DevOps/platform Engineer
Resume:
Sai Akhilesh Kuntamukkala
DevOps/Site Reliability Engineer
Email: ************@*****.***
Ph: 660-***-****
LinkedIn: https://www.linkedin.com/in/sai-akhilesh-kuntamukkala-2b83172b4 Sr.DevOps/SRE Engineer with 6+ years of experience in Cloud Infrastructure, DevOps, Linux Administration, and Infrastructure Engineering. Experienced in designing, implementing, and supporting AWS, Microsoft Azure, Google Cloud Platform (GCP), and hybrid cloud infrastructure. Strong expertise in Terraform, Infrastructure as Code (IaC), Linux (Ubuntu/RHEL), Windows Server Administration, cloud migration, infrastructure modernization, and enterprise infrastructure operations. Proven experience supporting infrastructure migration projects, developing technical documentation, collaborating with infrastructure architects, and maintaining secure environments aligned with ISO security and compliance standards.
PROFESSIONAL SUMMARY:
Hands-on experience building and supporting AWS, Azure, and GCP environments using Terraform, CloudFormation, and automation to keep infrastructure consistent across environments.
Built and maintained CI/CD pipelines with GitHub Actions, Jenkins, Azure DevOps, GitLab CI/CD, and AWS CodeDeploy, including environment variables, secrets, deployment checks, and rollback support.
Worked extensively with Docker, Kubernetes, EKS, AKS, OpenShift, and Helm to deploy, troubleshoot, and operate containerized applications in production and non-production environments.
Strong AWS experience across EC2, VPC, IAM, S3, RDS, Lambda, API Gateway, WAF, ALB, EBS/EFS, Route 53, CloudWatch, CloudTrail, SNS/SQS, and Secrets Manager.
Supported Linux and Windows infrastructure, with hands-on administration of RHEL/Ubuntu, Nginx, systemd, SELinux, FAPolicy, Active Directory, DNS, DHCP, and PowerShell/shell automation.
Built monitoring and observability solutions using Prometheus, Grafana, CloudWatch, Splunk, Dynatrace, Datadog, Wazuh, and Grafana Alloy; participated in on-call support, RCA, and post-incident fixes.
Integrated security into delivery pipelines using SonarQube, Snyk, Checkmarx, Veracode, CodeQL, and Trivy, and worked with IAM, KMS, Azure AD, MFA, Keycloak, and secrets management.
Supported cloud migration and modernization efforts, including on-premises-to-cloud moves, OpenShift-to- EKS migration, DR/backup planning, and infrastructure cost/right-sizing reviews.
Worked with PostgreSQL, MySQL, MongoDB, Redis, Oracle, Kafka/MSK, and Keycloak as part of application, platform, and data-service integrations.
Experienced in Agile and production operations, including incident, problems, and change management, technical documentation, release coordination, and collaboration with development and security teams. TECHNICAL SKILLS:
Cloud Platforms Microsoft Azure, AWS, GCP Cloud.
AWS Services RDS, EC2, VPC, IAM, CloudFormation, EBS, S3, ELB, Auto Scaling, CloudTrial, SQS, SNS, SWF, Lambda, CloudWatch.
GCP Services GKE, Compute Engine, Cloud Run, Cloud Storage, BigQuery, Cloud SQL, Spanner, VPC, Cloud IAM, Cloud KMS, Cloud Load Balancing, Cloud CDN, Cloud Build, Artifact Registry, Cloud Functions, Pub/Sub, Cloud Armor Azure Services App Services, KeyVault, function app, Blob storage, Azure Active Directory
(Azure AD), Service Bus, Azure Container Registry (ACR) and Azure Kubernetes service (AKS), Azure SQL, Azure Cosmos DB. Version Control Tools GIT, Bitbucket, GitLab, GitHub, SVN CI/CD Jenkins, Azure DevOps, GitLab, Rio
Configuration & Automation Tools Ansible, Terraform, Puppet, Chef, Google Cloud SDK, Fortress Container Platforms Docker, Kubernetes, OpenShift, Helm Charts. Monitoring Tools Nagios, Splunk, Wazuh, Grafana, Datadog, Prometheus, Dynatrace, New Relic.
Page 2 of 5
CERTIFICATIONS:
Certified Azure Associate.
