Balawal Raja

Systems Engineer specialising in IT operations automation — using AWS to build cloud-native workflows that replace manual work across employee lifecycle, identity, and asset management.

I build event-driven automation on AWS — serverless functions triggered by Jira webhooks, Step Functions for multi-step workflows, Terraform for repeatable infrastructure, and API Gateway to tie it all together.

Outside of work I run a two-node Proxmox homelab with 20+ containers — including n8n, Ollama, Authentik, and Grafana — and use it to test and refine patterns before applying them in production.

Looking for a Systems or Cloud Engineer who ships production automations?

I’m open to roles in systems engineering, cloud infrastructure, or IT automation where I can keep building things that reduce manual work and improve operational reliability.

View Projects Download CV LinkedIn

Balawal Raja - Systems Engineer

11+

Cloud Projects

250+

Devices Managed

4+

Certifications

15+

Automation Scripts

About

I’m a Systems Engineer with hands-on experience across IT systems, cloud services, automation, and infrastructure support.

In my current work, I have used AWS services such as EC2, Lambda, and API Gateway. Outside of work, I continue to develop my cloud and infrastructure skills by building personal projects using Terraform, AWS, GCP, and a Proxmox-based homelab.

My focus is on using automation and infrastructure knowledge to reduce manual work, improve reliability, and build secure, scalable systems.

What I Work With

Cloud, automation, and operations tooling I use in production and in the lab

Cloud & Infrastructure

  • AWS: Lambda, API Gateway, EC2, S3, Step Functions, SNS, SES
  • Cross-account access via STS role assumption
  • Terraform — VPC, EC2, IAM, and networking modules
  • AWS SAM / CloudFormation for serverless deployments
  • Proxmox homelab for infrastructure experimentation

Automation & Systems

  • Python — Lambda functions, webhook handlers, API pipelines
  • Bash — macOS fleet automation at scale via Jamf Pro
  • Jira-driven workflow automation (webhooks → Lambda)
  • Multi-system orchestration: HiBob, Duo, Google Workspace, M365, Snipe-IT

Security & Operations

  • IAM least privilege and cross-account role design
  • Secrets management with AWS SSM Parameter Store
  • Webhook validation — HMAC-SHA512 and shared secrets
  • Jamf Pro & Jamf Protect — CIS Level 1 compliance
  • Identity platforms: Okta, OneLogin, Google Workspace, Duo

Homelab & Self-Hosted Infrastructure

I maintain a self-hosted lab environment using Proxmox to experiment with infrastructure, networking, automation, and cloud-adjacent workflows in a controlled setting.

This environment helps me test deployment patterns, understand infrastructure operations, and build confidence with systems outside of my day-to-day role.

View homelab overview

Contact

Use the form below for roles, collaborations, or technical discussions. I typically respond within a few business days.

Projects Portfolio

Explore AWS, Terraform, automation, and infrastructure projects

Homelab

Self-hosted Proxmox environment for networking, automation, and cloud-adjacent workflows

Professional Experience

My journey in Systems Engineering and IT Infrastructure

Systems Engineer

Currently Working

ZAVA Online Doctor

Manage and optimize IT infrastructure in a fast-paced healthcare environment: endpoint and network operations, security and compliance, identity, and automation across Jamf Pro, Jamf Protect, Meraki, and integrated cloud tooling.

Security & Compliance
  • Implemented Jamf Protect to achieve CIS Level 1 compliance on macOS endpoints
  • Supported and aligned controls with ISO 27001, Cyber Essentials Plus, and SOC 2 (US) frameworks
  • Performed patch management, system audits, and contributed to broader cybersecurity compliance initiatives
  • Contributed to disaster recovery and business continuity planning, including documentation and testing
Infrastructure & Endpoint Management
  • Administer Cisco Meraki infrastructure (LAN/WAN, VLANs, WiFi, VPN) ensuring secure and reliable operations
  • Lead endpoint lifecycle management using Jamf, including provisioning, configuration, and compliance enforcement
  • Led upgrade of 250+ endpoints, replacing SentinelOne to improve performance and standardise endpoint security
Automation & Efficiency
  • Designed and implemented automation using webhooks, AWS API Gateway, Lambda (Python), and SSM Parameter Store to eliminate repetitive tasks
  • Reduced manual workload, improving team efficiency and lowering operational costs
  • Developed additional automation using Bash and Python for onboarding, provisioning, and policy enforcement
Identity & Access Management / Tools
  • Managed identity and access systems including Okta, OneLogin, Google Workspace, Office 365, and Duo
  • Maintained secure integrations with Slack and Qualys to support monitoring and vulnerability management
Support & Collaboration
  • Delivered 2nd/3rd line support, handling escalations and complex technical issues
  • Mentored junior team members and provided technical guidance
  • Collaborated with engineering teams via Jira to resolve incidents, bugs, and infrastructure issues
Jamf Pro & Jamf Protect CIS & Compliance Meraki Okta & Identity AWS Lambda & API Gateway Python & Bash Jira ISO 27001 & Cyber Essentials

IT Support Engineer (2nd/3rd Line)

ZAVA Online Doctor

Delivered advanced support across endpoints, networks, and SaaS platforms in a hybrid environment. Managed user lifecycle and access across multiple identity platforms and led a 250+ endpoint upgrade initiative to improve performance and security tooling.

2nd/3rd Line Support Endpoint Upgrades Identity Platforms Patch Management Compliance Support

Technical Engineer (German Speaking)

McAfee

Provided enterprise-level cybersecurity support to EMEA clients, diagnosing and resolving advanced endpoint and security product issues while collaborating with internal teams on complex escalations.

Enterprise Security Support Endpoint Troubleshooting Incident Escalation EMEA Customer Support German Language Support

Trainee Cloud Support Engineer

Amazon Web Services (AWS)

Completed intensive training in AWS services, Linux administration, Bash scripting, and SQL through hands-on labs and deployment scenarios, including collaborative technical presentations.

AWS Services Linux Administration Bash Scripting SQL Cloud Support

Additional Training

Structured cloud and systems training

AWS re/Start Program

Completed the AWS re/Start program with hands-on work across AWS Cloud, Linux administration, MySQL, and Python and Bash scripting, including collaborative technical presentations. I apply that baseline alongside production experience to design, automate, and support cloud-backed workflows.

AWS Cloud Linux Administration MySQL Python Bash Scripting

Certifications

Professional credentials and achievements