Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
MohamedKaba
Infrastructure · Cloud Architecture · Zero-Trust Security
AWS Certified
Azure
Zero-Trust IAM
SysAdmin
DevSecOps
scroll
// evolution of focus
FOUNDATION
Infrastructure
Mastery
Mastery
Strong foundation in server administration, systems engineering, and networking, with hands-on experience supporting reliable business infrastructure. Experienced in maintaining system stability, critical services, secure connectivity, and operational continuity.
01
ELEVATION
Cloud
Architecture
Architecture
Designing scalable, automated environments across AWS & Azure. Bridging legacy on-prem systems with high-availability cloud infrastructure through IaC, CI/CD automation, and resilient multi-region deployments prioritizing performance, scalability, and operational continuity.
02
MISSION
Cloud
Security
Security
Architecting Zero-Trust security frameworks and automating IAM at scale across hybrid and cloud-native environments. Focused on building resilient, adaptive security models that proactively protect systems, identities, and access layers through automation, policy enforcement, and continuous validation.
03
kaba@node.js:~$ cat profile.json
# ──--- Profile ─────
"name": "Mohamed Kaba"
"role": "Infrastructure Systems Engineer"
"focus": ["DevOps", "CloudArch", "ZeroTrust"]
"certs": "AWS | Azure | Terraform | Cisco"
"threat_model": "assume-breach"
"uptime_sla": 99.6%
"status": "CI/CD - Continuous Improvement Continuous Development"
kaba@node.js:~$
Things I've Built.
// all projects
Applications
Sporting E-commerce Platform🟢 Production-ready
An sporting goods e-commerce platform showcasing an enterprise-grade infrastructure and modern cloud architecture. Focuses on scalability, observability, containerized deployments, disaster recovery, cloud design. It includes a Next.js storefront and admin applications backed by PostgreSQL database and Prisma ORM.
Next.js 16PostgreSQLPrisma 7DockerFullstack development
Applications
API Powered Weather App🟢 Production-ready
A hybrid-architecture web application, using a static S3-hosted frontend and a scalable serverless backend. Used AWS Lambda and API Gateway to execute dynamic processing, optimizing infrastructure costs. Strengthened security by migrating sensitive API credentials to protected Lambda Environment Variables.
ApacheAWS LambdaAPI GatewayPython
Cloud Infrastructure
AWS Enterprise Migration🟢 Production-ready
Migration of a Sporting E-commerce Platform to AWS, mapping workloads to cloud-native services for performance, scalability, and reliability. Backed by Amazon EC2, Auto-scaling, Neon PostgreSQL DB. CI/CD pipeline is configred with Github Actions, new deployments build isoloted AMI artifacts. Infrastructure is deployed and mangaged by Terraform IaC.
TerraformAWSControl TowerIAMS3
Cloud Infrastructure
Azure Migration Solution🟢 Production-ready
Sporting E-commerce Platform migration to Azure using a containerized architecture. Terraform provisions the infrastructure, while Azure DevOps CI/CD builds, pushes, and deploys container images through Azure Container Registry to Azure Container Apps. Scalability, security, monitoring, and high availability built into the design.
ProxmoxWazuhGraylogZeekLinux
DRaaS / BaaS
Disaster Recovery 🟢 Production-ready
Disaster recovery orchestration for the Mavencrest Azure container platform. This repository handles a full recovery using two repositories as its source of truth: MavencrestAzure — Terraform IaC E-commerce - Application source and Docker images. DR orchestration pipeline runs depending on level of failure detected.
Azure Site RecoveryAzure BackupRecovery VaultTerraform
Cloud Infrastructure
Multi-Region AWS Landing Zone 🚧 In Progress
Automated provisioning of a secure, multi-account AWS environment using Terraform and AWS Control Tower to enforce governance and scalable cloud architecture. This includes Service Control Policies, security guard rails, IAM permission boundaries, and centralized identity management.
TerraformAWSControl TowerIAMS3
Cloud Infrastructure
Azure Landing Zones 🚧 In Progress
A secure, scalable Azure cloud foundation using Terraform, incorporating Azure Policy, management groups, RBAC, identity governance, security guardrails, and centralized resource management to enforce governance across environments.
TerraformAzureManagement GroupsAzure PolicyRBAC
Containers
Kubernetes DockingStation 🚧 In Progress
A Kubernetes deployment of a containerized e-commerce application featuring horizontal pod autoscaling, rolling updates, service discovery.
ApacheDockerDocker ComposeLinux
Security
Container DevSecOps 🚧 In Progress
Cloud based CI/CD pipeline that automatically builds, tests, scans, and verifies Docker images for vulnerabilities before they can ever be deployed.
