Cloud and DevOps consultant.
Landing zones, Kubernetes platforms and Terraform on Azure, AWS and Google Cloud. Fixed scope, handed over with runbooks your team can run.
99.9%+ availability across 10+ production platforms for government and enterprise clients. See the case studies
Solutions
What I deliver, and what you receive.
Cloud foundations, Kubernetes platforms, DevOps pipelines, enterprise application and CMS deployments, migrations and go-lives. Every solution ends with code in your repositories and runbooks your team can run.
How to engage
- Architecture Review· 2 weeks · fixed price
- Fixed-Scope Build· 4–8 weeks · fixed scope
- Fractional Platform Lead· Monthly retainer · capped days
- Team-Scale Delivery with Cloudlit· With Cloudlit
About
One accountable engineer, end to end.
I'm Muhammad Rafay, a Senior Cloud Architect and Platform Engineer helping enterprise and regulated organizations design, scale, and secure mission-critical cloud infrastructure across AWS, Azure, and Google Cloud.
I specialize in high-availability multi-cloud architecture, resilient Kubernetes platforms, zero-trust network governance, enterprise landing zones, and automated disaster recovery systems. Rather than providing rigid solutions, I collaborate with engineering leadership throughout the lifecycle, from strategic planning to deployment, validation, and operational handover.
I focus on building fault-tolerant systems your teams can operate, scale, and evolve independently, avoiding long-term vendor lock-in or reliance on consultants. For larger initiatives, I partner with Cloudlit to deliver comprehensive solutions.
How I operate
Direct access
You work with the engineer designing and implementing your platform.
Fixed scope
Deliverables, decisions, milestones and price basis agreed in writing before work starts.
Hands-on delivery
I implement, test, document and validate. Diagrams are the start, not the deliverable.
Full hand-over
Infrastructure, configuration, runbooks and the knowledge to operate it without me.
How I deliver
From architecture to operational ownership.
A structured engagement that moves from problem to working infrastructure without unnecessary process.
- 01
Discovery
Understand the system.
A focused conversation on your current environment, constraints, requirements and the outcome you need.
- 02
Architecture & scope
Define the solution.
Current-state assessment, target approach, and a written statement of work with deliverables, timeline and price basis.
- 03
Implementation
Build the platform.
Infrastructure as code, cloud configuration, networking, security, automation, testing and documentation, in your environment.
- 04
Validation & hand-over
Prove it works.
Validated against the agreed requirements, documented, and handed to your team with runbooks and a recorded walkthrough.
Case studies
Where the work reached production.
Each engagement ended with the platform live, documented and operated by the client's own team. Clients are described by sector and scale where names are under NDA.
Latest from the blog
Architecture decisions, written down.
6 Oct 2026 · 7 min read
OpenShift Pod Stuck in Pending: How to Debug Taints, Tolerations, Affinity and Topology Spread
A Pod stays Pending when no node passes every required rule, and often no single rule is wrong. How the scheduler filters nodes, what taints, affinity and topology spread each guarantee, a worked example where correct rules combine badly, and a six-step workflow to find the blocking rule.
6 Oct 2026 · 9 min read
OpenShift Networking Deep Dive: OVN-Kubernetes Architecture and Traffic Flow
Follow one request through an OpenShift cluster: how OVN-Kubernetes turns Kubernetes objects into a logical network, how OVS and Geneve move the packets, where Services, NetworkPolicy, the router and egress fit, and how to trace a failing connection layer by layer.
4 Oct 2026 · 9 min read
Sitecore on Azure PaaS: How We Moved a National Tourism Platform Off VM Scale Sets
How a national tourism platform moved Sitecore, .NET and a React front end from VM Scale Sets to Azure PaaS behind Cloudflare. In one 24-hour window, Cloudflare served 99.2% of 55.8 million requests without reaching the origin.
Need a full team or 24×7 operations?
Team-scale delivery is with Cloudlit.
Cloudlit designs, builds and runs cloud and AI infrastructure for banks, government and enterprises: cloud architecture, DevOps automation, Red Hat OpenShift and 24×7 managed operations. When an engagement needs more than one engineer, that is where it is delivered.
Contact
Tell me about the platform.
Tell me what you are building or where your platform is under strain. I read every enquiry myself and reply within one business day.
Prefer to just talk?
Book a 30-minute discovery call. No obligation, no pitch deck.
Book a 30-minute callOr email directly: [email protected]