Cloud Native DevOps Engineer with IaC and CI/CD Expertise

DevOps Engineer

SAGAR SASALA

Erie, Pennsylvania Phone: +1-814-***-**** Email: *************@*****.*** LinkedIn: www.linkedin.com/in/sagar-patel-99b6b624a

PROFESSIONAL SUMMARY

Designed and implemented comprehensive cloud infrastructure solutions across AWS, Azure, and GCP, creating scalable and resilient architectures for mission-critical applications while optimizing performance and cost-efficiency.

Developed sophisticated CI/CD pipelines using Jenkins, GitHub Actions, and Azure DevOps, integrating multiple deployment targets and implementing robust security measures to accelerate software delivery cycles.

Orchestrated large-scale Kubernetes deployments on EKS, AKS, and GKE, designing custom operators and implementing advanced networking configurations to ensure high availability and optimal resource utilization.

Implemented comprehensive Infrastructure as Code solutions using Terraform and CloudFormation, managing complex multi-region deployments and incorporating modular design principles to enhance code reusability.

Designed and maintained robust monitoring and alerting systems using Prometheus, Grafana, and ELK Stack, creating custom dashboards and implementing predictive analytics to proactively identify and resolve performance issues.

Architected and implemented security solutions across cloud platforms, including IAM policies, network segmentation, and encryption protocols, while continuously auditing and enhancing measures to maintain compliance with industry standards.

Managed large-scale configuration management systems using Ansible and Puppet, developing reusable roles and modules to standardize server configurations and automate processes across heterogeneous environments.

Optimized cloud costs across AWS, Azure, and GCP by implementing FinOps practices, rightsizing resources, and leveraging spot instances, resulting in significant cost reductions while maintaining performance and reliability standards.

Led the implementation of GitOps workflows using ArgoCD and Flux, enabling automated application deployments and infrastructure updates while maintaining strict version control and enhancing overall practices.

Designed and implemented disaster recovery and business continuity solutions, including multi-region failover mechanisms and data replication strategies, ensuring minimal downtime and data loss in critical scenarios.

Developed custom automation scripts using Python and Bash to streamline repetitive tasks, integrate disparate systems, and enhance overall operational efficiency while maintaining a library of reusable scripts.

Implemented advanced logging solutions using the ELK Stack and Splunk, creating custom log parsers and alert mechanisms to provide real-time visibility into application performance and security events.

Designed and maintained container orchestration strategies using Docker Swarm and Kubernetes, implementing auto-scaling policies and optimizing resource allocation to improve application performance and reduce costs.

Led the adoption of Infrastructure as Code practices across development teams, conducting training sessions and developing comprehensive documentation to ensure consistent implementation throughout the organization.

Implemented secrets management solutions using HashiCorp Vault and Azure Key Vault, integrating with CI/CD pipelines and application runtimes to ensure secure storage and rotation of sensitive credentials.

Designed and implemented hybrid cloud architectures, integrating on-premises infrastructure with public cloud services to create seamless environments that optimize resource utilization and enhance system flexibility.

Developed comprehensive cloud migration strategies, leading large-scale projects to transition legacy applications to cloud-native architectures while minimizing downtime and ensuring data integrity throughout the process.

Implemented advanced networking configurations across cloud platforms, including VPC peering, Transit Gateway, and Software-Defined Networking (SDN) solutions, to ensure secure and efficient communication between distributed components.

Managed GitLab CI/CD pipelines for multiple projects, improving deployment efficiency by 40% and utilizing built-in features to automate code quality checks and security scans.

TECHNICAL SKILLS

Category

Tools & Technologies (Keywords)

Cloud Platforms

AWS (EKS, VPC, RDS, Lambda, SSM, CloudWatch), GCP (GKE, Cloud Functions, Pub/Sub, Stackdriver), Azure (AKS, Azure DevOps, Monitor)

CI/CD & GitOps

Jenkins, GitLab CI/CD, GitHub Actions, Octopus Deploy, ArgoCD, FluxCD, Blue/Green, Canary Deployments

Containerization & Infra

Kubernetes (EKS, GKE, OpenShift), Docker, Helm, Istio, Terraform, CDK, Ansible, Packer, CloudFormation

Observability & Logging

Prometheus, Grafana, Datadog, ELK Stack, Splunk, PagerDuty, CloudWatch, Azure Monitor

Security & Compliance

IAM, Security Hub, GuardDuty, Secrets Manager, HashiCorp Vault, SonarQube, Trivy, HIPAA, SOC 2, ITIL

Scripting & SRE

Python, Bash, Groovy, PowerShell, Go, Git, Bitbucket, GitHub, Jira, ServiceNow

PROFESSIONAL EXPERIENCE

DevOps Engineer

Huntington Bank October 2023 – Current

Responsibilities:

Implemented Azure DevOps and GitHub Actions to create robust CI/CD pipelines for banking applications, reducing deployment time by hours. Utilized Azure DevOps for version control and artifact management, while leveraging GitHub Actions for automated testing and security scans.

