DEVOPS ENGINEER
Hey!
I’m Sankalp — a DevOps & SRE engineer based in Bangalore, building and operating Kubernetes platforms at fintech scale.
Three-plus years across AWS and Azure, where 40+ microservices serve 22M+ requests a day at a ~99.7% success rate.
I led a zero-downtime AWS→Azure migration, drove a FinOps program that cut cloud spend ~50%, and keep everything reproducible in Terraform — built to move fast, stay up, and cost less.
/ WHAT I DO
From commit to production — built to move fast, stay simple, and perform under real-world load.
/01
Platform Engineering
Kubernetes platforms, GitOps delivery and ephemeral preview environments for fast, safe shipping.
Kubernetes
Helm
ArgoCD
/02
Cloud Cost / FinOps
Graviton migrations, spot pools and rightsizing that cut spend with zero performance regressions.
Graviton
Karpenter
Rightsizing
/03
Multi-Cloud Migration
Zero-downtime AWS ↔ Azure moves on Terraform landing zones, with cross-region disaster recovery.
Terraform
AWS ↔ Azure
DR
/04
Observability & SRE
Unified telemetry, SLOs and zero-trust access — lower MTTR, fewer false alarms, no audit findings.
Datadog
Prometheus
Zero-Trust
/ IMPACT
Every figure ships with the engineering behind it — Graviton migrations, KEDA autoscaling, unified observability and zero-trust access running across live clusters.
FINOPS · HEADLINE RESULT
AWS cost reduction
Graviton migration, Karpenter spot pools, RDS/S3 cleanup & NAT consolidation — zero performance regressions.
$22.5K
BEFORE
$11.3K
AFTER
≈ $134K saved annually
· recurring run-rate
RELIABILITY AT SCALE
Requests / day sustained
Across 40+ Java, Node.js & Python microservices on two EKS clusters.
~99.7% success
KEDA autoscaled
VELOCITY
50%
Faster releases
Jenkins & ArgoCD pipelines, errors minimized.
OBSERVABILITY
40%
Lower MTTR
Datadog killed 35% of false-positive alerts.
PERFORMANCE
45→18s
Pod startup
Evictions down 45% via PDBs & chaos tests.
/ EXPERIENCE
CURRENT
ZET
Bangalore, India
Apr 2026 — Present
DevOps Engineer 2
→
Drove a company-wide FinOps program cutting AWS spend ~50% ($22.5K → $11.3K/mo, ~$134K annualized) via Graviton migration, Karpenter spot pools, RDS snapshot cleanup, S3 lifecycle policies and NAT consolidation — zero performance regressions.
→
Leading the full AWS-to-Azure exit of the ZET Partner OU — 5 AWS accounts and 15+ Kubernetes workloads to AKS, Aurora MySQL → Azure Database for MySQL, S3 → Blob Storage, on Terraform landing zones with keyless Workload Identity.
→
Architecting cross-region Disaster Recovery (ap-south-1 ↔ ap-south-2) with Aurora Global Database and a Pilot Light topology — targeting RTO/RPO under 20 minutes with automated failover runbooks and quarterly game-days.
→
Own platform reliability across two production EKS clusters (two AWS OUs) — 40+ microservices at ~99.7% success rate on 22M+ req/day — with blameless RCAs and SLO-based alerting.
→
Replaced managed ElastiCache with self-hosted Valkey on Graviton behind Route 53 private DNS, and deployed VictoriaLogs via Fluent Bit routing — cutting log query latency, storage and per-hour cache cost.
ZET
Bangalore, India
May 2025 — Apr 2026
DevOps Engineer
→
Migrated EKS production workloads to ARM64 Graviton, contributing to a ~42% AWS cost reduction with no latency regression.
→
Optimized EKS — pod startup 45s → 18s, KEDA autoscaling on Prometheus RPS across 15+ microservices, spot evictions cut 45% via PDBs and chaos testing.
→
Led the AWS-to-Azure multi-cloud migration — AKS in segmented VNets, Azure MySQL with read replicas, App Gateway + WAF, and ACR/Key Vault/Service Bus/Storage behind private endpoints.
→
Consolidated Grafana and New Relic into Datadog — MTTR down 40% and 35% of false-positive alerts eliminated. Enforced zero-trust (Twingate, JumpCloud, IRSA, WAF) for zero audit findings.
