Nearvic

Nearvic · Portfolio: DevOps, Cloud & Security Engineering

DevOps, cloud and security engineering for teams who can't afford downtime.

Nearvic is a DevOps, cloud and security engineering practice — this page is a portfolio of that work. CI/CD pipelines and GitOps delivery that ship on every commit, Kubernetes at fleet scale, and cloud architecture across AWS, Azure and Oracle Cloud that holds up under regulation. DevSecOps pipelines enforce real security gates, not paperwork after the fact. The result across the production estates covered here (as of September 2026): 99.9% service availability, a 70% cut in provisioning time, and 50+ Kubernetes clusters under management — backed by 24 cloud and platform certifications (as of October 2026).

  • DevOps & CI/CD Automation
  • Cloud Architecture & Engineering
  • Cloud Migration & Landing Zones
  • Kubernetes & Platform Engineering
  • DevSecOps & Compliance Automation
  • Site Reliability Engineering
  • AI & GPU Infrastructure
See the portfolio
99.9%Service availability
across production estates
−70%Provisioning time
Terraform + Ansible
50+Kubernetes clusters
under management
24Cloud & platform
certifications

Capabilities

Seven capability areas.

Demonstrated across the production systems in this portfolio, not claimed in the abstract.

DevOps & CI/CD automation

Ship on every commit, safely

CI/CD pipelines built from scratch or rescued from sprawl — GitOps delivery, deployment automation, infrastructure as code, and the golden paths that let teams ship without filing a ticket. Automation comes first; security and reliability are built into the same pipeline, not bolted on after.

  • CI/CD pipelines
  • GitOps
  • Deployment automation
  • Terraform · Ansible

Learn more about DevOps & CI/CD Automation →

Cloud architecture & engineering

Design decisions that hold up for years, not just at go-live

Reference architectures, multi-cloud design and platform decisions across AWS, Azure and Oracle Cloud — capacity planning, cost modelling and vendor-neutral advice shaped by production experience, not by whichever vendor sponsors the workshop.

  • Reference architecture
  • Multi-cloud design
  • Capacity & cost planning

Learn more about Cloud Architecture & Engineering →

Migration & landing zones

Get onto cloud without a bad quarter

Assessment, target architecture and execution for moves from on-premises or VMware onto AWS, Azure or OCI. Multi-account structure, network design, identity baseline, cost guardrails, and a cutover plan you can hand to an auditor.

  • Landing zone
  • VMware exit
  • Cutover runbooks
  • Cost guardrails

Learn more about Migration & Landing Zones →

Platform & Kubernetes

Give your engineers a paved road

Production-grade clusters, GitOps delivery, reusable Terraform modules and an internal developer platform, so teams provision what they need themselves with the guardrails already baked in.

  • EKS · AKS · OKE
  • GitOps
  • Helm golden paths
  • Autoscaling

Learn more about Platform & Kubernetes →

DevSecOps & compliance

Move security left, for real

Security gates inside the pipeline instead of bolted on after: IaC scanning, container and dependency analysis, secrets management, policy-as-code, threat detection with OCI Cloud Guard and AWS GuardDuty, and continuous compliance monitoring against a SOC 2 control baseline — evidence collected continuously, not the week before an audit.

  • Pipeline gates
  • IaC scanning
  • Vault · KMS
  • Policy-as-code
  • SecOps
  • Compliance automation

Learn more about DevSecOps & Compliance →

Reliability engineering

Make the pager quieter

SLIs, SLOs and error budgets that mean something. Observability across logs, metrics and traces. Incident response, blameless postmortems, capacity planning and tested disaster recovery — not a DR document nobody has opened.

  • SLO design
  • Prometheus · Grafana
  • Incident response
  • DR testing

Learn more about Reliability Engineering →

AI & GPU infrastructure

Make expensive silicon accountable

GPU clusters for inference and compute-intensive work: NVIDIA GPU node pools on Kubernetes, vLLM-based LLM serving, autoscaling and topology tuning, and monitoring that attributes GPU time to the workload that used it — delivered on OCI GPU shapes.

  • NVIDIA · OCI GPU
  • vLLM
  • Kubernetes
  • Terraform
  • Cost attribution

Learn more about AI & GPU Infrastructure →

See all seven services in detail →

Why Nearvic

Engineering-first security, proven in regulated production.

The pitch is simple: we build the systems, not just the audit findings about them. That's a different kind of trust than a report can earn.

Engineering-first, end to end

We implement what we recommend. Terraform, Kubernetes, CI/CD, security controls — all built into the platform we hand over, not a report describing someone else's.

Multi-cloud, not one favourite

Production experience across AWS, Azure and Oracle Cloud, including a sovereign-cloud deployment run to national data-residency rules. Advice that isn't shaped by which vendor happens to sponsor it.

Regulated-industry credibility

Banking and fintech platforms, PCI DSS and SOC 2 controls, zero-trust access models — work done under the kind of compliance pressure that catches shortcuts.

Automation over process

Policy-as-code, GitOps and compliance automation instead of manual checklists and quarterly spreadsheets — controls that hold because a pipeline enforces them.

Trust & verification

Every claim on this page survives checking.

Here's how to verify what's said on this page.

Certifications
24 cloud and platform certifications (as of October 2026) across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes and HashiCorp, linked to the issuer's public verification page wherever a confirmed badge URL exists — see Yahia's credentials.
  • AWS
  • Microsoft Azure
  • Google Cloud
  • Oracle Cloud Infrastructure
  • Kubernetes · CNCF
  • HashiCorp Terraform
Confidentiality
Every project behind this portfolio was confidential from the first call. Client names are withheld, permanently.
Track record
Six production systems designed, migrated or kept alive — banking, sovereign cloud, GPU compute, platform engineering. Four are written up in full as detailed case studies; all six are summarized on the work itself.
References
Direct quotes from people who've shipped alongside the engineer behind this work are on the profile page.

Questions

Questions people ask about this portfolio.

If your question isn't here, just ask.

Who does the engineering work?

Yahia Mohamed Benabbou, personally, on every project shown here, drawing on 7+ years across software engineering, DevOps and cloud security — see his full background at profile.nearvic.com.

Why are client names withheld?

Every engagement behind this portfolio was confidential from the first call, so client names are withheld under NDA. Architecture, scope and outcomes are described in as much detail as confidentiality allows.

How can this be verified?

Certifications link to the issuer's public verification page wherever a confirmed badge URL exists; the rest are named explicitly and verifiable on request. The real case studies behind the numbers are documented in full — see credentials and work on profile.nearvic.com.

Contact

Questions about this work, or want to connect.

We reply to every serious message within one working day.

General enquiries
info@nearvic.com
Direct
yahia.benabbou@nearvic.com
Portfolio
profile.nearvic.com — full technical background and certifications, with verification links where available
Email us Meet the engineer