Jul 2025 – Sep 2025 · 2 mos · New Delhi, Delhi, India · On-site

• Architected and deployed multi-environment (Dev and Prod) EKS clusters using Devtron AI for application lifecycle management. Successfully migrated 14 applications (GoLang APIs, React/Next.js frontends, PHP monoliths) from standalone VM-based deployments to containerized workloads on Kubernetes.
• Migrated 25+ repositories from AWS CodeCommit to GitHub with complete history, tags, and branches using git
• clone –mirror. Standardized branching strategies and integrated with CI/CD pipelines.
• Developed Terraform modules to provision AWS CloudFront distributions with S3 origins, including IRSA (IAM Role for Service Accounts) roles, allowing Kubernetes pods to securely inject content directly into S3 buckets.

Jul 2024 – Jun 2025 · 11 mos · Gurugram, Haryana, India · Hybrid

• Led the end-to-end setup of HashiCorp Vault from scratch for secure secret management, transitioning from ConfigMaps to Vault Agent Injector for injecting secrets directly into applications. Utilized Raft storage as the backend for high availability and enhanced security.
• Designed and implemented a production-ready Wazuh security monitoring solution from scratch, including the creation of a custom Helm chart using Helmify to transform Kustomization manifests, filling the gap due to the lack of open-source Helm charts available.
• Designed and implemented custom Grafana dashboards and panels for monitoring Traefik Ingress, Vault metrics, pod readiness failover, and pod restarts using Prometheus for real-time observability.
• Migrated logging infrastructure from Promtail to Grafana Alloy across 8+ EKS and AKS clusters, including applications running on VMs via Docker containers. Designed and implemented a centralized logging solution with custom dashboards (e.g., Docker-logs dashboard) for enhanced observability and troubleshooting.
• Administered EBS snapshots by managing their lifecycle, scheduling regular backups, and automating snapshot creation for critical volumes to ensure data durability and disaster recovery readiness.
• Set up Google OAuth authentication for secure login to Vault, enabling DevOps and developers to manage secrets efficiently with role-based access control.
• Implemented automated VM tagging and updates using Terraform with EC2 Service Discovery.
• Enabled ScrapeConfig CRD in the Prometheus Operator to monitor VM metrics across Kubernetes clusters, categorized by region.

Jul 2022 – May 2024 · 1 yr 10 mos · Pune, Maharashtra, India · Hybrid

• Actively contributed to the implementation of continuous integration and continuous delivery (CI / CD) pipelines using Jenkins, resulting in reduced release cycles and improved code quality. Reducing manual errors.
• Leveraged Docker to enhance application deployment, proficiently creating and managing Dockerfiles and images. Utilized Docker-compose to manage multiple applications
• Utilized AWS EC2 instances to deploy and manage applications in the cloud environment, contributing to scalability and flexibility.
• Utilizing Grafana and Prometheus as our dedicated monitoring tools, we vigilantly assess application health performance benchmarks and system metrics.