# Muhammad Faizan (Faizan, sudofaizan, Muhammad Faizan DevOps)

> Infrastructure & DevOps Engineer heading IT at Terafort. AWS, Azure, GCP, CI/CD, networking, security and LLMOps.

Nearly 4 years across AWS, Azure and GCP, CI/CD automation, systems administration, and enterprise networking and security — from sole IT person for an industrial site to Head of IT for 200+ users. Currently leading LLMOps adoption with a LiteLLM gateway and custom MCP connectors for Claude.

## At a glance
- Current role: Senior IT Executive & DevOps Engineer at Terafort Limited
- Location: Lahore, PK
- Availability: Open to On-site, Hybrid & Remote Roles
- Email: faizan.brw.pk@gmail.com
- LinkedIn: https://linkedin.com/in/faizan00
- GitHub: https://github.com/Faidot
- CV (PDF): https://www.sudofaizan.me/cv/Muhammad-Faizan-CV.pdf

## Portfolio pages
- [Full portfolio](https://www.sudofaizan.me/)
- [Muhammad Faizan — DevOps Engineer Portfolio](https://www.sudofaizan.me/devops): DevOps engineer portfolio: self-hosted GitLab on AWS for 100+ developers at ~$70/month, GitLab CI/CD and GitHub Actions, Terraform, Prometheus, Grafana and LiteLLM.
- [Muhammad Faizan — IT Manager & Head of IT Portfolio](https://www.sudofaizan.me/it-manager): IT portfolio of the Head of IT at Terafort, Lahore: IT operations for 200+ users, secure networks, Google Workspace and Microsoft 365, vendors and SaaS spend.
- [Muhammad Faizan — Systems Engineer Portfolio](https://www.sudofaizan.me/systems-engineer): Systems engineer portfolio: Windows Server, Active Directory, Linux and RDP, pfSense firewalls, MikroTik routing, VLANs, VPN tunnels and tested backups.
- [Case study: Self-Hosted GitLab on AWS](https://www.sudofaizan.me/work/gitlab)

## Services offered
- DevOps & CI/CD pipelines
- LLMOps & AI tooling (LiteLLM, MCP, n8n)
- DevSecOps: network security, firewalls & VPN
- Self-hosted GitLab setup & optimisation
- Cloud infrastructure (AWS · Azure · GCP)
- Systems administration (Windows/Linux, AD, RDP)
- Subscription & cloud cost management
- CCTV & surveillance systems
- IT department setup for studios and growing companies

## Skills
- DevOps: Docker, GitLab CI/CD, GitHub Actions, Git, Terraform, Prometheus, Grafana, Discord (CI alerts), Self-Hosted GitLab
- LLMOps: LiteLLM, MCP, Claude, n8n, Agentic AI, Agentic DevOps, AI Workflows, LLMOps Costs
- DevSecOps: IAM, User Access Mgmt, SSL/TLS, pfSense, VLANs, VPN, RADIUS, Endpoint Security, Backup & Recovery, Cloudflare
- Cloud: AWS EC2, S3, RDS, Route 53, VPC, Azure, GCP, BigQuery, Google Play Console, Vercel
- Network: MikroTik, LAN/WAN, Routing & Switching, Ruckus, CCTV
- SysAdmin: Windows Server, Active Directory, Linux, VMs, RDP, DNS, DHCP
- Web Deploy: Django, Next.js, Nginx, PostgreSQL, cPanel, Namecheap, GoDaddy
- IT Ops: Google Workspace, Microsoft 365, ERP, Asset Mgmt, Procurement, Vendors, SaaS & AI Tools, Brex

