# Abdul Hadi > Abdul Hadi is a cloud, DevOps and AI infrastructure engineer based in Pakistan and a Solutions Architect at SazebTech Consulting. He is a Certified Kubernetes Administrator (CKA) and AWS Certified Solutions Architect who builds Kubernetes and OpenShift platforms, AWS and Azure environments, private clouds (Ceph, Patroni, Cloudera) and LLM inference infrastructure. - Website: https://abdul-hadi.me/ - LinkedIn: https://www.linkedin.com/in/abdulhadi-cloud/ - GitHub: https://github.com/AbdulHadi1010 - Medium: https://medium.com/@abdul-hadi - YouTube: https://www.youtube.com/@KernelfulCloud - Contact: use the email shown on the website's contact section ## Experience - Solutions Architect, SazebTech Consulting: Cloud migrations, Kubernetes platforms and private cloud builds for enterprise clients: HA PostgreSQL with Patroni, Ceph object storage behind HAProxy and Keepalived, Thales CipherTrust key management. - Author, Secure but Broken?, Independent research: Deployment-validated evaluation of LLM security repairs for Kubernetes. Paper, protocol and data are public. - Workshop lead, AI on AWS for CS students: Taught students to ship a Bedrock agent on Lambda and DynamoDB from an empty AWS account. - CKA · AWS Solutions Architect · Azure Fundamentals, Certifications: Published a CKA practice question set and an exam guide on Medium. - Speed Coding winner, PUCON '23: Moved fast. Didn't break things. - BS Computer Science, University of Central Punjab: Started with React and React Native, ended up in infrastructure. ## Selected work - [Secure but Broken?](https://github.com/AbdulHadi1010/secure-but-broken) (Research, 2026): Do LLM-written fixes for Kubernetes security misconfigurations still work once deployed? Every repair is applied to a fresh cluster and has to pass seven gates: scanner rules, no new findings, server-side dry run, readiness, real user journeys, a load test against a measured baseline, and the original security intent checked by policy and a runtime probe. Result: Pre-registered protocol, 18 cases, full replication package with DOI. - [EKS storage, 1,500 → 127,000 IOPS](https://medium.com/@abdul-hadi/from-1-500-to-127-000-iops-our-journey-with-aws-eks-storage-7193c63ec5b3) (Production, 2025): Pods were slow while CPU and memory sat idle: the disk was the bottleneck. I ran a head-to-head on EKS between gp3 EBS on m5.large and local NVMe on a tainted i4i.xlarge node group, then wrote down the pitfalls so the next team skips them. Result: 83× more IOPS, 95× lower latency. - [Local LLMs on AWS CPU instances](https://medium.com/@abdul-hadi/from-2-5-t-s-to-27-t-s-optimizing-local-llms-on-aws-cpu-instances-a4045158e816) (AI infra, 2025): Can a 7B model act as a senior sysadmin bot on a 4 vCPU m5.xlarge with no GPU? I benchmarked Mistral 7B and DeepSeek 7B on stock Ollama with forced cold starts, then rebuilt the runtime from source for the CPU it actually runs on. Result: 2.5 → 27 tokens per second. - [Serverless AI study assistant](https://github.com/AbdulHadi1010/study-assistant) (Workshop, 2026): An agent on Amazon Bedrock (Nova Pro, Converse API tool loop) that stores courses in DynamoDB and manages a real Todoist list. Built as a hands-on workshop for first and second year CS students, with a least-privilege IAM policy and tests for every blank. Result: Runs end to end with one IAM user and one stack. - [Kubernetes clusters from bare VMs](https://github.com/AbdulHadi1010/kubernetes-setup-ansible) (Automation, 2025): Role-based Ansible playbooks that turn fresh Ubuntu machines into a working kubeadm cluster, tested with Molecule against Docker, Vagrant