→
Standardized multi-account governance with AWS Control Tower, SCPs, GuardDuty and IAM Identity Center, and built GitHub Actions CI/CD pipelines across staging, QA and production.
→
Built a self-service business-intelligence platform on Metabase and Databricks with automated ETL pipelines.
Hire3x
Bangalore, India
Sept 2024 — May 2025
DevOps Tech Lead
→
Led DevOps transformation across dev, QA, pre-prod & production Kubernetes environments for streamlined deployments.
→
Automated CI/CD with Jenkins & ArgoCD — release cycles down 50%, and implemented Terraform IaC for consistent multi-cloud infrastructure.
→
Designed AWS auto-scaling that scales on demand, and migrated self-hosted MongoDB to MongoDB Atlas for better scalability and security.
Hire3x
Bangalore, India
Oct 2023 — Sept 2024
DevOps Engineer & Full Stack Developer
→
Architected complete AWS EKS infrastructure with Terraform, reverse-engineering the existing setup via Terraformer while preserving legacy systems.
→
Orchestrated DigitalOcean→AWS migration with minimal downtime; added CloudWatch and Loki-Grafana monitoring, HPA and zero-downtime rolling upgrades.
→
Built a VPN + firewall system that cut unauthorized access attempts 95%, plus a Python cronjob DB-backup service for disaster recovery.
→
Migrated from community GitLab to a self-hosted instance, streamlining repository management and CI workflows.
Hire3x
Bangalore, India
Jan 2023 — Oct 2023
Software Developer
→
Spearheaded development of a real-time video conferencing web application (Vue.js, WebRTC, Socket.io) — live calls, screen sharing and chat — integrated into the core product platform.
→
Built a Universal File Converter API (docx, pptx, txt, HTML → PDF), cutting file-processing time 50% via an optimized Node.js + Puppeteer rendering pipeline.
→
Designed and shipped scalable backend services in Flask (Python) and Node.js, with seamless front-end integration.
→
Executed proof-of-concepts that improved user experience and operational efficiency across multiple product areas.
St. Francis Xavier
Guest Faculty
2024
AWS Training Instructor
→
Ran a week-long AWS certification program taking 20+ final-year B.Tech students from cloud fundamentals through hands-on labs to AWS Academy Cloud Foundations certification.
/ TOOLBELT
Production-tested across two clouds — chosen for reliability, cost and operability.
/01
Cloud
AWS
Azure
DigitalOcean
GCP
/02
Containers & Orchestration
Docker
Kubernetes
Helm
Karpenter
KEDA
/03
CI/CD & IaC
GitHub Actions
Jenkins
Terraform
ArgoCD
CloudFormation
/04
Observability
Datadog
Prometheus
Grafana
Loki
VictoriaLogs
CloudWatch
/05
Security
Twingate
JumpCloud SSO
IRSA
AWS WAF
GuardDuty
Azure Sentinel
/06
Scripting & Networking
Python
Bash
Node.js
VPC / VNet
Load Balancers
Aurora / Valkey
/ HOW I ARCHITECT
Commit to production with no manual steps. CI runs in the open; everything that serves traffic lives behind a zero-trust boundary — and the same pattern runs on AWS EKS and Azure AKS.
pipeline
· main
HEALTHY
ZERO-TRUST CONTROLS
Twingate
JumpCloud SSO
IRSA
IMDSv2
AWS WAF
/ SELECTED WORK
/01
VCCL Video Conferencing
Full P2P video conferencing — calls, screen sharing, real-time chat — with a custom CoTURN STUN/TURN server, no central server dependency.
Vue.js
WebRTC
CoTURN
2023–24
/02
WireGuard VPN Solution
Secure VPN + firewall for org network security and controlled resource access — multi-user, with strict firewall rules guarding databases and internal services.
WireGuard
Kubernetes
DigitalOcean
2024
/03
Universal File Converter API
API converting docx, pptx, txt & HTML to PDF — cutting processing time 50%, using Node.js + Puppeteer for pixel-accurate HTML-to-PDF rendering.
Flask
Node.js
Puppeteer
2023
/ LET’S TALK
I’m open to senior DevOps & SRE roles. Fastest way to reach me is email — or connect on LinkedIn.