AWS Certified Developer – Associate
EDUCATION:
Masters in IS – Northwest Missouri State University December 2023
Bachelor’s in computer science engineering – JNTUK, India May 2020 PROFESSIONAL EXPERIENCE:
Client - Neubus Inc Oct 2025 – Present
Role - DevOps/ Sys Op Administrator
Responsibilities:
• Architected multiple AWS Lambda functions behind API Gateway and WAF using a modular Terraform structure
(shared function module referenced by a central config file), standardizing how new serverless endpoints were added and cutting onboarding time for new services.
• Built and maintained GitHub Actions CI/CD workflows integrated with AWS CodeDeploy, adding new environments, variables, and secrets for each rollout, enabling consistent, repeatable deployments across sandbox, regression, UAT, and production environments.
• Provisioned core AWS infrastructure (IAM, EC2, VPC, EBS, EFS, Security Groups, Lambda, Textract, CodeDeploy, ALB, Target Groups, Listeners, MongoDB, RDS) using Terraform, standardizing infrastructure builds and making environments auditable and reproducible.
• Launched and configured EC2 instances end-to-end, including user access setup, Nginx symlink-based site management, and custom CSP security headers, hardening the web/application layer against misconfiguration.
• Created and managed Kafka topics and integrated AWS Secrets Manager with MSK clusters, assigning topic- level access per server to secure event-driven data pipelines.
• Supported a multi-tenant frontend architecture by extending Nginx configurations per tenant, enabling new tenant rollouts without duplicating backend infrastructure.
• Maintained integration between a legacy PHP-based core platform and Kafka, managing config-driven environment values to preserve continuity during platform modernization.
• Deployed and supported a production, client-facing platform for a state government agency, managing database- backed environment configurations combined via shell scripts and PM2 process management, including a systemd service so processes restarted automatically on server reboot.
• Configured and supported a tenant-based file processing service across three tenants, managing tenant-specific environment configurations, database connections, Kafka topics, and S3 uploads, reducing configuration drift between environments.
• Hardened newly adopted RHEL 9 servers by enabling FAPolicy and SELinux, and embedded the required application trust steps directly into the deployment workflow to meet added security requirements.
• Automated Keycloak realm provisioning through shell scripts, generating tenant-specific Client IDs/secrets and configuring authorized redirect URLs, reducing manual identity and access setup for new tenants.
• Maintained strict separation between production and sandbox accounts across AWS, Kafka, and Keycloak, and built shared GitHub Actions scripts and a repeatable deploy pipeline with Slack notifications and deployment summaries, standardizing releases across environments. Languages Python, JAVA, Shell scripting.
Artifactory JFrog and Nexus
Web Servers Apache Tomcat, Nginx, IIS, WebSphere, httpd, JBOSS Identity / Messaging Keycloak, Azure AD, IAM, Kafka, keycloak, AWS MSK, SNS. Documentation Confluence, Quip
Operating Systems Microsoft Windows XP/ 2000, Linux, UNIX, RHEL. Tracking Tools Jira, Rally, ServiceNow
Page 3 of 5
• Resolved a recurring CodeDeploy agent activation issue during new server builds and stored all credentials in Keeper, improving deployment reliability and secrets hygiene.
• Evaluated on-premises-to-AWS migration costs using the AWS Pricing Calculator, right-sizing target EC2 instance types and estimating total cost of ownership to support migration planning and budget approval.
• Deployed web applications to on-premises servers using developer-provided Docker Compose files, creating and managing host-level volume mounts to persist and share data across containers during releases.
• Supported Kubernetes-based application deployments across AWS environments, managing deployments, services, namespaces, ConfigMaps, Secrets, health probes, resource limits, and rolling updates for containerized workloads.
• Installed and configured Wazuh agents on servers, registered each host with the Wazuh Manager by updating its IP in the agent configuration, and maintained the Wazuh Manager, Wazuh Indexer, and Wazuh Dashboard stack for centralized security monitoring and threat detection.
• Installed and configured Grafana Alloy on servers to collect custom metrics and logs, connecting it to Grafana dashboards using credentials, enabling flexible, per-host observability on demand. Environment: AWS, Terraform, GIT, GitHub Actions, MongoDB, RDS, Nginx, Kafka, PHP, PM2, systemd, RHEL 9, FAPolicy, SELinux, Keycloak, SonarQube, CursorBugbot, Docker, Docker Compose, Wazuh, Grafana, Grafana Alloy, Jira, Slack, Keeper.
Client- Nelnet June 2023 – Sep 2025
Role – DevOps Engineer
Responsibilities:
• Integrated security best practices into CI/CD pipelines using Jenkins, GitHub Actions, and SonarQube, enforcing static code analysis and reducing critical vulnerabilities by 40%.
