Badreddine Sbai | Cloud AWS & DevOps / SRE

Visit My Works

Who Am I ?

About Me

I am a software engineering student specializing in cloud architecture and DevOps. As the sole Cloud/DevOps engineer on a multi-tenant SaaS platform, I built the infrastructure end to end: an AWS Organizations multi-account setup, a Terraform codebase with remote state and reusable modules, ECS Fargate services behind an ALB, and CI/CD pipelines deploying through GitHub Actions with OIDC federation instead of static access keys.

My focus is on what makes a platform operable rather than just deployable: reproducible infrastructure, least-privilege IAM, encrypted data at rest, observability through CloudWatch and Grafana, and cost controls put in place from the foundation. A backend engineering background in C#, Java and PHP means I design infrastructure with an understanding of the applications running on it.

Certifications

EFSET English Certificate — Level C1
AWS Certified Solutions Architect – Associate (in progress)

Download CV

Tech Stack

What I Do

I design and operate cloud infrastructure on AWS: multi-account landing zones, networking, container platforms, and the automation around them. Every environment is described in Terraform, shipped through CI/CD pipelines, and instrumented with logs, metrics, alarms and cost guardrails before it carries production traffic.

AWS Terraform Docker GitHub Actions ECS Fargate CloudWatch Grafana Terraform Modules IAM & OIDC PostgreSQL

C# / ASP.NET Core Java / Spring Boot PHP / Symfony JavaScript / Angular Python REST APIs Clean Architecture

Cloud Architecture on AWS

I design multi-account AWS environments with isolated VPCs, managed data services and least-privilege IAM, so that separation between Dev, Staging and Production is enforced by the platform rather than by convention.

DevOps & Platform Engineering

I turn infrastructure into code and releases into pipelines: Terraform modules with remote state, containerized builds, automated security scanning, keyless deployments, and observability wired in from day one.

My Projects

Portfolio

Here are the main projects I have worked on, starting with the cloud infrastructure I built during my Cloud/DevOps internship at OREVIT, followed by the engineering projects that led me there.

Multi-tenant SaaS platform on AWS project cover

Multi-Tenant SaaS Platform

AWS Organizations, Terraform, ECS Fargate and CI/CD with OIDC

Enterprise Knowledge Assistant project cover

Enterprise Knowledge Assistant

Event-Driven Multi-Source Ingestion on AWS

Public sector payroll platform project cover

Payroll Management Platform

Symfony and Angular Platform for a Public Institution

Rihlaty Ride project cover

Rihlaty Ride

Containerized Microservices for School Transport Management

BADR app project cover

BADR

Islamic Mobile Application

Pharmaceutical management project cover

Pharmaceutical System

Smart and Secure Pharmaceutical Management Solution

Let's Connect

I am always interested in meaningful opportunities, technical collaborations, and software engineering conversations.

Reach Out

Topics I Write About

Blog

I write about the cloud and DevOps work I actually do — AWS account structure, deployment security, and infrastructure as code — alongside earlier pieces on software architecture and delivery workflow.

Multi-account AWS Organizations article cover

Multi-Account AWS with Organizations: What I Learned Setting It Up Alone

By: Badreddine Sbai

Field notes on separating Dev, Staging and Production into their own AWS accounts: where the boundary should fall, enforcing MFA, and keeping IAM least-privilege under delivery pressure.

Read article

OIDC federation article cover

OIDC Federation for GitHub Actions → ECS: Getting Rid of Static AWS Keys

By: Badreddine Sbai

How a CI pipeline can deploy to AWS without storing a single long-lived credential, and what the trust policy conditions really protect you against.

Read article

Terraform remote state article cover

Terraform Remote State with S3 and DynamoDB Locking in a Small Team

By: Badreddine Sbai

What the lock actually prevents, how to split state files per environment, and the failure modes worth understanding before they surprise you mid-apply.

Read article

Clean Architecture article cover

Clean Architecture in Real Product Development

By: Badreddine Sbai

A practical guide to applying Clean Architecture in full-stack projects to improve maintainability, flexibility, and long-term product evolution.

Read article

SOLID APIs article cover

Applying SOLID Principles to API Design

By: Badreddine Sbai

How SOLID principles help build resilient backend services and clear contracts that scale with team size and business complexity.

Read article

Docker deployment article cover

Docker and Deployment Workflow for Full-Stack Teams

By: Badreddine Sbai

A straightforward workflow for containerizing services, standardizing environments, and shipping reliable releases from development to production.

Read article

Contact

Let's Talk

Email: Badrsbbai@gmail.com
Phone: +212674870076
LinkedIn: badreddine-sbai
GitHub: Pedroxsbai