Ali Husain

Kuwait · remote · UTC+3

Ali Husain

AI · Infrastructure · Automation Software · Media

Self-driven engineer with hands-on experience across the whole stack of modern technical work — AI systems, cloud-style infrastructure, software, security and digital media. I take ownership end to end: design it, build it, prove it works, and write it down. New tools take me days, not months.

Email me GitHub Download CV
Range
Ten areas of expertise, from AI agents and DevOps to web, IT support, video and sound
In production
A 15-service platform, monitored and maintained around the clock
Working
Remotely from Kuwait on UTC+3, overlapping the full European working day

At a glance

01

Areas of expertise

Ten disciplines I work in day to day. Each one is backed by something live, shipped or in daily use — follow the link under any of them to the proof.

  1. 01

    AI & LLM engineering

    Agents and multi-agent workflows, prompt engineering, model evaluation, local model deployment, retrieval and search.

    AI systems
  2. 02

    Cloud, DevOps & SRE

    Linux, containers, CI/CD, infrastructure as code, monitoring and incident response.

    Infrastructure
  3. 03

    Networking & security

    DNS, TLS, mesh VPN, firewalls, intrusion prevention, encryption and secrets handling.

    Infrastructure
  4. 04

    Backup & disaster recovery

    Verified backups, multi-site copies, automated restore drills and rebuild runbooks.

    Infrastructure
  5. 05

    Software development

    Python, TypeScript, C/C++, Bash and SQL — web apps, PWAs, systems and network code.

    Web
  6. 06

    Automation & integration

    Scheduled services, webhooks, APIs, IoT and smart-home integration.

    Infrastructure
  7. 07

    Video & motion

    Editing, beat-matched cutting, color grading, motion graphics, GPU render pipelines and 4K mastering.

    Media
  8. 08

    Audio production

    Music selection and sync, narration, sound design and mixing; home-theater audio calibration.

    Media
  9. 09

    IT administration & support

    Identity and access, 2FA rollout, device provisioning, OS installs, secure wipes and storage clean-up.

    IT support
  10. 10

    Web, design & documentation

    Front-end and UX, data dashboards, print layout, technical writing and runbooks.

    Web
02

Experience

Five independent roles, held in parallel. I own each one end to end — from the first design to the system that is still running.

  1. 02.1AI Systems EngineerAgents · evaluation
  2. 02.2Infrastructure & DevOps EngineerPlatform · security
  3. 02.3Web & Product DeveloperApps · dashboards
  4. 02.4IT Administrator & SupportIdentity · devices
  5. 02.5Video, Audio & Generative Media ProducerFilm · sound
02.1

Independent · agents, evaluation and model deployment

AI Systems Engineer

I design agent systems and run them the way a lead runs a team: I write the spec and the limits, the agents do the work, and nothing ships until it has been checked.

  1. i.

    Spec and limits

    What done looks like, what must not break, and the hard limits every agent works inside — written down before any code is.

  2. ii.

    Agents build

    Parallel agents and subagents do the implementation or the audit, each with a narrow brief and the tools wired for the job.

  3. iii.

    I verify

    Dedicated reviewer and verifier agents check the work, and I check it again against the spec — on real screens, from the user's side.

Delivery pipeline

9 agents

One build, split across nine coordinated agents with build, critique and automated browser-verification stages, checked on phone and desktop sizes before it was called done.

Tokens
1.45M
Tool calls
566
Verified
phone + desktop

Operations

Autonomous operations agent

Monitors and maintains production infrastructure around the clock — bound by a written charter, woken by alerts, every change logged.

System audits

13 agents

Audits of live infrastructure run as a thirteen-agent fan-out, so every part of the system gets its own reviewer.

Model evaluation

20 tasks

An evaluation suite for reasoning, instruction following and debugging, used to benchmark multiple open-weight models deployed on local GPU hardware.

Knowledge pipeline

4 GB+ indexed

Conversation data from three machines in one full-text index, ingested hourly. Every night one model extracts facts and a second model cross-checks them.

Guardrails

Command screening

Safety checks that screen an agent's shell commands before they run, so a mistake stops at the gate instead of on the machine.

Anthropic and OpenAI models · open-weight LLMs · local GPU inference · image and video models · agents & subagents · MCP · browser automation · evaluation rubrics

02.2

Independent · self-hosted production platform

Infrastructure & DevOps Engineer

A production platform for a multi-user household, designed, secured and operated as code — with the monitoring, backups and runbooks a business would expect.

Flagship system

Fifteen services, one TLS edge, zero port forwards

Designer and sole operator

The services a family depends on every day: DNS and ad-blocking for every device, password and identity management, file and notes sync, smart-home control and monitoring. All behind one TLS reverse proxy, reachable at home and away through carrier-grade NAT.

