Platform architecture / Applied AI / SaaS
I build platforms.
I ship with AI.
I’m Mourad, a platform architect with 15+ years in software engineering. I use AI agents to build software—and engineer the infrastructure, tools, and guardrails that let them do useful work.
Considering Staff & Principal opportunities
Vancouver, Canada · Remote / hybrid
Start with a good question.
Explore the same evidence your AI agent can access.
Step into the Atelier.
Explore the agents, systems, and experiments behind the work.
01 / Selected engineering
Systems behind the résumé.
Independent projects and operating infrastructure. Open a project for the architecture, decisions, and questions worth discussing.
ai systems / Active & Researching
Agent Infrastructure & AI SOC
Multi-agent workflows, scoped tool permissions, and local GPU inference bench
infrastructure / Active & Operated
Hybrid Kubernetes GitOps Platform
Enterprise GitOps k3s & Oracle OKE platform with NetBird WireGuard mesh
ai systems / Live in Production
Headless SaaS & Agent Reach Probe
Public MCP service and Headless AI Resume with real agent telemetry
foundation / In Active Use
App Registry — Deterministic SaaS Foundation
Machine-readable specifications & byte-for-byte reproducible code generation
saas / Production Ready
Astal (halwa-desk) — Pâtisserie Operations SaaS
End-to-end production SaaS with PostgreSQL RLS & offline-first till
saas / Production Ready
KitchenDesk — CAD & Operations SaaS for Manufacturers
Project quoting & CAD workflows with DXF parser & SVG geometry engine
Project descriptions and experience are candidate-provided. This résumé's MCP tools are directly testable; other systems are available for an architecture walkthrough. Current and past employment positions and employers are private. Professional focus and target roles do not disclose a current job. Independent verification and references require direct contact.
02 / AI in practice
Part of how I work.
And what I build.
I work across the whole lifecycle: give agents context, check their outputs, ship the system, and operate what runs.
- 01
Define the system
I set domain boundaries, architecture contracts, and agent instructions before generating code. App Registry makes the reusable foundation deterministic.
App Registry · JSON contracts · AGENTS.md ↗ - 02
Build with agents
I use AI coding workflows and build MCP tools that give agents structured access to systems. Tool schemas and role-specific permissions keep their scope explicit.
Claude Code · MCP · TypeScript · Zod ↗ - 03
Review and verify
I use type checks, architecture tests, Vitest, and Playwright to check the work. Security experiments include prompt injection and permission boundary testing.
Automated test gates · Security lab ↗ - 04
Deploy and operate
I run local GPU inference and hybrid Kubernetes infrastructure, with GitOps promotion, managed secrets, network policies, and observability.
llama.cpp · CUDA · k3s / OKE · Argo CD ↗
03 / Technical depth
From domain model
to deployment.
Platform engineering, applied AI, and product development in one practice. Expand a discipline for specific experience.
Platform & Cloud Architecture
Enterprise cloud platforms, Kubernetes, Infrastructure as Code, and Landing Zones
- Azure
- 7+ years. AKS, ARM, Azure DevOps, Landing Zones, Azure Policy, Event Hub, ADX, IoT Hub
- Kubernetes (AKS / OKE / k3s)
- Architect of enterprise K8s-as-a-Service, GitOps, Cilium CNI, Ingress, KEDA
- Terraform & OpenTofu
- TFE workspaces, reusable multi-cloud modules, provider orchestration
- GitOps (FluxCD / Argo CD)
- Promotion workflows, zero-cluster-credential CI/CD, multi-cluster sync
- Oracle Cloud Infrastructure (OCI / OKE)
- Private OKE clusters, OCI Vault, hub-and-spoke networking
- ARM & Bicep Templates
- Enterprise platform IaC owner with automated validation gates
Networking, Security & Identity
Mesh networking, zero trust access, secrets management, and runtime security
- NetBird & WireGuard Mesh
- Hybrid cloud-to-bare-metal interconnects, private API relay VMs
- Cilium CNI & eBPF
- Cluster egress policies, network security, Tetragon runtime detection
- authentik & Entra ID (Azure AD)
- Operator SSO, OIDC, OAuth 2.1, forward authentication, MFA, PIM
- Infisical & External Secrets Operator
- Enterprise secret delivery into k3s and OKE without in-repo secrets
- cert-manager & trust-manager
- Automated PKI, internal mTLS, Let's Encrypt automation
- Tetragon & Security Auditing
- Runtime anomaly detection, system call monitoring in Kubernetes
SaaS & Full Stack Engineering
Production web applications, microservices, and multi-tenant architectures
- TypeScript & JavaScript
- 10+ years across frontend, backend, CLI tools, and code generators
- Next.js & React
- App Router, Server Actions, SSR, streaming, optimized bundle architectures
- .NET / C# (.NET Core to .NET 8)
- 12+ years. Microservices, AKKA.NET actor model, Web API, SignalR
- Python
- AI agent orchestrators, data pipelines, Suricata security scripts, CAD tooling
- PostgreSQL & Neon
- Row-Level Security (RLS), complex domain modeling, migration rehearsals
- IndexedDB & Offline-First
- Offline transaction queues, state synchronization, conflict handling
- Domain-Driven Design (DDD)
- Bounded contexts, aggregate roots, ubiquitous language, event modeling
- Testing (Playwright & Vitest)
- End-to-end browser automation, hermetic unit tests, architectural regression tests
Applied AI & Agent Systems
Model Context Protocol (MCP), multi-agent systems, and local GPU inference
- Model Context Protocol (MCP)
- Built production Streamable HTTP servers, tool instrumentation, resource providers
- Multi-Agent Orchestration
- Per-role tool allowlists, model routing, safety guardrails, state persistence
- Self-Hosted GPU Inference
- Dual RTX (5070 Ti + 4070 SUPER), llama.cpp, CUDA, VRAM optimization
- RAG & pgvector
- 19-adapter personal data pipeline, local embeddings, vector similarity search
- Deterministic Tool Validation
- Zod schemas, structured output enforcement, prompt injection defense
- Claude Code / AI Dev Workflows
- Custom agent skills, AGENTS.md / CLAUDE.md guidelines across 20+ repos
Observability & SRE
Telemetry, distributed tracing, metrics, and site reliability engineering
- Datadog & Azure Monitor
- Enterprise APM, custom metrics, platform SLI/SLO dashboards
- Prometheus, Grafana & Loki
- GitOps cluster observability stack with Alloy and Alertmanager
- SLI / SLO Engineering
- Designed service level objectives for internal developer platforms
- Azure Data Explorer (ADX / Kusto)
- Hyperscale IoT telemetry analytics, KQL query optimization
Education
B.Sc. in Computer Science & Software Engineering (B.Sc.A.)
Université du Québec à Montréal (UQAM) · 2017
Specialized Technician Diploma — Information Systems
Institut Spécialisé de Technologie Appliquée (ISTA) · 2004
Working together
English (Fluent) · French (Native) · Arabic (Native)
Target roles: Staff Platform Engineer, Principal Platform Architect, Head of Cloud Infrastructure, Principal SaaS / Systems Architect.
Detailed employment history and references are available directly. Request my full résumé ↗
Let’s build something useful.
Hiring someone who already
works with AI?
Tell me about the system, the team, and the problem you need to solve.
chnaiti.mourad@gmail.com