Cloud Platform Engineer Multi-Cloud, SecOps, FinOps

Ganesh Inturi

***************@*****.*** +1-571-***-**** PA, USA LinkedIn

Summary

Cloud Engineer with 3+ years of experience designing secure, cost-efficient cloud platforms across AWS, Azure, and multi-cloud environments. Skilled in container orchestration, IaC automation, Zero Trust security, enterprise networking, and progressive delivery for regulated domains. Adept at building scalable microservices on Kubernetes, implementing observability pipelines with APM tracing, and optimizing costs using FinOps strategies while driving resilience through disaster recovery, high- availability architectures, and compliance-driven automation. Technical Skills

Cloud Platforms & Services: AWS (EKS, ECS, Lambda, RDS, VPC, Route 53, CloudFront, API Gateway, IAM, WAF, GuardDuty), Azure (AKS, Functions, Key Vault), GCP (GKE, Cloud Armor, Cloud Run), Multi-Cloud Deployments, PrivateLink, Transit Gateway. Infrastructure Automation & IaC: Terraform, AWS CloudFormation, Azure Bicep, Helm, Ansible, GitOps Pipelines, Kubernetes Operators, Policy-as-Code, Automated Provisioning, Secrets Automation, Immutable Infrastructure. Networking, Security & Zero Trust: Zero Trust Architecture, WAF/Shield, Service Mesh (Istio, Linkerd), mTLS, KMS Encryption, Certificate Automation, Identity Federation (SAML/OIDC), Service Control Policies (SCP), Cloud Firewall Management. DevOps, Containers & CI/CD: Docker, Kubernetes, Argo CD, FluxCD, Jenkins, GitHub Actions, GitLab CI, Canary & Blue-Green Deployments, Progressive Delivery, Serverless CI/CD, Artifact Management, Observability Pipelines, OPA Enforcement. Monitoring & Cost Optimization: CloudWatch, Prometheus, Grafana, ELK/EFK, Datadog, New Relic, Splunk, APM Tracing, FinOps Cost Visibility, RI & Savings Plans Strategy, Auto-Scaling Optimization, SLIs/SLOs Management. Compliance, Resilience & Reliability: Chaos Engineering, DR Runbooks, High-Availability Architectures, Backup Orchestration, Compliance Auditing (SOC 2, HIPAA, FedRAMP), CSPM Solutions, Threat Detection Automation, Incident Response Workflows, Blueprint Standardization.

Professional Experience

Cloud Engineer, KPMG May 2024 – Present Remote, USA

• Engineered a hybrid Azure AKS architecture for enterprise insurance underwriting systems, integrating service mesh policies, private endpoints, and identity federation through SAML-based access governance across regions securely.

• Automated multi-subscription deployments using Azure Bicep, OPA-based admission controls, and GitOps pipelines with FluxCD, enabling configuration lifecycles and workload governance across compliance-centric environments.

• Implemented observability pipelines using Azure Monitor, Loki, and OpenTelemetry exporters, reducing mean issue diagnosis time by 28% through correlated tracing across underwriting microservices and ingress workloads.

• Orchestrated cross-region disaster recovery using Azure Backup vaults, regional failover policies, and workload replication, maintaining six-hour RTO compliance for critical policy decision engines during simulated failures.

• Integrated Azure Key Vault with managed service identities, rotated certificates automatically using ACME workflows, and enforced Zero Trust policies with gRPC authorization checks and confidential computing constraints.

• Established cloud cost governance using FinOps dashboards, anomaly detection rules, and workload rightsizing on AKS nodes, reducing cluster operational expenses by 17% across production environments. Cloud Engineer, TCS Aug 2021 – Mar 2023 Remote, India

• Architected microservices deployment on AWS EKS for an insurance claims platform, implementing VPC segmentation, mTLS policies, and fine-grained IAM roles to enhance internal access controls.

• Automated provisioning using Terraform and Helm across three staging environments, enabling reusable modules and immutable infrastructure workflows that standardized deployment patterns for multi-cluster operations.

• Implemented real-time monitoring with CloudWatch, Prometheus, and Grafana dashboards, reducing incident troubleshooting time by 32% through proactive alert rules and latency diagnostics.

• Containerized legacy claims processing using Docker and optimized image layers, cutting compute usage by 18% through base image reduction and efficient caching strategies.

• Established disaster recovery runbooks and orchestrated cross-region backups with RDS snapshots and S3 versioning, ensuring four-hour RTO compliance for critical applications.

• Integrated AWS WAF, GuardDuty, and certificate automation into the CI/CD pipeline, enforcing Zero Trust network policies with OPA rules for workload authorization.

• Built FinOps cost visibility reports leveraging CloudWatch, Cost Explorer, and tag automation, identifying unused EBS volumes and rightsizing compute to cut expenses by 21%. Certifications

• AWS Certified Solutions Architect - Associate Jan 2025 Education

Master of Science in Computer and Information Systems, Wilmington University Apr 2023 – Dec 2024 Delaware, USA Bachelor of Technology in Information Technology, Vignan University Jul 2018 – May 2022 Andhra Pradesh, India

Contact this candidate