Senior Multi-Cloud Kubernetes SRE Engineer

AYAZ ALI KHAN

+1-585-***-**** **************@*****.*** linkedin.com/in/aiyaz-khan-00423423a

PROFESSIONAL SUMMARY

●Senior Cloud SRE with over 10 years automating AWS infrastructure, container platforms, and enterprise Linux systems.

●Provisioned and administered multi cloud infrastructure environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

●Built and managed production Kubernetes clusters across Amazon EKS, Azure AKS, Google GKE, and Red Hat OpenShift using Docker, Helm charts, and Istio service mesh.

●Automated end to end cloud provisioning and system configurations using Terraform, Terraform Enterprise, Ansible playbooks, and ARM templates.

●Built automated continuous integration and GitOps delivery pipelines using ArgoCD, GitHub Actions, GitLab CI, Azure DevOps, and Jenkins.

●Implemented full stack observability, logging, and SLI/SLO tracking using Prometheus, Grafana, Datadog, OpenTelemetry, Splunk, and ELK Stack.

●Developed operational automation tools, infrastructure validations, and custom scripts using Python, Go, Bash, PowerShell, Terratest, and PyTest.

●Configured hybrid cloud networking, secure transit architectures, Azure ExpressRoute, VPC/VNet peering, and IAM/RBAC access controls.

●Deployed and scaled high performance compute environments utilizing NVIDIA GPU node pools, Triton Inference Server, and Karpenter autoscaling.

●Maintained enterprise operating systems (RHEL, CentOS, Ubuntu, Windows Server), executing kernel tuning, vulnerability patching, and production incident postmortems.

TECHNICAL SKILLS

Cloud Platforms & Infrastructure: AWS (ECS, Fargate, Lambda, API Gateway, S3, IAM, VPC, Route 53, SQS, MSK, EFS, DynamoDB, Aurora PostgreSQL), Microsoft Azure, Google Cloud Platform (GCP)

Infrastructure as Code: AWS CDK (TypeScript), AWS CloudFormation, Terraform, Ansible

Observability & Telemetry: AWS CloudWatch (Metrics V2, Logs Insights, Contributor Insights, Composite Alarms, Application Signals), AWS Distro for OpenTelemetry (ADOT), OpenTelemetry SDK (Java, Python, Node.js), AWS X-Ray, Datadog, Splunk, Dynatrace, Prometheus, Grafana

Resilience & Chaos Engineering: AWS Fault Injection Service (FIS), AWS Resilience Hub, Failure Mode and Effects Analysis (FMEA), Multi-Region DR (Active-Active, Active-Passive, Warm Standby, Pilot Light), Aurora Global Database Failover

Containers & Orchestration: Amazon ECS, AWS Fargate, Docker, Kubernetes, Helm

Operating Systems & Virtualization: RHEL, CentOS, Ubuntu, Linux Systems, Windows Server, VMware ESXi

Scripting & Programming: Python (Boto3), TypeScript, Bash, Go, Shell Scripting, SQL

CI/CD & Collaboration: GitHub Actions, GitLab CI/CD, Jenkins, Jira, Confluence, Git

WORK EXPERIENCE

Applied Materials Santa Clara, CA

Sr Cloud Engineer/SRE

Jan 2025 – Present

●Maintained enterprise Amazon ECS and AWS Fargate container platforms, achieving 99.95% uptime across multi-region production environments.

●Automated multi cloud Azure and GCP resource provisioning using modular Terraform Enterprise templates integrated with policy as code guardrails.

●Implemented declarative ArgoCD GitOps pipelines to synchronize Helm charts and Kubernetes manifests across staging and production clusters.

●Configured Istio service mesh mTLS, traffic splitting, and ingress gateways across hybrid Azure ExpressRoute and interconnect networks.

●Integrated OpenTelemetry SDKs into microservices, streaming distributed traces and system performance metrics directly to Datadog.

●Defined Prometheus SLI and SLO alerting rules with Grafana dashboards to monitor latency, error rates, and cluster saturation.

●Configured Karpenter and native cluster autoscalers to dynamically provision node groups during heavy computational workload spikes.

●Developed custom Go based Kubernetes controllers to automate health checks and node draining during routine OS upgrade cycles.

●Automated infrastructure validation tests using Terratest and Python scripts embedded into GitHub Actions pull request validation workflows.

●Upgraded RHEL and CoreOS node images across clusters using automated rolling updates to eliminate application service interruptions.

