Er. Ashish Kumar | Lead DevSecOps & Cloud Platform Architect

Core Capabilities

Architectural Mastery & Engineering Focus

Bridging the gap between cutting-edge infrastructure engineering, Zero-Trust compliance, and generative AI execution.

🛡️

Zero-Trust DevSecOps & Shift-Left Security

Embedding comprehensive security gates into automated CI/CD pipelines. Enforcing SAST, DAST, and SCA scanning (Snyk, Trivy, SonarQube, OWASP ZAP), CIS Benchmarks, dynamic secrets injection via HashiCorp Vault, and strict RBAC with NetworkPolicies.

Snyk Trivy HashiCorp Vault SonarQube OWASP ZAP CIS Benchmarks PCI-DSS

⚡

GPU-Accelerated AI/MLOps & LLMOps

Architecting high-throughput GPU Kubernetes clusters using NVIDIA GPU Operator and Multi-Instance GPU (MIG) slicing on A100/H100 hardware. Orchestrating low-latency inference serving with vLLM, Triton, and Ray, backed by secure Milvus/OpenSearch Vector engines.

NVIDIA GPU Operator MIG Slicing vLLM Triton Inference Ray Serve Milvus Enterprise RAG

☁️

Multi-Cloud Platform & GitOps Delivery

Production-grade modular Infrastructure as Code (IaC) across AWS, Azure, and GCP. Establishing continuous deployment using ArgoCD and Helm charts with automated canary rollouts, accompanied by dynamic Karpenter autoscaling to slash cloud computing costs by 35%.

Kubernetes (CKA) AWS EKS GCP GKE Azure AKS Terraform ArgoCD Karpenter

📊

Enterprise Reliability, Linux SRE & Observability

Hardening enterprise Linux fleets (3,000+ nodes) with Ansible AWX, TCP/IP and kernel tuning for packet-loss-free data pipelines. Constructing holistic observability with Prometheus, Grafana, Splunk, and custom AI incident triage bots to slash MTTR by 45%.

Linux Kernel Tuning Ansible AWX Prometheus Grafana Splunk New Relic MTTR Optimization

Career Milestones

Professional Experience

16+ years of engineering leadership, hands-on production troubleshooting, and architecture modernization.

Lead DevSecOps & Cloud Platform Specialist

ProvaanTech Pvt Ltd

May 2024 – Present Remote, Pune

AWS (EKS, EC2, S3, IAM, Lambda), GCP (GKE), Snyk, Trivy, SonarQube, OWASP ZAP, HashiCorp Vault, Kubernetes, Helm, ArgoCD, Terraform, Ansible, Python, NVIDIA GPU Operator, vLLM, Triton, Ray, Milvus, Prometheus, Grafana.

DevSecOps Pipeline & Security Automation: Architected automated DevSecOps pipelines integrating SAST, DAST, and container vulnerability scanning (Snyk, Trivy, SonarQube, OWASP ZAP) into CI/CD workflows, eliminating 40% of pre-production vulnerabilities.
Kubernetes & Cloud Security Hardening: Hardened multi-cloud Kubernetes clusters (AWS EKS & GCP GKE) enforcing CIS Benchmarks, RBAC, NetworkPolicies, and HashiCorp Vault secrets injection for zero-trust microservice communication.
Secure AI/ML & GPU Infrastructure: Engineered secure, GPU-accelerated Kubernetes infrastructure for AI/ML workloads using NVIDIA GPU Operator, Multi-Instance GPU (MIG) slicing on A100/H100, and secured low-latency inference serving with vLLM, Triton, and Ray Serve.
Infrastructure as Code & GitOps Delivery: Automated enterprise cloud provisioning with modular Terraform and established GitOps continuous delivery via ArgoCD and Helm, achieving automated canary rollouts and zero-downtime microservice deployments.
Cloud Cost & Accelerator Optimization: Implemented Karpenter dynamic autoscaling and Spot instance orchestration across general compute and GPU workloads, cutting multi-cloud infrastructure spend by 35%.
Vector DB Security & Enterprise RAG: Deployed and secured distributed Milvus and OpenSearch Vector Engine clusters on Kubernetes with TLS encryption and access control, supporting enterprise Retrieval-Augmented Generation (RAG) pipelines.
AI Observability & Automated Incident Triage: Built Prometheus and Grafana dashboards tracking infrastructure health and GPU telemetry; developed custom Python LLM incident triage bots and Slack integrations, reducing Mean Time to Resolution (MTTR) by 45%.

Production Engineer II (IC Level 3) – Cloud & Security Operations

Yahoo Software India

Apr 2023 – Apr 2024 Remote, Bengaluru

Linux (CentOS/RHEL), AWS, OpenStack Bare-Metal, Kubernetes, Helm, ArgoCD, Screwdriver CI, Ansible AWX, Terraform, Packer, Python, Splunk, Nagios, MySQL, Traffic Server (CDN).

