Devops Engineer Senior

Vidhya Sagar Reddy Gontu

New Jersey, NY, US Open to Relocation 203-***-**** ***********.**@*****.***

Objective

Senior DevOps Engineer with over 6+ years of experience architecting and automating infrastructure solutions in cloud and hybrid environments. Proven track record of deploying secure, scalable, and high-availability systems using AWS, Docker, Kubernetes, and Terraform. Adept at CI/CD pipeline implementation, system hardening, and cross-functional collaboration to accelerate software delivery. Seeking to leverage my DevOps expertise and cloud engineering skills to drive innovation and operational excellence in a dynamic technology-driven organization.

Education

Saint Peters University Jersey City, NJ

Master of Science (MS) in Data Science GPA: 3.9/4 2023 - 2025

Lovely Professional University Punjab, India

Electronic and communication 2015 – 2019

Technical Skills

Category

Tools & Technologies

DevOps Tools

Jenkins, GitLab CI, Docker, Kubernetes, Terraform, Helm, Ansible, Git, GitHub

Cloud & Virtualization

Hetzner, AWS (EC2, S3, RDS, VPC, EKS, ECS, FortiGate, Route 53, IAM, ACM, Systems Manager, CloudWatch), VMware, KVM, VirtualBox

Containerization

Docker, Docker Compose, AWS ECS, AWS EKS, FortiGate

Infrastructure as Code

Terraform, CloudFormation, Ansible, Helm

Monitoring & Logging

Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), Zabbix, AWS CloudWatch, StaffCop

Scripting & Automation

Bash, Shell, Python, PowerShell, Batch Scripting

Operating Systems

Linux (CentOS, Ubuntu, Red Hat), Windows Server

Web & App Servers

Apache, NGINX, Tomcat, IIS

Security & Compliance

IAM, TLS/SSL, AD/LDAP/SSSD, Penetration Testing, System Hardening (PCI-DSS, ISO 27001),

VPN (FortiClient, Global Protect, Pfsense)

Firewall

FortiGate, Palo Alto, PFsense

Database Systems

PostgreSQL, MySQL, MSSQL, MongoDB, Oracle – Backup/Restore, Disaster Recovery, Performance Tuning

Networking Services

DNS, DHCP, VLAN, TCP/IP, NFS, FTP, SFTP, VPN Tunneling, VPC Peering

DevOps Documentation

Keycloak (LDAP/AD), ADFS, Jenkins Pipelines, Docker Hardening, PostgreSQL/MySQL DR Plans, Apache/Nginx Configuration, Firewall Setup

Storage & Backup

S3 Lifecycle Policies, EBS Snapshots, rsync, tar, scp, LVM, logrotate, backup scripting

PATENT RIGHTS PROJECTS: -

Treatment of Industrial Effluents (IoT) (Patent Right project) Granted: - 2019

Title: Treatment of Industrial Effluents (IoT)

Patent Number: IPR No: 201*********

Status: Patent Grant

Technologies Used: Python, Linux, Raspberry Pi, IoT

Description:

Designed and developed a platform-independent, cloud-based IoT architecture for the real-time monitoring and treatment of industrial effluents. The system enables cost-effective, smart, and secure management of effluent treatment plants using loosely coupled components. Leveraged Python and Raspberry Pi to implement sensor communication and data processing logic on a Linux-based environment, ensuring portability, scalability, and automation in industrial applications.

PROFESSIONAL EXPERIENCE (6+ Years Experience)

Visys Cloud Technologies McKinney, Texas

Senior DevOps Engineer Expert July 2023 – Present

Architected and deployed multi-region AWS infrastructure, utilizing VPC, EC2, S3, RDS, and EKS to ensure highly available, fault-tolerant systems across different regions.

Automated the creation and management of infrastructure using Terraform and AWS CloudFormation, reducing manual effort and improving infrastructure scalability.

Led the implementation of CI/CD pipelines across all environments using Jenkins, GitLab CI, and Docker to ensure faster and more reliable application deployments.

Migrated legacy infrastructure from on-premises to AWS and Hetzner, ensuring a smooth transition with zero downtime during the migration process.

Utilized AWS ECS (Elastic Container Service) for containerized workloads, enhancing deployment efficiency and scalability.

Managed AWS IAM roles and policies to enforce the least privilege access controls, ensuring security compliance.

Implemented auto-scaling for AWS instances and containers (ECS/EKS) to handle fluctuations in load, improving infrastructure efficiency and cost management.