●Executed Chaos Mesh fault-injection experiments to validate Kubernetes pod failure, service recovery, and failover mechanisms.

●Provisioned specialized GPU node pools on AKS to host high performance model inference APIs with Triton server endpoints.

●Troubleshot inter pod networking bottlenecks and CoreDNS latency issues across large AKS clusters running high concurrency microservices.

●Implemented Azure RBAC, Kubernetes ServiceAccounts, and GCP IAM policies to enforce least privilege access across cloud platforms.

●Configured Azure ExpressRoute circuits, virtual network peerings, and private DNS zones to secure internal cross cloud communication.

●Built automated Python and Bash maintenance scripts to remediate memory pressure alerts and recycle degraded Kubernetes daemonsets.

●Migrated on premises batch computation workloads to containerized Azure Kubernetes services using customized Docker base runtime images.

●Optimized Kubernetes pod resource requests and limits across production namespaces, reducing cluster compute overhead and memory thrashing.

●Validated Helm chart parameter schemas and Kubernetes security policies in GitHub Actions CI pipelines before release rollouts.

●Documented operational runbooks, disaster recovery steps, and blameless incident postmortems in Confluence for on call rotation support.

Adobe Chicago, IL

Cloud DevOps Engineer

Oct 2023 – Jan 2025

●Administered enterprise Amazon ECS and AWS Fargate container clusters hosting microservices across multi-account AWS environments with 99.9% availability.

●Developed reusable Terraform modules to automate standardized AWS VPCs, subnets, Transit Gateways, and IAM roles across enterprise application teams.

●Built centralized GitLab CI/CD pipelines and Jenkins shared libraries, reducing developer deployment cycle times by 40% across staging environments.

●Deployed containerized microservices onto AWS EKS using Helm charts, configuring horizontal pod autoscaling based on custom traffic metrics.

●Configured AWS Route 53 DNS routing policies, private hosted zones, and Transit Gateway attachments for secure multi VPC cross account communication.

●Integrated SonarQube static code analysis gates into GitLab pipelines, enforcing code quality and vulnerability scanning before production merges.

●Automated routine AWS AMI cleanup and snapshot lifecycle policies using custom Python Boto3 scripts scheduled via serverless events.

●Built Grafana dashboards and CloudWatch alarms to track microservice request latency, node CPU utilization, and container memory thresholds.

●Configured Fluent Bit log forwarders on EKS worker nodes to aggregate application and cluster logs directly into Splunk.

●Migrated on premises VMware virtual machines to AWS EC2 Nitro instances, minimizing production cutover downtime and network disruption.

●Maintained Ansible playbooks to standardize RHEL and Ubuntu base configurations, user permissions, and security hardening benchmarks across environments.

●Deployed Milvus vector databases on EKS clusters to support semantic search indexing and low latency internal retrieval augmented generation workloads.

●Implemented automated pipeline tests using shUnit2 and PyTest to validate infrastructure deployment parameters before executing production Terraform applies.

●Troubleshot and resolved AWS EKS node group capacity exhaustion, optimizing container resource reservations and pod disruption budgets.

●Configured AWS IAM roles for service accounts, restricting pod level cloud resource access and enforcing the principle of least privilege.

●Patched RHEL and Ubuntu EC2 instances systematically using AWS Systems Manager, ensuring compliance with enterprise monthly security patch baselines.

Humana Louisville, KY

Cloud Automation Engineer

May 2022 – Sep 2023

●Built automated AWS serverless environments using AWS CDK with TypeScript to provision Lambda functions and API Gateway endpoints.

●Developed modular Azure Resource Manager templates to provision standardized VNets, subnets, Network Security Groups, and storage accounts reliably.

●Built multi stage Azure DevOps YAML release pipelines for automated build, testing, and deployment of containerized Azure App Services.

●Automated Windows Server and RHEL baseline configuration management using Ansible playbooks, standardizing OS hardening across enterprise virtual machines.

●Configured Azure ExpressRoute circuits and hub spoke virtual network peering to maintain low latency connectivity between on premises data centers and Azure.

●Migrated on premises relational SQL Server databases to cloud hosted Snowflake data warehouses, executing automated schema transformations and data validations.

●Deployed event driven Azure Functions in Python to automate log parsing, backup validation, and incident notifications across cloud environments.

●Implemented automated data masking scripts in Azure Data Factory pipelines to sanitize sensitive protected health information before staging processing.

●Configured Azure Monitor alerts and Log Analytics workspaces to detect infrastructure anomalies and track virtual machine performance metrics.

