Senior DevOps Engineer
Ericsson Global India Pvt. Ltd. · Jun 2025 – Present
- Led platform engineering across 10+ person cross-functional team — infrastructure automation, security-first CI/CD, and self-healing systems for enterprise telecom platform.
- Built production 3-tier AWS infrastructure (VPC, 3 AZs, CloudFront + WAF + ALB, EC2 ASG, Aurora Multi-AZ, ElastiCache) with Terraform modules - handles 5,000 req/s, auto-scales 3→20 instances, <30s DB failover
- Implemented IaC security scanning (tfsec + Checkov + OPA) in CI zero misconfigurations reach production; Infracost shows cost impact on every PR
- Operated K8s across 3 environments (self-managed, EKS, OpenShift) serving 15+ production microservices with standardised Helm chart deployments and environment-specific value overrides
- Karpenter autoscaling with Spot optimisation 60-70% node cost reduction; bin-packing consolidation eliminates half-empty nodes
- Designed 18-stage DevSecOps pipeline (Jenkins + ArgoCD + Argo Rollouts) with 6 security layers: secret scan → SCA → SAST → Trivy image scan → Cosign signing → DAST (OWASP ZAP) blast radius reduced 100% → 5%
- Supply chain security: Cosign + Kyverno admission control - only signed, scanned images from ECR run in production (SOC2 passed first attempt)
- Enforced CIS/NIST-aligned policies: Pod Security Standards (restricted), NetworkPolicies (default-deny), mTLS (Istio), RBAC least-privilege; secrets via AWS Secrets Manager + KMS
- Deployed Prometheus + Grafana + AlertManager + EFK with ServiceMonitor auto-discovery; structured alerting (P1→PagerDuty, P2→Slack, P3→Jira)
- Istio service mesh + Jaeger distributed tracing across 15 microservices MTTR reduced from 2+ hours to <5 minutes.


