Work Experience

Cloud infrastructure, CI/CD, and microservices engineering across AWS and hybrid cloud environments.

• Owned end-to-end AWS infrastructure using Terraform IaC, designing and maintaining reusable modules to provision VPC, ECS, EKS, EC2, RDS, ALB, and IAM across Dev and QA environments supporting 20+ microservices and 10+ engineers; ensured scalability, high availability, and eliminated configuration drift.
• Reduced AWS cloud costs by 50% (from $600/day to $300/day), saving ~$2K/month through EKS right-sizing, EC2/ECS optimization, NAT Gateway redesign, storage lifecycle policies, and reserved capacity planning.
• Designed and implemented multi-stage GitLab CI/CD pipelines with parallel execution, artifact versioning, SAST, and container security scanning (Snyk, Trivy), reducing manual deployment effort by 90% and improving release reliability.
• Improved CI/CD pipeline execution time by 50% through stage parallelization, dependency caching, and optimized runner utilization, reducing feedback latency.
• Migrated services from Kubernetes (EKS) to ECS Fargate, reducing compute costs by 30% and eliminating cluster management overhead; also supported hybrid deployments across AWS EKS and IBM Cloud OpenShift.
• Implemented blue-green deployment strategies with automated validation and rollback mechanisms, enabling zero-downtime releases and reducing production risk.
• Built and maintained observability stack using Prometheus, Grafana, Loki, and OpenTelemetry; implemented SLI/SLO frameworks, proactive alerting, and improved MTTR through structured incident response.
• Managed production incidents across distributed microservices (30+ services); performed root cause analysis (RCA), restored services within hours, and implemented preventive fixes.
• Architected and supported a data-intensive AI/ML platform on AWS EKS using Karpenter for dynamic autoscaling, including GPU workloads via NVIDIA device plugin; optimized compute utilization and scaling efficiency.
• Designed storage and networking for ML workloads using encrypted EBS volumes and secure VPC architecture to handle large-scale datasets and model artifacts.
• Delivered enterprise-grade deployment for an external customer on IBM Cloud OpenShift; adapted Kubernetes workloads for OpenShift SCC (non-root execution), integrated IBM Container Registry and Object Storage, and resolved networking/API integration challenges.
• Engineered serverless data pipelines using AWS Lambda, S3, and Python for large-scale data processing and automation workflows.
• Built a secure ECR Proxy API (Python, Lambda, API Gateway) compliant with OCI specifications, enabling OAuth-based container image access control.
• Resolved critical CI/CD outage caused by Terraform state corruption; implemented S3 remote backend with DynamoDB locking to ensure state consistency.
• Strengthened platform security using IAM least-privilege policies, Secrets Manager, KMS encryption, and container/image security best practices.
• Developed concurrent Go-based CLI tools to automate internal workflows and CI/CD processes, improving developer productivity.
• Mentored junior engineers on Kubernetes, Terraform, AWS, and CI/CD best practices.
• Supported infrastructure powering a production system generating ~$250K annual revenue, ensuring reliability, performance, and availability.
• Enhanced legacy C++ and Java systems to improve performance and maintainability. Mentored junior engineers on Terraform, GitLab CI, and secure cloud practices, fostering a culture of continuous learning.
• Created and maintained comprehensive documentation for CI/CD processes and Terraform configurations, enabling effective knowledge transfer and smoother onboarding for new team members.

Set up and maintained OpenStack cloud infrastructure for internal training and development environments.

• Set up an OpenStack Ussuri minimal environment consisting of two nodes (controller and compute node) for team members' training purposes. Configured and deployed OpenStack services on the controller and compute nodes.
• Implemented network configurations and security settings to ensure the stability and security of the OpenStack environment.
• Collaborated with colleagues to troubleshoot issues and optimize the performance of the OpenStack setup.