Backend and DevOps Engineer
Introduction
AWS Certified DevOps Engineer with 8+ years of experience building reliable, compliant infrastructure at scale. I specialize in Infrastructure as Code (Terraform), Kubernetes orchestration, and automated CI/CD pipelines that prioritize security, observability, and disaster recovery. My expertise includes designing multi-cloud strategies, implementing zero-downtime deployments, and ensuring compliance. Known for translating complex operational requirements into resilient, auditable systems that drive business impact through reliability and automation.
Articles
EKS VPC Networking
- AWS EKS
- Terraform
- VPC / Networking
- Security Groups
Comprehensive guide to VPC essentials for EKS cluster management with Terraform.
- Terraform IaC
- KMS Encryption
- OIDC / IAM RBAC
- Managed Node Groups
Deep dive into EKS cluster configuration, security, and Terraform best practices.
- CloudFormation
- Docker
- AWS
- Networking
Interactive debugging for ECS Fargate containers using AWS ECS Exec with KMS encryption and IAM RBAC.
DevOps & SRE Projects
Minimum
- AWS Lambda / Serverless
- GitHub Actions CI/CD
- Kubernetes / Prometheus
- Docker / Health Probes
Serverless deployment on AWS Lambda with automated CI/CD and Kubernetes orchestration.
NeoBank
- Terraform / EKS / Helm
- ArgoCD GitOps / Jenkins
- OPA Gatekeeper / Istio
- Velero DR / LitmusChaos
Enterprise-grade AWS landing zone with GitOps, compliance automation, and chaos engineering.
Udagram
- GitHub Actions / Trivy
- Prometheus / Alertmanager
- Jaeger / OpenTelemetry
- Network Policies / RBAC
Full observability stack with security scanning, alerting, and incident response automation.
Navigating AWS EKS with Terraform: VPC Essentials
AWS EKS, Terraform, VPC, Security Groups
Foundation for reliable Kubernetes infrastructure - Deep dive into VPC networking architecture for EKS clusters.
Covers public/private subnet design, NAT gateway configuration for outbound connectivity, and critical Kubernetes tagging strategies
(kubernetes.io/cluster, kubernetes.io/role/elb). Explores security group rules for control plane and worker node communication,
including kubelet port 10250, CoreDNS DNS resolution (ports 53 TCP/UDP), and ephemeral port ranges.
Demonstrates multi-AZ high availability patterns and least-privilege network segmentation for compliance and security posture.
Navigating AWS EKS with Terraform: Cluster Configuration
EKS, Terraform, IAM, Security, Encryption
Production-grade cluster security and management - Comprehensive Terraform patterns for EKS cluster configuration emphasizing reliability and compliance. Covers KMS encryption-at-rest for Kubernetes secrets, IAM role-based access control (RBAC) with OIDC federation, and managed node group scaling strategies. Details cluster logging (audit, API, authenticator logs) for auditability, node launch templates with IMDSv2 enforcement for instance metadata security, and EKS add-ons (vpc-cni, kube-proxy, coredns, aws-ebs-csi-driver). Implements least-privilege IAM policies for cluster operations and includes aws-auth ConfigMap management for zero-trust access control.
How To SSH Into An ECS Fargate Container
Docker, ECS, AWS, CloudFormation, Networking
Interactive debugging for serverless containers - AWS ECS Exec enables interactive shell access to Fargate containers
without SSH key distribution or bastion hosts. Addresses the critical DevOps need for rapid debugging during development and
production incident response. Implements secure aws ecs execute-command using KMS encryption for the data channel,
IAM roles for access control, and CloudFormation for infrastructure as code. Covers prerequisite IAM policies (ssmmessages actions),
KMS key setup, and EnableExecuteCommand configuration on ECS services. Includes interactive shell execution with proper role assumptions and
AWS Systems Manager Session Manager integration for auditable container access.
Minimum Platform
Serverless + Kubernetes Deployment
Dual deployment architecture supporting both AWS Lambda serverless and Kubernetes orchestration. Features GitHub Actions CI/CD with automated testing (Playwright E2E), Docker multi-stage builds, and immutable artifacts. Kubernetes manifests include readiness probes for health monitoring and Prometheus metrics scraping. Achieves zero-downtime deployments with rolling updates and 99.9% uptime targets.
- AWS Lambda
- API Gateway
- GitHub Actions
- Kubernetes
- Prometheus
- Docker
- Health Probes
- Serverless Framework
NeoBank Platform
Enterprise AWS Landing Zone
Production-grade AWS infrastructure with Terraform modules for VPC, EKS, RDS, ElastiCache, MSK, and WAF. Full GitOps pipeline using ArgoCD + Jenkins with Cosign image signing and SBOM generation. Security automation via Snyk, Trivy, Semgrep scanning with OPA Gatekeeper policies and Istio mTLS. Includes Velero disaster recovery (5-min RPO), LitmusChaos experiments, and Kubecost FinOps. PCI-DSS/SOC 2/NIST compliant tagging and audit logging.
- Terraform
- EKS
- ArgoCD
- OPA Gatekeeper
- Istio mTLS
- Trivy/Snyk
- Velero DR
- LitmusChaos
- Kubecost
Udagram Platform
SRE Observability & Security
Full observability stack with Prometheus metrics, Grafana dashboards, and Alertmanager routing by severity. Distributed tracing via OpenTelemetry + Jaeger for latency analysis. Security-first CI/CD with Trivy container scanning, Gosec SAST, govulncheck, Gitleaks secrets detection, CodeQL, and Checkov IaC scanning. Network Policies with default-deny and RBAC for access control. External Secrets Operator for AWS Secrets Manager + HashiCorp Vault integration.
- Prometheus
- Grafana
- Alertmanager
- Jaeger/OTel
- Trivy
- Gosec
- Network Policies
- External Secrets
- GitHub Actions