Automate the repetitive part.
If someone does a task by hand twice, it should be code. Terraform, PowerShell and the Graph API turn provisioning, offboarding and patching into pipelines people can trust.
Cloud Infrastructure & Security Engineer
Zakariya Mohamed
I design, secure and automate cloud platforms — Azure and Kubernetes by day, offensive security by night.
Working with teams that need cloud platforms to stay up, stay secure and stay easy to change.
Now
Updated 2026-11-03What I'm focused on
- BuildingThis website, rebuilt in Astro and published on Cloudflare Pages.
- WritingTurning the knowledge-base outlines into full write-ups.
01 — Work
Selected projects
Handy
A free, open-source speech-to-text app that runs entirely offline — no audio leaves the machine.
Outcome: Speech-to-text that works with no internet connection.
RepositoryVoiceStudio
A fully local alternative to hosted voice platforms: cloning, design, dubbing, dictation and transcription across 646 languages.
Outcome: Voice work in 646 languages, all processed on the user's own machine.
Repositorysecurity-audit-skill
A coding-agent skill that runs multi-phase security audits and emits machine-readable findings with independent verification.
Outcome: Audit findings that tools can read and check, not just a report.
RepositoryThis site
Hand-built in Astro: a hand-authored design system, a pinned stage that explains the work, and no UI framework at all.
Outcome: 36 pages and 686 internal links, at 100 for accessibility, best practices and SEO.
Read the case study02 — How I work
Three things I won't skip
Least privilege by default.
Identity is the perimeter. Conditional Access, Entra ID and PIM, backed by automated Defender response, so access is granted on purpose and removed on time.
Leave it cheaper and calmer.
Audits that remove what nobody uses, migrations scheduled out of hours, and documentation so the next person doesn't depend on memory.
40%less manual configuration time after moving provisioning to infrastructure as code
£1,410saved a year by retiring 35 unused Microsoft 365 licences
92+file shares moved to Azure Files and SharePoint Online, with permissions mapped
20+virtual machines moved to managed disks, with changes made out of hours
0unplanned downtime across a Windows 11 rollout to a whole fleet
Clients, through secondments, on-site support and project work
- Klesch
- First Community Health and Care
- Bupa
- Otsuka Pharmaceuticals
- HFMC Wealth
- AFC Energy
Azure Administrator Associate (AZ-104)Cisco CCNAISC2 Certified in CybersecurityVMware Technical Associate
03 — Knowledge
All 30 topicsNotes from the field
Azure Virtual Machines & Scale Sets
Configuring Azure VMs and VM Scale Sets for high availability, auto-scaling, and cost optimisation across multiple availability zones.
AI Model Deployment & Serving
Deploying AI models using Azure Container Instances, Azure Functions, and Kubernetes for scalable, production-ready inference endpoints.
AI Ethics & Responsible AI
Implementing responsible AI practices, bias detection, model explainability, and compliance with AI governance frameworks.
AI Infrastructure & GPU Management
Configuring GPU-enabled virtual machines, managing AI workloads, and optimizing compute resources for deep learning and inference.
API Security & Vulnerability Assessment
Testing REST and GraphQL APIs for common vulnerabilities, implementing rate limiting, and securing API endpoints against injection and authentication attacks.
Azure Kubernetes Service (AKS) Best Practices
Deploying and managing containerized applications on AKS with cluster autoscaling, node pools, and integrated monitoring.
04 — Contact
Have something hard to build?
Cloud platform work, security reviews, or an automation problem you'd rather not own. I read every message.