Available for remote roles · Finland

Limon
Billal

Junior Cloud & DevOps Engineer
Targeting remote-first teams in NL · DE · UK · IE

github.com/billal4232 limonlab.online Finland (Permanent Resident)
Profile

Self-taught cloud and DevOps engineer building production-grade infrastructure on AWS with Terraform. Completed hands-on projects covering multi-tier VPC architecture, ALB + ASG auto-scaling, private S3 with CloudFront delivery, RDS, SSM access, remote state management, and custom domain HTTPS setup — all applied, debugged live, and destroyed. Strong Linux foundation across all 12 system administration domains with real incident simulation on a live Hetzner VPS. Currently pursuing AWS Solutions Architect Associate. Targeting Junior Cloud Engineer, Cloud Ops, or DevOps roles at remote-first companies.

Technical Skills
Cloud
  • AWS EC2 / VPC
  • S3 / CloudFront
  • ALB / ASG
  • RDS / Route53
  • IAM / SSM
  • CloudWatch / ACM
Infrastructure as Code
  • Terraform
  • Reusable modules
  • Remote state (S3)
  • DynamoDB locking
  • Multi-provider config
Linux & Systems
  • Ubuntu 24.04
  • Systemd / Nginx
  • Bash scripting
  • SSH / fail2ban
  • Disk & storage mgmt
  • Process management
Tools & Stack
  • Git / GitHub
  • AWS CLI v2
  • MySQL / php-fpm
  • WordPress
  • VS Code
Projects
terraform-infra
github →

Multi-tier AWS infrastructure built and debugged entirely from scratch. VPC with public/private subnets, NAT Gateway, ALB + ASG with Launch Template and nginx user data, EC2 in private subnet with SSM access (no bastion), RDS MySQL 8.0, S3 assets bucket, CloudWatch alarms, and Route53 A record. Remote state via S3 + DynamoDB locking. Debugged live: security group blocks, 502/503 ALB errors, ASG vs target group health check mismatch.

Terraform VPC ALB + ASG EC2 RDS MySQL SSM CloudWatch Route53 S3 Remote State
terraform-s3-cloudfront
github →

Static website hosting on private S3 with CloudFront OAC authentication. Bucket policy locked to specific distribution via AWS:SourceArn condition. Custom error responses for 403/404. Debugged AccessDenied errors from incorrect OAC setup and missing default_root_object. Verified caching behavior via x-cache headers.

Terraform S3 CloudFront OAC IAM Policy
terraform-cv-site
github →

Custom domain HTTPS static site at cv.limonlab.online. Extends CloudFront + S3 pattern with ACM certificate provisioning in us-east-1, DNS validation via Route53, multi-provider Terraform config, and alias A record pointing to CloudFront distribution.

Terraform ACM CloudFront Route53 S3 Multi-provider
Hetzner VPS — Live Linux Lab
limonlab.online →

Self-managed Ubuntu 24.04 VPS on Hetzner (Helsinki) running nginx, php-fpm, MySQL, and two live WordPress sites. Configured SSH with ed25519 keys, separate nginx logs per site, and documented real production incidents: php-fpm exhaustion, disk full from log bloat, inode exhaustion, SSL expiry, MySQL slow queries, OOM events.

Linux Nginx MySQL WordPress SSH Systemd
Certifications
✓ Earned
AWS Certified Cloud Practitioner
Amazon Web Services
⟳ In Progress
AWS Solutions Architect Associate
Amazon Web Services
⟳ Planned
HashiCorp Terraform Associate
HashiCorp
Experience
2024 —
Present
Self-Directed Cloud & DevOps Study
Independent · Finland

4 hours daily of structured learning alongside full-time work. Completed 12-domain Linux curriculum, Bash scripting, AWS Cloud Practitioner, and hands-on Terraform projects. Building toward Junior Cloud/DevOps Engineer role at remote-first companies in Europe.

Current
Facilities Worker
Finland

Full-time employment demonstrating reliability, consistency, and work ethic while pursuing a career transition into cloud engineering.