Supporting the enterprise Kubernetes platform behind everything from warehouse systems to sales APIs. Managing multi-region EKS clusters and driving Istio service mesh initiatives with Terraform and ArgoCD.
maaz@seattle:~$ whoami
MaazGhani
Staff Kubernetes EngineerLululemon
Security-first engineer who enjoys gluing things together. I build secure, resilient, and maintainable platforms in a landscape where change is the only constant.
Based in Seattle. Currently managing multi-region EKS clusters and driving service mesh initiatives at Lululemon.
- Kubernetes
- Golang
- AWS
- Istio
- Terraform
maaz@seattle:~$ status --brief
platform: healthy · location: Seattle, WA · shell: frappe
⌘K to focus
$ journalctl -u career --reverse
Career History
Building dependable systems across retail, SaaS, and cloud infrastructure.
2024.02 — NOW
2021 — 2024
Operated 1,200+ Kubernetes nodes across AWS regions for microservice workloads. Helped achieve FedRAMP High compliance for a real-time metrics SaaS serving Fortune 100 customers.
2018 — 2021
Supported Nordstrom.com and internal platforms, led operational-readiness and design reviews, and shaped Business Continuity and Disaster Recovery initiatives.
2013 — 2018
Led DevOps for a scalable, cloud-based ecommerce platform, building cost-effective SaaS infrastructure for online store management.
$ tail -n 3 ~/thoughts/index
Latest thoughts
013 min read (opens in a new tab)028 min read (opens in a new tab)038 min read (opens in a new tab)042 min read (opens in a new tab)052 min read (opens in a new tab)
Introducing git-to.dev: search github via shortened URLs
A fuzzy GitHub URL shortener: type git-to.dev/oai/cx and land on github.com/openai/codex. Resolves owner/repo pairs by scoring exact, prefix, and subsequence matches — no shortener service required.
Setting Up a Tailscale Exit Node for Apple TV
Route an Apple TV through a tiny VPS with Tailscale.
Interacting with Kubernetes Clusters from Copilot using an MCP Server
Testing a Kubernetes MCP server against a local k3d cluster with GitHub Copilot.
thinscale: a thinclient setup using tailscale, k3s, rasbpi zeros
A minimal, portable Kubernetes shell environment for secure work from anywhere.
tailk3scale — mesh VPN for IoT, run on IoT
A lightweight Kubernetes and Tailscale mesh running on Raspberry Pi hardware.
$ ls -lah ~/projects
Projects
~/src/git-to.dev
git-to.dev
Fuzzy URL shortener for GitHub repos. Type git-to.dev/oai/cx and it resolves to github.com/openai/codex — no URL shortener needed.
~/src/ksailnet
ksailnet
Inner-loop cloud-native development with a K3s dev container, automated deployments, and a Tailscale tailnet.
~/notes/thinscale.md
Thinscale
A minimalist Kubernetes thin-client setup using Raspberry Pi Zeros, Tailscale, and K3s for portable edge meshes.
~/src/pdfquery
PDFQuery
A command-line tool that builds vector databases from PDFs for intelligent GPT-powered documentation search.
OPEN TO CONVERSATION
Let's build something resilient.
Whether it's Kubernetes architecture, platform reliability, or comparing notes on secure infrastructure, I'm down to talk.