Homelab architecture Home devices ask AdGuard Home for DNS, then connect over HTTPS to Caddy, the TLS reverse proxy, which fronts the services. Devices away from home arrive through Tailscale. A health monitor wakes the AI operator and sends alerts through ntfy to a phone. Nightly backups go from the Pi to the PC and on to the MacBook. RASPBERRY PI 5 · DEBIAN · DOCKER COMPOSE UFW + DOCKER-USER · FAIL2BAN CLIENTS Home devices phones · laptops · TV Away from home same links, same TLS No port forwards, no UPnP. Exactly one public endpoint. DNS HTTPS AdGuard Home DNS · ad-blocking Tailscale 7 nodes · split DNS Caddy TLS reverse proxy Let's Encrypt Vaultwardenpassword vault CouchDBnotes sync Home Assistantsmart-home bridge Syncthingfile sync Uptime Kuma13 monitors · 60 s 15 containers14 health-checked AI operations agent on call · written charter · logs every change Health monitor 77 alert conditions · 21 categories · watchdogs wakes NIGHTLY BACKUPS 12 sets, integrity-checked PCcopy 2 of 3 MacBookcopy 3 of 3 Restore drill runs automatically every Sunday. ALERTS de-duplicated push ntfypush server Phonealerts land here data path alerts · operator Homelab architecture Home devices ask AdGuard Home for DNS, then connect over HTTPS to Caddy, which fronts the services. Devices away from home arrive through Tailscale. A health monitor wakes the AI operator and sends alerts through ntfy to a phone. Nightly backups go from the Pi to the PC and the MacBook. CLIENTS Home devicesphones · laptops · TV Away from homevia the tailnet RASPBERRY PI 5 · DOCKER COMPOSE DNS HTTPS AdGuardDNS · ad-block Tailscale7 nodes · split DNS CaddyTLS reverse proxy · Let's Encrypt Vaultwardenpassword vault CouchDBnotes sync Home Assistantsmart-home bridge Syncthingfile sync Uptime Kuma13 monitors · 60 s 15 containers14 health-checked Health monitor77 alert conditions · 21 categories wakes AI operations agenton call · written charter · logs changes NIGHTLY BACKUPS 12 sets, integrity-checked PCcopy 2 of 3 MacBookcopy 3 of 3 Restore drill: automatic, every Sunday. ALERTS · DE-DUPLICATED PUSH Phonealerts land here ntfypush server
Fig. 1 How a request, a backup and an alert move through the house.
Network
Secure remote access behind carrier-grade NAT with zero port forwards: a 7-node mesh VPN, split-horizon DNS and one audited public endpoint.
Security
A host firewall plus a rule that closes Docker's firewall bypass, intrusion prevention on logins, and a router with no port forwards or UPnP.
Backup & DR
Twelve integrity-verified sets nightly, three copies on three machines, an automated restore drill every week and a 2–3 hour bare-metal rebuild plan.
Observability
77 alert conditions across 21 categories, 13 uptime probes every 60 seconds, self-healing watchdogs and an external dead-man switch.
As code
376 commits, 20 scheduled services, an installer that detects drift, and ~2,800 lines of operating docs and runbooks, including a full restore guide.
Operations
An always-on AI operations agent is on call: it wakes on alerts and on a daily round, works inside a written charter, and logs every change.

Linux · Docker Compose · systemd · Caddy · WireGuard / Tailscale · DNS · ufw · fail2ban · Bash · Python

The infrastructure repository
02.3

Independent · product design, front-end and delivery

Web & Product Developer

Products for the browser, from an installable offline app and a six-page brand site to a scroll-driven 3D story and forty-plus interactive tools — each designed for phone and desktop.

Product lead · live

Ethereal

Offline-first health and fitness web app

Led product design and delivery of an installable, account-free app that plans the day, coaches home workouts and tracks nutrition — with no ads and no trackers.

  • 41 animated exercises
  • 1,474 foods, searchable offline
  • WCAG 2.1 AA and Lighthouse 100 targets
  • CI/CD on every push

TypeScript · Astro · PWA · CI/CD · UX design

Open the live app Source on GitHub

  1. 01

    Studio marketing site

    Six-page brand site for an AI video-ad studio

    Designed and built a responsive, animated marketing site — service pages, showcase, pricing and contact — ready for edge deployment.

    6animated, responsive pages

    Next.js · Tailwind · Framer Motion

  2. 02

    Interactive 3D story page

    Scroll-driven WebGL experience

    Animated 3D scenes, chapter navigation and live data, verified by automated screenshots across phone and desktop sizes.

    3Dscenes driven by the scroll

    WebGL · JavaScript · automated browser checks

  3. 03

    Interactive pages, dashboards & tools

    A growing library, built for phone and desktop

    Live market dashboards on real-time price feeds, learning tools with quizzes and flashcards, data visualizations, planners, a party-quiz game and visual explainers.

    40+pages, dashboards and tools

    HTML · CSS · JavaScript · data visualization · real-time data

02.4

Independent · household of five · 20+ devices

IT Administrator & Support

Everyday IT for a household of five, run like a small office: identity and access, device lifecycle, network filtering and storage, across Linux, macOS, iOS, Android and smart-home devices.

Identity & access
240+ credentials moved into a self-hosted password manager and consolidated into organised, deduplicated folders.
Two-factor rollout
Authenticator-based 2FA rolled out across the household's accounts.
Device lifecycle
A locked laptop reprovisioned with a fresh Linux install; a smartwatch securely wiped and re-paired over ADB.
Living-room devices
A smart TV debloated and fitted with a custom launcher; lighting, locks and media joined into one smart-home layer.
Network
Household-wide DNS filtering enforced at the router, so every device is covered without per-device setup.
Workstations
A Windows-to-Linux migration with full-disk encryption, TPM unlock, snapshots and a passwordless SSH mesh across three machines.
02.5

Independent · writer, director, editor, sound designer

Video, Audio & Generative Media Producer

Two painted short films and a 67-page illustrated book, produced end to end — script, visual style, edit and sound — working across image, video, voice and music generation models from several vendors, chosen shot by shot.

Post-production, built in code and rendered on the GPU

Beat-matched editing
Cuts placed on the score beat by beat, so picture and music move as one.
Color grade
One matched grade across every shot, so a film made from many sources reads as a single piece.
Motion graphics
Animated titles and graphics designed for the film and rendered with the edit.
Narration timing
45 narration lines timed across the cuts, each landing on its picture.
Sound design & mixing
Layered sound design under the music, balanced into a final mix.
4K mastering
4K masters, print-ready book editions, a 37-page making-of and two localized versions.

Buried Soul

A 61-painting picture-book film scored to a 6½-minute piano piece. Delivered as a 4K master, a print-ready book and a 37-page making-of.

Painted cover: a great white owl spreads its wings over a snow-covered hill; inside, sleeping flower children glow gold as two small girls stand at its door.
Cover
A girl in a grey cloak kneels in the snow singing; a golden thread of song winds up the hill as flowers break through the snow.
The song
At night in the snow, a glowing spirit girl with flowers in her hair rests her hand on a kneeling girl's shoulder; both sing with eyes closed.
Night light

Simorgh

A 3¾-minute narrated painted film adapted from The Conference of the Birds, rebuilt end to end from a single script.

A line of travellers and birds stands on a lake shore at sunset; their reflection in the water forms one vast golden bird.
The reflection
Riders on great hoopoes fly through a red sky of floating islands and waterfalls, with whales swimming in the clouds above.
The world upside down
A girl in a leather flying helmet, crying and smiling, hugs her hoopoe as its feathers turn to gold.
Gold feathers

Image, video, voice and music generation models · ffmpeg · Python render pipeline · GPU rendering · color · sound design

03

Toolbox & foundations

The tools I work with, the grounding underneath them, and where I am heading next.

AI platforms
Anthropic and OpenAI models, open-weight LLMs, local GPU inference, coding agents (Claude Code, Codex), agent frameworks, MCP, the Hugging Face ecosystem
Generative media
Image, video, voice and music generation models from several vendors; diffusion pipelines; programmatic editing with Python and ffmpeg
Web
TypeScript, Next.js, Astro, Tailwind, Framer Motion, WebGL, PWAs, data visualization, automated browser testing
Infrastructure
Linux (Debian, Arch), Docker, systemd, Git, GitHub Actions, Caddy, Nginx, WireGuard / Tailscale, SQLite, Redis, CouchDB
Languages
Python, TypeScript / JavaScript, C, C++, Bash, SQL, R, Standard ML, Prolog
Integration
REST APIs, webhooks, scheduled services, Home Assistant, Apple HomeKit, Philips Hue
Practices
Infrastructure as code, observability, backup and disaster recovery, security hardening, code review, technical documentation

Education

BSc Computer Science

Kuwait University · in progress

Learning

Continuous self-study: LeetCode algorithm practice, and online courses on Coursera and Udemy across computer science, AI and engineering.

Electronic Crimes Certificate of completion

Expanding into

  • Kubernetes
  • Cloud platforms
  • MLOps
  • Cybersecurity
  • AI product design

Technical foundations

  • Algorithms & data structures
  • Operating systems & systems programming
  • Computer architecture
  • Computer networks
  • Databases & SQL
  • Theory of computation
  • Functional & logic programming
  • Discrete mathematics
  • Calculus & linear algebra
  • Statistics
  • Physics
  • Chemistry
  • Materials science
  • Engineering drawing

How I work

Prove it works

A backup isn't done until it's restored; a fix isn't done until it's tested from the user's side.

Write it down

Every system ships with a runbook someone else could follow.

Fewer things, done properly

Simple setups that stay up beat clever ones that break.

Learn by shipping

Linux workstation, AI agents, film post-production — each learned by building something real.