ApacheAzure Container RegistryTerraform CI/CD
Cloud Infrastructure
Centralized Analytics Dashboard 🚧 In Progress
Monitor, aggregate data, and observe an entire Mavencrest ecosystem. ex: container health—into. Visualization Layer with Grafana
TerraformAWSControl TowerIAMS3
Cloud Infrastructure
FinOps Platform 🚧 In Progress
Cloud cost governance platform providing real-time spend visibility, budget management, reporting, resource optimization, and savings recommendations across multi-cloud environment.
AzureAWSPower BITerraformFinOps
Cloud Infrastructure
Secure Infrastructure ⏸ On Hold
Secure infrastructure across cloud and hybrid environments, focusing on identity-first security, network hardening, and least-privilege access controls. Focuses on security best practices including IAM governance and continuous monitoring.
TerraformAWSControl TowerIAMS3
← Back to Projects
Fullstack Development
Sporting E-commerce Platform
A production-ready sporting goods e-commerce platform built with separate Next.js storefront and administration applications, Google OAuth and email/password authentication, Docker support, nginx, PostgreSQL, and Prisma 7 ORM.
Production-ready
Next.js 16PostgreSQLPrisma 7nginxDockerGoogle OAuth
Architecture Diagram
Select the project from the Projects tab to open this expanded architecture view.
Demo / Documentation
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Applications
API Powered Weather App
A hybrid web application that separates a static frontend from an AWS serverless backend. API Gateway invokes Lambda for dynamic processing while credentials remain protected in Lambda.
Production-ready
ApacheAWS LambdaAPI GatewayPython
Architecture Diagram
Select the project from the Projects tab to open this expanded architecture view.
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Containers
Kubernetes DockingStation
A Kubernetes deployment of a containerized e-commerce workload demonstrating ingress routing, service discovery, rolling updates, horizontal pod autoscaling, and high availability.
In progress
KubernetesDockerIngressHPALinux
Architecture Diagram
UsersApplication traffic
→
IngressHost and path routing
→
ServiceStable application endpoint
→
Application PodsReplicated containers
→
Horizontal Pod AutoscalerReplica scaling
→
Config / SecretsRuntime configuration
→
Persistent DataDatabase tier
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Cloud Infrastructure
Multi-Region AWS Landing Zone
A governed multi-account AWS foundation using Terraform and AWS Control Tower with centralized identity, Service Control Policies, permission boundaries, logging, and regional guardrails.
In progress
TerraformAWSControl TowerIAMOrganizations
Architecture Diagram
AWS OrganizationEnterprise account hierarchy
→
Control TowerLanding-zone orchestration
→
Management AccountCentral governance
→
Security OUAudit and log archive
→
Workload OUsProd and non-prod
→
SCP GuardrailsPreventive controls
→
Central LoggingOrganization audit trail
→
Regional FoundationsMulti-region baseline
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Cloud Security
Secure Infrastructure
A secure cloud and hybrid infrastructure design centered on identity-first controls, network segmentation, least privilege, centralized monitoring, and policy enforcement.
In progress
TerraformAWSIAMZero TrustMonitoring
Architecture Diagram
IdentitiesUsers, roles and workloads
→
Identity ProviderCentral authentication
→
Policy EngineLeast privilege
→
Segmented NetworkRestricted trust zones
→
Protected WorkloadsHardened resources
→
Central MonitoringSecurity telemetry
→
AlertingDetection and response
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Security
Container DevSecOps
A secure container delivery pipeline that builds, tests, scans, verifies, and publishes Docker images to Azure Container Registry before deployment.
In progress
Azure Container RegistryTerraformDockerCI/CDSecurity Scanning
Architecture Diagram
Code PushApplication change
→
CI WorkflowPipeline automation
→
Build and TestApplication validation
→
Image ScanVulnerability detection
→
Policy GateApproval criteria
→
Azure Container RegistryTrusted image storage
→
Deployment TargetApproved runtime
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Cloud Infrastructure
AWS Enterprise Migration
A production-style migration of the e-commerce platform to AWS using Terraform, EC2 Auto Scaling, an Application Load Balancer, VPC networking, object storage, and PostgreSQL.
Production-ready
TerraformAWSEC2ALBPostgreSQLS3
Architecture Diagram
Select the project from the Projects tab to open this expanded architecture view.
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Cloud Infrastructure
Azure Migration Solution
An Azure migration solution using Azure Functions and API Management to provide a scalable, decoupled backend with managed security and minimal server administration.
Production-ready
Azure FunctionsAPI ManagementTerraformAzureMonitoring
Architecture Diagram
Select the project from the Projects tab to open this expanded architecture view.
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Observability
Centralized Analytics Dashboard
A centralized telemetry platform designed to ingest infrastructure and application data, process it through a shared pipeline, and visualize health, usage, errors, and operational trends.