and EC2. Result: Same cluster, three environments, one command. ## More projects - Multi-node Kubernetes cluster (Kubernetes & containers): Fault-tolerant kubeadm cluster with RBAC, persistent storage and Prometheus/Grafana observability. - OpenShift for enterprise apps (Kubernetes & containers): Red Hat OpenShift clusters for secure multi-tenant workloads, with autoscaling and strict security contexts. - Cluster bootstrapping with Ansible (Kubernetes & containers): Playbooks that provision networking, security and monitoring the same way on every node. Setup time down 80%. - Log analytics on Kubernetes (Kubernetes & containers): Elasticsearch, Fluentd and Kibana on Kubernetes, with Grafana dashboards for cluster health. - Cassandra & Spark on Kubernetes (Kubernetes & containers): Cassandra StatefulSets and Spark workers with tuned resource limits and HDFS integration. - DeepSeek & Mistral on AWS (Cloud, DevOps & security): Private LLM hosting on c5.2xlarge (CPU) and g4dn.xlarge (GPU), with Ollama compiled for the host CPU. - Jenkins CI/CD with Docker (Cloud, DevOps & security): Automated test and release pipeline with Jenkins, Docker and GitHub, for consistent production builds. - Data security with IBM Guardium (Cloud, DevOps & security): Database activity monitoring across an enterprise fleet: real-time audit for GDPR and PCI DSS, and masking with no app changes. - Cloudera CDP health check & tuning (Cloudera & big data): Diagnosed HDFS and YARN bottlenecks on CDP clusters and tuned them for stability and faster queries. - Cloudera upgrade on Azure Data Lake (Cloudera & big data): Migrated and upgraded Cloudera workloads to Azure Data Lake under enterprise governance. - IBM Storage Ceph (Cloudera & big data): Multi-node Ceph for block and object storage, CRUSH maps tuned for throughput, 99.99% uptime. ## Writing - [Connect GitHub Actions to Azure using OIDC (no passwords)](https://medium.com/@abdul-hadi/connect-github-actions-to-azure-using-oidc-no-passwords-7d67c0876aaa) (2026-04-23) - [From 2.5 t/s to 27 t/s: optimizing local LLMs on AWS CPU instances](https://medium.com/@abdul-hadi/from-2-5-t-s-to-27-t-s-optimizing-local-llms-on-aws-cpu-instances-a4045158e816) (2025-12-11) - [Your first CI/CD pipeline in 5 minutes: GitHub Actions to AWS Lightsail](https://medium.com/@abdul-hadi/your-first-ci-cd-pipeline-in-5-minutes-github-actions-to-aws-lightsail-aeb200093934) (2025-11-19) - [From 1,500 to 127,000 IOPS: our journey with AWS EKS storage](https://medium.com/@abdul-hadi/from-1-500-to-127-000-iops-our-journey-with-aws-eks-storage-7193c63ec5b3) (2025-11-13) - [High-availability Ceph Object Gateway ingress with HAProxy and Keepalived](https://medium.com/@abdul-hadi/high-availability-ceph-object-gateway-ingress-with-haproxy-and-keepalived-6f3bc1378b75) (2025-07-04) - [Deploying a highly available PostgreSQL cluster on Linux with Patroni](https://medium.com/@abdul-hadi/deploying-a-highly-available-postgresql-cluster-on-linux-with-patroni-b8b503552f7c) (2025-07-04) - [Thales CipherTrust Manager on a private cloud](https://medium.com/@abdul-hadi/thales-ciphertrust-manager-installation-on-private-cloud-guide-2025-898afb7536d3) (2025-04-11) - [IBM Storage Ceph installation guide](https://medium.com/@abdul-hadi/ibmibm-storage-ceph-installation-guide-2025-a4943660740a) (2025-04-10) ## Skills Kubernetes, Red Hat OpenShift, Docker, Helm, Istio, Argo CD, AWS, Azure, Google Cloud, OpenStack, Terraform, Ansible, Jenkins, GitHub Actions, Prometheus, Grafana, Elasticsearch, Vault, Trivy, SonarQube, Ceph, Cloudera, Hadoop, Spark, Kafka, PostgreSQL, Amazon Bedrock, Ollama, Linux.