Mohamed — DevOps & Cloud freelancer in Tunisia

- Production AKS cluster (1.29) with system and user node pools, Azure CNI networking, namespace-level RBAC, EntraID SSO via Dex, and PodDisruptionBudgets for zero-downtime upgrades - Terraform module library managing AKS, Azure SQL with automated failover, Service Bus namespaces, Key Vault for secrets rotation, Application Gateway with WAF, and Private Endpoints - Git-based CI\u002FCD in Azure DevOps: PR validation, container build with Trivy scanning, Helm chart packaging, and ArgoCD sync with health-check-driven rollback - Azure Service Bus for async event-driven communication between microservices using topic subscriptions, dead-letter queues, and configurable retry policies - Azure SQL with read replicas, materialized views for reporting workloads, automated geo-redundant backups, and Terraform-managed schema lifecycle - Observability: Azure Monitor custom metrics, Log Analytics aggregating container and application logs, Grafana dashboards for latency\u002Ferror rates\u002Fqueue depth, alert rules for SLA breaches - Security: NSGs for inter-service traffic control, Private Endpoints for Azure SQL and Key Vault, Azure Policy denying public-facing resources, Kubernetes NetworkPolicies