Curriculum vitae

Ahmed Mazen

Digital Transformation and Cloud Architecture Leader

Principal Cloud & Platform Architect · Enterprise Architect · Founder & Product Lead, Twinfra

Principal Cloud & Platform Architect and Enterprise Architect with 16+ years of enterprise delivery across Saudi government platforms, telecom, fintech and IoT. I design cloud-native microservices, event-driven streaming platforms and multi-region disaster recovery that hold up under regulation (PCI DSS 4.0) and real load.

Based in Cairo · Open to GCC on-site, remote and Egypt roles · hello@amazen33.dev ·LinkedIn · GitHub

Experience

Jan 2026 – present
Remote

Principal Cloud & AI Platform Architect

Spectro Systems

  • Zero-trust AWS architecture: VPC, PrivateLink, AWS WAF, Istio mTLS and SPIFFE/SPIRE workload identity.
  • Fintech event pipelines: Kafka with MirrorMaker 2 and Schema Registry, Debezium CDC, and LLM-assisted fraud anomaly detection.
  • PCI DSS 4.0 readiness: TOGAF governance with C4 models defining the cardholder data environment, and policy as code with OPA, Kyverno and Vault.
  • GitOps with Argo CD and Argo Rollouts, with LLM-assisted rollback analysis and log summarisation.
  • Multi-region and hybrid disaster recovery with Velero; health monitoring with CloudWatch Synthetics and Route 53.

2023 – 2025
KSA / Egypt

Java Technical Lead / Architect

NTG Clarity

  • Event-driven microservices with Kafka and Debezium CDC for major telecom operators, including Vodafone.
  • A distributed SNMP polling and fault-detection engine for carrier networks.
  • Enterprise architecture standards for strict SLAs and business continuity; TDD and SDLC governance.

2021 – 2023
Riyadh

Java Technical Lead / Architect Consultant

IoTSquared

  • Multi-tenant IoT and real-time location platforms for Saudi government entities, on ThingsBoard, Spring Boot and Cassandra.
  • Real-time analytics on Spark and PostgreSQL, with full-stack observability.
  • API governance with Apache APISIX across multi-cloud deployments on Alibaba Cloud.

2015 – 2021
Riyadh

Enterprise Technical Consultant / Solution Architect

ELM

  • National Information Center (NIC): integration platforms for secure identity verification, biometrics and high-concurrency cross-agency data exchange.
  • Muqeem: backend microservices and ESB workflows for expatriate residency (Iqama), visa and workforce services, handling millions of daily transactions.
  • Jawazat (General Directorate of Passports): integration gateways for border control, travel authorisation and visas.
  • Mooror (General Traffic Department): high-throughput interfaces for traffic violations, vehicle registration and licensing.
  • Government healthcare: health-record exchange, insurance validation and health-permit verification.
  • C4 architecture standards, TDD practice and API security guidelines across multi-disciplinary teams.

2001 – 2015

Earlier career

Java team lead (Beshara Group, Kuwait Ministry of Social Affairs), senior Java engineer (Silicon Expert), ISO 8583 banking middleware (Intercom Enterprise), IBM BPM and FileNet (ITBLOCKS), preceded by accounting (EZZ Trade).

Skills

Architecture and governance

Enterprise Architecture (TOGAF ADM) · C4 modelling · Domain-Driven Design · API governance · Architecture decision records

Cloud and platforms

AWS (EKS, VPC, NLB/ALB, WAF, S3, Route 53, CloudWatch) · Kubernetes · Helm · Cilium · Argo CD · Crossplane

Security

Zero Trust networking · Istio Ambient mTLS · SPIFFE/SPIRE · OPA · Kyverno · OpenBao / Vault · Keycloak / OIDC

Streaming and integration

Apache Kafka · Debezium CDC · Flink · Spark · MirrorMaker 2 · Schema Registry · REST / gRPC · CQRS

Data and observability

PostgreSQL / pgvector · Cassandra · MongoDB · Prometheus · OpenTelemetry · OpenSearch

Engineering and AI

Java / Spring Boot / Spring Cloud · Python (FastAPI) · TypeScript · Angular · React · Applied LLMs and RAG

Education and certifications

Education: Bachelor of Commerce (Accounting), Cairo University.

Certifications: Sun Certified Java Programmer (SCJP), Sun Certified Web Component Developer (SCWCD).

Frameworks practised: TOGAF ADM, C4, Domain-Driven Design, PCI DSS 4.0.