Designed and deployed Kubernetes clusters on Azure Kubernetes Service (AKS) to orchestrate containerized banking applications, ensuring high availability and scalability. Implemented auto-scaling and load balancing for optimal resource utilization.

Developed Infrastructure as Code (IaC) using Terraform and Azure Bicep to provision and manage cloud resources, improving consistency and reducing manual errors. Implemented Terraform modules for reusable infrastructure components.

Implemented comprehensive monitoring and logging solutions using ELK Stack (Elasticsearch, Logstash, Kibana) and Azure Monitor, enabling real-time visibility into banking systems. Configured Elasticsearch for log aggregation and Kibana dashboards for visualizing key performance metrics.

Managed secrets and sensitive information using Azure Key Vault and HashiCorp Vault, ensuring secure storage and access control for banking credentials. Integrated Azure Key Vault with applications and implemented rotation policies for HashiCorp Vault secrets.

Automated configuration management using Chef and PowerShell scripts, standardizing server configurations across the banking infrastructure. Developed Chef cookbooks for consistent application deployments and utilized PowerShell for custom automation tasks.

Implemented Azure Functions for serverless event-driven processing of banking transactions, optimizing resource utilization and costs. Integrated Azure Functions with Azure Storage for data persistence and implemented proper error handling and retry mechanisms.

Designed and implemented a microservices architecture using Azure App Gateway and Linkerd service mesh, improving application scalability and resilience. Utilized Azure App Gateway for traffic routing and Linkerd for inter-service communication and observability.

Developed custom Python scripts for automating routine DevOps tasks, including log analysis and performance optimization. Utilized Python libraries for interacting with cloud APIs and implemented error handling and logging for improved reliability.

Implemented GitOps practices using Flux CD for continuous deployment to Kubernetes clusters, ensuring consistency between Git repositories and cluster state. Utilized Flux CD for automated synchronization of Kubernetes manifests and implemented proper access controls.

Optimized resource allocation for banking workloads by leveraging Azure Virtual Machines, resulting in a 25% cost reduction. Utilized Azure Virtual Machines to create scalable and secure environments for handling sensitive financial data processing.

Automated infrastructure provisioning using ARM Templates, reducing deployment time for new banking services by 60%. Leveraged ARM Templates to ensure consistency across development, testing, and production environments for critical banking applications.

Implemented Splunk for advanced log analysis and security monitoring of banking applications. Utilized Splunk's machine learning capabilities to detect anomalies in financial transactions and prevent fraudulent activities.

Deployed Datadog for comprehensive infrastructure and application monitoring in the banking environment. Leveraged Datadog's custom metrics to track key performance indicators specific to banking operations and customer satisfaction.

Configured Azure AD for centralized identity and access management across banking applications and services. Implemented multi-factor authentication using Azure AD to enhance security for both customer-facing and internal banking systems.

Utilized Nexus repository manager to streamline dependency management and artifact storage for banking application development. Implemented Nexus lifecycle policies to ensure the use of secure and up-to-date libraries in critical banking software.

Optimized Apache web servers for high-performance delivery of banking web applications and services. Implemented Apache security modules to protect against common web vulnerabilities and ensure the integrity of online banking platforms.

Integrated pmd static code analysis tool into the development workflow to improve code quality and security of banking applications. Customized pmd rulesets to enforce banking-specific coding standards and best practices across development teams.

Developed and maintained xml configurations for various banking integration services and data exchange protocols. Implemented xml schema validation to ensure data integrity and consistency in financial message processing systems.

Implemented automated build and release pipelines using Azure Pipelines for banking software development lifecycle management. Customized Azure Pipelines workflows to incorporate security scanning

Deployed and managed containerized banking applications using OpenShift platform, improving scalability and resource utilization. Implemented OpenShift security contexts and network policies to ensure isolation and protection of sensitive banking workloads.

Designed and implemented scalable database solutions using Azure SQL Database and Azure Cosmos DB for core banking operations and real-time data processing. Optimized database performance through indexing and query tuning to handle high-volume financial transactions.

Utilized Notion and Swagger for comprehensive documentation of banking systems, processes, and API specifications. Implemented Notion databases to maintain inventories of banking applications and infrastructure components, while using Swagger UI for interactive API exploration.

Environment: Azure Kubernetes Service, AKS, flux cd, Datadog, GitHub Actions, Python, Azure DevOps, Azure AD, Azure Pipelines, Azure Bicep, xml, github, azure secret manager, swagger, azure sql database, openshift, azure app gateway, linkerd, Azure Virtual Machines, Apache, Nexus, Elasticsearch, Kibana, Azure Storage, azure cosmos db, pmd, Logstash, Azure Monitor, CircleCI, PowerShell, HashiCorp Vault, ARM Templates, Azure Functions, Splunk, Terraform, Kubernetes, Chef, Key Vault, KMS, ELK Stack .