• Led the migration of OpenShift workloads to AWS EKS, building scalable, secure container platforms and cutting legacy infra costs by 30%.
• Developed serverless apps with AWS Lambda and Node.js, streamlining event-driven automation for incident remediation and cost-efficient backend tasks.
• Designed multi-AZ high availability architecture with auto-scaling EC2s, RDS, and EKS, improving SLA adherence from 95% to 99.9%.
• Provisioned encrypted S3 buckets, hardened IAM policies, and enforced KMS-based encryption, ensuring HIPAA and SOC2 compliance across cloud deployments.
• Automated deployment of AWS infrastructure spanning 5 accounts, 330+ EC2s, and 7 EKS clusters using modular Terraform, achieving 100% IaC compliance across all environments.
• Implemented observability stack using Prometheus, Grafana, and CloudWatch, creating real-time dashboards and alerts that cut incident response time by 60%.
• Led post-mortem analysis and RCA for P1/P2 incidents, implementing fixes that reduced repeated outages by 70% within 3 months.
• Managed and maintained Azure Virtual Networks (VNETs), subnets, storage accounts, IAM policies, and load balancers.
• Configured and optimized Azure Networking components, including NSGs, VPNs, Private Link, and ExpressRoute.
• Administered and secured Microsoft 365 services, managing Azure AD, Teams, Exchange Online, and SharePoint Online.
• Troubleshot Kubernetes pod failures, service connectivity, container startup issues, resource utilization, and deployment errors, working with Docker, Helm, Linux, networking, and CI/CD pipelines to resolve release issues.
• Developed PowerShell scripts to automate cloud deployments, identity management, and security configurations, reducing manual workload by 40%.
• Assisted in cloud migration projects, ensuring seamless transition of on-prem applications to Azure.
• Configured Azure Firewall, Load Balancers, and Application Gateways for network security and high availability.
• Managed SQL Server, PostgreSQL and Databricks for data transformation and migration projects.
• Managed Azure Active Directory, configuring Conditional Access Policies and Multi-Factor Authentication
(MFA) for enterprise security.
• Deployed and managed Intune policies for endpoint security and device compliance.
• Automated cloud resource provisioning using Terraform and ARM templates, reducing deployment time by 50%.
• Deployed Azure Monitor, Log Analytics, and Application Insights to track performance, logs, and security events.
Page 4 of 5
• Documented SLA, SLI, and SLO for applications and worked on resolving performance issues to meet customer SLAs.
• Provided on-call support, troubleshooting Azure networking, VM performance, and M365 service disruptions.
• Administered Windows Server environments, managing Active Directory, DNS, DHCP, and Group Policies.
• Implemented FedRAMP, HIPAA security baselines for cloud infrastructure, ensuring compliance with FedRAMP Moderate and High impact levels.
• Designed and tested Disaster Recovery (DR) & Business Continuity (BCP) solutions using Azure Site Recovery & AWS Backup.
• Resolved technical support tickets, providing exceptional IT support to end-users and stakeholders. Environment: Kubernetes, Jenkins, AWS, Azure, Azure Repos, Azure DevOps Pipeline, Shell, Python, Docker, Terraform, Ansible, Chef, AKS, OpenShift, Helm, Groovy, SonarQube, My SQL, Postgres, Snowflake, SolarWinds, Prometheus, Grafana, Splunk, Git, Maven, Jira, Dynatrace, ServiceNow, Confluence, Microsoft 365. Client- Darwinbox March 2020– July 2022
Role – SRE/DevOps Engineer
Responsibilities:
• Designed and implemented scalable, secure cloud architecture based on Amazon Web Services (AWS). Leveraged EC2, auto-scaling, and VPC to build secure, highly scalable, and flexible systems handling expected and unexpected load bursts.
• Knowledge of integrating ECS with other AWS services like Elastic Load Balancing (ELB), Auto Scaling, and AWS IAM.
• Wrote 50+ reusable Terraform modules to standardize provisioning of VPCs, EKS clusters, RDS, S3, and Load Balancers, enabling faster infra onboarding for new teams.
• Designed and implemented automated solutions for provisioning, monitoring, and scaling cloud infrastructure using Terraform and Ansible.
• Developed and maintained CI/CD pipelines using Jenkins and GitLab CI/CD to automate deployment of applications and infrastructure changes.
