--- title: "Mohammad Abu Mattar" author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/ --- # Mohammad Abu Mattar I'm Mohammad Abu Mattar, an AWS-certified DevOps engineer. Multi-account AWS for fintech: 15+ accounts, 20+ production microservices, 96% security posture. ## About I look after 15+ AWS accounts and 20+ production microservices for fintech, under PCI-DSS. Day to day that means Terraform, GitOps with ArgoCD, and the compliance work most people would rather skip: IAM boundaries, evidence that survives an audit, controls that hold when someone is in a hurry. Production security posture currently sits at 96%. ## Experience ### Cloud & DevOps Manager, Motory · Full-time, Mar 2026 - Present, Al Hamra, Jeddah · Amman, Jordan I run the cloud strategy and platform engineering for Motory, a large automotive marketplace. I manage a multi-cloud environment across AWS, Huawei Cloud, and Hetzner, staying about 70% hands-on with the architecture and code. I lead a DevOps team responsible for the reliability, scalability, and security of our production microservices serving 1M+ active users. I also own our CI/CD practices, cost optimization, and compliance work in a high-availability, multi-region setup. - **Infrastructure as Code:** Moved everything from manual console clicks to 100% Terraform. I set up GitOps using ArgoCD and Helm to keep our deployments consistent and auditable. - **Modernization:** Led the shift from a monolith to microservices for 1M+ users. I wrote a multi-runtime Helm chart that standardized how we handle scaling, probes, and networking across all services. - **Custom Tooling:** Built a custom Kubernetes operator in Go to solve a specific provisioning problem that standard controllers couldn't handle. It plugs into the existing Helm and ArgoCD delivery flow, so the resources it manages deploy the same way everything else does. - **CI/CD & Delivery:** Built pipelines using Jenkins and ArgoCD that improved deployment speed by 60%. This includes a private OCI registry and a Kong API gateway. I also added multi-arch builds and automated chart publishing, so releases stopped needing a person to babysit them. - **Reliability & SRE:** We hit 99.999% uptime. I automated cross-region disaster recovery between the Middle East and China using Ansible and the Huawei SDK, and I run our observability stack (Prometheus/Grafana/Loki). On-call runbooks and regular DR drills are part of our routine. - **Cost & Security:** Cut infra costs by 20% while tightening security to meet PCI-DSS and SOC2 standards. This involved identity-as-code via Keycloak, hardening our WAF and VPN, and moving secrets onto KMS/CSMS. - **Team Leadership:** I lead the DevOps team and own the platform roadmap. I also run internal K8s and Docker training for our developers and handle the vendor relationships. ### Assistant Manager DevOps Engineer, Jordan Ahli Bank · Full-time, Oct 2024 - Feb 2026, Amman, Jordan I was platform owner for the bank's AWS estate. Regulated banking means every change needs an audit trail and a rollback that works, so most of the job was making the correct path the easy one and then proving it to auditors. - **Platform ownership:** Ran 15+ AWS accounts and 20+ production microservices, against the availability and disaster-recovery targets a bank actually gets held to. - **Terraform & GitOps:** Standardized deployments on Terraform, with ArgoCD and Atlantis so changes landed through review instead of the console. Handled autoscaling and right-sizing for production workloads. - **Security posture:** Got to 96% across every account using IAM Identity Center, AWS Organizations, and PCI-DSS controls backed by CloudTrail, AWS Config, and Security Hub. - **Delivery pipelines:** Built the delivery path on AWS CodePipeline and GitHub Actions, with automated testing and security scanning before anything reached production. - **Release engineering:** Ran weekly releases and hotfixes across dev, QA, and prod. Zero-downtime deploys, a rollback anyone on-call could run, and a real go/no-go call before shipping. - **Production support:** Centralized monitoring on Prometheus, Grafana, and CloudWatch, plus the incident response workflow and the longer-term platform roadmap. ### DevOps Engineer, cirrusgo (AWS Partner) · Full-time, Mar 2023 - Sep 2024, Amman, Jordan cirrusgo is an AWS partner working with businesses across the MENA region.

I was the engineer on hybrid AWS builds for 8+ enterprise clients, several of them fintech. Most of them arrived with an on-premises estate they were not going to abandon, so the work was making AWS and their existing racks behave like one platform without upsetting whichever regulator they answered to. - **Solution architecture:** Designed the end-to-end builds (microservices, event-driven, serverless) and brought cloud costs down 25-40% through right-sizing, reserved instances, and switching off what nobody was using. - **IaC foundations:** Set up the Terraform and Terragrunt layer and the multi-account, multi-environment structure on AWS Organizations, then wrote the documentation that went with it. - **Container platforms:** Ran containerized workloads on ECS, Fargate, and EKS across dev, UAT, and prod, deployed through GitOps with hardened images. - **CI/CD:** Built pipelines on GitHub Actions and AWS CodePipeline/CodeBuild with canary deploys, automated tests, manual approvals, and promotion from dev to UAT to prod. - **Security & compliance:** Handled access control and compliance across three regions (Middle East, US East, Europe) and the on-premises side, with security scanning and monitoring running unattended. ### Software Engineer - Microservices, Nagarro · Contract, Feb 2022 - May 2022, Remote Nagarro is a German software services company doing consulting and outsourcing work.

