GAURAV Kumar

– Implementing DevOps methodologies from scratch within cloud solutions, driving efficiency and collaboration throughout the development lifecycle. – Designed and implemented a GitLab CI/CD pipeline to deploy a GraphQL application on an Amazon EKS cluster. – Designed and implemented a GitLab CI/CD pipeline for automated streamlining the development workflow for React and React Native applications. – Designed and implemented a GitLab CI/CD pipeline with environmental job branch protection for secure and efficient deployments, minimizing human error. – Implemented a GitLab branching strategy to ensure smooth deployments, minimize merge conflicts, and improve code maintainability. – Integrated GitLab CI/CD pipeline with [SonarQube/Nexus OR AWS EKS cluster] for automated code quality analysis, artifact management, and/or deployments to containerized environments. – Automated application image builds using Kaniko in GitLab CI/CD, ensuring efficient deployments with version control and Nexus repository management. – Implemented automated vulnerability scanning of Docker images within the GitLab CI/CD pipeline. – Automated JUnit tests within the GitLab CI/CD pipeline, ensuring high code coverage and quality. – Hands-on IAM users roles and policy to access different resources. – Streamlined user onboarding by deploying and configuring AWS Workspaces infrastructure using terraform Infrastructure as Code. – Established a scalable and secure Amazon EKS cluster using Terraform, enabling efficient containerized application deployments. – Defined and enforced user access controls with role-based permissions and policies, ensuring secure access to AWS resources based on the principle of least privilege. – Deployed and maintained a SonarQube server for automated SAST (Static Application Security Testing) analysis, improving application security posture. – Handling operator-based Nexus lifecycle management on Kubernetes/OpenShift, including deployment, scaling, patching, and upgrade activities. – Creating and managing proxy, hosted, and group repositories for multiple artifact types (Maven, npm, Docker, Helm, etc.) as per project needs. – Configuring user roles, permissions, and LDAP/AD integration to ensure secure, role-based access control. – Supporting CI/CD pipeline integration (GitLab CI/CD) with Nexus for artifact storage and retrieval. – Implementing backup and restore strategies to ensure business continuity and disaster recovery. – Managing security scans and compliance by integrating with Sonatype Nexus IQ. – Enabling artifact promotion workflows (Dev → Test → PreProd → Prod) with versioning and governance policies. – Handling operator-based GitLab lifecycle management on OpenShift, including deployment, patching, scaling, and upgrades using Helm and Operators. – Managing GitLab backup and restore using S3 storage integrations (e.g., AWS S3) to ensure data safety. – Automating branching strategies, approvals, and compliance rules for development teams. – As a DevOps Engineer, I work on IBM CP4I, managing the end-to-end lifecycle of its capabilities on OpenShift, ensuring high availability, secure configurations, and automation of deployments as per business requirements. – API Connect (APIC): – Managing APIC lifecycle and upgrades. – Configuring and administering Catalogs, Products, APIs, and Gateways with environment-specific policies. – Automating API deployment pipelines using GitLab CI/CD and Helm for consistent delivery across environments. – Handling backup, restore, and disaster recovery of API artifacts and configurations. – App Connect Enterprise (ACE): – Deploying and managing integration flows across environments. – Handling lifecycle management, version upgrades, and secured configuration of ACE servers. – Automating BAR file deployments with GitLab CI/CD and Helm charts. – Platform UI: – Administering CP4I's Platform Navigator for centralized management. – Configuring role-based access control (RBAC) and integrations with Keycloak for authentication. – Monitoring health and status of all CP4I capabilities. – IBM Common Services: – Managing logging, monitoring, and metering services across CP4I. – Ensuring seamless upgrades and integrations with OpenShift Operators. – Configuring identity and access management aligned with enterprise policies. – Keycloak (Identity Management): – Administering identity and access management for CP4I components. – Setting up Single Sign-On (SSO) and role-based access for DevOps teams. – Integrating Keycloak with corporate LDAP/AD for centralized user management. – Managing secure and scalable messaging (IBM MQ & ES) and event-driven integrations (Kafka) with automated provisioning, deployments, and scaling using GitLab and Helm. – Managing and upgrading PKI certificates across all DevOps tools and IBM CP4I capabilities to ensure secure communication and compliance.

