Hira

Cloud engineer

Feb 2025 - Present • 1 yr 6 mos

Reduced AWS monthly cloud costs by 15-20% by leading a cost-optimization initiative that included right-sizing EC2 instances, cleaning up unused resources, and purchasing Savings Plans, managing a multi-account AWS environment. Strengthened cloud security posture, eliminating 80% of critical/high-severity vulnerabilities and reducing overall security alerts by 70% by remediating findings from AWS Security Hub, enforcing best practices, and deploying tools like the AWS Service Screener and CrowdStrike Falcon KAC across EKS clusters. Architected and managed the core AWS infrastructure (EC2, RDS, EKS, S3, ECR) supporting the bank's digital services, administering MongoDB clusters and ensuring scalability and high availability. Serve as an Internal Cloud Consultant, advising cross-functional teams on infrastructure best practices, security remediation, and migration strategies to accelerate delivery of secure production environments. Implemented proactive observability and cost governance by configuring AWS CloudWatch for operational insights, setting up anomaly detection and custom cost alerting strategies to track spend across the organization.

DevOps Engineer

Jun 2020 - Feb 2025 • 4 yrs 8 mos

Migrated 15-20 critical financial microservices from on-premise legacy infrastructure to Amazon EKS (for lower environments) and VMware Tanzu (for Production), improving scalability and deployment speed across DEV, QA, SIT, PreProd, Production, and DR environments. Standardized and secured Kubernetes deployments by installing and configuring Istio service mesh for mTLS encryption and implementing Eureka service discovery, reducing service downtime and improving resilience. Developed scalable CI/CD pipelines using GitHub Actions and Jenkins across all environments, integrating SonarQube for code quality/security scanning and incorporating rollback strategies to ensure safe deployments for the bank's core applications. Drove infrastructure-as-code adoption by managing all infrastructure provisioning and updates with Terraform and Ansible, supporting patch management across hundreds of machines and reducing manual configuration effort. Enabled GitOps-based continuous deployment using Argo CD and provided real-time cluster visibility via Kubernetes Dashboard, ensuring platform consistency for all onboarded enterprise applications (e.g., notification services, ops apps). Monitored critical production services (e.g., branch banking apps) using IBM Instana, enabling proactive performance tuning and incident management that supported high-availability requirements.