Director of DevSecOps & Platform Engineering

SUMIT KUMAR SINHA

Rockville, MD, USA 650-***-**** ************@*****.*** linkedin.com/in/sumitprosoft

DIRECTOR / SR. DIRECTOR / VP — DEVSECOPS SRE PLATFORM ENGINEERING MULTI-CLOUD

AWS • Azure • GCP • OCI • Kubernetes • CI/CD Automation • Observability • Cloud Security • FinOps

EXECUTIVE SUMMARY

Results-driven technology leader with 20+ years of experience in engineering, DevSecOps, SRE, cloud infrastructure, and enterprise modernization. Proven track record delivering multi-cloud platforms, building and leading high-performing teams, and implementing secure CI/CD, Kubernetes, and observability ecosystems to improve reliability, accelerate delivery, and reduce operational cost. Owns cloud infrastructure strategy, governance, and optimization for large-scale enterprise systems, including $500K/month cloud budgets and 40+ application platforms. Deep expertise in cloud security and compliance (SOC2, NIST, FedRAMP, HIPAA), cloud governance, and scalable platform engineering for mission-critical healthcare and federal workloads.

CORE LEADERSHIP STRENGTHS

DevSecOps & SRE Strategy and Operating Model

Platform Engineering Cloud-Native Transformation

Executive Stakeholder Leadership Program Governance

Multi-Cloud Architecture (AWS, Azure, GCP, OCI)

Cloud Security (Zero Trust, CSPM/CNAPP, IAM, WAF, GuardDuty, Inspector)

FinOps & Cloud Cost Optimization ($6M/year spend ownership)

Reliability Engineering (SLO/SLI, Incident Management, MTTR / uptime improvement)

Talent Development Hiring Mentorship Team Scaling (15 engineers)

Understanding of AI / Gen AI concepts, latest offerings by leading hyperscalars and usage in solutioning

Strong knowledge of enterprise architecture principles

TECHNICAL EXPERTISE

Cloud: AWS, Azure, GCP, OCI Kubernetes: EKS, AKS, OKE, Helm, Docker CI/CD: Jenkins, CloudBees, Azure DevOps, Harness, ArgoCD, Git/Bitbucket, JFrog Security: Lacework, Burp Suite, SonarQube, Checkmarx, Orca Security, IAM, WAF, Security Hub IaC/Automation: Terraform, Python, Bash, Linux Observability: New Relic, Prometheus, Grafana, Loki, Fluentd, ELK, Thanos, Opsgenie, Alertmanager, Istio Data Platforms: Kafka, MongoDB Atlas, Redis, OpenSearch, Elastic Cloud

PROFESSIONAL EXPERIENCE

HHS Technology Group (HTG) — Director, DevSecOps & SRE

Oct 2022 – Present Clients: WY, SD, IA, FL Health & Human Services

Scope: Lead DevSecOps, SRE, Infrastructure, and Platform Engineering for multi-cloud and multi-region modernization programs supporting state healthcare systems.

Lead a 15-member DevSecOps & SRE organization, providing strategy, technical direction, and execution for infrastructure and platform engineering across multiple client programs.

Own hosting and platform operations for a $500K/month cloud budget, establishing cost governance and optimization strategies that delivered ~40% savings while improving scalability and reliability.

Delivered an enterprise DevSecOps CI/CD platform (Kubernetes-based) supporting 40+ applications, enabling secure and automated pipelines using Jenkins/CloudBees, SonarQube, JFrog, Bitbucket/Git/Azure Repos, ArgoCD, and Azure DevOps.

Designed and implemented an end-to-end observability and APM platform integrating New Relic, Prometheus, Grafana, Loki, Fluentd, ELK, Thanos, Alertmanager, Opsgenie, and Istio—improving operational visibility and incident response.

Improved platform reliability by 16% through SRE practices including proactive monitoring, alerting, standardization, platform optimization, and resilience planning.

Led cloud security strategy leveraging IAM, Config, WAF, GuardDuty, Inspector, Security Hub, Audit Manager, Lacework, and Burp Suite, ensuring alignment with SOC2/FedRAMP/NIST compliance requirements.

Standardized infrastructure provisioning and deployments using Terraform(IaC), enabling repeatable infrastructure builds and accelerating environment creation across regions.

Partnered with senior executives and cross-functional teams to drive modernization decisions, platform roadmaps, and continuous improvement across delivery pipelines.

ColorTokens, Inc. — Sr. Manager DevSecOps, SRE & Multi-Cloud Practice Lead Architect

Jul 2021 – Aug 2022

Led infrastructure modernization initiatives supporting global expansion across US, UK, Europe, India, and Middle East.

Deployed Zero Trust SaaS products (XShield & XProtect) in US Air Force Azure environments, enabling secure hybrid and federal-grade deployments.

Designed and automated multi-cloud environments (AWS, Azure, OCI) using Terraform(IaC); deployed workloads across Kubernetes platforms (EKS, AKS, OKE).

Implemented CI/CD pipelines with Jenkins + Harness and delivered observability platforms using Prometheus & Grafana, improving reliability and release speed.

Turning Point Global Solutions — Sr. DevOps Engineer / Configuration Manager

Aug 2012 – Jul 2021

Designed and provisioned AWS and OCI infrastructure supporting mission-critical Medicaid modernization programs.

Developed automation improving deployment speed and reliability across CI/CD workflows and containerized platforms.

Implemented change control and configuration management processes to reduce errors, downtime, and release risk.

Installed Splunk Enterprise using CloudFormation templates and configured forwarders across AWS for centralized log management.

Supported Jenkins build/release operations and ensured audit-ready release pipeline compliance.

Tech Mahindra (Satyam Computer Services Ltd.) — Senior Software Engineer

May 2006 – Aug 2012

Clients: Apple, Google, AT&T, Merck/BioReliance, McGraw Hill

EDUCATION

MBA — Johns Hopkins Carey Business School, Baltimore, Maryland, USA

B.S. in Computer Science & Engineering — Visvesvaraya Technological University (VTU), India (2002)

CERTIFICATIONS

AWS Solutions Architect – Professional

Certified Kubernetes Administrator (CKA)

Certified NoSQL MarkLogic Database Admin

Sun Certified Programmer for the Java Platform (SCJP)

Sun Certified Web Component Developer for the Java platform (SCWCD)

LEADERSHIP & BUSINESS IMPACT

Cloud Operating Model • FinOps & Budget Governance • Vendor Management • Risk & Compliance • Technical Roadmaps • Program Governance • Disaster Recovery / BCP • Executive Stakeholder Alignment

Contact this candidate