Apr 2023 – Dec 2024 · 1 yr 8 mos · Singapore, Singapore · On-site

• Payroll Nsearch Global
• As part of the GovTech-led team delivering the National Platform for Healthcare Claims (NPHC), I contributed to a mission-critical, multi-agency digital transformation initiative that was awarded the One Public Service Award 2025 under Singapore’s Public Sector Transformation Awards. NPHC replaces legacy systems used by MOH and CPFB, streamlining MediSave and MediShield Life claims while improving scalability, interoperability, and citizen experience.
• Designed, deployed, and maintained cloud-native infrastructure on Amazon Web Services (AWS) including Amazon EKS clusters. Provisioned and managed infrastructure-as-code using Terraform and Terragrunt, ensuring environment parity and versioned deploymentsBuilt reusable Terraform modules for VPCs, IAM roles, EKS node groups, and Kubernetes add-ons. Managed and hardened Amazon EKS clusters, implementing best practices for multi-tenant, production-grade workloads. Enforced Kubernetes policies and secure deployments using Kyverno. Developed Argocd based deployment templates and GitLab CI pipelines for streamlined microservice rollout.Set up and tuned observability stack with Prometheus, Grafana, and Kibana for proactive system monitoring and visualization. Implemented custom PromQL queries, Grafana dashboards, and alerting rules to monitor application health and infra KPIs. Developed CI/CD pipelines using GitLab, enabling automated testing, linting, security scanning, and promotion across environments. Enforced security and compliance standards in CI workflows; included IaC scans, vulnerability scans, and policy-as-code checks. Collaborated with developers to containerize applications, define manifest templates, and optimize build-to-deploy lifecycle. Integrated Keycloak for role-based access control and federated SSO across services. Managed secure service-to-service communication via TLS, mTLS, and token-based auth mechanisms.

Mar 2022 – Apr 2023 · 1 yr 1 mo

Dec 2018 – Mar 2022 · 3 yrs 3 mos

• Managing a Large, Distributed, Multi Region, Multi Account, Amazon Cloud powered micro services architecture based applications catering to the Education Industry. Deployed in multi account via cloudformation, troposphere and deployed over the docker containers and managed via AWS ECS and EC2 using the configuration management solutions like chef with fully deployed CI/CD pipelines for both the ECS and Ec2 services along with the Security and SOX Compliance of the entire infrastructure. Centralized authentication and single signon solutions in place to handle the authentications for faster access.End to End monitoring with the zabbix, logz.io , datadog , victorops, newrelic etc along with the SIEM. Involved in the Migration of Services over the containers and integrations between the different services along with the support of routing and building an infrastructure scalable and reliable to handle the large amount of traffic. Creation of the policies across multiple accounts with limited access, creating the Managed kafka service clusters, elasticache clusters along with the automation of managing the resources with infrastructure as code practices.

Apr 2017 – Dec 2018 · 1 yr 8 mos · Noida Area, India · On-site

• Managing a Cloud powered micro service architecture based application managed via orchestration tool terraform over the Hardened Ec2 instances/Kubernetes and Docker based environment using the CIS benchmarked Hardened AMI using the packer configured with the configuration management tool Ansible integrated with the version management tool git and bitbucket with build and deployments done using the Jenkins supporting the green/blue deployments/ rolling deployments and CI/CD pipelines over the Ec2 instances and docker containers with the datadog monitoring in a secure environment using SIEM Wazuh with the centralize logging in the ELK. Microservices are deployed across multiple accounts yet linked via the peering, tunnels and vpn to deliver a High availability for very high traffic applications across multiple verticals and accounts fully scalable with reliability built across the environment architecture.

Apr 2016 – Apr 2017 · 1 yr · Gurgaon, India

• Building, Releases, Deploying, Troubleshooting the Enterprise Mobile Applications. Managing the various micro services applications developed in java working together in a coordinated way using the robust messaging queue to build decoupled application. Scaling out the application to handle the large data using the Amazon AWS Cloud services and Autoscaling and configuring it for the High Availability in a Agile environment with continuous Integration and Continuous deployment using the Jenkins and custom deployment tool while following the highest level of security compliance for the overall environment with the automated monitoring for the infrastructure and application components using the Nagios , cloudwatch , newrelic and Elastisearch, logstash and kibana.

