Senior DevOps Engineer

• Own the enterprise CI/CD framework on GitHub Actions and Google Cloud — 3 reusable pipelines governing 32 services across 6 engineering teams, replacing per-team scripts and cutting new-service onboarding to under an hour. • Architected Apigee X with Private Service Connect (PSC) for secure southbound connectivity over internal HTTPS to Cloud Run backends, serving 15+ enterprise API proxies. • Authored a library of 10+ versioned Terraform modules (VPC, GKE, IAM, Cloud SQL, Cloud Run) consumed by 3 teams across 4 environments, standing up a full environment in 1–2 days and removing configuration drift as a class of incident. • Eliminated long-lived static cloud credentials across GCP and AWS by rolling out workload identity federation — GKE Workload Identity, IAM Roles for Service Accounts (IRSA) and EKS Pod Identity — enforcing least-privilege service account access on every cluster. • Embedded SonarQube static analysis and Trivy container image vulnerability scanning into the CI/CD pipelines, surfacing code-quality and CVE findings before release rather than in production. • Implemented event-driven autoscaling with KEDA and node-level autoscaling with Karpenter, matching cluster capacity to real demand and removing manual node-pool sizing. • Built and operate the AWS delivery platform on Amazon EKS running 20+ production microservices, with zero downtime rolling deployments, automated rollback and Slack-integrated release notifications. • Tuned Amazon RDS for high-volume transactional traffic and integrated Amazon MQ for asynchronous messaging; validated the stack under application load testing at 10,000 requests/sec. • Hardened and tuned AlphaFold infrastructure on Google Cloud for AI-driven protein structure prediction — NVIDIA A100 GPU scheduling and 3 TB reference datasets — delivered as a client proof of concept.

• Operated 5+ production GKE clusters (20+ nodes) across multiple Google Cloud projects to a 99.9% availability Service Level Objective (SLO). • Executed 15+ multi-cluster GKE upgrades and workload migrations across multiple Google Cloud projects with zero customer-facing downtime. • Deployed and scaled AI agent workloads on GKE using NVIDIA GPU node pools, and configured Vertex AI infrastructure for generative AI use cases. • Designed a highly available serverless platform on Cloud Run, Cloud Functions, Memorystore (Redis) and Global Load Balancing for a customer-facing gaming dashboard application. • Migrated production traffic management from Kubernetes Ingress to Gateway API with zero downtime, improving multi-tenant routing control and centralising TLS certificate management. • Led Google Cloud infrastructure and security reviews across 3 projects, tightening IAM to least-privilege.

• Containerised and migrated 15+ legacy applications to Kubernetes on a lift-and-modernise programme, putting them on continuous delivery for the first time. • Reduced monthly cloud operational cost 30%+ through utilisation analysis and resource right-sizing, while meeting all Service Level Objectives (SLOs). • Resolved production incidents across application, container, network and infrastructure layers through structured root cause analysis (RCA). • Hardened infrastructure with proactive OS patching and CVE remediation across hosts and container images, plus recurring IAM access reviews. • Deployed hybrid environments integrating Google Cloud with an 8-node on-premises bare-metal cluster with Anthos for specialised test workloads environment. • Mentored and onboarded 4–5 junior engineers on Kubernetes, Terraform and CI/CD practice, and authored the team's DevOps onboarding documentation and runbooks.