Mohammad Nweider

[AWS Lambda]

• Maintaining container/Linux sandbox orchestration within AWS Lambda data plane and seccomp profile.
• Led the design and implementation of a new control plane component to transform and optimize customer container images into an AWS Lambda executable format as part of a re:invent project that brought container image support to Lambda.
• Led the redesign and refactoring of telemetry data collection within the AWS Lambda data plane, as well as maintaining our telemetry agent written in Rust.

[EMR Serverless]

• Led the design and implementation of a fraud integration project to control and assign service quota to customers based on an internally generated score, which is determined by customer behavior, to protect the service against attacks and abuses.
• Led the design and implementation of a new feature to add a TLS encryption layer to the RPC protocol in Spark to protect the data transferred and authenticate workers. This project involved code changes to the Spark core modules, introducing a private CA to issue certificates for the workers, and designing an automated approach to revoke certificates and protect the network in response to security events.
• Led a project to introduce new CloudWatch metrics and add visibility for the customers on their resource usage in the workers.

• Recognized as subject matter expert for multiple infrastructure core services, including LDAP, NTP, Configuration Management, Consoles, DC Controls, and others.
• Coordinated with managers and leadership to establish team roadmap
• Enhanced core functions of LDAP by implementing crucial fixes and performance optimizations in the core codebase.
• Led an audit and compliance effort on the LDAP database and maintained the security profile of the service with least privilege access.
• Implemented secure API solution to ensure integrity in LDAP updates.
• Led the design and implementation of an LDAP replication system in Ruby, following the LDAP protocol RFC and 389ds's native replication protocol.

• Oversee production environment and infrastructure for e-commerce systems hosted in AWS.
• Performed regular scans to detect unauthorized access and mitigate vulnerabilities.
• Implemented and maintained comprehensive CI/CD pipeline for code deployment.
• Identify and resolve production environment issues.

• Maintaining a fully Linux-based ADSL network, including an LNS service, AAA Service, DNS, proxies, iptables based firewall, and dynamic-based routing.
• Managing and ensuring continuous operation of the SMS service.
• Securing an external web hosting service which suffered of regular attacks and hacking, so I led a project to setup regular scans and an IPS/IDS system, access monitoring, automated file scan on uploads and ftp, applying security patches and send regular notifications to the customers on their software and website modules security status and available upgrades.

• Maintaining company-wide internal systems and features.
• Integrating internal systems with payment and subscription gateways.
• Implementing new self-service feature for better customer experience.

• Designing and Implementing SAAS, CRMs, and other web applications. Both frontend and backend.