OPERATIONAL

GET /muhammad-zohaib  →  200 OK

Muhammad Zohaib

I am

Dafi Labs — DevOps Engineer Intern
Orbit-i — DevOps Engineer Intern

I build and run production backend systems — REST APIs, auth pipelines, and the infrastructure underneath them. BS Software Engineering student at University of Mianwali, currently shipping researchpaper.site on AWS EC2.

Muhammad Zohaib
days building in production
3.80 CGPA / 4.00
30+ documented API endpoints
2 production Spring Boot systems

/experience

Current Internships

Hands-on DevOps and backend experience across two active roles — shipping infrastructure while still learning every day.

Dafi Labs

DevOps Engineer Intern

Active

Working on DevOps practices — CI/CD pipelines, cloud infrastructure, and production deployment workflows while continuing backend development with Java Spring Boot.

Orbit-i

DevOps Engineer Intern

Active

Writing and optimizing Dockerfiles for backend services — multi-stage builds, layer caching, and container best practices. Learning production DevOps workflows hands-on alongside the engineering team.

Docker Dockerfile Backend Containerization

/about

Currently in Semester 7

I'm a BS Software Engineering student at University of Mianwali, based in Pakistan, focused on backend engineering with a growing pull toward DevSecOps and infrastructure work. Currently interning at Dafi Labs and Orbit-i as a DevOps Engineer Intern — writing Dockerfiles for backend services at Orbit-i while building CI/CD and cloud workflows at Dafi Labs. Most of my learning happens by shipping — real deployments over local demos, PostgreSQL over H2, production incidents over tutorials.

Day to day I split time between a Windows machine (i7-14650HX, RTX 4070) for Spring Boot development and CI builds, and an Ubuntu laptop running as a self-hosted GitHub Actions runner — alongside an ARM64 EC2 instance in production.

institution University of Mianwali
program BS Software Engineering
status Semester 7 · In Progress
internships Dafi Labs · Orbit-i — DevOps Intern
cgpa 3.80 / 4.00
location Pakistan
exploring Kafka · Kubernetes · RAG / pgvector

/highlights

Why work with me

What sets me apart as a backend & DevOps engineer — beyond the resume keywords.

Production-first mindset

Two Spring Boot systems live in production — not localhost demos. I ship on AWS EC2 with real SSL, managed databases, and CI/CD pipelines.

Backend + DevOps in one

I write the API and deploy it — Docker, Nginx, GitHub Actions, RDS, Redis, and infrastructure hardening included in every project.

Security built in

JWT refresh rotation, RBAC with @PreAuthorize, BCrypt, OTP rate-limiting, TLS 1.2/1.3 — security is part of the architecture, not an afterthought.

Strong academic record

3.80 CGPA in BS Software Engineering (Semester 7). Solid CS fundamentals — DSA, OOP, OS, Networks, DBMS — applied directly in production code.

Self-driven learner

AWS, CI/CD, and Git certified. Dual DevOps internships at Dafi Labs and Orbit-i. Exploring Kafka, Kubernetes, and RAG/pgvector on my own stack.

Team-ready from day one

Jira-certified for sprint planning and backlog management. Document APIs with Swagger/OpenAPI, write clean commits, and debug production incidents calmly.

