DevOps engineer, 6+ years building high-scale cloud automation and fintech infrastructure. I govern multi-account AWS environments, run production microservices on Kubernetes and ECS, and treat everything as code, with a working focus on PCI-DSS compliance and supply-chain security. Alongside client work I build and maintain open-source developer tools.
| Project | Description | Links |
|---|---|---|
| QuenchWorks | Security-first replacement for the Bitnami catalog — 0-CVE hardened container images and Helm charts, built from source on Wolfi, signed and pinned by digest. | Site · GitHub |
| Rawi | AI-powered CLI that auto-generates documentation for command-line applications. | Docs · npm |
| sysdesign | System-design knowledge as a Claude Code plugin — tradeoff-first reasoning across 11 commands and 14 reference files. | Site · GitHub |
| NetCalc Pro | Zero-backend suite for subnetting, CIDR & VLSM with shareable state and IaC export. | Live |
| Devicons React | Programming-language & tooling icons as React components — 5k+ weekly npm downloads. | Docs · npm |
| AWS Icons | Complete, free SVG library of every AWS service icon, via CDN or npm. | Docs · npm |
| Domain | Tools |
|---|---|
| Cloud & IaC |      |
| Platform & Runtime |      |
| Languages |      |
| Data |     |
- [Case Study] QuenchWorks: Building a 0-CVE Container Image and Helm Chart Catalog
- [Blog] FinOps in Practice: How to Build a Cloud Cost Accountability Culture on AWS
- [Blog] QuenchWorks: A Zero-CVE, Built-From-Source Replacement for the Bitnami Catalog
- [Blog] Dotfiles: A Git-Based Strategy for Configuration Management
- [Blog] Setting up Node JS, Express, MongoDB, Prettier, ESLint and Husky Application with Babel and authentication as an example
- [Blog] Git SSH Keys for GitHub, GitLab, and Bitbucket on Linux
- [Blog] Git SSH Keys for GitHub, GitLab, and Bitbucket on Windows
- [Blog] AI is Not Real: A Software Engineering Perspective
Made with ☕ by Mohammad Abu Mattar