Jan 2024 – Present · 2 yrs 5 mos

• As a Cloud Platform Engineer in the Platform Infrastructure Engineering org, I design, build, and maintain secure, scalable, GitOps-driven infrastructure for multi-account AWS environments and hybrid private cloud deployments.
• Key Work/Responsibilities
• Led multiple high-impact platform initiatives, including security posture improvement, EKS fleet lifecycle management, and private cloud validation systems for air-gapped environments.
• Architected and operationalized an air-gapped VME lab (48+ VM capacity) used for private-cloud product validation—built automated provisioning workflows using GitHub Actions, Morpheus APIs, and Terraform to eliminate manual setup friction.
• Designed and implemented centralized logging and cross-account observability for 3 payer orgs and 45+ AWS accounts using S3 + Athena, enabling faster root cause analysis and secure RBAC-based access for BU stakeholders.
• Drove remediation of 60K+ high/critical CVEs across 160+ EKS clusters by shifting release pipelines to GitOps triggers, enabling near real-time patch flow into fleet—contributed to restoring SOC2 audit readiness.
• Modernized access patterns by replacing unmanaged SSH bastions with SSM-based ephemeral access, improving operational safety and traceability and reducing attack surface.
• Collaborated with SecOps, Platform Engineering, PMO, and BU engineers to communicate fleet health, remediation prioritization, patch schedules, and risk scoring—frequently represented infra workstreams in technical reviews.

Oct 2022 – Jan 2024 · 1 yr 3 mos

• As part of the Platform Infra Engineering group, I contributed to modernization and modularization of the platform codebase to enable GitOps at scale, improve CI/CD efficiency, and reduce operational friction across engineering teams.
• Key Work/Responsibilities
• Led the migration of 56 production repositories from Bitbucket to GitHub, enabling unified GitHub org governance (SSO access, branch protection standards, secret rotation) and laying the foundational control plane for GitOps adoption.
• Decomposed monolithic core platform code into 165 modular repositories, each with isolated versioning and lifecycle ownership—enabling module-scoped CI runs, improving build efficiency, and reducing the blast radius of code changes.
• Rebuilt Concourse pipelines for cluster provisioning using standardized Terraform module patterns—eliminating ad hoc pipeline logic and lowering new-cluster provisioning time from ~1 week to under 45 minutes.
• Implemented CI optimization patterns, version tagging conventions, and artifact publishing flows to ECR — improving visibility, traceability, and dependency management between infra modules and workloads.
• Worked directly with senior platform architects and product stakeholders to define versioning strategy, module boundaries, and upgrade paths to support multi-BU integration.

Feb 2021 – Oct 2022 · 1 yr 8 mos

• I contributed to the development of HPE Ezmeral Runtime Enterprise—a Kubernetes-based container platform—focusing on frontend platform capabilities, developer workflows, and user-experience enhancements for production operators.
• Key Work/Responsibilities
• Modernized the web UI for HPE Ezmeral by replacing legacy UI frameworks with a modern React/TypeScript architecture, improving maintainability and feature development velocity.
• Built an embedded web-terminal experience inside the product, enabling developers and operators to interact with Kubernetes workloads through a browser-based CLI (kubectl-like UX without needing direct cluster access).
• Designed and implemented end-to-end user management workflows (RBAC flows, admin controls, user provisioning UI) to simplify platform access and tenant onboarding.
• Created reusable UI component libraries and Storybook patterns to standardize design language, accelerate code reuse, and improve accessibility for feature teams.
• Integrated Jira, GitHub, and Microsoft Teams to streamline release workflows—enabling PR/ticket actions directly inside Jira, reducing context switching, and improving traceability during release cycles.
• Partnered closely with UX research teams and product designers to incorporate usability study findings into UI design decisions and to optimize workflows across multi-tenant environments.