profile

Fas Aziz

Specialising in Cloud Infrastructure, API/MCP Integrations, and Secure Enterprise AI Adoption

About

Here is a little background

Platform engineer with 7+ years in cloud infrastructure and DevOps. Over the last year or so my focus has shifted into AI platform engineering, building the API/MCP integrations and security controls that let the business safely adopt tools like Claude Enterprise.

Experience

Coller Capital

Senior Platform Engineer

Coller Capital

August 2024 - Present

Architected and established an enterprise AI platform on Azure to enable secure, governed adoption of generative AI across Coller Capital.

Designed a centralised API and MCP platform using Azure API Management, exposing internal systems and data sources as reusable AI tools for Claude Enterprise.

Defined platform standards for AI application delivery, authentication, APIOps and self service onboarding.

Designed and implemented an isolated AI sandbox platform using Azure DevTest Labs for rapid, secure provisioning of ephemeral, pre-configured Windows 11 development environments.

Led the migration of Azure DevOps repositories and pipelines to GitHub Actions, building reusable CI/CD workflow templates and enterprise guardrails across GitHub EMU.

Architected a Hub and Spoke network topology integrated with CATO SASE, and automated Azure Landing Zone and Azure Policy deployments using Terraform aligned with Azure CAF best practices.

Federated Hermes

DevOps Engineer

Federated Hermes (Contract)

May 2023 - August 2024

Building a greenfield Azure estate in a Hub and Spoke topology implementing the CAF model with Windows based VMs and MSSQL backend VMs, using subscription segregation per environment to allow seamless migration from on-prem to Azure.

Implemented and maintained Azure vWAN and Azure Firewalls, and delivered Azure IaaS including peerings and private endpoints, with Terraform IaC using bespoke modules.

Migrated Azure DevOps Release Pipelines to YAML pipelines, and migrated IIS, SSIS and DACPAC Octopus Deploy pipelines to Azure DevOps YAML pipelines.

Mentored infrastructure and network engineers on DevOps practices and IaC adoption.

Capital On Tap

DevOps Engineer

Capital On Tap

Apr 2021 - May 2023

Maintaining and deploying cloud services to Azure using CI/CD, with Terraform as Infrastructure as Code.

Used Azure DevOps, Team City and Octopus Deploy for repos, pull requests, artifact creation and deployment, deploying to Development, Pre-live and finally Production/Production DR across UK/US/ES.

Migrated from Azure Application Gateways to NGINX Plus, including Terraform modules and bash scripts to bootstrap NGINX, DataDog and ACME.

Migrated a SQL VM to SQL MI, working through Kerberos authentication and the supporting networking prerequisites such as VNETs/Subnets, NGS's and UDR's.

CGI

Infrastructure Engineer

CGI (Defence Project)

November 2019 - Apr 2021

Working on DMICP (Defence Medical Information Capability Programme). Managing and sustaining the infrastructure where the MOD (Ministry of Defence) can access medical and dental health records, a system accessible from any military location, anywhere including operational theatres and at sea.

Working in an agile environment enables me to learn on the go and pick up different skills in order to complete tasks. Ensuring that tasks/bugs get completed within the time frame so they can be tested and pushed to the live environment. Completing numerous tasks that have different priorities, therefore it is essential to organise my time effectively and efficiently so that deadlines are met. This enables me to focus and get the job done. Tasks can vary from as simple as applying a security fix via a GPO to more of a lengthy task such as upgrading domain controllers.

Memset

Linux/Windows Sys Admin

Memset

Sept 2018 - Oct 2019

Working with cloud products – Maintaining customer servers:

Day to day activities include monitoring alerts with the use of Nagios, any servers that are down, disks that are failing. Responding to emergency calls and tickets from customers. Reviewing policies ensuring that they are up to date and they are followed. Responding to customers via ticketing system ensuring SLA’s are being met. Setting up dedicated customer servers upon request and internal host servers for our infrastructure, Debian and Centos servers. Analysing log files trying to troubleshoot customer issues.

Skills

Cloud & Platform Architecture

AzureAWSAzure Landing Zones (CAF)Hub & Spoke NetworkingCATO SASE

AI Platform Engineering

Claude EnterpriseMCPAzure API ManagementAPIOps

Infrastructure as Code & CI/CD

TerraformAnsibleGitHub ActionsAzure DevOpsOctopus DeployTeamCityKubernetesDockerHelmHarness

Scripting & Systems Administration

PowerShellBashWindows & Linux AdministrationActive Directory / Entra ID

Observability & Collaboration

DatadogJiraNGINXHalo ITSM

Contact

If you want to get in touch, connect with me on LinkedIn