Available

Nearvic · Freelance DevOps, Cloud & Security Engineering

DevOps, cloud and security engineering for teams who can't afford downtime.

Nearvic builds CI/CD pipelines, cloud architecture and the security controls that hold under regulation — deployment automation and GitOps, Kubernetes at fleet scale, and DevSecOps pipelines with real security gates — across AWS, Azure and Oracle Cloud. A freelance DevOps engineering practice, founder-led, remote-first and working internationally.

  • DevOps & CI/CD Automation
  • Cloud Architecture & Engineering
  • Cloud Migration & Landing Zones
  • Kubernetes & Platform Engineering
  • DevSecOps & Compliance Automation
  • Site Reliability Engineering
99.9%Service availability
across production estates
−70%Provisioning time
Terraform + Ansible
50+Kubernetes clusters
under management
18Cloud & platform
certifications

What Nearvic does

Six things clients bring us in for.

Every engagement starts with a discovery call and ends with a written scope. No exceptions — that's how infrastructure work stays predictable for both sides.

DevOps & CI/CD automationShip on every commit, safely

CI/CD pipelines built from scratch or rescued from sprawl — GitOps delivery, deployment automation, infrastructure as code, and the golden paths that let teams ship without filing a ticket. Automation comes first; security and reliability are built into the same pipeline, not bolted on after.

  • CI/CD pipelines
  • GitOps
  • Deployment automation
  • Terraform · Ansible

Cloud architecture & engineeringDesign decisions that hold up for years, not just at go-live

Reference architectures, multi-cloud design and platform decisions across AWS, Azure and Oracle Cloud — capacity planning, cost modelling and vendor-neutral advice shaped by production experience, not by whichever vendor sponsors the workshop.

  • Reference architecture
  • Multi-cloud design
  • Capacity & cost planning

Migration & landing zonesGet onto cloud without a bad quarter

Assessment, target architecture and execution for moves from on-premises or VMware onto AWS, Azure or OCI. Multi-account structure, network design, identity baseline, cost guardrails, and a cutover plan you can hand to an auditor.

  • Landing zone
  • VMware exit
  • Cutover runbooks
  • Cost guardrails

Platform & KubernetesGive your engineers a paved road

Production-grade clusters, GitOps delivery, reusable Terraform modules and an internal developer platform, so teams provision what they need themselves with the guardrails already baked in.

  • EKS · AKS · OKE
  • GitOps
  • Helm golden paths
  • Autoscaling

DevSecOps & complianceMove security left, for real

Security gates inside the pipeline instead of bolted on after: IaC scanning, container and dependency analysis, secrets management, policy-as-code, and compliance automation for SOC 2, PCI DSS and ISO 27001 — evidence collected continuously, not the week before an audit.

  • Pipeline gates
  • IaC scanning
  • Vault · KMS
  • Policy-as-code
  • Compliance automation

Reliability engineeringMake the pager quieter

SLIs, SLOs and error budgets that mean something. Observability across logs, metrics and traces. Incident response, blameless postmortems, capacity planning and tested disaster recovery — not a DR document nobody has opened.

  • SLO design
  • Prometheus · Grafana
  • Incident response
  • DR testing

Why Nearvic

Engineering-first security, proven in regulated production.

The pitch is simple: we build the systems, not just the audit findings about them. That's a different kind of trust than a report can earn.

Engineering-first, end to end

We implement what we recommend. Terraform, Kubernetes, CI/CD, security controls — all built into the platform we hand over, not a report describing someone else's.

Multi-cloud, not one favourite

Production experience across AWS, Azure and Oracle Cloud, including a sovereign-cloud deployment run to national data-residency rules. Advice that isn't shaped by which vendor happens to sponsor it.

Regulated-industry credibility

Banking and fintech platforms, PCI DSS and SOC 2 controls, zero-trust access models — work done under the kind of compliance pressure that catches shortcuts.

Automation over process

Policy-as-code, GitOps and compliance automation instead of manual checklists and quarterly spreadsheets — controls that hold because a pipeline enforces them.

Trust & verification

Every claim on this page survives checking.

Nearvic is founder-led today — that's stated plainly in the terms below, not papered over. Here's how to verify what's said here before engaging.

Certifications, verified publicly

18 cloud and platform certifications across AWS, Azure and Oracle Cloud, each linked to the issuer's public verification page — see the founder's credentials.

NDA before technical discovery

Every engagement is confidential from the first call. Client names are withheld — you get the same treatment, permanently.

A production track record, not a pitch deck

Real case studies — banking, sovereign cloud, GPU compute, platform engineering — with outcomes you can ask about on a call. See the work itself.

References, not just a claim

Direct quotes from people who've shipped alongside our founder are on the profile page.

Engagement

How the work is scoped, run and handed back.

Infrastructure work fails on process more often than on technology. These are the terms Nearvic works under, before anyone writes a line of Terraform.

Engagement models
4–12 week delivery projects  ·  fractional platform lead, 2–3 days per week  ·  architecture review and advisory retainer.
How it starts
Discovery call, then a written scope — deliverables, milestones, and a fixed price or day rate — agreed before work begins. No scope, no start.
Access & least privilege
Work happens inside your tenancy and your repositories, using scoped, time-bound credentials you issue and can revoke at any moment. Production data stays in your environment. No credentials retained after handover.
Confidentiality
Your NDA is signed before technical discovery. Every past engagement is withheld under NDA — you get the same treatment, permanently.
Handover
Every engagement ends with runbooks, architecture decision records and a live handover session. If your team cannot operate it without us, the work is not finished.
Contracting
Nearvic is not yet a registered legal entity — engagements are contracted directly with the founder, or through your existing contractor-management or employer-of-record provider where procurement requires a registered supplier.
Working hours
Remote-first, working internationally — overlap windows arranged per engagement to match your team's time zone. On-site available worldwide on request.
Languages
English  ·  French  ·  Arabic.

Questions

What people ask before they engage us.

If your question isn't here, it belongs in the discovery call, not guessed at on a page — just ask.

Is Nearvic a registered company?

Not yet — Nearvic is a founder-led practice today, not a registered legal entity. We say so plainly rather than imply otherwise. Where procurement requires a registered supplier, engagements run through your existing contractor-management or employer-of-record provider — see Engagement.

Who actually does the engineering work?

Yahia Mohamed Benabbou, personally, on every engagement today. Nothing here implies a team that doesn't exist — see his full background at profile.nearvic.com.

How does an engagement start?

A discovery call, then a written scope — deliverables, milestones, and a fixed price or day rate — agreed before any work begins. No scope, no start.

Can you contract through our EOR or contractor-management provider?

Yes. That's the standard path today given the point above, and it's how most larger clients onboard an independent contractor without a registered local entity.

Do you sign an NDA before technical discovery?

Yes, always, before any architecture, code or infrastructure details are shared — not after. Every past engagement was handled the same way; client names are withheld permanently as a result.

How can we verify your certifications and past work?

Every certification links to the issuer's public verification page, and the real case studies behind the numbers are documented in full — see credentials and work on profile.nearvic.com.

Contact

Tell us what is breaking, or what you are about to build.

We reply to every serious enquiry within one working day. If the problem is outside what Nearvic does well, we will say so and point you somewhere better.

General enquiries
info@nearvic.com
Founder profile
profile.nearvic.com — full technical background and verified certifications
Availability
Remote-first  ·  working internationally  ·  on-site available worldwide on request
Status
Taking on contract and consulting engagements