Azure and DevOps consultant for Saudi Arabia.
Azure DevOps pipelines, Kubernetes and governed cloud foundations for Saudi government and enterprise teams, with NCA ECC, PDPL and SAMA controls built into the platform.
Built for the Kingdom
What Saudi platforms need before the first deployment.
Saudi government and regulated enterprises work to national controls that shape the platform from day one: where data may live, how access is governed and what evidence an auditor will ask for. I design for those requirements first, then deliver the pipelines and the infrastructure as code.
Azure DevOps pipelines with approvals
Azure DevOps Repos and Pipelines built around review: pull-request policies, environment approvals for production, and policy checks that run before anything is applied. Pipelines run in your organisation, under your identity provider.
NCA ECC, PDPL and SAMA controls as code
Technical controls for network segmentation, encryption, logging and access mapped to Saudi NCA ECC, PDPL and SAMA requirements, so audit evidence comes from the platform and its pipelines instead of screenshots.
Data location and private networking
Platforms designed around where data is allowed to live. Provider regions, backups and logs are chosen to match your residency rules, with private endpoints for data services and policies that block resources in other regions.
Landing zones and Kubernetes
Governed Azure, AWS or Google Cloud foundations and production Kubernetes or OpenShift platforms, delivered as Terraform and GitOps in your own repositories and handed over with runbooks.
Hosting in Saudi Arabia
In-Kingdom options for Saudi data.
NCA ECC, PDPL and sector rules decide where Saudi data may live. The platform is designed around that first, then the provider and region are chosen to match.
- Google Cloud
- The Dammam region, in-Kingdom.
- Oracle Cloud
- The Jeddah region, in-Kingdom.
- Azure and AWS
- Both have announced Saudi regions. Current availability is checked before any design depends on them.
Provider regions change. Availability of each service is checked for your workloads before anything is committed.
How the work runs
Remote delivery on Riyadh hours.
I work from Karachi, two hours ahead of Riyadh. The overlap covers the Saudi working week from Sunday to Thursday, so design reviews, change windows and incident calls happen live.
Every engagement starts with a written scope: the deliverables, the decisions, the milestones and the price basis. The work is done inside your own accounts, repositories and Azure DevOps organisation, so you own everything that is built and can run it without me.
Karachi
UTC+5
Riyadh, Jeddah
UTC+3
Dubai
UTC+4
Solutions
Solutions for Saudi teams.
- DevOps, CI/CD & IaCTurn architecture into repeatable, reviewed, controlled deployments.
- Security & zero trustControls built into the platform rather than added after it.
- Kubernetes & OpenShiftProduction-grade Kubernetes and OpenShift platforms your engineers can operate with confidence.
- Migrations & go-liveWorkloads moved to cloud or Kubernetes and taken live, with a rehearsed cutover and a rollback at every step.
- Observability & DRThe operational layer required to run production platforms and recover them predictably.
Proof
Comparable platform work.
B2B SaaS · AWS
Kubernetes platform that cut cloud spend by 60% and deploy time from 45 minutes to 5.
A growing SaaS platform was running on hand-built AWS infrastructure with manual deployments and costs rising 40% month on month. I replaced it with a production-grade EKS platform, GitOps delivery and infrastructure as code, migrated with zero downtime.
AWSEKSTerraformArgo CDRead the case studyFinTech · AWS
Zero-trust AWS controls that took a FinTech to SOC 2 Type II in 8 weeks with no audit findings.
Enterprise deals depended on SOC 2 Type II, and the existing estate had shared secrets in code, permissive IAM and no audit trail. I designed and implemented the identity, network, secrets and audit controls, and the external audit closed with zero findings.
AWSSecrets ManagerIAMVPC endpointsRead the case study
FAQ
Working with a consultant in Saudi Arabia.
Still have a question? Ask me directly. I reply within one business day.
How do you work with Saudi teams?
Remotely, on the Saudi working week from Sunday to Thursday. The work runs in your own Azure DevOps organisation and cloud accounts, and every decision and change is written down so your team can continue without me.
Where are you based?
I am based in Karachi, Pakistan and work remotely with teams across the GCC. Karachi is two hours ahead of Riyadh, so calls fall inside the Saudi working day. I do not claim a Saudi office.
What does an Azure DevOps consultant do?
I set up and secure Azure DevOps for how your team ships: repositories and branch policies, build and release pipelines, environment approvals, service connections with least privilege, and infrastructure as code so the cloud is changed through review. The pipelines and the documentation stay with your team.
Which Saudi frameworks do you work with?
NCA ECC, PDPL and SAMA, plus ISO 27001 and SOC 2. I implement the technical controls as code and map them to each framework. Policy, governance and certification itself stay with your compliance team and auditors.
Can you work with our in-country partner?
Yes. I can cover the cloud, pipeline and security engineering alongside a local integrator that holds the contract or the operations role, with everything handed over in writing. Team-scale delivery and round-the-clock operations are available with Cloudlit.
Need a full team or 24×7 operations?
Team-scale delivery is with Cloudlit.
Cloudlit designs, builds and runs cloud and AI infrastructure for banks, government and enterprises: cloud architecture, DevOps automation, Red Hat OpenShift and 24×7 managed operations. When an engagement needs more than one engineer, that is where it is delivered.
Contact
Tell me about the platform.
Tell me what you are building or where your platform is under strain. I read every enquiry myself and reply within one business day.
What happens next
- 01A 30-minute call about your platform and what has to change.
- 02A short written view of the risk and the next step, whether or not we work together.
- 03If it fits, a fixed-scope proposal with deliverables, timeline and price basis.
Prefer to just talk?
Book a 30-minute discovery call, or send a message on WhatsApp. No obligation, no pitch deck.
Or email directly: [email protected] or WhatsApp: +92 332 3600677
Based in Karachi, Pakistan. Working with teams in the UAE and Saudi Arabia.