Integrated CloudWatch for centralized logging and Prometheus/Grafana for advanced monitoring, providing insights into application and infrastructure health.

Developed automated backup strategies using AWS S3 and EBS snapshots, ensuring data availability and integrity.

Implemented disaster recovery processes with AWS Route 53 and Elastic Load Balancers (ELB), improving uptime and failover capabilities.

It led to the migration of an internal application from AWS EC2 to AWS FortiGate for better cost optimization and management of containerized workloads.

Conducted security audits and penetration testing, identifying vulnerabilities and strengthening the security posture of the infrastructure.

Utilized AWS Systems Manager to automate patch management and ensure servers remained up to date with security patches across multiple regions.

Managed DNS services with Route 53, integrating it with the cloud infrastructure to enhance traffic routing and improve application uptime.

Introduced Helm charts for deploying microservices in Kubernetes clusters, streamlining deployment processes and standardizing configurations.

Collaborated with development teams to optimize container images, implementing Docker multi-stage builds to improve performance and reduce image sizes.

Maintained internal DevOps documentation to ensure smooth handovers, clear standards, and guidelines for the DevOps processes.

Drove improvements in deployment pipelines, reducing the average deployment time by 40% through process automation and continuous integration.

Configured remote, virtual, and local repositories to streamline artifact access and caching from public sources like Maven Central, NPM registry, and Docker Hub.

Actively participated in on-call rotations for production support, handling escalations and resolving critical production issues promptly.

Optimized Hetzner server configurations for high-performance applications, providing cost-effective alternatives for certain non-production workloads.

Implemented VPC peering and VPN tunnels for secure communication between AWS and Hetzner environments, ensuring seamless integration between cloud platforms.

Managed and maintained AWS S3 buckets, implementing lifecycle policies and versioning to manage large datasets efficiently.

Implemented security best practices for Docker containers, including running containers with non-root users and scanning images for vulnerabilities.

Strong understanding of the Software Development Lifecycle (SDLC) including planning, design, development, testing, deployment, and maintenance phases.

Collaborated with QA and DevOps teams to integrate automated testing into CI pipelines, ensuring software quality during deployments.

Deployed and maintained NGINX reverse proxies for load balancing in front of web servers, improving web application availability.

Managed SSL/TLS certificates for internal and external applications, integrating AWS ACM and custom solutions for secure communication.

Pennant Technologies – (Banking Domain) Vizag, India

Associate Engineer (System Administrator) Jan 2021 – July 2023

Administered Linux (CentOS, Ubuntu) and Windows Servers, configured filesystems, services, and scheduled tasks.

Integrated Linux systems with Active Directory using SSSD and Kerberos.

Automated deployments and patching using Ansible, Bash, PDQ Deploy, and ManageEngine.

Deployed and managed Jenkins pipelines for application and infrastructure automation.

Installed and configured PostgreSQL, MySQL, and MSSQL with automated backup and restore procedures.

Documented 100+ technical SOPs including Keycloak, ADFS, LDAP, Samba AD, and Docker environments.

Managed FortiGate and Palo Alto firewalls: NAT rules, IPS, SSL-VPN, web filtering, and access control.

Maintained Apache, Nginx, Tomcat, and IIS servers; implemented HTTPS and custom reverse proxy configurations.

Designed and deployed ELK stack for centralized logging and analytics; fine-tuned Zabbix for infrastructure monitoring.

Managed domain policies, RDP configurations, and Windows hardening in production environments.

Implemented StaffCop for employee productivity monitoring and compliance.

Delivered PoCs and evaluations for new infrastructure tools and security solutions.

Supported VPN deployments with FortiClient and Global Protect for remote teams.

Handled troubleshooting and root cause analysis across servers, databases, firewalls, and application layers.

Oversaw and maintained a 70+ mixed server environment, including Windows and Linux while ensuring 99.9% uptime.

Implemented a scalable and highly available infrastructure, resulting in improved system performance and achieving an average uptime of 99.97%, supporting overall business growth.

Expertly managed and optimized critical IT infrastructure components, including Active Directory, Apache, Nginx, Microsoft office and Tomcat, driving significant improvements in system security, performance, and scalability; streamlined Active Directory for efficient user management and security policy enforcement, while enhancing web server configurations for optimized application delivery and performance.