In progress
GrafanaTelemetryTerraformAWSMonitoring
Architecture Diagram
ApplicationsMetrics, logs and events
→
CollectorsTelemetry ingestion
→
Streaming PipelineEvent transport
→
Processing LayerTransformation
→
Metrics / Log StoreCentral retention
→
GrafanaDashboards
→
AlertingNotifications
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
FinOps
FinOps Platform
A multi-cloud cost governance platform providing spend visibility, budgets, chargeback and showback, optimization findings, and actionable savings recommendations.
In progress
AzureAWSPower BITerraformFinOps
Architecture Diagram
AWS and AzureCloud billing sources
→
Cost ExportUsage and billing data
→
Ingestion PipelineScheduled collection
→
Cost Data StoreNormalized cost records
→
Allocation EngineTags and business units
→
Optimization RulesSavings findings
→
Power BIDashboards
→
Budget AlertsThreshold notifications
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
DRaaS / BaaS
Disaster Recovery
A cloud-based backup and disaster recovery design with policy-driven backups, cross-region replication, recovery orchestration, testing, and failover.
In progress
Azure Site RecoveryAzure BackupRecovery Services VaultTerraform
Architecture Diagram
Production WorkloadsProtected services
→
Backup PolicyRetention and schedule
→
Recovery Services VaultBackup and replication
→
Cross-Region ReplicaSecondary region
→
Recovery PlanFailover workflow
→
Test FailoverValidation
→
Recovered ServicesContinuity target
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
← Back to Projects
Cloud Infrastructure
Azure Landing Zones
An enterprise-ready Azure Landing Zone built with Terraform, management groups, Azure Policy, RBAC, central logging, networking, governance controls, and GitHub OIDC.
In progress
TerraformAzureManagement GroupsAzure PolicyRBACGitHub OIDC
Architecture Diagram
Microsoft Entra TenantIdentity boundary
→
Root Management GroupGovernance root
→
Platform MGShared services
→
Landing ZonesCorp and online
→
Azure PolicyGuardrails
→
RBACDelegated access
→
ConnectivityHub networking and DNS
→
ManagementLogging and monitoring
→
GitHub OIDCTerraform deployment
Demo / Documentation
Architecture
The diagram summarizes the primary traffic flow, application components, security controls, automation, and data services used by the project.
Engineering Focus
This project is presented as an engineering case study focused on reliability, scalability, security, repeatability, and operational clarity.
Documentation Roadmap
Add implementation screenshots, Terraform plans, deployment output, monitoring views, design trade-offs, and lessons learned as the project progresses.
credential verification
Validated Expertise.
// engineering credentials
Amazon Web Services
AWS Solutions Architect Professional
Validates advanced technical skills and experience in designing distributed applications and systems on the AWS platform. Focuses on complex multi-tier architecture strategy, cost optimization, scaling, and enterprise migration frameworks.
Advanced ArchitectureCost OptimizationEnterprise Migration
Amazon Web Services
AWS Certified SysOps Administrator
Validates technical expertise in deployment, management, security, and operations on the AWS platform. Confirms a strong understanding of system health monitoring, infrastructure automation, and resource provisioning.
OperationsDeployment AutomationMonitoring
Amazon Web Services
AWS Solutions Architect Associate
Demonstrates comprehensive knowledge of designing high-availability, cost-effective, and fault-tolerant distributed systems across AWS core services, focusing on compute, storage, networking, and security layers.
Cloud Systems DesignCore ServicesHigh Availability
Amazon Web Services
AWS Developer Associate
Demonstrates technical proficiency in developing, deploying, and debugging cloud-native applications using AWS development tools, SDKs, serverless resources, and CI/CD pipelines.
Serverless AppsCI/CD AutomationCloud Development
Cisco
Cisco Certified Network Associate (CCNA)
Validates foundational knowledge of network infrastructure, covering IP connectivity, IP services, security fundamentals, automation, programmability, and routing/switching protocols.
Routing & SwitchingNetwork SecurityIP Infrastructure
Microsoft Azure
Azure Administrator Associate AZ-104 In Progress
Validates enterprise-level skills required to implement, manage, and monitor identity, governance, storage, compute, and virtual networks in a cloud environment.
Hybrid IdentityVirtual NetworkingAzure Administration
HashiCorp
Terraform Associate (004)In Progress
Demonstrates baseline foundational understanding of cloud concepts, core Azure architecture models, management tools, compliance frameworks, and network security infrastructure options.
IaCCloud DeploymentGovernance
RedHat
Red Hat Certified System Administrator (RHCSA)In Progress
Proves proficiency in managing files, controlling the command-line shell, configuring local storage, managing user accounts, and validates essential skills in system security.
LinuxSystem AdminustrationDevOps
RedHat
Red Hat Certified Engineer (RHCE)Expected 2027
Validates the ability to automate Linux environment tasks using Ansible Automation Platform. It proves the ability to manage, configure, and provision multiple systems at scale through infrastructure-as-code
LinuxAnsible AutomationIaC
secure handshake
Let's Connect.
Establish a secure communication line or explore professional links.