High-Throughput Reliability & Security: Owned L3 production reliability and security operations for distributed data platforms and media services handling multi-million daily requests across hybrid cloud environments (AWS & OpenStack bare-metal).
Automated Security Patching & Fleet Compliance: Engineered Ansible AWX playbooks to automate zero-downtime security patching, vulnerability mitigation, and OS-level hardening across 3,000+ Linux enterprise servers.
Secure CI/CD & GitOps Modernization: Modernized build and release pipelines utilizing Screwdriver CI and ArgoCD on Kubernetes, embedding automated compliance checks and reducing release cycle turnaround by 50%.
HPC & Network Stack Optimization: Performed OS-level kernel tuning, TCP/IP stack optimization, and IPtables security rules, eliminating packet drops for distributed data streaming clusters.
Incident Automation & Telemetry: Developed Python automation scripts integrating Splunk and Nagios with Slack bots for automated health verification and accelerated incident triage during major production alerts.

DevOps & Cloud Infrastructure Lead

Kloud9 Technologies India

Feb 2022 – Oct 2022 Remote, Bengaluru

AWS, Azure, GCP, Linux, Kubernetes (EKS/AKS), Terraform, Packer, Ansible, Helm, Jenkins, GitOps, Python, Bash, New Relic, Splunk, MongoDB, DynamoDB, AWS Lambda, Dynamics 365.

Engineering Leadership & DevSecOps Strategy: Led an 11-member DevOps and SRE team across multi-cloud infrastructure, driving security best practices, architectural reviews, and agile sprint execution.
Multi-Cloud IaC Standardization & Security: Architected reusable, secure Terraform and Packer modules across AWS, GCP, and Azure, accelerating infrastructure provisioning from days to under 30 minutes with built-in least privilege IAM policies.
Serverless Architecture & Data Pipelines: Engineered secure serverless architectures utilizing AWS Lambda, API Gateway, and DynamoDB for enterprise e-commerce platforms (Shopify, Magento) with KMS encryption.
CI/CD Hardening & Observability: Standardized continuous delivery pipelines using Jenkins and GitOps; implemented comprehensive telemetry and distributed tracing with New Relic and Splunk, maintaining 99.95% availability.

Sr. Technical Support Engineer (Kubernetes & Cloud Infra)

YugaByte India

Mar 2021 – Nov 2021 Remote, Bengaluru

YugabyteDB, Linux, AWS, GCP, Azure, Kubernetes, Helm, Terraform, Packer, Ansible, Python, Git, Zendesk, PagerDuty.

Automated secure deployment of distributed YugabyteDB clusters across AWS and GCP using Terraform, Packer, and Ansible with TLS encryption in transit.
Engineered custom Python and Bash diagnostic scripts for automated log parsing, performance profiling, and rapid resolution of mission-critical L3 customer escalations.
Delivered 24/7 global support on high-priority infrastructure escalations, maintaining 99.99% database uptime and adhering to rigorous SLA benchmarks.

Principal Linux Cloud Infrastructure Specialist

Continuum Managed Services

Jul 2020 – Mar 2021 Remote, Pune

Linux (RHEL, CentOS, Ubuntu, Debian), AWS, VMware, OpenStack, Docker, Ansible, Bash, Python, Zabbix, Grafana.

Managed and hardened an extensive multi-tenant Linux server infrastructure (RedHat, CentOS, Ubuntu, Debian) across private and public clouds.
Automated server provisioning, compliance audits, and configuration management using Ansible playbooks, cutting manual administration overhead by 60%.
Containerized legacy applications using Docker; built automated backup and disaster-recovery procedures ensuring zero data loss during failovers.

Lead Linux & Cloud Operations Specialist

Infinite Computer Solutions

Feb 2018 – Jan 2020 Pune

Linux (RHEL/CentOS), AWS, VMware ESXi, Apache, Nginx, MySQL, Bash, Nagios, Cacti.

Maintained high-availability web hosting environments (Apache, Nginx, MySQL) on RHEL and CentOS across AWS and VMware, ensuring 99.9% uptime.
Authored robust Bash automation scripts for server health monitoring, disk cleanup, and log rotation, significantly minimizing production downtime.
Performed regular security vulnerability assessments, patched kernel exploits, and resolved server hardware and hypervisor-level issues.

Senior Cloud Infrastructure Specialist

Reliance Jio Infocomm

Jul 2016 – Jan 2018 Mumbai

Linux, AWS, VMware vSphere, OpenStack, Jenkins, Bamboo, Docker, Bash, Python.

Engineered large-scale Linux and VMware vSphere infrastructure supporting telecom and digital service platforms during nationwide Jio rollout.
Built CI/CD pipelines via Jenkins and Bamboo; executed lift-and-shift migration of enterprise infrastructure from VMware vSphere to AWS EC2 with autoscaling.

Early Career Foundation

Mission-Critical Defense & PCI-DSS Infrastructure

2011 – 2016 Mumbai

ControlCase International

Sr. Executive (Infra & SecOps) – Implemented PCI-DSS directives, SIEM, Nagios, Cisco/Fortinet firewalls; automated vSphere-to-AWS migration with Terraform.

Feb 2014 – Mar 2016

CDAC (former NCST), Mumbai

Project Engineer – Implemented BOSS Linux in mission-critical infra of INDIAN NAVY; deployed network print servers; conducted Linux training for naval officers.

Jul 2011 – Jan 2014

Architecting Secure, Resilient
Cloud Platforms & AI Infra