## Projects
- Self-Hosted GitLab on AWS (DevOps): Deployed and manage a self-hosted GitLab instance on AWS serving 100+ developers — repositories, projects, CI/CD pipelines and user access — running at under $100/month (optimised to ~$70/month), instead of paying per-seat SaaS pricing. Tools: AWS EC2, GitLab CI/CD, Custom domain + SSL, User access.
- Prometheus Dashboard (DevOps · Observability): Data analytics and monitoring dashboard covering 200+ apps and games, aggregating Google Play Console and other platforms via BigQuery. Hosted on AWS (EC2, RDS), provisioned with Terraform, visualised in Grafana, with CI/CD and Discord notifications. Tools: BigQuery, Terraform, Grafana, EC2 · RDS.
- LiteLLM Gateway + MCP (LLMOps): Deployed LiteLLM as the central LLM gateway for API key, budget and model-routing management, and built custom MCP server connectors integrating internal tools with Claude AI workflows. Tools: LiteLLM, MCP, Claude, n8n.
- Firewalls, VPN & VLANs (DevSecOps): Own the network security layer across sites: pfSense firewall policies, MikroTik routing, VLAN segmentation, site-to-site and remote-access VPN tunnels, and Ruckus wireless — keeping 200+ users connected and segmented safely. Tools: pfSense, MikroTik, VPN, VLAN, Ruckus.
- RDP Server Infrastructure (Remote Access): Built and administered the RDP (Remote Desktop) server environment used for centralised application and ERP access — user provisioning via Active Directory, session management, and day-to-day support for staff connecting from across the site. Later administered Windows Server / RDP environments again at The Hexaa and Terafort. Tools: Windows Server, RDP, Active Directory, ERP access.
- Industrial Site Rebuild, Fine Packages (Infrastructure): Rebuilt the site network from scratch: MikroTik routing with hotspot logins authenticated through RADIUS, analogue and IP cameras recording to DVR/NVR, and centralised access through the RDP server and Active Directory. Tools: MikroTik, RADIUS, CCTV, Active Directory.
- n8n Workflows @ The Hexaa (LLMOps · AI Automation): Led AI automation at a software house / gaming studio: built AI workflows and automations with n8n and agentic AI tools for the studio's games and web projects, and deployed and maintained the servers and hosting behind them (GitHub / GitLab). Tools: n8n, Agentic AI, Deployments, GitHub.
- Subscriptions & Cost Management (Spend): Manage the full subscription stack for a 200-user studio: SaaS and AI tool subscriptions, Cloudflare, Google Workspace, and Brex corporate cards — plus LLMOps cost control through the LiteLLM gateway. Tools: Brex, Cloudflare, SaaS, LLMOps costs.
- App & Game Deployment Pipelines (DevOps · Delivery): CI/CD pipelines with GitLab CI/CD and GitHub Actions deploying Django and Next.js apps and games to AWS and Vercel — plus domains and hosting across Namecheap and GoDaddy, and the company website build. Tools: GitLab CI/CD, GitHub Actions, Django, Next.js, Vercel.

## Experience
### IT Officer — Fine Packages (Pvt) Ltd — Industrial / Manufacturing (Mar 2023 – Apr 2025)
- Sole IT person for the entire industrial site; redesigned the complete IT and network infrastructure from the ground up.
- Configured MikroTik routing and hotspot services and a RADIUS server; managed LAN/WAN, network security and server monitoring and optimisation.
- Installed and managed analogue and IP CCTV systems with DVR/NVR storage; administered the RDP server and Active Directory.
- Managed ERP software with ERP vendors, company email, cPanel and websites, and backup and data-recovery processes.
### IT Executive — The Hexaa — Software House & Gaming Studio (Apr 2025 – Oct 2025)
- Led AI automation and deployment work: built AI workflows and automations with n8n and agentic AI tools for the studio’s games and web projects.
- Deployed and maintained servers and hosting environments for web and AI projects, using GitHub and GitLab for version control and deployment.
- Administered Active Directory, Windows Server and RDP, and configured routers, switches (MikroTik, TP-Link) and firewall security.
- Managed backups, system updates, endpoint security, IT procurement and vendor dealing.
### Network Consultant — Winterland Pakistan · Hybrid (Aug 2025 – Present)
- Consult on network services, infrastructure and server administration.
- Support IP CCTV and surveillance systems alongside core network operations.
### Senior IT Executive & DevOps Engineer — Terafort Limited — Gaming & Mobile Apps Studio (Oct 2025 – Present)
- Head the whole IT department and own cloud, DevOps and end-to-end IT operations for 200+ users.
- Deploy and administer a self-hosted GitLab on AWS with custom domain and SSL, cost-optimised to ~$70/month.
- Build CI/CD pipelines with GitLab CI/CD and GitHub Actions deploying Django and Next.js apps and games to AWS and Vercel.
- Administer multi-cloud infrastructure (AWS, Azure, GCP) alongside on-prem servers, VMs and Active Directory.
- Manage pfSense firewall policies, MikroTik routing, VLANs, VPN tunnels and Ruckus wireless access points.
- Deployed LiteLLM as the central LLM gateway and built custom MCP connectors for Claude AI workflows.
- Manage SaaS, AI, Cloudflare and Google Workspace spend, including Brex corporate card administration.

## Education and certifications
- BBIT — Virtual University of Pakistan — Final semester · 2023 – 2027 (Exp.)
- ICS — Superior College, Burewala — Completed 2022
- Matric (Science) — KPS School, Burewala — Completed 2020
- AWS DevOps — In Progress
- Computer System Engineering — 1-Year Certificate
- CCNA — Skills-Based Knowledge
- Cyber Security — Certification

## Quick answers
- Where are you based? Lahore, Pakistan, and open to on-site, hybrid and remote roles.
- What roles are you looking for? DevOps, LLMOps and DevSecOps engineering roles, or leading IT and infrastructure for a growing studio or company.
- Do you take consulting work? Yes. I already consult on networks for Winterland Pakistan alongside my full-time role at Terafort.
- Experience? Nearly 4 years (since March 2023) across manufacturing, a software house/gaming studio, and a gaming & mobile apps company.