FinOps & Scaling: Re-architected the EKS compute layer to utilize Karpenter for Just-in-Time node provisioning, leveraging EC2 Spot Instances for non-production workloads. Reduced monthly AWS compute bill by 40% while improving cluster scaling speed from 5 minutes to 45 seconds. ● Zero-Trust Security: Architected a dynamic secrets management system using HashiCorp Vault and Vault Agent Injector on EKS. Replaced static Kubernetes Secrets with ephemeral, rotating database credentials for 15+ microservices, achieving a Zero-Hardcoded Secrets policy. ● GitOps Delivery: Migrated deployment workflows from imperative Jenkins pipelines to a declarative GitOps model using ArgoCD. Standardized application packaging using Helm Charts, enabling "Click-to-Deploy" environments for Dev/QA.

● Infrastructure as Code: Developed a library of reusable, versioned Terraform Modules (VPC, RDS, ALB, ASG) with remote state locking. Reduced environment provisioning time for new clients by 80% by enforcing immutable infrastructure patterns. ● Event-Driven Architecture: Designed an asynchronous image processing pipeline using S3 Event Notifications, SQS, and Lambda. Decoupled the frontend from heavy processing tasks, ensuring 99.9% availability during traffic spikes. ● Containerization: Led the "Monolith to Microservices" migration strategy. Containerized legacy Python/Java applications using Multi-Stage Docker builds, reducing image size by 60% and vulnerability surface area. ● Network Security: Designed production VPCs with strict isolation (Public/Private subnets), implementing VPC Endpoints (PrivateLink) for S3/ECR to keep data traffic entirely within the AWS internal network. PROJECTS 1. Zero-Trust DevSecOps Platform (Vault + ArgoCD + EKS) Duration: October 2023 – Present