Hands-On DevOps & DevSecOps Engineer dedicated to building resilient cloud infrastructure, automated CI/CD pipelines, and secure cloud-native environments.
This portfolio showcases production-grade architectures and end-to-end automation projects engineered using Multi-CI/CD Engines (GitLab CI, GitHub Actions, Jenkins), Modular IaC (Terraform), and Container Orchestration (Kubernetes/EKS).
Designed with a strict focus on zero-trust security (OIDC, Trivy), scalability, and infrastructure repeatability, every project reflects a deep, practical application of modern Cloud & DevSecOps standards.
- Cloud & Platforms: AWS (VPC, EKS, ECS, Elastic Beanstalk, RDS, ECR, Route 53, CloudFront, EventBridge, Lambda)
- Infrastructure as Code (IaC): Terraform (Modular Designs, Remote State Locking, tfsec)
- Configuration Management: Ansible (Dynamic Inventories, Modular Roles, AWS Boto Automation)
- Containerization & K8s: Kubernetes (Ingress, PVC, EBS StorageClasses, Secrets), Docker, Docker Compose, Helm
- CI/CD & GitOps: GitLab CI, GitHub Actions, Jenkins, AWS CodePipeline (Build, Deploy)
- DevSecOps & Quality: SonarQube, SonarCloud, Trivy Container Scan, Checkstyle
These core projects demonstrate my ability to architect and manage highly complex, multi-environment enterprise lifecycles with absolute precision.
- The Challenge: Enforcing zero-trust security and preventing configuration drift in cloud-native application delivery without storing permanent static cloud access keys.
- The Solution: Engineered a sophisticated dual-track GitOps pipeline within GitLab CI. The infrastructure pipeline utilizes Terraform with static security analysis via
tfsecto provision an enterprise-grade AWS VPC and Amazon EKS cluster. The application delivery pipeline leverages OpenID Connect (OIDC) via AWS STS for temporary token exchange, runs automated unit tests, executes container vulnerability scans usingTrivy, and automates application rollout into isolated worker node pools using Helm Charts. - Tech Stack: GitLab CI/CD, Terraform, tfsec, Trivy, Amazon EKS, Helm, AWS ECR, OIDC.
- Architecture Blueprint:
- The Challenge: Automating the structural provisioning and configuration execution gap between raw cloud infrastructure and environment node states for staging and production targets.
- The Solution: Built a unified provisioning engine. Terraform automates the delivery of a multi-AZ
vpro-vpcmanaging scalable compute tiers inside Auto Scaling Groups backed by AWS RDS, RabbitMQ, and Memcached. Upon completion, a multi-stage Jenkins pipeline triggers an ephemeral Dockerized Ansible agent (alpine/ansible) to automatically establish secure SSH pipelines and apply precise configuration roles across separated staging and production workloads. - Tech Stack: Jenkins, Terraform, Ansible, AWS VPC, Amazon RDS, Auto Scaling, Amazon ECR, SonarCloud, Slack.
- Architecture Blueprint:
- The Challenge: Constructing a unified, low-latency workflow natively integrated into GitHub for rapid testing, security analysis, and container service deployments.
- The Solution: Formulated a declarative, matrix-based GitHub Actions workflow. Every code push initiates automated Maven testing and remote code quality scans inside SonarCloud. Validated code paths automatically trigger secure Docker multi-stage builds, pushing immutable container images into Amazon ECR registry buckets. The lifecycle concludes by executing progressive task definition adjustments across active Amazon ECS container tasks secured behind an Elastic Load Balancer (ELB).
- Tech Stack: GitHub Actions, Maven, SonarCloud, Docker, Amazon ECR, Amazon ECS, ELB.
- Architecture Blueprint:
- The Challenge: Abstracting pipeline computing infrastructure entirely using AWS native serverless options while maintaining high-velocity compilation and delivery.
- The Solution: Engineered an entirely serverless continuous delivery workflow on AWS. Triggered dynamically by source updates inside Bitbucket, AWS CodePipeline orchestrates isolated AWS CodeBuild execution nodes. These nodes pull specialized base container images from Amazon ECR to perform code compilation, dependency caching, and Sonar analysis, transferring artifacts securely via Amazon S3 to AWS CodeDeploy for automated rolling target updates.
- Tech Stack: AWS CodePipeline, CodeBuild, CodeDeploy, Amazon ECR, Amazon S3, Bitbucket.
- Architecture Blueprint:
Below is the extended ledger of core engineering frameworks and infrastructure topologies built to demonstrate specific technological focus areas.
📂 Expand Cloud Migration & Architecture Strategies
- Summary: Transitioning a legacy multi-tier enterprise stack (Tomcat, MySQL, RabbitMQ, Memcached) into highly available, decoupled security zones behind an internet-facing Application Load Balancer.
- Blueprint:
- Summary: Eliminating localized single-point-of-failure risks by refactoring compute runtimes to AWS Elastic Beanstalk and migrating backend databases and caching layers to fully managed services (RDS, ElastiCache, Amazon MQ).
- Blueprint:
📂 Expand Infrastructure as Code (IaC) & Local Runtimes
- Summary: Pure declarative scripting to erect isolated public and private subnet configurations across two availability zones, managing dynamic transit paths via AWS NAT Gateways.
- Blueprint:
- Summary: Building secure, collaborative backend locks for enterprise state management using S3 backends paired with state mapping files.
- Blueprint:
- Summary: Establishing an API Gateway architecture with Nginx to reverse-proxy decoupled multi-stack container ecosystems (Angular, NodeJS, MongoDB, Java).
- Blueprint:
📂 Expand Kubernetes Orchestration & Core Pipelines
- Summary: Automated CI/CD pipeline and multi-tier Java app deployment on a KOPS-provisioned Kubernetes cluster using Helm. The setup automates code quality checks, container builds, Helm-driven rollouts, and AWS EBS persistent storage management.
- Blueprint:
- Summary: Eliminating configuration divergence across complex multi-tier infrastructures using modular Ansible Roles and live dynamic AWS inventories.
- Blueprint:
