Building secure Internal Developer Platforms, GitOps-driven Kubernetes systems, and zero-trust cloud-native infrastructure
📍 Bengaluru, India · 🌍 Open to Global Remote Opportunities
Wrote up a production debugging story — a canary pipeline silently broken for 69 days due to a Prometheus type mismatch buried inside an Argo Rollouts AnalysisTemplate. It hit the front of r/kubernetes with real engineers sharing their own war stories in the replies.
→ Read the thread on r/kubernetes
I'm a Platform & DevSecOps Engineer with 8+ years across enterprise infrastructure, network security, and cloud-native platforms. My focus is building secure, scalable, developer-friendly platforms — GitOps, Infrastructure as Code, and progressive delivery — so teams can ship safely without thinking about the plumbing underneath.
Areas of focus:
Platform Engineering • Internal Developer Platforms (IDP) • Kubernetes & GitOps • DevSecOps & Supply Chain Security • Service Mesh & Zero Trust • Progressive Delivery & SRE • Cloud Infrastructure & Automation
Enterprise GitOps delivery platform — ArgoCD App-of-Apps, Istio mTLS zero-trust, Kyverno admission control, and SLO-gated Argo Rollouts canary deployments. No kubectl apply in production — Git is the only source of truth.
Tech: ArgoCD · Istio · Kyverno · Argo Rollouts · Prometheus
Production-grade CI/CD pipeline — Node.js + Redis app, containerized and deployed to Kubernetes with a canary strategy, secured end-to-end with Trivy scanning at both the filesystem and image stages inside Jenkins. Auto-rollback on failed promotion.
Tech: Jenkins · Trivy · Docker · Kubernetes · Prometheus
Full-stack serverless blog on AWS — React frontend, Python Lambda functions, DynamoDB, provisioned entirely with modular Terraform. Pay-per-use, zero servers to manage.
Tech: AWS Lambda · API Gateway · DynamoDB · Terraform · React
Something bigger is in the works — a full Internal Developer Platform spanning self-service scaffolding, multi-stage supply chain security, signed and verified deployments, SLO-gated progressive delivery, and chaos-tested resilience.
More soon.
| Category | Tools |
|---|---|
| Platform Engineering | Kubernetes · ArgoCD · Helm · Kustomize · Backstage |
| DevSecOps | Jenkins · GitHub Actions · Trivy · Gitleaks · Checkov · Syft · Cosign |
| Cloud & IaC | AWS · Terraform · Azure |
| Security | Istio · Kyverno · Falco · CyberArk |
| Observability & SRE | Prometheus · Grafana · Alertmanager · Argo Rollouts · LitmusChaos |
| Networking | Fortinet · Palo Alto · Check Point · F5 · BGP · OSPF |
Advanced AWS Architecture • Platform Engineering Patterns • Multi-Tenant Kubernetes • SRE & Reliability Engineering • Cloud & Supply Chain Security