May 2015 – Apr 2016 · 11 mos · Gurgaon, India

• ● Taking care of the Linux systems while ensuring all the packages and application with the required version are available for the LAMP environment.
• ● Taking care of the Amazon AWS environment using console and the command line tools.
• ● Extensive knowledge with the EC2, S3, cloudwatch, Route 53, RDS etc.
• ● Configuring RDS backups using the custom scripts.
• ● Configuring the Apache logs Archiving using the custom scripts.
• ● Setting up of the LAMP environment along with the AWS for a highly available LAMP environment.
• ● Setting up the tomcat servers and doing all the pre-requisites for the Java and other environment variable setup for the application.
• ● Configuring the Policies in Amazon AWS based on the user specific requirement while restricting to other services not in the scope of user.
• ● Configuring of the Autoscaling of Servers in EC2 while ensuring the compliance while taking care of all the dynamic changes using the custom scripts.
• ● Ensuring the RDS availaibility and troubleshooting such as in the case of replication lag etc.
• ● Setting up the monitoring using the Nagios, Cloudwatch and scripts for all the infrastructure components.
• ● Building the custom scripts for the log analysis and error detection so that the errors can be tracked at the real time before they affect the production applications.
• ● Setting up of the ELB, session-stickiness and the SSL over the loadbalancer.
• ● Troubleshooting the Disk, cpu alerts for the servers and RDS.
• ● Doing the Apache and PHP upgrades based on the requirements.
• ● Setting up the Apache in the Event MPM configuration along with php-fpm.
• ● Setting up the Logrotation.
• ● Configuration of the LVMs and disk setups (mounting the EBS) while building the new environment.
• ● Setting up of the memcache and other php modules based on the requirement.
• ● Log Analysis and troubleshooting in case of alerts.
• ● Automation of the Repetitive tasks while increasing the environment productivity.

Sep 2013 – May 2015 · 1 yr 8 mos · Noida Area, India

• ● Creating of the Apache Redirects , Apache User authentication.
• ● Resolving and troubleshooting the various system level alerts related to Hard disk usage, memory usage and Load on the servers.
• ● Migration of the VMware based environment to the AWS cloud environment
• ● Working on the alerts generated by the cloudwatch for the applications deployed in AWS Cloud.
• ● Configuring the Monitoring tools and set up alerts to monitor system health via monitoring tools such as Nagios, Icinga , Appdynamics.
• ● Creating Apache configuration , VHOSTS and activation of the new domains.
• ● Coordinating with DNS team to create and modify various DNS records.
• ● Configuring the CDN network like Akamai and creating the caching parameters for the domains.
• ● Troubleshooting application using the tools such as Appdynamics, New Relic and Splunk.
• ● Deploying SSL on the domains for secure connection.
• ● Installing of the Apache and php based on the application requirement.
• ● Configuration of the sendmail service.
• ● Creating the Log rotation for the various log generating application for the better utilization of the Disk space.
• ● Creating the local and centralized yum repositories for the package availability.
• ● Setting up of the Umask values, ACL , installation of Ruby and Gems etc based on the environment requirement.
• ● Troubleshooting applications based on the log analysis of apache and php.
• ● Working on building an multi-tier load balanced environment for hosted applications.
• ● Working on the ITIL based processes and resolving tickets based on the level of the priorities and SLAs.

Apr 2013 – Aug 2013 · 4 mos · Noida Area, India

• ● Responsible for the Compliance of Security at the system level at the agreed terms with the client.
• ● Maintaining the system with the latest patches released at regular interval by the Unix distribution including the Linux and Aix.
• ● Making the system compliant with the security , with various scripts by closing the various loop holes.
• ● Installing of the IBM Tivoli Components such as ITM and TEM agents responsible for the Monitoring of the Severs.
• ● Creation of the multibos and updating the TL in the Aix servers.
• ● Resolving the various SR request raised on the ticketing tool .
• ● Various day to day activity related with the user including user addition, removal, tagging, modifying the access permissions, ids etc.
• ● User administration responsible for the setup and maintaining of the user accounts.
• ● Working with Logical Volume Management (LVM).
• ● Provide on-call support in emergencies
• ● Red Hat Pack; YUM client/ server configuration (through RPMs & ISO images)
• ● Tracking Server Status
• ● Setting cronjobs for daily maintenance of servers.
• ● Installation and maintenance of Apache Web server and setting the Tuning Parameters.

Jun 2011 – Apr 2013 · 1 yr 10 mos

• ● Technical support for the internal users based on the ticket system
• ● User account management with creating , deletion and assigning of permissions.
• ● Weekly server activities like clearing of the old log files and checking fot eh adequate space and memory usage.
• ● Monitoring and updating tickets(issues) through the incident management system based on the ITIL processes.
• ● Setting and troubleshooting of the SAMBA and NFS servers to enable the windows and UNIX clients to communicate with the LINUX.
• ● Creating the file systems , partitioning and managing the disk quotas.
• ● Local and remote administering of the servers using the SSH and VNC.
• ● Monitoring the Linux Server for CPU utilization, Memory utilization and Disk utilization for the performance monitoring with the help of Nagios Monitoring tool.
• ● Custom upgradation of the PHP modules using the source.
• ● Module and packages upgradation using the RPM, YUM and from the source if only the required modules are needed to be upgraded.