Curriculum vitae
Ahmed Mazen
Digital Transformation and Cloud Architecture Leader
Principal Cloud & Platform Architect · Enterprise Architect · Founder & Product Lead, Twinfra
Principal Cloud & Platform Architect and Enterprise Architect with 16+ years of enterprise delivery across Saudi government platforms, telecom, fintech and IoT. I design cloud-native microservices, event-driven streaming platforms and multi-region disaster recovery that hold up under regulation (PCI DSS 4.0) and real load.
Based in Cairo · Open to GCC on-site, remote and Egypt roles · hello@amazen33.dev ·LinkedIn · GitHub
Experience
Jan 2026 – present
Remote
Principal Cloud & AI Platform Architect
Spectro Systems
- Zero-trust AWS architecture: VPC, PrivateLink, AWS WAF, Istio mTLS and SPIFFE/SPIRE workload identity.
- Fintech event pipelines: Kafka with MirrorMaker 2 and Schema Registry, Debezium CDC, and LLM-assisted fraud anomaly detection.
- PCI DSS 4.0 readiness: TOGAF governance with C4 models defining the cardholder data environment, and policy as code with OPA, Kyverno and Vault.
- GitOps with Argo CD and Argo Rollouts, with LLM-assisted rollback analysis and log summarisation.
- Multi-region and hybrid disaster recovery with Velero; health monitoring with CloudWatch Synthetics and Route 53.
2023 – 2025
KSA / Egypt
Java Technical Lead / Architect
NTG Clarity
- Event-driven microservices with Kafka and Debezium CDC for major telecom operators, including Vodafone.
- A distributed SNMP polling and fault-detection engine for carrier networks.
- Enterprise architecture standards for strict SLAs and business continuity; TDD and SDLC governance.
2021 – 2023
Riyadh
Java Technical Lead / Architect Consultant
IoTSquared
- Multi-tenant IoT and real-time location platforms for Saudi government entities, on ThingsBoard, Spring Boot and Cassandra.
- Real-time analytics on Spark and PostgreSQL, with full-stack observability.
- API governance with Apache APISIX across multi-cloud deployments on Alibaba Cloud.
2015 – 2021
Riyadh
Enterprise Technical Consultant / Solution Architect
ELM
- National Information Center (NIC): integration platforms for secure identity verification, biometrics and high-concurrency cross-agency data exchange.
- Muqeem: backend microservices and ESB workflows for expatriate residency (Iqama), visa and workforce services, handling millions of daily transactions.
- Jawazat (General Directorate of Passports): integration gateways for border control, travel authorisation and visas.
- Mooror (General Traffic Department): high-throughput interfaces for traffic violations, vehicle registration and licensing.
- Government healthcare: health-record exchange, insurance validation and health-permit verification.
- C4 architecture standards, TDD practice and API security guidelines across multi-disciplinary teams.
2001 – 2015
Earlier career
Java team lead (Beshara Group, Kuwait Ministry of Social Affairs), senior Java engineer (Silicon Expert), ISO 8583 banking middleware (Intercom Enterprise), IBM BPM and FileNet (ITBLOCKS), preceded by accounting (EZZ Trade).
Skills
Architecture and governance
Enterprise Architecture (TOGAF ADM) · C4 modelling · Domain-Driven Design · API governance · Architecture decision records
Cloud and platforms
AWS (EKS, VPC, NLB/ALB, WAF, S3, Route 53, CloudWatch) · Kubernetes · Helm · Cilium · Argo CD · Crossplane
Security
Zero Trust networking · Istio Ambient mTLS · SPIFFE/SPIRE · OPA · Kyverno · OpenBao / Vault · Keycloak / OIDC
Streaming and integration
Apache Kafka · Debezium CDC · Flink · Spark · MirrorMaker 2 · Schema Registry · REST / gRPC · CQRS
Data and observability
PostgreSQL / pgvector · Cassandra · MongoDB · Prometheus · OpenTelemetry · OpenSearch
Engineering and AI
Java / Spring Boot / Spring Cloud · Python (FastAPI) · TypeScript · Angular · React · Applied LLMs and RAG
Education and certifications
Education: Bachelor of Commerce (Accounting), Cairo University.
Certifications: Sun Certified Java Programmer (SCJP), Sun Certified Web Component Developer (SCWCD).
Frameworks practised: TOGAF ADM, C4, Domain-Driven Design, PCI DSS 4.0.