• Implemented and managed Kubernetes clusters for container orchestration, improving application scalability and reliability.
• Implemented and maintained monitoring and alerting systems using Prometheus, Grafana, and ELK stack.
• Implemented automated monitoring and alerting systems using Dynatrace and other APM tools to enhance reliability and reduce manual intervention.
• Managed and optimized database systems, including MySQL, PostgreSQL, and MongoDB, to ensure optimal performance and reliability.
• Managed Kubernetes clusters on Red Hat OpenShift, deploying applications and managing service accounts for enhanced security.
• Conducted incident response and root cause analysis to identify and address issues impacting system reliability.
• Implemented disaster recovery plans and conducted regular drills to ensure business continuity during system failures.
• Worked on managing the private cloud environment using Chef and managed nodes in the Chef server, ensuring proper registration, configuration, and tracking of each server.
• Utilized Dynatrace to analyze application performance metrics, identifying bottlenecks and optimizing resource allocation.
• Utilized Helm to standardize application deployments and manage configuration changes across environments.
• Worked on AWS Cloud Watch, Cloud Formation, Cloud Trail services, and Cloud Front to set up and manage cached content delivery.
• Developed serverless applications using AWS Lambda and integrated them with JavaScript-based frameworks like Node.js.
• Managed server inventory details, database passwords, and SSL certificates and their expiry dates for efficient secrets/password lifecycle tracking.
• Created health rules in AppDynamics to trigger alerts when the application throws errors or does not meet the SLA.
• Documented the SLA, SLI, and SLO of applications and ensured customer SLAs were met by resolving performance issues.
• Configured Splunk for log aggregation, monitoring, and analysis, enabling centralized logging and troubleshooting across distributed systems.
• Created an AWS RDS MySQL DB cluster and connected to it through an Amazon RDS MySQL DB Instance using the Amazon RDS console.
Page 5 of 5
• Implemented and configured Dynatrace for application performance monitoring, providing real-time visibility and enabling proactive issue resolution.
• Conducted system performance audits and security reviews, implementing firewall rules and encryption protocols ensuring compliance with regulatory standards.
• Developed custom dashboards and alerts in Dynatrace to monitor KPIs and ensure SLOs are met. Environment: Kubernetes, Jenkins, AWS, Azure, Azure Repos, Azure DevOps Pipeline, Shell, Python, Docker, Terraform, Ansible, Chef, AKS, OpenShift, Helm, Groovy, SonarQube, My SQL, Postgres, Snowflake, Prometheus, Grafana, Splunk, Git, Maven, Jira, Dynatrace, ServiceNow. Client- Focus Softnet June 2019– February 2020
Role – Linux / Cloud Administrator
Responsibilities:
• Created custom metrics and dashboards in Datadog tailored to specific application and infrastructure requirements, providing actionable insights for performance optimization.
• Created and maintained user accounts in Red Hat Enterprise Linux (RHEL) and other operating systems.
• Administered and maintained Linux servers across AWS, Azure, and GCP environments.
• Developed Cloud Formation templates for manually provisioned AWS infrastructure and migrated to compliance AWS Control Tower.
• Managed Azure Security groups using Azure Portal and PowerShell scripts and attached them to VMs and Subnets.
• Troubleshooting and maintaining of TCP/IP, Apache HTTP/HTTPS, SMTP and DNS applications.
• Migrated different projects from Perforce to SVN.
• Developed tools/scripts to automate integration with other IT tools in support of accurate asset management, cyber reporting capabilities and license management.
• Worked with software developers and QA to seamlessly migrate applications from development to QA and production.
• Provisioned AWS infrastructure services like VPC, EC2, Auto Scaling Groups, ELB, Elastic Search, RDS, Lambda, S3, CloudWatch Event rules, ECS, CloudFront, etc., using Cloud Formation.
• Provided support to customers running RedHat Enterprise Linux on their workstations and simulation servers; hands-on knowledge of Ruby and Python scripting.
• Performed AWS Cloud administration managing SES and SNS services.
• Splunk experience includes installing, setting up, and troubleshooting the software, and monitoring server application logs to detect production issues.
Environment: AWS (EC2, S3, RDS, EBS, and Elastic Load Balancer, Auto scaling groups and optimized volumes), RHEL, Windows, Shell Script, VMware servers, WebSphere, Perforce, Splunk Enterprise Server 5.x, SVN, Windows 2003 server, Kick Start, Solaris.
Contact this candidate