Managed and maintained Windows and Linux servers, ensuring optimal performance and reliability and troubleshooting issues.

Conducted regular system audits to identify and address vulnerabilities, improving overall system security.

Implemented a centralized logging and monitoring solution using ELK Stack (Elasticsearch, Logstash, Kibana), improving the visibility into system health and security events.

Played a key role in a server consolidation project, which reduced physical server count by 30% without impacting performance, through effective virtualization strategies.

Provided on-call support for critical system issues, ensuring 24/7 availability of key infrastructure, systems hardware, printers, scanners, and other.

peripheral devices

Automated routine tasks using scripting languages (e.g., PowerShell, Bash), resulting in a 70% reduction in manual workload.

Worked on various internal projects using Python, Django, and Flask frameworks.

implemented a Zoho-based automation tool to centralize and streamline IT system management, significantly improving visibility, reporting, and operational efficiency across departments and outcomes like time saved or improved SLAs...

Conducted R&D on employee monitoring solutions and successfully introduced StaffCop, a Russian-based tool, as the finalized platform after evaluating multiple options, enhancing productivity tracking and internal compliance monitoring.

Projects & Documentation Portfolio

Keycloak Configuration Guides (LDAP, AD Integration)

ADFS Configuration Documentation

Apache/Tomcat Installation & Hardening Steps

Jenkins CI/CD Pipeline Setup Documentation

ELK Stack Installation and System Auditing Documentation

Disaster Recovery Plan for PostgreSQL & MySQL

FortiGate Firewall & Palo Alto VPN Setup Guides

StaffCop Employee Monitoring Configuration

Nginx & Apache Web Server Setup & Optimization

Active Directory and Group Policy Configuration for Banking Environments

PostgreSQL Backup and Restoration Procedures

Linux System Hardening Documentation (PCI-DSS, ISO 27001 Compliance)

Windows Hardening Guidelines (RDP & Firewall Configuration)

Infinite Tec labs Hyderabad, India

Linux Administrator July 2019 – Jan 2021

Installed, configured, and maintained Linux servers (CentOS, Red Hat, Ubuntu) in both physical and virtualized environments.

Administered user and group accounts, managed file permissions, and enforced security policies across Linux systems.

Conducted daily system and infrastructure monitoring to ensure hardware health, server resource availability, and continuity of critical processes.

Applied system patches and updates using yum and apt package managers; ensured systems met security and compliance standards.

Wrote and maintained shell scripts to automate routine system administration tasks (e.g., backups, log rotation, monitoring checks).

Configured and maintained services such as Apache, Nginx, DNS (BIND), DHCP, SSH, FTP, and NFS.

Set up and managed cron jobs for scheduled maintenance and automation tasks.

Monitored system performance using tools like top, htop, iotop, sar, and vmstat, and addressed bottlenecks.

Managed disk space, partitions, and LVM; performed file system maintenance and troubleshooting.

Configured and maintained firewall rules using iptables and firewalld for network-level access control.

Implemented and maintained secure remote access using SSH and key-based authentication.

Managed system logs using rsyslog, journalctl, and configured log rotation via log rotate.

Performed regular backups using tools like rsync, tar, and scp; evaluated restore procedures.

Performed service management on Linux servers, including starting, stopping, enabling, and troubleshooting system services to ensure high availability and performance.

Participated in system audits, hardening initiatives, and maintained documentation for configurations and procedures.

Provided Tier 1/Tier 2 support for Linux-related issues; collaborated with senior engineers to troubleshoot complex incidents.

Worked with virtualization platforms (e.g., VMware, KVM, VirtualBox) to deploy and manage virtual machines.

Utilized Ansible for configuration management to automate system administration tasks and improve efficiency.

Worked on database design and management using MySQL, PostgreSQL, and MongoDB.

Worked on various internal projects using Python, Django, and Flask frameworks.

Roles and Responsibilities

System security implementation

Security system configuration and management.

Data encryption techniques

Backup and recovery planning

Disaster recovery planning

User training and technical support Network

Network infrastructure monitoring and maintenance.

Router, switch, and firewall management, FortiGate and Palo Alto

Database management (Oracle, SQL)

Operating system installation and configuration

Application software management

System management tools proficiency

System documentation development and maintenance

Server hardware monitoring and maintenance

Storage, memory, and processor management

Performance optimization, multi-tasking

Troubleshooting and problem resolution

Cost reduction and efficiency improvement strategies

.

Contact this candidate