Mostafa Tarek

Mostafa Tarek

Cloud Solutions Architect

I turn four years of running networks, servers and security audits into AWS architectures that stay up, stay locked down and are easy to explain. Every design below is built end to end and documented on GitHub.

Riyadh, Saudi Arabia Open to cloud, architecture and DevOps roles in the Gulf
VPC Availability Zone A Availability Zone B Users Load balancer Web tier EC2 · Auto Scaling Web tier EC2 · Auto Scaling Database RDS primary Database RDS standby EFS shared storage

Reference architectures

Self-directed AWS builds, each documented in its own GitHub repository.

  • 3-tier web architecture

    A highly available WordPress stack with VPC networking, public and private subnets, a NAT gateway, security groups, shared EFS storage and RDS.

    • VPC
    • EC2
    • EFS
    • RDS
    View repository
  • Containerized compute on ECS

    An EC2 launch-type ECS cluster across two Availability Zones behind a Network Load Balancer, with an Auto Scaling group, task definitions, rolling deployments and a scaling policy.

    • NLB
    • ECS
    • Auto Scaling
    View repository
  • Event-driven order tracking

    A serverless order-tracking system that reacts to events and pushes updates over both HTTP and WebSocket APIs.

    • EventBridge
    • Lambda
    • API Gateway
    • DynamoDB
    View repository
  • Serverless image-processing pipeline

    A fan-out pipeline: one S3 upload triggers three queues and three Lambda functions that produce thumbnail, web and mobile versions of each image.

    • S3
    • SNS
    • 3 × SQS
    • 3 × Lambda
    View repository
  • Serverless URL shortener

    A URL shortening API with API-key rate limiting.

    • API Gateway
    • Lambda
    • DynamoDB
    View repository
  • Real-time chat

    A WebSocket chat app that stores connections and message history in DynamoDB.

    • WebSocket API
    • Lambda
    • DynamoDB
    • SQS
    Browse all repositories

Experience

The infrastructure and security work behind the cloud designs.

  1. IT Specialist

    Hind Al-Mujahed Group

    Aug 2025 – Jun 2026

    • Owned system administration across hardware and software, including monitoring, maintenance and documentation of systems, networks and licenses.
    • Deployed, tuned and optimized virtual machines, balancing resource allocation against performance.
    • Led backup solutioning and disaster recovery planning.
    • Ran security and compliance audits, access-control reviews and vulnerability checks.
    • Administered Google Workspace and Microsoft Exchange email, and managed endpoint security and lifecycle across desktops, laptops and mobile devices.
  2. IT Specialist

    Nesma Airlines

    Oct 2023 – Dec 2024

    • Managed switches, routers, servers and a Sophos firewall.
    • Maintained Windows Server environments, with user provisioning and access control through Active Directory.
    • Managed VPN connectivity across 4 company branches.
    • Served as primary IT contact during an IOSA cybersecurity audit, leading compliance activities and evidence gathering.
    • Administered backup tooling and monitored Kaspersky EDR for endpoint protection.
  3. Technical Support Representative

    UX Center

    Sep 2021 – May 2022

    • Diagnosed and resolved connectivity issues across internet, mobile and landline services, using remote diagnostics and coordinating with field technicians.
    • Logged and reported service issues, and maintained technical documentation and FAQs.

Skills

Cloud and architecture

  • VPC
  • EC2
  • S3
  • RDS
  • EFS
  • ECS
  • Lambda
  • API Gateway
  • EventBridge
  • DynamoDB
  • SNS / SQS
  • IAM
  • Auto Scaling
  • CloudFormation
  • Reference-architecture design
  • Cost and reliability trade-offs

Infrastructure and security

  • Network and system administration
  • VMware
  • Hyper-V
  • Active Directory
  • Backup and disaster recovery
  • Security audits and compliance
  • Sophos
  • Kaspersky EDR

Documentation and communication

  • Architecture documentation
  • GitHub reference builds
  • Explaining trade-offs to technical and non-technical stakeholders

On GitHub

15 public repositories, mostly AWS labs.

Certifications and education

Certifications and courses

  • AWS Solutions Architect – Associate (SAA-C03)
    Exam preparation in progress. Coursework and hands-on labs completed.
  • CCNA, MCSA, CompTIA Security+, eCIR
    Coursework completed.
  • AWS and Azure Cloud Fundamentals, KodeKloud
  • Cybersecurity Program, ITI

Education and languages

  • Bachelor of Software Engineering, College of Computer Science
    Arab Open University, 2016 – 2022
  • Arabic, native
  • English, professional working proficiency

Looking for a cloud architect who has run the infrastructure too? Let's talk.

Open to cloud, solutions architecture and DevOps opportunities in the Gulf region.