Naheem Qureshi

• Scaled the platform for peak travel and flight-disruption surges, load-testing and pre-scaling EKS, Kong and RDS to handle 5x normal traffic with zero customer-facing outages.
• Ran production EKS at 99.98% uptime using Karpenter autoscaling, Kubernetes operators, pod disruption budgets and chaos-engineering drills, and cut container startup time by 45%.
• Built self-service golden path templates for new services covering Helm, Terraform, CI/CD, monitoring and security checks, taking squads from repo to production in under a day instead of 2 weeks across 15+ services.
• Built GitOps delivery on ArgoCD across multi-environment EKS clusters, using Argo Rollouts for canary and blue/green releases with automated rollback, raising release velocity by 60% and cutting deployment failures by 50%.
• Led the migration from AWS API Gateway to Kong with reusable Terraform and decK modules (OAuth2, JWT, WAF, rate limiting), cutting API onboarding time by 70% and tightening zero-trust access with the Cyber team.
• Incident Commander for 24/7 P1/P2 on-call, bringing in runbook automation, better RCAs, SLO-based alerting and OpenTelemetry tracing that cut MTTR by 40% and alert noise by 60%.
• Led a Terraform modernisation across 200+ state files, upgrading to Terraform 1.10+ and AWS provider v6 with native S3 state locking, removing DynamoDB lock tables and stuck-lock incidents with no downtime.
• Embedded DevSecOps into CI/CD with Snyk, Trivy, SBOMs and severity gates that auto-raise fix PRs, cutting critical and high CVEs by 82% in 90 days.

Joined during a major modernisation programme to move legacy on-prem workloads to AWS and build automation, security and observability across hundreds of live domains and microservices.

• Led the AWS migration of legacy on-prem workloads (cron workers, HAProxy, Docker services) onto highly available EC2 and EKS, cutting infrastructure costs by 40% through automation, rightsizing and Spot/Reserved Instances.
• Automated Cloudflare for 600+ domains with Terraform, cutting rollout time from 3 days to under 30 minutes while keeping WAF, SSL and redirect policies consistent.
• Designed a multi-account AWS landing zone with SCPs, cross-account IAM, Transit Gateway and VPC endpoints. I also built baseline Terraform modules and ISO 27001 / GDPR compliance-as-code using AWS Config, Security Hub and CloudTrail.
• Ran production EKS at 99.99% uptime with Karpenter autoscaling, Helm rollouts and zero-downtime deployments. I also built reusable environment templates that sped up onboarding for new services.
• Migrated CI/CD from CircleCI to GitHub Actions, adding Atlantis GitOps for Terraform, parallel workflows and approval gates. This cut deployment times by 60% and standardised infrastructure changes across every environment.
• Built security and reliability into delivery: Snyk, Trivy and Checkov gates cut vulnerabilities by 50%+ in 3 months, and automated health checks and alarm routing cut incident response time by 45%.

Joined ECS's Cloud & DevOps practice and stayed through its acquisitions by GlobalLogic and Hitachi. Moved from solutions architecture into hands-on DevOps while leading cloud delivery for financial services, telecoms and government clients on AWS and Azure.

• Trusted technical lead for client stakeholders, turning business and regulatory requirements into cloud architectures, roadmaps and statements of work, and presenting designs to CTO and security audiences across 5+ client engagements.
• Supported pre-sales for new cloud and DevOps work through discovery workshops, estimates and solution designs, helping win £1.5M+ in new contracts including 2 follow-on engagements.
• Led a hybrid AWS and Azure migration for a proprietary trading platform, re-architecting onto EKS and Istio to raise throughput by 45% while meeting FCA and SOC 2 requirements.
• Architected a PCI-DSS Level 1 certified payment gateway on serverless AWS with KMS, Vault and private endpoints, cutting latency by 30%.
• Helped take ECS to AWS Premier Tier Partner ahead of its acquisition by GlobalLogic, delivering the client projects and certifications behind the application.
• Grew the UK&I DevOps practice from 2 to 6 engineers through the GlobalLogic integration, mentoring junior engineers on Kubernetes, automation, observability and security.

Joined as employee #16 at a London SaaS start-up and stayed through its acquisition, designing personalisation and data integrations for enterprise clients across EMEA and North America.

• Architected the move from a monolithic CMS to a headless, API-first platform, with serverless personalisation on AWS Lambda and API Gateway processing millions of events a day, which halved time-to-market for clients' new digital products.
• Designed enterprise integrations between Optimizely and CRM and marketing platforms (Salesforce, HubSpot, Eloqua, Pardot), with GDPR-compliant data flows that raised client conversion rates by 25%.
• Built AI-driven recommendation and experimentation frameworks using Python analytics pipelines, increasing user engagement by 28% across enterprise accounts.
• Led technical due diligence for regulated asset managers, covering security reviews, data residency, encryption and GDPR, which cut security sign-off time by 40% and unblocked £500k+ in deals.
• Migrated 40+ enterprise clients onto the Episerver platform after the acquisition with no service disruption, and kept 95% client retention across my accounts.
• Led pre-sales and technical discovery for 350+ accounts, running workshops, demos and SoWs and closing 7 deals worth £60k–£250k with top-50 asset managers including BNP Paribas, Allianz and Fidelity.
• Shaped the product roadmap from client insight, working with engineering to ship 5+ enterprise features, built reusable demo environments that cut pre-sales prep time by 50%, and mentored a team of 6.