●Automated end to end infrastructure smoke testing using PowerShell and Python scripts integrated into post deployment Azure DevOps release stages.

●Integrated Azure Key Vault with Azure DevOps pipelines to manage application secrets, certificates, and API tokens securely without hardcoding.

●Maintained custom Docker base images in Azure Container Registry, ensuring vulnerability free deployment images for application development teams.

●Patched enterprise Windows Server and RHEL virtual machines through automated Azure Update Management schedules, maintaining strict HIPAA compliance.

●Troubleshot hybrid network connectivity issues, broken pipeline tasks, and storage permission errors across production healthcare cloud applications.

●Documented disaster recovery runbooks, SOC2/HIPAA audit evidence, and standard infrastructure change procedures within JIRA and internal knowledge bases.

Memorial Sloan Kettering Cancer Center New York, NY

DevOps Engineer

Mar 2021 – Apr 2022

●Deployed AWS infrastructure using AWS CDK with TypeScript to support serverless clinical research applications and data processing pipelines.

●Automated server provisioning and system configurations across CentOS and Ubuntu compute nodes using modular Chef cookbooks and Puppet manifests.

●Configured distributed Jenkins master worker architectures on AWS EC2 instances, automating multi branch builds for Java Maven and Python microservices.

●Deployed containerized analytical microservices onto Red Hat OpenShift clusters, configuring persistent storage volumes for high volume research datasets.

●Migrated on premises clinical workloads to AWS VPC infrastructure, configuring secure subnets, security groups, and route tables for network isolation.

●Implemented centralized Elasticsearch, Logstash, and Kibana logging pipelines to aggregate container logs and debug clinical application transaction errors.

●Monitored distributed compute nodes and memory utilization using Datadog agents and Nagios alerts, ensuring uninterrupted genomic sequence processing.

●Developed custom Python and Bash automation scripts to schedule batch genomic processing jobs and manage AWS S3 dataset archival.

●Executed automated load and stress testing using Apache JMeter to identify microservice performance bottlenecks under heavy clinical request spikes.

●Configured high throughput batch compute pools to orchestrate machine learning data processing for unstructured clinical notes and biomedical text.

●Hardened CentOS and Ubuntu operating systems against security vulnerabilities, implementing automated patch cycles across hybrid virtual and bare metal environments.

Saint Paul University

Systems Engineer

Sep 2019 – Feb 2021

●Maintained enterprise hybrid infrastructure across VMware ESXi hosts, Linux servers, and AWS cloud environments with high system stability.

●Configured and provisioned virtual machines across VMware ESXi clusters, optimizing CPU and memory resource allocations for production workloads.

●Automated user access management and security group policies across Active Directory domains using custom PowerShell administration scripts.

●Migrated legacy file shares and enterprise databases to high-availability SAN storage arrays with zero data loss.

●Deployed enterprise software updates and operating system patches across Windows and Linux servers using SCCM and Red Hat Satellite.

●Configured Jenkins build jobs to automate routine software builds and internal web application staging deployments.

●Implemented SolarWinds monitoring and Syslog forwarding rules to track server health, interface status, and network outages.

●Configured network VLANs, subnet routing, and firewall port rules to isolate secure corporate systems from guest and public network traffic.

●Built dedicated Linux high-performance computing environments to support large-scale analytical datasets and complex data modeling workflows.

●Documented disaster recovery procedures, network Visio topologies, and ITIL asset management records for infrastructure compliance audits.

Capgemini Chicago, IL

Linux System Administrator

Mar 2016 – Aug 2019

●Administered enterprise Linux servers running RHEL and CentOS across physical bare-metal hardware and VMware virtual machines.

●Automated bare metal operating system installations using PXE boot and Red Hat Kickstart configuration profiles across distributed data centers.

●Configured and tuned Apache HTTP and Apache Tomcat application servers hosting multi tier enterprise web platforms with high concurrency.

●Managed enterprise NFS mounts, Samba file shares, and local IPTables firewall rules to ensure secure internal network communication.

●Developed Bash and Perl automation scripts to execute system health checks, log rotation, and scheduled database backups.

●Monitored server health, disk utilization, and CPU bottlenecks using Nagios Core and System Activity Report utilities.

●Patched RHEL kernels and resolved memory leaks, socket exhaustion, and filesystem errors across client hosting environments.

●Maintained Subversion repositories and executed scheduled production software deployments aligned with ITIL change management procedures in ServiceNow.

EDUCATION

Osmania University

Bachelors in Computer Science 2015

Contact this candidate