Devops

Replaced legacy Spinnaker pipelines with ArgoCD + Helm + SOPS, accelerating deployment velocity by 45% and reducing change failure rate by 30% across 6 environments. Develop FastAPI-based self-service portal with RBAC, caching, and GitHub integration; reduced developer wait time by 60% and handled 1.2K+ deployment requests/month. Created reusable, unit-tested Terraform modules used by 5+ teams to provision EKS, IAM, IRSA, ALBs, and VPCs with Calico policies; cut infra onboarding time by 70%. Integrated Trivy, ZAP, and SonarQube into GitHub Actions for 250+ microservices; blocked 300+ CVEs pre-deployment and auto-generated SBOMs per build. Led SEV-1/SEV-2 incident response and postmortems for payment systems (10M+ tx/day); improved MTTR from 2 hours to 45 mins via Grafana alerting, debug tooling, and RCA scripts. Engineered 'ShieldCI' a zero-touch OS compliance pipeline using GitHub Actions, Packer, and Ansible; blocked 20+ non-compliant AMIs/month, passed 3 SOC 2 & OSFI B-13 audits. Reduced $12K/month cloud waste using Python-based cost optimization bots and automated IAM policy linting. Built Backstage IDP for internal teams; implemented 6+ software templates, TechDocs, and automated onboarding flows for new microservices with GitOps & CI/CD. Collaborated with SRE and AppSec teams to standardize pipelines and security posture across all engineering verticals. Conducted weekly PR reviews and mentored 2 junior platform engineers on GitOps, Terraform, and Backstage architecture.

Managed Maven build pipelines and legacy Ant/Groovy scripts for 80+ Java Spring Boot microservices, improving build stability and deployment automation. Containerized legacy monolith applications into Docker, leveraging multi-stage builds to reduce image size by 40% and cut deployment time by 50%. Collaborated in incident war rooms to resolve production outages, including tuning Kubernetes HPA and container resource limits to mitigate CPU throttling during traffic spikes. Developed modular Terraform infrastructure-as-code for provisioning AWS S3, RDS, and IAM resources; standardized documentation using terraform-docs to improve team adoption. Integrated security scanning tools (SonarQube, Trivy, OWASP ZAP) into CI/CD pipelines, automating detection and blocking of 200+ critical vulnerabilities prior to deployment. Built an internal Python-based CVE Auto-Notifier Bot that aggregated vulnerability feeds and generated actionable GitHub alerts, enhancing proactive security posture. Applied software engineering best practices unit testing, version control, code reviews to infrastructure and automation scripts, reducing deployment errors by 35%.