Cloud · Kubernetes · Platform · Security
I run the cloud under your applications.
Architecture, security, infrastructure as code, CI/CD and production operations on AWS, Azure and Google Cloud. Fixed scope, handed over with runbooks your team can run. One accountable engineer, and Cloudlit when the work needs a team.
99.9%+ availability across 10+ production platforms for government and enterprise clients. See the case studies
Solutions
What I deliver, and what you receive.
Cloud foundations, Kubernetes platforms, DevOps pipelines, enterprise application and CMS deployments, migrations and go-lives. Every solution ends with code in your repositories and runbooks your team can run.
How to engage
- Architecture Review· 2 weeks · fixed price
- Fixed-Scope Build· 4–8 weeks · fixed scope
- Fractional Platform Lead· Monthly retainer · capped days
- Team-Scale Delivery with Cloudlit· With Cloudlit
About
One accountable engineer, end to end.
I'm Muhammad Rafay, a Cloud & Platform Engineer based in Pakistan, focused on designing and building production-grade cloud platforms on AWS, Azure and Google Cloud. I work with regulated and enterprise teams to build secure, scalable infrastructure: cloud landing zones, hybrid connectivity, Kubernetes platforms, networking, identity, Infrastructure as Code, observability and disaster recovery.
I work hands-on across the full lifecycle, from architecture to implementation, validation and hand-over. The goal is systems your team can understand, operate and evolve without depending on a consultant. When the work requires a team, it is delivered with Cloudlit.
How I operate
Direct access
You work with the engineer designing and implementing your platform.
Fixed scope
Deliverables, decisions, milestones and price basis agreed in writing before work starts.
Hands-on delivery
I implement, test, document and validate. Diagrams are the start, not the deliverable.
Full hand-over
Infrastructure, configuration, runbooks and the knowledge to operate it without me.
How I deliver
From architecture to operational ownership.
A structured engagement that moves from problem to working infrastructure without unnecessary process.
- 01
Discovery
Understand the system.
A focused conversation on your current environment, constraints, requirements and the outcome you need.
- 02
Architecture & scope
Define the solution.
Current-state assessment, target approach, and a written statement of work with deliverables, timeline and price basis.
- 03
Implementation
Build the platform.
Infrastructure as code, cloud configuration, networking, security, automation, testing and documentation, in your environment.
- 04
Validation & hand-over
Prove it works.
Validated against the agreed requirements, documented, and handed to your team with runbooks and a recorded walkthrough.
Case studies
Where the work reached production.
Each engagement ended with the platform live, documented and operated by the client's own team. Clients are described by sector and scale where names are under NDA.
Latest from the blog
Architecture decisions, written down.
6 Oct 2026 · 7 min read
OpenShift Pod Stuck in Pending: How to Debug Taints, Tolerations, Affinity and Topology Spread
A Pod stays Pending when no node passes every required rule, and often no single rule is wrong. How the scheduler filters nodes, what taints, affinity and topology spread each guarantee, a worked example where correct rules combine badly, and a six-step workflow to find the blocking rule.
6 Oct 2026 · 9 min read
OpenShift Networking Deep Dive: OVN-Kubernetes Architecture and Traffic Flow
Follow one request through an OpenShift cluster: how OVN-Kubernetes turns Kubernetes objects into a logical network, how OVS and Geneve move the packets, where Services, NetworkPolicy, the router and egress fit, and how to trace a failing connection layer by layer.
4 Oct 2026 · 9 min read
Sitecore on Azure PaaS: How We Moved a National Tourism Platform Off VM Scale Sets
How a national tourism platform moved Sitecore, .NET and a React front end from VM Scale Sets to Azure PaaS behind Cloudflare. In one 24-hour window, Cloudflare served 99.2% of 55.8 million requests without reaching the origin.
Need a full team or 24×7 operations?
Team-scale delivery is with Cloudlit.
Cloudlit designs, builds and runs cloud and AI infrastructure for banks, government and enterprises: cloud architecture, DevOps automation, Red Hat OpenShift and 24×7 managed operations. When an engagement needs more than one engineer, that is where it is delivered.
Contact
Tell me about the platform.
Tell me what you are building or where your platform is under strain. I read every enquiry myself and reply within one business day.
Prefer to just talk?
Book a 30-minute discovery call. No obligation, no pitch deck.
Book an architecture reviewOr email directly: [email protected]