Software Technical Consultant
PTC · Jan 2026 – Present
- Architect and operate a secure, multi-tenant SaaS platform on Azure Kubernetes Service (AKS), integrating Blob Storage, Azure SQL, Key Vault, and a Python service framework.
As a Software Technical Consultant, I am driven by a blend of ambition and a logical approach, always seeking to master complex challenges. I thrive on collaborating to develop resourceful and innovative solutions, continuously refining my expertise to deliver high-quality technical outcomes.
- Pune
- Open to Pune
- Hybrid, Remote, On-site
- In 60 days
Skills
Claimed
Security Policy ApplicationThird-Party Library IntegrationTechnical TroubleshootingMentoring and Peer CoachingAdaptabilityTechnical Solution DesignProblem SolvingStrategic ThinkingEnd-to-End Solution OwnershipAI Platform Architecture DesignLarge Language Model DevelopmentAI Solution Implementation
Proof of Experience
Software Technical Consultant
PTC Software India Pvt. Ltd. · Dec 2022 – Present
- Architect and operate a secure multi-tenant SaaS platform on Azure Kubernetes Service (AKS) integrating Azure Blob Storage, Azure SQL, Key Vault and Python-based services.
- Designed platform security around Zero Trust principles, using Istio service mesh, mTLS, JWT-based authentication and fine-grained service-to-service RBAC.
- Replaced legacy service-principal credentials with Azure Workload Identity, enabling pod-level access to Key Vault, Azure Storage and Azure SQL without embedding static credentials in workloads.
- Implemented Azure Key Vault, Secrets Store CSI Driver and External Secrets Operator to centralize runtime secret management and eliminate application-level secret sprawl.
- Applied namespace- and tenant-scoped RBAC, Network Policies, secrets rotation and least-privilege access reviews to strengthen isolation and tenant security.
- Hardened Kubernetes runtime security using Falco, OPA Gatekeeper, Kyverno and restricted Pod Security Standards, alongside CIS Kubernetes Benchmark controls.
- Modernized deployment management with Helm, introducing environment-specific configuration, modular templates and one-command rollback capabilities across the multi-tenant service catalog.
- Designed and operated end-to-end observability using Prometheus, Grafana, Datadog, Azure Monitor, Log Analytics and Application Insights, providing unified monitoring, alerting and log/tracing correlation.
- Implemented Ambassador Edge Stack as a Kubernetes API gateway for routing, TLS termination, rate limiting and edge authentication; developed custom Go-based filters for JWT validation.
- Improved environment provisioning and initial data loading through an Oracle SEED database approach, using pre-loaded schemas and reference data instead of repeated full initialization.
- Established an access governance process for R&D Kubernetes clusters where no formal workflow previously existed, and authored onboarding and deployment documentation for AKS environments.
- Refactored Helm charts to expose deployed application/chart versions at runtime and introduced Helm test hooks for automated post-deployment validation.
- Tuned liveness and readiness probes and implemented preStop/postStart lifecycle hooks to improve application health signaling and graceful deployment behavior.
- Implemented a platform-wide backup and recovery strategy with nightly automated backups, pre-change snapshots and documented restoration procedures.
- Designed an event-driven Kubernetes-native CAD file processing architecture, decomposing multi-stage processing into independently deployable, queue-connected microservices.
- Designed Azure Storage Queue-based service communication with KEDA-driven event autoscaling based on queue depth to handle burst workloads efficiently; secured design approval and currently leading implementation and rollout.
- Collaborate across engineering, security and product teams on platform architecture, reliability, access governance and production readiness.
Software Consultant
PTC · Dec 2022 – Dec 2025
Senior DevOps Consultant
Delphi Consulting · Sep 2020 – Nov 2022
- Led Azure cloud migration initiatives involving re-platforming of legacy web applications onto Azure App Services and containerized microservices onto AKS.
- Designed and implemented CI/CD pipelines for automated application deployments while coordinating with development, infrastructure and security teams to minimize migration disruption.
- Introduced Azure Workload Identity during cloud migration to replace static service-principal credentials and remove long-lived secrets from CI/CD workflows.
- Aligned migration architecture with SOC 2 readiness requirements, covering identity, access control and data protection in collaboration with client security and compliance teams.
- Implemented centralized secrets management using Azure Key Vault and established post-migration observability with Prometheus, Grafana and Azure Monitor.
- Contributed to disaster recovery and backup planning for re-platformed Azure workloads, helping define recovery approaches and operational readiness.
- Delivered developer onboarding sessions and created knowledge-base documentation to support platform handover and cloud adoption.
- Deployed and operated production-grade AKS clusters for a digital services platform, supporting secure and resilient multi-tenant workloads.
- Built a full-stack observability platform using Prometheus, Grafana, ELK and Azure Monitor Logs for centralized monitoring, alerting and troubleshooting.
- Codified cloud infrastructure using Terraform integrated with Azure DevOps, enabling repeatable and version-controlled infrastructure provisioning.
- Secured Kubernetes ingress using Azure Application Gateway, NGINX Ingress, SSL/TLS certificates and OAuth2 authentication, with secrets managed through Azure Key Vault.
- Implemented Kubernetes runtime security using Falco, OPA Gatekeeper, Kyverno and restricted Pod Security Standards, alongside CIS Benchmark hardening and Network Policies.
- Designed and managed CI/CD pipelines using Jenkins and Spinnaker across Dev, QA, UAT and Production environments.
- Deployed Kubernetes microservices using Helm, enabling version-controlled releases, templated configuration and rollback capabilities.
- Integrated Prometheus, Grafana and ELK into delivery environments to support proactive monitoring and centralized log troubleshooting.
- Worked directly with client stakeholders on cloud architecture, platform security, delivery planning, onboarding and technical handover.
Software Engineer
Infracloud Technologies · Mar 2020 – Sep 2020
- Contributed to software engineering and cloud-native development initiatives in a DevOps-focused environment.
- Supported application development, deployment and engineering activities across cross-functional teams.
Member of Technical Staff
Mindstix Software Labs · Jan 2018 – Mar 2020
- Contributed to software development and engineering initiatives involving application platforms and cloud technologies.
- Collaborated with engineering teams on implementation, troubleshooting and delivery activities.
Trainee Software Developer
Synerzip Technologies · Apr 2017 – Dec 2017
- Supported software development activities and contributed to application implementation and technical delivery.
- Worked with engineering teams on development, testing and troubleshooting tasks.
Proof-of-Work
No completed sessions yet. Anything Ajay finishes shows up here with the evidence behind it.
Proof of Education
Bachelor of Engineering, Computer Engineering
Pune University · 2014 — 2017
Diploma, Computer Engineering
MSBTE Maharashtra · 2011 — 2014
A Proof CV — one profile, kept current, with the proof attached. Back to the portal