A short contract on the fintech side, working on Spring Boot services that moved money and the PostgreSQL layer underneath them. - **Fintech services:** Built Spring Boot microservices for transaction processing, and stayed with them through the full SDLC rather than handing them off at merge. - **PostgreSQL:** Owned persistence, including schema migrations and connection pooling. - **Front end:** Built components in Angular, HTML, and CSS, and cleared production bugs and performance problems as they surfaced. - **Documentation:** Wrote the technical docs so the next person did not have to reverse-engineer any of it. ### Full Stack Developer, Freelance · Full-time, Jan 2020 - Feb 2023, Amman, Jordan · Remote Client work I ran end to end, alongside a full-time job for most of it. Fintech backends in Spring Boot, React front ends, and everything around the code: scoping, timelines, and the awkward conversations about what would actually ship. - **Scoping:** Ran the conversations that turned a vague ask into something buildable, and kept clients honest with me about what they actually needed first. - **Backend:** Designed Spring Boot microservices for fintech clients, with PostgreSQL and other databases behind them. - **Front end:** Built responsive interfaces in React, HTML, and CSS, tested on the devices the clients' customers were really using. - **Delivery:** Managed timelines and deliverables, and owned the client relationship directly with nobody in between. ### Teacher Assistant/Lab Supervisor, Isra University · Full-time, Dec 2018 - Dec 2019, Amman, Jordan Isra University is a private institution in Amman offering undergraduate and postgraduate programs.

I taught C++ fundamentals and ran the lab sessions. In practice I was the person students came to when the compiler said something they could not decode. - **Lab sessions:** Built and ran the C++ labs, and sat with students while they worked through the exercises rather than just handing them out. - **Curriculum:** Worked with faculty to design and update the lab material. - **Support:** Helped students and faculty with whatever programming problem was blocking them. - **Feedback:** Tracked how students were progressing and told them plainly where they stood. ### Web Developer, Greater Amman Municipality · Apprenticeship, Dec 2017 - Feb 2018, Amman, Jordan The Greater Amman Municipality runs the city's administration and planning.

My first job in the field: a short apprenticeship building internal web tools, mostly front-end work in HTML, CSS, and JavaScript. - **Internal tools:** Built and maintained web applications for the administrative teams. - **Requirements:** Sat with the team to work out what they needed before writing any of it. - **Testing:** Tested and debugged what I shipped instead of waiting for someone to report it. - **Training:** Supported and trained the people who had to use the tools every day. ## Education ### AWS Certified Developer - Associate, Amazon Web Services (AWS), Issued Feb 2024 · Expires Feb 2027 Covers developing, deploying, and debugging applications on AWS, plus core AWS services and the application lifecycle. ### AWS Certified Cloud Practitioner, Amazon Web Services (AWS), Issued Oct 2023 · Expires Feb 2027 Foundational AWS knowledge: core services, pricing, security, and architecture. ### AWS Academy Graduate - AWS Academy Cloud Foundations, Amazon Web Services (AWS), Issued Nov 2022 Intro-level AWS coursework covering compute, networking, databases, and storage. ### Advanced Software Development, Code Fellows, Issued Sep 2021 Full-stack development, testing, and advanced programming concepts, taught through agile team projects. ### Bachelor of Technology - BTech, Software Engineering, Isra University, Oct 2014 - June 2018 Studied core software engineering principles, data structures, algorithms, and system design. Gained hands-on experience in programming, databases, and software development life cycle (SDLC).

Achievements: First place winner in individual project at annual Technology Day contest. Contributed to establishment and growth of Faculty of Information Technology Club. ## Projects ### QuenchWorks, 0-CVE Hardened Images & Helm Charts A from-scratch, security-first replacement for the Bitnami catalog: container images and Helm charts built entirely from source on Wolfi, hardened under a strict 0-CVE build gate, cryptographically signed, and pinned by digest. Free, independent, and fully self-hostable. Technologies: apko, melange, Wolfi, Helm, Kubernetes, Trivy, Cosign, SLSA, Go, AstroJS - [Live Site](https://quench-works.com/) - [ArtifactHub (Verified Publisher)](https://artifacthub.io/orgs/quenchworks) - [GitHub Organization](https://github.com/quenchworks) - [Charts](https://github.com/quenchworks/charts) - [Common (library chart)](https://github.com/quenchworks/common) - [Website](https://github.com/quenchworks/website) ### sysdesign, System Design Knowledge for AI Agents A Claude Code plugin that wires tradeoff-first system design knowledge into your AI agent: one skill, eleven commands, and fourteen self-contained reference files. Explain a concept, compare options, pressure-test an architecture, estimate capacity, or prep an interview, with every tradeoff stated, not hand-waved. Original prose, MIT-licensed, works fully offline. Technologies: Claude Code, Markdown, Python, Mermaid - [Live Site](https://sysdesign.mkabumattar.com/) - [View Source](https://github.com/mkabumattar/sysdesign) ### Mathematics - Formula Reference A clean, searchable web reference for mathematical formulas across algebra, geometry, trigonometry, and calculus. It cuts the clutter most references bury you in. Formulas render with server-side KaTeX on focused topic pages, with no accounts, tracking, or ads. Technologies: AstroJS, TypeScript, Tailwind CSS, React, KaTeX, MDX - [Live Documentation](https://mathematics.mkabumattar.com/) - [View Source](https://github.com/MKAbuMattar/mathematics) ### NetCalc Pro NetCalc Pro Cloud Engineering Suite is a web application for subnetting, CIDR calculations, and VLSM. It has a Zero Trust, no-backend architecture with a Terminal Brutalist UX, so network engineers can plan address space, share state via Base64 URLs, and use the whole toolset without a backend server. Technologies: AstroJS, TypeScript, Tailwind CSS, Nanostores - [Live Documentation](https://netcalc-pro.mkabumattar.com/) ### Rawi - AI CLI Documentation Tool A CLI tool that generates documentation for command-line applications using AI. Rawi analyzes your CLI commands and creates detailed, structured documentation automatically. Technologies: TypeScript, Node.js, AI/ML, CLI, NPM - [Live Documentation](https://rawi.mkabumattar.com/) - [View Source](https://github.com/withrawi/rawi) - [NPM Package](https://www.npmjs.com/package/rawi) ### AWS Icons - AWS Architecture Icons for Every Stack The official AWS Architecture Icons packaged as 16 npm packages under one scope: raw SVG, React, Preact, Vue, Solid, Svelte, Astro, Angular, Lit, Web Components, Alpine.js, htmx, React Native, Qwik, Iconify collections, and SVG sprites. A monthly pipeline syncs the official AWS icon set and releases every package automatically. Supersedes the archived aws-icons and aws-react-icons packages. Technologies: TypeScript, SVG, React, Vue, Angular, AstroJS, NPM, GitHub Actions - [Docs & Gallery](https://aws-icons.mkabumattar.com/) - [View Source](https://github.com/MKAbuMattar/aws-icons) - [All Packages (@aws-icons)](https://www.npmjs.com/org/aws-icons) ### Devicons Pack - Programming Icons for Every Stack Devicons (programming languages, tools, and tech logos) packaged as 16 npm packages under one scope, from raw SVG to React, Vue, Svelte, Angular, React Native, Qwik, Iconify, and more. Weekly pipeline tracks devicons/devicon (master feeds stable, develop feeds the beta channel). Supersedes the archived devicons-react package (8k+ weekly downloads). Technologies: TypeScript, SVG, React, Vue, Svelte, AstroJS, NPM, GitHub Actions - [Docs & Gallery](https://devicons-pack.mkabumattar.com/) - [View Source](https://github.com/MKAbuMattar/devicons-pack) - [All Packages (@devicons-pack)](https://www.npmjs.com/org/devicons-pack) ### Fluent UI Emoji - Microsoft Emoji for Every Stack Microsoft Fluent UI Emoji packaged as 16 npm packages under one scope: raw SVG, React, Preact, Vue, Solid, Svelte, Astro, Angular, Lit, Web Components, Alpine.js, htmx, React Native, Qwik, Iconify collections, and SVG sprites. A weekly pipeline syncs microsoft/fluentui-emoji and releases every package automatically. Supersedes the archived fluentui-emoji and react-fluentui-emoji packages. Technologies: TypeScript, SVG, React, Vue, Svelte, AstroJS, NPM, GitHub Actions - [Docs & Gallery](https://fluentui-emoji.mkabumattar.com/) - [View Source](https://github.com/MKAbuMattar/fluentui-emoji) - [All Packages (@fluentui-emoji)](https://www.npmjs.com/org/fluentui-emoji) ### igntui - .gitignore Generator TUI A Terminal User Interface (TUI) and CLI for generating .gitignore files from gitignore.io templates. It has smart search, multi-template selection, live preview, and caching for instant access to 571+ templates. Technologies: Python, TUI, CLI, PyPI, curses - [View Source](https://github.com/MKAbuMattar/igntui) - [PyPI Package](https://pypi.org/project/igntui/) ### Asciiquarium - Python Edition An aquarium and sea animation in ASCII art for your terminal. This is a Python reimplementation of the classic Perl asciiquarium, with multiple fish species, sharks, whales, ships, and sea monsters animated at 30 FPS. Technologies: Python, TUI, ASCII Art, PyPI, Animation - [View Source](https://github.com/MKAbuMattar/asciiquarium-python) - [PyPI Package](https://pypi.org/project/asciiquarium/) ### Notebook - Browser-Based Markdown Editor A simple notebook that lives entirely in your browser. Everything you type is saved automatically and tucked into the URL. Your work stays private and follows you wherever you go, with no account needed. Technologies: Web, AstroJS, Markdown, Local Storage - [View Source](https://github.com/MKAbuMattar/notebook) - [Try Notebook](https://notebook.mkabumattar.com/)