Hamza works on the layer most platforms leave implicit: the boundary. Isolation between tenants, hardening of the nodes underneath, and the guardrails that decide what a workload is allowed to do once it is running.
On Klastro he designed the isolated assessment sandboxes, virtual clusters with hardened network boundaries that keep concurrent candidate sessions genuinely separate. He automated the sovereign infrastructure they run on, Scaleway bare metal with Talos Linux, provisioned through Pulumi in Go so the environments are reproducible and immutable rather than repaired in place.
The rest of his work is the DevSecOps surface around that: Kubernetes-native guardrails across shared services, secret management, vulnerability scanning, policy enforcement, and the Prometheus, Grafana, and Loki stack that makes the result observable.
Focus areas
- Kubernetes
- Talos Linux
- vCluster
- Pulumi
- Multi-tenancy
- DevSecOps
- OPA Gatekeeper
- HashiCorp Vault
- Prometheus & Grafana
- Go & Kubebuilder
Field record
Where the experience comes from
-
Edixos
Platform Engineer
On Klastro, designed isolated technical assessment sandboxes with virtual clusters and hardened network boundaries for multi-tenant candidate sessions. Automated sovereign platform infrastructure on Scaleway bare metal with Talos Linux and Pulumi in Go, and implemented the Kubernetes-native guardrails and DevSecOps controls across shared services.
- Kubernetes
- Talos Linux
- Pulumi
- Go
- vCluster
- ArgoCD
- Prometheus
- Ory
-
AsteelFlash
Network & Systems Administration Intern
Network configuration, troubleshooting, and security hardening, with server monitoring and performance optimization.
- Networking
- Linux
- Monitoring
Want this expertise on your platform?
Tell us what is blocking you. We will tell you who takes it and how they would approach it.