I'm a Senior Cloud Architect and DevOps Lead with 9+ years of hands-on experience designing and implementing enterprise-grade cloud infrastructure solutions. My expertise spans multi-cloud platforms (GCP, AWS, Azure), Kubernetes orchestration, and advanced DevOps practices.

I specialize in:

• 🏗️ Enterprise cloud platform engineering and architecture
• 🔐 Cloud security, compliance, and zero-trust implementations
• 🎯 Multi-cloud migrations and cost optimization
• ☸️ Kubernetes and container orchestration at scale
• 🔄 CI/CD pipeline design and GitOps workflows
• 📊 Network optimization and performance engineering

Key Impact:

• 💰 Reduced cloud infrastructure costs by 35-45% through workload optimization
• ⚡ Improved system uptime to 99.9%+ with advanced security implementations
• 🚀 Accelerated deployments by 60% through GitOps automation
• 🛡️ Eliminated security incidents with zero-trust architecture
• 📈 Managed 50+ mission-critical applications across enterprise environments

• Google Cloud Platform (GCP): VPC, Firewall, Cloud Armor, VPN, Interconnect, VPC Service Controls, Network Connectivity Center
• AWS: EC2, VPC, Direct Connect, Route53, CloudFormation, VPN
• Azure: Virtual Networks, Security Groups, Azure Policy

• GKE (Google Kubernetes Engine) - Expert level
• Kubernetes Networking - Cilium, Calico, Istio Service Mesh
• Multi-cluster Management - Fleet API, GKE Autopilot

• Terraform - Infrastructure provisioning & management
• Ansible - Configuration management & automation
• Cloud Build - GCP CI/CD platform
• ArgoCD - GitOps continuous deployment
• Jenkins - Legacy & complex CI/CD pipelines

• Identity & Access: Workload Identity Federation, IAM Best Practices, Just-In-Time Access
• Network Security: Cloud Armor, Firewall Policies, VPC Service Controls, Network Function Virtualization
• Secrets Management: Secret Manager, HashiCorp Vault, Keycloak
• Compliance: SOC2, zero-trust architecture, security scanning
• Tools: Google Cloud SCC, Cloud Armor, NGFW, KMS

• Cloud Monitoring - GCP native monitoring & alerting
• Prometheus & Grafana - Metrics collection & visualization
• Cloud Logging - Centralized log management
• ELK Stack - Elasticsearch, Logstash, Kibana
• Performance Monitoring - APM, custom dashboards

• Network Architecture: SD-WAN, VPN Tunneling, Load Balancing
• Performance Optimization: Bandwidth optimization (40%+), latency reduction, MTU tuning
• Advanced Networking: BGP, MPLS, IPSec, VPP (Vector Packet Processing)
• Tools: Wireshark, Iperf, Nmap, Strongswan

• AlloyDB - PostgreSQL-compatible managed database
• Cloud SQL - MySQL, PostgreSQL, SQL Server
• BigQuery - Data warehouse & analytics
• Firestore, Datastore - NoSQL databases

• Python - Automation, networking, cloud SDKs
• Bash - Shell scripting, DevOps tooling
• Go - Microservices, cloud-native tools

• Infrastructure: Terrascan, Tflint, Checkov
• Application: SonarQube, OWASP ZAP, Snyk
• Configuration: OpenSCAP, Qualys
• Testing: Postman, Terraform Kitchen, Inspec

• Workload Identity Federation (GCP)
• Keycloak - Open-source identity provider
• HashiCorp Vault - Secrets management
• Cloud Identity and Access Management (IAM)
• Just-In-Time (JIT) Access

• Cloud Monitoring (GCP)
• Prometheus - Metrics collection
• Grafana - Data visualization
• Cloud Logging (GCP)
• ELK Stack - Elasticsearch, Logstash, Kibana
• New Relic - APM & monitoring
• Application Performance Monitoring (APM)

• Google Cloud Security Command Center (SCC)
• Cloud Identity and Access Management (IAM)
• Key Management Service (KMS) (GCP)
• Next Generation Firewall (NGFW) (GCP)
• Certificate Manager (GCP)
• Cloud Armor - DDoS protection & WAF
• VPC Service Controls (VPCSC)

• Wireshark - Network protocol analyzer
• Snort - IDS/IPS
• Nmap - Network scanning
• Cisco Thousand Eyes - Network monitoring
• Network Function Virtualization (NFV)
• Strongswan - IPSec VPN

• Terrascan - Terraform security scanning
• Tflint - Terraform linter
• Terraform Docs - Documentation generation
• SonarQube - Code quality & security
• OWASP ZAP (Zed Attack Proxy) - Security testing
• Snyk - Dependency scanning
• OpenSCAP - Compliance scanning
• Qualys Cloud Platform - Vulnerability management
• Checkov - Infrastructure as Code scanning

• Postman - API testing
• Inspec - Infrastructure testing
• Terraform Kitchen - Testing framework
• Terraform test & Terraform check
• Locust - Load testing

• Docker - Container runtime
• Google Kubernetes Engine (GKE)
• Kubernetes - Container orchestration
• Istio - Service mesh
• Helm - Kubernetes package manager
• Anthos - Multi-cloud Kubernetes platform
• Cilium - eBPF-based networking
• Calico - Container networking

• Secret Manager (GCP)
• HCP Vault - HashiCorp Cloud Platform Vault
• GitHub Secrets - GitHub Actions secrets
• Let's Encrypt - Free SSL/TLS certificates
• CertBot - ACME client
• Certificate Manager (GCP)

• Internal Load Balancer (ILB) (GCP)
• Proxy ILB (GCP)
• Global Load Balancing Controller (GLBC)
• Apigee Gateway - API management
• Nginx Ingress - Kubernetes ingress controller

