Devops Engineer Azure

MANI SAKSHI

Tel: 813-***-**** Email: ************@*****.***

SUMMARY

• Experienced SRE/DevOps Engineer with 6+ years of expertise in automating, securing, and optimizing cloud-native infrastructure across AWS, Azure, and hybrid environments.

• Proficient in Infrastructure as Code (IaC) using Terraform, CloudFormation, ARM templates, and Ansible to ensure repeatable, version-controlled deployments.

• Designed and managed high-availability containerized systems using Kubernetes (EKS, AKS), Docker, and Helm, with embedded policy and runtime controls.

• Built end-to-end CI/CD pipelines using Jenkins, GitHub Actions, GitLab, and Azure DevOps, with integrated security scanning (Snyk, Checkov, Veracode).

• Strong experience in observability and logging tools including Prometheus, Grafana, ELK Stack, CloudWatch, Splunk, and Datadog, ensuring optimal uptime and MTTR reduction.

• Adept at managing secrets and secure configurations via AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault across multi- tenant environments.

• Practiced in implementing DevSecOps, policy-as-code, and GitOps workflows with ArgoCD, FluxCD, and compliance tools like OPA and Aqua Security.

• Led incident management, runbook development, RCA documentation, and on-call escalation workflows, improving operational maturity and SLO adherence.

• Delivered CSPM using AWS Config, GuardDuty, Security Hub, and aligned security alerts with centralized monitoring solutions.

• Automated system patching, vulnerability scans, and image hardening using Clair, Trivy, and Aqua, reducing risk exposure by 60%.

• Collaborated in Agile/Scrum settings using Jira, Confluence, Slack, Microsoft Teams, and led DevOps/SRE workshops and knowledge- sharing sessions.

SKILLS

• Cloud Platforms: AWS (EC2, EKS, S3, RDS, Lambda, IAM, CloudWatch, WAF, GuardDuty), Azure (AKS, Azure DevOps, Blob Storage, Key Vault)

• Infrastructure as Code (IaC): Terraform, CloudFormation, ARM Templates, Ansible

• Containers & Orchestration: Docker, Kubernetes (EKS, AKS), Helm, Trivy

• CI/CD & Automation: Jenkins, GitHub Actions, GitLab CI/CD, Azure Pipelines, ArgoCD, SonarQube, Snyk

• Monitoring & Observability: Prometheus, Grafana, ELK Stack, Datadog, CloudWatch

• Security & Compliance: IAM, RBAC, TLS/SSL, OAuth 2.0, WAF, GuardDuty, AWS Secrets Manager, Azure Key Vault, HashiCorp Vault

• Version Control & GitOps: Git, GitHub, GitLab, ArgoCD

• Scripting & Automation: Python (Boto3, PyTest), Bash, YAML, JSON

• DevOps Utilities: Nexus, Artifactory, Packer

• Collaboration & Agile Tools: Jira, Confluence, Microsoft Teams, Slack WORK EXPERIENCE

Wawanesa Group Apr 2023 – Present

SRE/DevOps Engineer

• Engineered and maintained fault-tolerant infrastructure on AWS using Terraform and CloudFormation to support scalable and secure workloads.

• Designed CI/CD pipelines with GitHub Actions and Jenkins, integrating Snyk, SonarQube, and Checkov for secure delivery workflows.

• Deployed and managed containerized applications in EKS, implementing runtime protection with Aqua Security and compliance benchmarks.

• Defined SLIs/SLOs with Prometheus and Grafana, and integrated alerting via CloudWatch for proactive issue detection and remediation.

• Leveraged AWS Secrets Manager and Vault to manage and rotate secrets securely, aligning with SOC 2 audit controls.

• Enabled WAF, GuardDuty, Security Hub, and Config to maintain cloud security posture and CIS benchmark compliance.

• Automated infrastructure patching and vulnerability scanning with Trivy, Clair, and Aqua, improving security scores.

• Collaborated with security teams to conduct penetration testing, threat modeling, and security incident triaging.

• Implemented GitOps using ArgoCD, ensuring traceable deployments and rollback capability across microservice clusters.

• Enabled distributed logging with ELK Stack, correlating logs across services and triggering alerts for anomalies.

• Managed high-throughput services in multi-region AWS environments, introducing horizontal scaling and automated failover strategies.

• Supported shift-left initiatives by hosting DevSecOps onboarding workshops for developers and QA teams.

• Reduced MTTR by 40% through playbook automation, self-healing mechanisms, and refined escalation paths.

• Partnered with product and engineering teams in Agile ceremonies, delivering infrastructure features in 2-week sprints. Creative Newtech Ltd Mar 2017 – Aug 2021

Site Reliability Engineer

• Developed and maintained infrastructure as code using ARM Templates and Azure CLI, ensuring repeatable deployments across dev, staging, and prod.

• Built and optimized CI/CD pipelines via Azure DevOps, integrating SonarQube for code quality and Veracode for security scanning.

• Orchestrated application deployments on AKS using Helm, reducing deployment effort by 70% and enabling zero-downtime upgrades.

• Centralized observability using ELK Stack and Azure Monitor, improving incident detection and visibility across services.

• Automated system provisioning and configuration using Chef, increasing efficiency and minimizing human error in deployments.

• Managed access control and secret handling using Azure Key Vault, enforcing RBAC and auditing access for compliance.

• Wrote Python and Bash scripts to automate daily ops tasks, health checks, and environment setup processes.

• Collaborated with developers to instrument apps with custom metrics, improving root cause isolation during incidents.

• Reduced latency and improved SLA by implementing caching layers, optimized load balancing, and horizontal pod autoscaling.

• Created detailed runbooks and postmortems, enabling effective incident resolution and RCA sharing across teams.

• Participated in vulnerability assessments and patching schedules to secure infrastructure from emerging threats.

• Standardized log formats and alerting thresholds to ensure consistent telemetry across services and environments.

• Engaged in Agile/Scrum planning, owning infrastructure tickets and sprint deliverables with full transparency in Jira.

• Delivered internal SRE bootcamps to enhance knowledge sharing on reliability engineering best practices. EDUCATION

• Master’s in computer information systems & cyber security Saint Leo University (2023)

• Bachelor of Technology in Mechanical Engineering Jawaharlal Nehru Technological University (2017)

CERTIFICATIONS

• AWS Developer – Associate

• Data Bricks – Fundamentals

Contact this candidate