
    "canonical": "https://livelink.cv/aymen-belhaj/cv.json",
    "lastModified": "2026-10-16T13:32:39.167Z",
    "generator": "FreeCV.org"
  }
}