Mohammad Falahat

Lead DevOps responsibilities for a portfolio of 30+ services across microservice architectures. Focused on building reliable CI/CD pipelines, production Kubernetes clusters, centralized logging/monitoring, and high-availability networking to support rapid releases and stable operations.

• Built and maintained CI/CD pipelines for 30+ projects using Azure DevOps and GitLab, reducing deployment time from hours to <20 minutes and enabling frequent, reliable releases.
• Designed, deployed and operated Kubernetes clusters (kubeadm, kind, Kubespray) for production workloads and migrated multiple services to containerized deployments.
• Implemented centralized logging with ELK stack (Elasticsearch, Logstash pipelines, Kibana data views, APM) — improved observability and reduced MTTR by ~90%.
• Deployed HA networking using HA-Proxy in active-passive mode with keepalived virtual IPs to ensure service availability. (Post-deployment availability improvement: Yes)
• Implemented Rook-Ceph storage and RadosGW S3-compatible buckets to provide scalable object storage for applications.
• Customized Azure DevOps pipeline agents and automated build/test/release flows to standardize releases and artifact management (JFrog / Nexus).
• Worked with Istio, ingress-nginx, Cert-Manager and GateKeeper for ingress, TLS automation and policy enforcement.
• Maintained supplementary tooling: Sentry, SonarQube, Prometheus & Grafana for alerts, dashboards and service metrics.
• Implemented GitOps principles using Komodo, Azure DevOps, and ArgoCD to automate deployment workflows and ensure high-quality code release cycles.

Delivered full-stack web projects and automation systems for local companies while building monitoring and deployment automation for on-premise and cloud services.

• Developed and operated websites for Narminkaf (narminkaf.ir) and Zitex (zitexiran.com) and delivered automation and monitoring projects for industrial clients.
• Implemented monitoring systems for MikroTik LAN/Wireless routers with custom backends and dashboards to improve network visibility.
• Built an advertisement system using wildcard subdomain routing and a custom questionnaire system used in an international digital media exhibition.
• Provided virtualization and systems administration using ESXi and Proxmox, and worked with Nvidia Graid and Mellanox network adapters for high-performance setups.