/skills

Stack

languages & frameworks

JavaSpring Boot Spring SecuritySpring Data JPA Hibernate

cloud & infrastructure

AWS EC2AWS RDSAWS S3 ElastiCacheDockerDocker Compose NginxGitHub Actions

databases & cache

PostgreSQLRedis OTP rate-limitingtoken blacklisting

security & apis

JWT + refresh rotationRBAC BCryptHTTPS / SSL Swagger / OpenAPI 3Postman

tools

SendGrid (SPF/DKIM)GitMaven IntelliJ IDEALinuxJira

cs fundamentals

DSAOOPMVC Operating SystemsNetworksDBMS

/projects

Production systems

Cloud-Native Research Paper Management System

4-role production platform · Live at researchpaper.site

Spring BootPostgreSQLRedis AWS EC2/RDS/S3/ElastiCacheDocker NginxGitHub ActionsSendGridMinIO
  • Architected role-isolated REST API for the full paper lifecycle — SUBMITTED → UNDER_REVIEW → ACCEPTED / REJECTED / REVISION — across Admin, Researcher, Reviewer, and Reader roles via @PreAuthorize.
  • Stateless JWT auth with refresh token rotation; access tokens verified in-memory. Redis OTP rate-limiting uses atomic setIfAbsent() to prevent race conditions under load.
  • Deployed on AWS EC2 behind Nginx with Let's Encrypt SSL, TLS 1.2/1.3 hardening, and HTTP→HTTPS redirect. RDS (PostgreSQL) + ElastiCache (Redis) as managed backends.
  • CI/CD via GitHub Actions: Maven build → Trivy scan → Docker image (SHA-tagged) → Docker Hub → SSH deploy — images built off-server to preserve EC2 memory.
  • Dual-mode object storage with AWS S3 + MinIO; SendGrid with SPF/DKIM domain auth for OTP email; 30+ endpoints documented via Swagger / OpenAPI 3 with a Postman collection.

ReveilleX — Smart Alarm Backend

Challenge-based dismissal engine for a Flutter alarm app

Spring BootPostgreSQLRedis Docker ComposeJWTSpring Security
  • Secure REST backend with JWT auth, refresh token rotation, and a locked-down Spring Security filter chain.
  • Server-side challenge validation engine for math and QR-based alarm dismissal workflows.
  • Redis for session/token lookups, PostgreSQL for alarm and user persistence via Spring Data JPA.
  • Diagnosed and fixed a Jackson version conflict and duplicate Spring Security filter registration caused by transitive dependency clashes, resolved via explicit version pinning in pom.xml.

/journey

Professional journey

From classroom to production — a timeline of how I've built real engineering experience.

Active

DevOps Engineer Intern · Dafi Labs

CI/CD pipelines, cloud infrastructure, and production deployment workflows alongside Spring Boot backend development.

Active

DevOps Engineer Intern · Orbit-i

Writing Dockerfiles for backend services — containerizing Spring Boot apps with multi-stage builds while learning production DevOps practices on the job.

Production

researchpaper.site — Live on AWS

Deployed a 4-role research paper platform on EC2/RDS/ElastiCache with Nginx, SSL, Docker, and GitHub Actions CI/CD. 30+ documented REST endpoints.

Visit live site →
Backend

ReveilleX — Smart Alarm Backend

Built secure REST API with JWT auth, challenge-based alarm dismissal engine, Redis caching, and Docker Compose deployment for a Flutter mobile app.

View on GitHub →
Certifications

AWS · CI/CD · Git — EmpRadar

Completed industry certifications in cloud (AWS), continuous integration/deployment, and version control — reinforcing hands-on DevOps skills.

Education

BS Software Engineering · University of Mianwali

Semester 7 in progress · 3.80 / 4.00 CGPA. Focus on backend engineering, cloud computing, and software architecture with production-oriented projects.

/education

Academic background

Pursuing a Bachelor's in Software Engineering with a strong focus on backend systems, cloud infrastructure, and software quality. Coursework directly maps to the technologies I use in production — not just theory on paper.

Expected graduation: 2027 · Available for full-time backend, DevOps, and platform engineering roles from internship through graduate hire.

BS Software Engineering

University of Mianwali · Pakistan

3.80 CGPA / 4.00
7th Semester
2027 Expected grad

relevant coursework

Data Structures OOP DBMS Operating Systems Computer Networks Software Architecture Cloud Computing

/certifications

Log

2026-06 AWS Certification — EmpRadar view →
2026-06 CI/CD — EmpRadar view →
2026-06 Git — EmpRadar view →
2026-02 Get the Most Out of Jira — Atlassian University sprint planning, backlog, epics
Open to opportunities

Available for backend & DevOps roles

Internship & full-time · Graduating 2027 · Based in Pakistan · Remote, hybrid, or on-site · 3.80 CGPA · 2 production systems already live

  • Backend Engineer
  • DevOps Engineer
  • Platform Engineer
  • Spring Boot
  • AWS · Docker

/contact

Let's talk

Open to backend, DevOps, and platform engineering roles — internships and full-time. Fastest way to reach me is email.

/send-message

Drop me a message