Designed and delivered multiple DR and infrastructure automation solutions for a production banking environment. Every decision was weighed against cost.

• Migrated Bastion servers from CentOS 7 (EOL) to Ubuntu 24.04 LTS with no service disruption; authored reusable setup guides for Debian and YUM (Amazon Linux) distros.
• Built an automated cross-region DR system using EventBridge and Lambda for RDS snapshots, cross-region copy, and health-monitored auto-recovery if primary failed.
• Developed a parallel EC2 DR solution with automated AMI rotation, cross-region copy, auto-launch on health check failure, and SNS alerting.
• Conducted POCs and authored technical runbooks evaluating AWS DMS cross-region replication (MS-CDC on SQL Server) vs. Read Replicas, documenting failover caveats and Route 53 health-check routing.
• Resolved urgent Bitbucket pipeline failures and stabilised CI/CD long-term; researched and recovered Windows EC2 private key access without data loss.

Cleared a critical backlog of 72 DevOps tasks across Docker containerization, Linux environments, Git workflows, Makefiles, and CMake build systems.

• Achieved a 90%+ client acceptance rate (64 tasks accepted on first review) across build engineering and environment setup tasks.
• Picked up CMake and Makefile tasks while learning both tools in parallel — maintained daily stand-up transparency with no blocked work.

Took an unstructured local setup and transformed it into production-ready Azure cloud infrastructure, serving as primary DevOps owner across engagements.

• Migrated full stack to Azure Cloud, configuring secure networking, firewall routing, and VM topology with client stakeholders.
• Engineered client-approved self-hosted Azure DevOps agent pipelines, eliminating manual deployments across full-stack and ML services.
• Packaged full-stack application and ML services (PostgreSQL with pgvector) into a single-command Docker Compose setup for consistent local and cloud runtimes.
• Optimized frontend Dockerfile for static delivery, cutting page load times from seconds to milliseconds; configured systemd auto-recovery at boot.
• Diagnosed and resolved Docker volume corruption preventing startup; remediated internal VAPT audit findings prior to client submission.

Inherited a compromised AWS production environment with no IaC, no state management, and prior security gaps. Left it fully Terraform-managed, secured, and modernized.

• Codified staging, UAT, and production environments into 10 modular Terraform configurations managed via Terraform Cloud with zero config drift.
• Partnered with Cyber Security to audit past incidents, close access gaps, and enforce strict IAM least-privilege policies with zero disruption to live services.
• Built automated HashiCorp Packer pipelines to produce hardened golden AMIs (Ubuntu 24.04 LTS) with systemd shutdown log sync to S3.
• Modernized static compute to Auto Scaling Groups with Warm Pools and Target Tracking policies; executed weekend cutover for near-zero downtime.
• Eliminated unnecessary cloud waste via instance right-sizing; relocated on-prem chatbot host to server room, ending recurring accidental disconnections.

Replaced expensive daily automated RDS backups on staging with a purpose-built, cost-optimized AWS-native backup and retention solution.

• Disabled built-in staging backups; implemented monthly snapshot Lambda and quarterly cleanup Lambda retaining the latest snapshot.
• Scheduled via EventBridge with automated SNS alerting; authored step-by-step production RDS disaster recovery restoration runbooks.

Ongoing management of production and staging environments for two separate products hosted on JetServer.

• Manage production deployments and process lifecycles using PM2 and custom systemd services with hosting provider coordination.
• Diagnosed and resolved complex NGINX CORS and React routing issues caused by misconfigured path rewrites.
• Standardized deployment security by replacing Git tokens with SSH deploy keys — authored a one-page guide adopted across projects.

Picked up a production chatbot platform mid-incident — resolved expired SSL certificates, domain blockages, and executed zero-downtime DNS migrations.

• Diagnosed and repaired failed Let's Encrypt auto-renewal mechanisms to rapidly restore production SSL/TLS connectivity.
• Authored DNS migration runbooks with zero email downtime (SPF, DKIM, DMARC, MX validation) migrating domains to Cloudflare.
• Resolved domain blockage disrupting chatbot operations; managed transition to a stable subdomain, updating all dependent microservices.
• Scoped containerized migration of chatbot logic from AWS to client-managed GCP Compute Engine VMs.

Supporting distributed bare-metal lab infrastructure and OpenShift platforms powering ~1000 engineers across internal teams.

• Developed parallelized Bash and platform API automation to detect, triage, and re-mark broken test systems, reducing lookup time from 60+ min to <5 min.
• Actively migrating distributed bare-metal lab controllers from RHEL 7 to RHEL 9 to eliminate critical system vulnerabilities.
• Unblocked RHEL 10 test suite execution by identifying and validating test harness reuse via symlinks, averting an estimated 2-week engineering delay.
• Implemented GitLab CI/CD pipelines with SonarQube quality gates across 20+ plugin versions (v0.0.2 to v0.0.24) for the OpenShift Backstage platform.
• Consolidated legacy lab automation repositories into a unified codebase, updating downstream CI/CD pipelines to prevent build blockers.