Self-Hosted n8n & Sovereign AI Automation
Build reliable, queue-mode n8n workflows and sovereign AI automation pipelines that eliminate per-task SaaS fees and keep customer data strictly in your control.
Explore capabilitySenior Platform & AI Infrastructure Engineer
Build the foundation
that scales.
I design and ship production infrastructure for teams that are done patching symptoms. Cloud systems, AI automation, and developer platforms built for the next hard thing.
Available for select engagementsBased remotely · Working worldwide01 / 04
The short version
Infrastructure is a product decision.
Every deployment path, queue, database, and alert changes what your team can build next. I work at that seam: making complex systems legible, reliable, and owned by the people who run them.
More about the practiceWhat I do
Technical depth without the hand-off.
From first audit to production handover, I stay close to the system and the people who depend on it.
WhatsApp Chatbots (Darija, French & Arabic)
Native conversational AI for Moroccan businesses running on official Meta WhatsApp Cloud API. Slashing customer support response times and confirming Cash-on-Delivery (COD) orders.
Explore capabilityCloud Cost Reduction & Hetzner Migration
Slash bloated AWS and GCP monthly bills by migrating compute, databases, and container workloads to high-performance European bare-metal (Hetzner, OVHcloud).
Explore capabilitySeven disciplines. One accountable senior engineer.All services
Selected signal
“The work is quiet when it is done well.”
~6y hands-on DevOps & Linux platform engineering
3 operating languages (EN, FR, AR)
DevOps Linux, Kubernetes, PostgreSQL & Cloud platforms
Example Architecture
Production Architecture Reference Blueprints
Concrete architectural patterns for self-hosted automation, sovereign cloud migration, and conversational middleware.
Cloud Cost Reduction & Bare-Metal Migration
Problem: Overprovisioned hyperscaler compute, escalating managed Kubernetes overhead, and opaque egress networking charges.
Target Stack: Immutable Talos Linux on Hetzner Dedicated bare metal, Cilium eBPF host routing, ArgoCD GitOps, and PostgreSQL with continuous WAL archiving.
What I Deliver: Complete Terraform / OpenTofu provisioning, hardened cluster deployment, parallel database replication, and zero-downtime cutover plan.
Self-Hosted Sovereign n8n Automation
Problem: Multi-tenant SaaS automation platforms with restrictive per-operation billing and data residency conflicts under Moroccan CNDP 09-08.
Target Stack: Dedicated n8n in high-availability Queue Mode, Redis buffer, PostgreSQL database with automated backups, and reverse proxy SSL termination.
What I Deliver: Containerized deployment runbooks, isolated worker pools, webhook idempotency layer, custom ERP connectors, and staff maintenance documentation.
Transactional WhatsApp Automation Middleware
Problem: Manual customer support bottlenecks and unverified Cash-on-Delivery e-commerce orders leading to high delivery failure rates.
Target Stack: Official Meta WhatsApp Business Cloud API, Node.js webhook processor, Redis queue buffer, and Darija / French NLP intent routing.
What I Deliver: Meta Business Manager webhook setup, automated 2-minute order confirmation pipeline, CRM integration, and human-operator escalation dashboard.
Enterprise Architecture & Sovereign Delivery
Production Systems Engineered for the GCC, Morocco & Global Scale
Senior infrastructure design, sovereign AI automation, and high-availability database engineering delivered with zero third-party vendor lock-in.
Sovereign Cloud & Bare-Metal Kubernetes Consulting
High-availability Talos Linux and Proxmox VE cluster architectures designed for total data sovereignty. Featuring Cilium eBPF zero-trust mesh networking, immutable operating systems with zero SSH attack surfaces, and production GitOps with ArgoCD. Engineered for enterprises eliminating hyperscaler cost inflation across the GCC (Riyadh, Dubai), North Africa, and Europe.
Target Ecosystems & Tech Stack: Talos Linux, Cilium eBPF, Proxmox VE, Hetzner, OCI Riyadh, AWS Dubai, OpenTofu, ArgoCD
Autonomous AI Agents & Sovereign n8n Workflows
Self-hosted n8n workflow engines deployed in queue mode with isolated PostgreSQL and Redis worker pools. Sovereign on-premise LLM inference with vLLM, DeepSeek-R1, and Model Context Protocol (MCP) telemetry bridges. Automates business processes designed following the privacy principles of Saudi PDPL, UAE Data Protection Law, Moroccan CNDP, and EU GDPR.
Target Ecosystems & Tech Stack: Self-Hosted n8n, vLLM, DeepSeek, Redis Queue, WhatsApp Cloud API, FastMCP, Ollama
High-Availability Database & PostgreSQL Resilience
Mission-critical database architecture with automated Point-in-Time Recovery (PITR) via WAL-G, sub-millisecond connection pooling with PgBouncer, and hybrid semantic retrieval using pgvector. Zero-downtime rolling schema migrations and rigorous query plan optimization for high-concurrency transactional systems.
Target Ecosystems & Tech Stack: PostgreSQL 17, WAL-G, MinIO/S3 PITR, PgBouncer, pgvector, Patroni, TimescaleDB
Cloud FinOps & Fractional Platform Leadership Retainers
Eliminating hyperscaler bill markups through systematic architectural refactoring and hybrid bare-metal migrations. Fractional platform leadership provides dedicated weekly senior SRE capacity, proactive incident triage, and continuous team mentoring without full-time payroll overhead.
Target Ecosystems & Tech Stack: FinOps Diagnostics ($450), 2-Week Migration Sprints ($1,850), Monthly Retainers ($2,200/mo)
Questions, answered
Technical questions, answered directly.
How quickly can an engagement begin?
Most architecture audits and discovery sprints can kick off within 3–5 business days following an initial alignment call and scoping agreement.
Do you work alongside existing engineering teams?
Yes. Engagements are collaborative: integration into existing Slack, GitHub, or GitLab workflows, pair programming sessions, and comprehensive runbooks.
Which clouds and hosting platforms do you support?
Primary expertise includes AWS, Google Cloud, and bare-metal providers (Hetzner, OVH, Proxmox). Multi-cloud and hybrid migrations are a core specialization.
How are projects priced?
Diagnostic audits and migration sprints are fixed-price. Ongoing maintenance is a monthly fractional retainer. Detailed rates are on the pricing page.
How do you address data sovereignty and compliance requirements in Saudi Arabia, UAE, and the GCC?
I engineer sovereign deployments following the privacy principles of the Saudi Personal Data Protection Law (PDPL), UAE Federal Decree-Law No. 45, and regional security frameworks (NCA ECC). Workloads can be deployed on customer-managed cloud environments (such as OCI Riyadh, GCP Dammam, or AWS UAE) or on dedicated private bare-metal servers under your organizational control. Customer records, AI pipelines, and database backups remain within your designated infrastructure boundary.
How does migrating to bare-metal or Proxmox VE reduce AWS/GCP cloud bills?
Hyperscaler bills inflate primarily from per-core compute markups, managed Kubernetes control plane surcharges, managed NAT gateway traffic fees, and inter-AZ egress transfer costs. By migrating stable, predictable production workloads to bare-metal providers (such as Hetzner, OVH, or on-premise Proxmox VE clusters) running Talos Linux and Cilium eBPF, organizations eliminate hypervisor overhead, obtain raw hardware performance, and slash recurring infrastructure expenditure while maintaining enterprise-grade high availability and automated disaster recovery.
Is self-hosted n8n enterprise-ready and secure for production business automation?
Yes. Unlike multi-tenant cloud automation platforms that store credentials and unencrypted payload data on shared infrastructure, my self-hosted n8n architectures run in dedicated queue mode with isolated worker pools, an encrypted PostgreSQL database, and Redis pub/sub. Sensitive webhook tokens, API keys, and credentials are encrypted using SOPS and age. All automated data pipelines—including ERP, CRM, and WhatsApp integrations—execute entirely within your VPC.
What is the difference between a fixed-scope audit, a migration sprint, and a fractional platform retainer?
A fixed-scope audit ($450) provides an exhaustive diagnostic review of your architecture, security posture, and cloud expenses with an actionable roadmap delivered in 1–2 weeks. A migration sprint ($1,850) delivers end-to-end execution of a defined architectural shift (such as Docker Compose to Kubernetes, cloud-to-bare-metal, or custom n8n AI agent pipeline) within 2–4 weeks. A fractional platform retainer ($2,200/month) provides guaranteed weekly senior SRE capacity, continuous infrastructure optimization, proactive monitoring, and emergency incident triage without the overhead of a full-time hire.
Facing a cloud cost or reliability bottleneck?
Talk directly about your current architecture.
You can start with a focused 15-minute diagnostic call with me on Google Meet or WhatsApp to audit your bottlenecks and define an actionable engineering roadmap.