• Jenkins - CI/CD orchestration
• GitHub Actions - GitHub native CI/CD
• Cloud Build (GCP) - Managed CI/CD
• ArgoCD - GitOps continuous deployment
• Terraform - Infrastructure as Code

• Cloud VPN (GCP)
• Cross-Cloud VPN (GCP)
• WireGuard - Modern VPN protocol
• Tailscale - WireGuard-based mesh VPN
• OpenVPN - Open-source VPN
• IPSec - IP Security
• BGP - Border Gateway Protocol
• MPLS - Multiprotocol Label Switching

• Ubuntu - Debian-based Linux
• Debian - Linux distribution
• RedHat/CentOS - Enterprise Linux
• SELinux - Security-Enhanced Linux
• AppArmor - Linux security module

• Virtual Private Cloud (VPC)
• VPC Peering
• Private Service Connect (PSC)
• Private Service Access (PSA)
• Cloud DNS - Managed DNS service
• Firewall Policies & Firewall Rules
• Next Generation Firewall (NGFW)
• Cloud VPN - VPN service
• Cloud Interconnect - Dedicated connections
• Network Connectivity Center (NCC)
• VPC Service Controls (VPCSC)
• Shared VPC - Multi-project networking
• Packet Mirroring - Traffic mirroring
• Intrusion Prevention System (IPS)
• Intrusion Detection System (IDS)

• OpenDaylight - SDN controller
• Software-Defined WAN (SD-WAN)
• Network Function Virtualization (NFV)
• Python Network Automation - Automation scripts
• Ansible - Configuration management & automation

• Google Cloud IoT Edge
• IoT Core (GCP)
• Edge Infrastructure

• Proxmox - Virtualization platform
• OpenStack - Open-source cloud platform
• Consul - Service discovery & networking
• Terraform - Infrastructure as Code
• Packer - Image building
• Vagrant - Development environment management

Calix Inc. | March 2025 - Present

• Leading cloud infrastructure modernization initiatives
• Architecting next-generation cloud platform solutions
• Implementing advanced DevOps practices and GitOps workflows
• Establishing cloud-native monitoring and observability frameworks

Publicis Sapient | December 2023 - March 2025

• Cloud Security & Compliance: Designed Cloud Armor protection, achieved 99.9% uptime and SOC2 compliance
• Security Implementation: Led NGF and EDR/XDR solutions, reducing security incidents by 85%
• Enterprise Landing Zone: Architected GCP Landing Zone enabling 50+ mission-critical applications
• Network Optimization: Implemented VPP+IPSec stack achieving 40% bandwidth optimization
• Multi-Cloud Migration: Led AWS-to-GCP migration reducing infrastructure costs by 35%
• CI/CD Excellence: Established GitOps pipelines reducing deployment time by 60%

Codincity Digital Technologies | January 2022 - December 2023

• Container Orchestration: Architected GKE platform supporting 10M+ daily transactions
• DevSecOps: Integrated SonarQube, Snyk, OWASP ZAP achieving 99% vulnerability detection
• Cost Optimization: Reduced cloud spend by 45% through workload analysis
• Service Mesh: Implemented Istio for microservices communication
• Network Automation: Developed NetDevOps solutions using Python and Terraform

Toyota Motor Corporation | August 2015 - January 2021

• Enterprise Networks: Managed infrastructure with 99.95% availability
• Incident Response: Led 24/7 operations, reducing MTTR by 50%
• Network Automation: Python/Ansible automation reducing config errors by 75%
• Hybrid Architecture: Established hybrid cloud with on-premises infrastructure
• Cost Optimization: Reduced operational costs by 25% through efficiency improvements

Engineered multi-layered security architecture for BFSI and Telecom clients, achieving zero security breaches and SOC2 compliance through zero-trust implementation.

Successfully migrated enterprise workloads from AWS to GCP, reducing costs by 35% and improving performance metrics by 40%.

Implemented VPP+IPSec stack achieving 40% bandwidth optimization and 30% latency reduction for critical enterprise traffic.

Established GitOps workflows reducing deployment time by 60% and improving reliability to 95%+ through automated CI/CD.

Architected scalable GKE platform supporting 100+ microservices with auto-scaling capabilities handling 10M+ daily transactions.

Implemented cost optimization strategies reducing cloud spend by 45% through comprehensive workload analysis and rightsizing.

I maintain detailed documentation of real-world infrastructure challenges and their solutions, covering:

• ✅ DNS resolution optimization across cloud networks
• ✅ VPC connectivity and service networking patterns
• ✅ VPN performance tuning and bandwidth optimization
• ✅ Private Service Connect (PSC) implementation
• ✅ Kubernetes memory pressure debugging and resolution
• ✅ Cloud NAT scaling and resource optimization
• ✅ 504 gateway error resolution
• ✅ IPv4-IPv6 dual-stack implementation
• ✅ And 20+ other production incidents and solutions

→ View Full Infrastructure Learnings

✅ Design enterprise cloud architectures with security-first approach
✅ Implement Kubernetes platforms at scale with GitOps workflows
✅ Optimize cloud infrastructure for cost, performance, and security
✅ Automate operations and reduce manual toil through IaC
✅ Secure cloud environments with zero-trust principles
✅ Mentor teams on DevOps best practices and cloud native patterns

I share knowledge through:

• YouTube: DevOps tutorials, GCP deep dives, Kubernetes patterns
• GitHub: Infrastructure code, automation scripts, cloud templates
• Blog: Technical articles on cloud architecture and DevOps practices

→ Subscribe on YouTube

I'm always interested in:

• 💬 Discussing cloud architecture and DevOps best practices
• 🤝 Collaborating on interesting infrastructure projects
• 📝 Sharing knowledge and mentoring
• 🚀 Exploring new cloud technologies and innovations