Site Reliability Engineer

Cardinal Health June 2022 – July 2023

Responsibilities:

Implemented Kubernetes and GKE for health data processing pipelines, improving system reliability and scalability. Utilized Helm charts for streamlined deployments and Kubernetes custom resource definitions to manage complex health-specific workloads in GKE environments.

Designed and deployed CI/CD pipelines using GitLab CI/CD and CircleCI, automating testing and deployment of health applications. Integrated Terraform for infrastructure-as-code, ensuring consistent and repeatable workflows across multiple environments.

Developed Python scripts for automated health data analysis and reporting, leveraging GCP Cloud Functions for serverless processing. Implemented Python unit testing frameworks to ensure code quality and reliability of Cloud Functions in production.

Configured and managed Prometheus and Grafana for comprehensive monitoring of health infrastructure, creating custom dashboards for real-time visibility. Utilized Prometheus alerting rules to proactively identify and address potential issues in the health data processing pipeline.

Implemented Docker containerization for health application components, ensuring consistency across development and production environments. Optimized Docker image sizes and implemented multi-stage builds to improve deployment efficiency and reduce attack surface.

Utilized GCP Cloud IAM and Cloud Secret Manager to enforce strict access controls and secure sensitive health data. Implemented role-based access control using Cloud IAM and integrated with on-premises identity providers for seamless authentication.

Configured Nginx as a reverse proxy and load balancer for health web applications, optimizing performance and security. Implemented Nginx rate limiting and SSL termination to protect against DDoS attacks and ensure encrypted communication.

Leveraged GCP Cloud Storage for secure, scalable storage of health records and medical imaging data. Implemented lifecycle policies in Cloud Storage to automate data retention and archival processes in compliance with healthcare regulations.

Utilized Bitbucket for version control and code collaboration, implementing branch protection rules and code review processes. Integrated Bitbucket with Jira for streamlined issue tracking and project management in the health IT environment.

Implemented Stackdriver logging and monitoring for comprehensive observability of health applications and infrastructure. Created custom Stackdriver metrics and alerts to track key performance indicators specific to health data processing workloads.

Configured and maintained Puppet manifests to manage server configurations for health data processing systems. Utilized Puppet modules to enforce security policies and ensure compliance with healthcare regulations.

Leveraged GCP Compute Engine to set up high-performance computing environments for genomic sequencing analysis. Implemented Cloud Build triggers to automate the build and deployment process of bioinformatics tools.

Enhanced security posture by integrating GuardDuty for continuous threat detection and monitoring of health information systems. Utilized Cloud Security Scanner to identify vulnerabilities in web applications handling sensitive patient data.

Wrote complex Bash scripts to automate routine maintenance tasks and data backup procedures for electronic health record systems. Created YAML configuration files for defining infrastructure-as-code and application deployment specifications.

Implemented JFrog Artifactory as a central repository for storing and managing medical imaging software packages and dependencies. Utilized Grafana dashboards to visualize and monitor key performance metrics of health data processing pipelines.

Implemented Spinnaker for advanced deployment strategies, including canary releases and blue-green deployments of patient portal applications. Utilized Cloud Deployment Manager templates to provision and manage cloud resources for health data analytics platforms.

Optimized database performance by migrating legacy systems to Cloud SQL instances, improving query response times for electronic health records. Implemented BigTable for storing and analyzing large-scale genomic data sets.

Designed and implemented a service mesh architecture to improve observability and traffic management between microservices in a distributed health monitoring system. Integrated Slack notifications for real-time alerts on critical system events and patient data breaches.

Created comprehensive documentation using Markdown for onboarding new team members and maintaining knowledge bases for health IT systems. Implemented MS Teams channels for effective collaboration and communication among distributed healthcare development teams.

Developed RESTful APIs following Open API specifications for integrating various health information systems and medical devices. Utilized Spinnaker for orchestrating complex deployment pipelines of healthcare analytics applications

Implemented Checkmarx scans as part of the CI/CD pipeline to ensure code security and compliance with healthcare industry standards. Utilized Cloud Build workflows to optimize build times and improve efficiency of continuous integration processes for medical imaging software.

Environment: spinnaker, GuardDuty, GKE, Bash, Kubernetes, open api, cloud sql, grafana, Stackdriver, Docker, CircleCI, cloud iam, GitLab CI/CD, Helm, Nginx, GCP Compute Engine, cloud secret manager, Terraform, Cloud Functions, Puppet, jfrog artifactory, Cloud Security Scanner, YAML, Cloud Build, Prometheus, Cloud Storage, bigtable, service mesh, Python, Cloud Deployment Manager .

EDUCATION

Anderson University, Anderson, Sc

Master of Science in Cybersecurity Management (Graduated: May 2025)

Osmania University, Telangana, Hyderabad

Bachelor’s in computer science (Completed: June 2022)

Contact this candidate