DevOps and Software Developer in Gurugram, India

FinOps is an evolving cloud financial management discipline and cultural practice that enables organizations to get maximum business value.

I have over eight years of experience optimizing AWS cloud costs by up to 50% for multiple companies. I am an expert in servers, managed databases, and right-sizing.

There are three phases for FinOps that I operate:
1. The information phase gives the business complete visibility.
2. The optimization phase kick-starts the savings.
3. The operation phase makes cost optimization part of the business culture.

Set up containerized Kubernetes EKS infrastructure to deploy new applications for development, test, stage, and production environments with 100% IaC using Terraform with cost and security best practices, including spot servers, rightsizing, IAM roles, service accounts, restricted security groups, and AWS NACL.

I built a fully automated federated role-based cross-account IAM access through SAML for all employees based on their designation. Worked on one-click deployment using Packer, Terraform, and Jenkins declarative pipeline for immutable infrastructure for non-production environments.

I helped multiple companies reduce the attack surface area in the following areas:

1. Managing open security groups.
2. Using public S3 buckets.
3. Leading WAF set up, including Cloudflare, Akamai, AWS WAF, and Shield.
4. Creating disaster recovery and business continuity plans.
5. Setting up AWS SSO, Cognito, and enabling SAML authentication.
6. Building Attribute-based Access Control (ABAC).
7. Using secret management using HashiCorp Vault and AWS Secrets Manager
8. Migrating from IAM users to IAM roles with the least privileges
9. Defining the SCP policies for organization units and accounts
10. Defining boundary policies for IAM users and roles

Managed the set up and configuration of multiple AWS security services, including vulnerability management with Inspector, security alerts, threat detection using GuardDuty, evaluation configurations, and incident response with Detective.

Designed and architected the infrastructure for deploying 20 microservices in Amazon EKS for Sequoia Capital Global APIs.

I also migrated PROPTIGER's and makaan's back-end 40 APIs from EC2-based deployment to the Kubernetes platform with Kubernetes Operations (Kops), Prometheus, and Grafana in AWS.

I have done multiple migrations related to applications, databases, and containerization.

I have managed the following types of migrations:
• VM and server-based deployments to containerized deployments
• Applications and databases from on-premise to a cloud
• Applications and databases from one cloud to another
• Applications and databases from one cloud account to another
• Applications and databases from one region to another
• Self-hosted application and databases to manage services
• Databases using AWS DMS

Set up centralized logging using ELK with ElastAlert and Search Guard and ELK APM for Java-based APIs in beta and production environments.

Used the Prometheus stack, including Grafana, Alert Manager, and Loki, for monitoring in Proptiger. I built on-call rotation and PagerDuty processes for multiple companies and helped them improve the uptime and reliability of their applications.

I defined SLI, SLO, SLA, and error budgets for applications and architected end-to-end traceability into the systems to implement them with the respective development teams.

Performed database parameter PostgreSQL and MySQL tuning for multiple companies.

Built an in-house CLI tool for tagging AWS resources in Python 3 and made all the AWS accounts 100% tagging compliant. I implemented AWS tag policies to ensure compliance after achieving the initial 100% tagging.

Helped with Tagging governance, cloud infrastructure architecture, cost optimization, and cloud security best practices for Sequoia Capital portfolio Asia-based companies, including Pentester Academy, Checkbox, Enterpret, and FlowAccount.