– Implementing DevOps methodologies from scratch within cloud solutions, driving efficiency and collaboration throughout the development lifecycle. – Implementing application on the AWS managed accounts and implementing changes to the infrastructure. – Implemented Different monitoring tools for application logging. – Works with team in phase planning and estimation for project during various release. – Researched, designed and deployed next generation of architectures, workflows and standards to integrate with key product features across organization. – Participated in meetings, code reviews, demos, design sessions and project retrospectives. – Utilized CI/CD tools to deploy Terraform code for provisioning and managing cloud infrastructure on multiple account. – Integrated Checkov, a static code analysis tool for Terraform, into the CI/CD pipeline to scan and validate the security and compliance of the infrastructure code. – Deployed Terraform code to automate the installation and configuration of AWS Inspector and AWS Trusted Advisor for enhancing the security and compliance of AWS infrastructure. – Deployed Terraform code to automate the creation and renewal of ACM private certificates for securing the communication between AWS services and clients. – Deploying Container based Apps using ECS fargate with help of terraform module. – Configuring VPC with Private and Public Subnets. – Have experience working with different Storage providers like S3, Fsx Volume and EBS volumes. – Hands-on CloudWatch, CloudTrail for monitoring and logging. – Have experience on AWS ECR registry for lambda function docker image. – Deploying Application Load balancer to distribute load to multiple target groups and path based or host based routing using terraform automation tool. – Hands-on IAM users roles and policy to access different resources. – Provision AWS app-config json configuration for different application using terraform module. – Deploy AWS secret manager and secret version using terraform module also enable kms encryption and set life cycle policy. – Provision AWS step function, glue jobs, dockerize lambda function using terraform module. – Provision event bridge rule for triggering the task using terraform module. – Provision AWS sagemaker notebook instances using terraform module. – Deployed AWS EKS two node cluster using launch template with Terraform code. – Deploy AWS S3 DataSync operation with different AWS account using terraform module. – Deployed Terraform code for AWS Config service to monitor and record resource configurations, and track compliance with organizational policies. – Crating following AWS mechanism for data transfer to multiple account using terraform code by executing ECS fargate container. – SFTP Pull mechanism. – S3 Pull mechanism. – S3 replication mechanism. – S3 datasync mechanism – SFTP push mechanism. – Configured cross-resource IAM permissions to enable secure access to AWS resources across multiple accounts. – Configuring Amazon FSx volumes and implementing FSx to S3 User File Sync for seamless data transfer and synchronization on AWS. – Amazon Redshift clusters using Terraform, optimizing cluster configurations, and ensuring secure data management in AWS environments. – Configuring AWS SSM patch manager to patching and scan window application instances as per governance. – Experience includes version control, continuous integration, and deployment strategies to enhance project agility and quality. – Proficient in creating robust build and release pipelines, enabling efficient code integration, testing, and deployment.

– Provided technical guidance and mentorship to junior developers. – Developed deployment strategies for cloud-based applications using Kubernetes and Docker containers. – Implemented DevOps best practices including Infrastructure as Code and Configuration Management. – Collaborated with development teams to ensure successful deployments of applications in production environment. – Managed source control repositories such as Git and Bitbucket for versioning codebase changes. – Setup Jira and confluence Agile methodology tool. – Deployed and supported infrastructure automation and configuration management tools. – Integrated systems with third-party applications to enable visualization, integration or analytics by end users. – Creating Architecture Blueprint for OCP 4.8 Cluster. – Setup Kubernetes 3 node cluster for Dev environment. – NFS storage setup on VM for Kubernetes PV and PVC claim. – Jenkins master-slave deployment on Kubernetes cluster. – SonarQube static code analysis deployment on Kubernetes cluster. – Setup Nexus artifactory on Kubernetes cluster to push artifacts. – Implement Vulnerability Static Analysis with Anchore on build docker image. – Implement branching strategy for Dev SIT and prod environment.

– Responsible for Deployment of java/angular Microservices on OpenShift and Kubernetes platform. – Implement CI/CD pipeline on Gitlab. – Implement CAST scan, Checkmarx SAST scan under DevSecOPS methodologies for identifying, tracking, and repairing technical and logical flaws in the source code, such as security vulnerabilities and compliance issues. Implemented SSM run command for performing the monthly patching on Linux servers. – Implemented custom Cloud Watch Alarms using awslogs agent on Linux servers. – Creating IAM policies and KMS policies for user permissions. – Responsible for creating the ECS cluster and creating the task definitions based on the files shared. – Build docker image for applications hosted on openshift platform and manage on Gitlab registry. – Create and manage backup of our application docker images on jfrog artifactory. – Responsible for Software application deployment via terraform on infra and PAAS environment. – Designed, implemented, and maintained cloud-based solutions based on customer requirements. – Provided technical guidance and support to customers in the adoption of cloud solutions. – Provided technical consulting services related to the implementation of hybrid or multi-cloud architectures.

– Performed cost analysis on existing infrastructure and identified opportunities for improvement using cloud services. – Designed, implemented, and maintained cloud-based solutions based on customer requirements. – Developed automation scripts to simplify complex processes within the cloud environment. – Conducted training sessions for customers on how to use various features of their chosen cloud platform. – Analyzed customer's current IT landscape and provided recommendations for migrating workloads into the cloud. – Evaluated existing architecture designs and proposed improvements that would maximize efficiency of operations within a given budget constraint. – Collaborated with internal teams to develop strategies for deploying applications into public or private clouds. – Identified areas where additional cost savings could be achieved through optimization efforts within an existing cloud deployment. – Automation setup for daily tasks like (DB/Instance/Logs/Config-Files) backup. – Developed automation processes for deploying and managing applications on cloud-based platforms. – Collaborated with development teams to ensure efficient deployment of applications across environments. – Automated build and deployment process using Shell Scripting. – Managed Ansible Playbooks with Ansible modules, implemented CD automation using Ansible, managing existing servers and automation of build/configuration of new servers.

– Managed physical and cloud infrastructure running Red hat/CentOS on AWS cloud. – Responsible for installation and configuration of Operating System such as Unix, Linux. – Involved in development of AWS POC that includes creating VPC, IAM users, EC2 instances, EBS, S3, ELB resources. – Managing server and database operations and Daily O&M Activities. – Regular Health Check to ensure healthy operating states of the nodes. – Setting Up new Virtual Private Cloud (VPC) and managing Networking between VPCs as VPC Peering. – Implementing New tools and technologies based on the requirement.

– Delivered technical support to clients by offering solutions based on specific problems and concerns. – Collaborated with internal teams to resolve customer issues and support customer service goals. – Assisted in development and implementation of quality assurance initiatives. – Managed systems configuration with automated tools. – Performed troubleshooting and resolution for company-wide technical issues. – Administered on-site support and application engineering for custom products with unique interfaces. – Updated and maintained knowledge base information for documentation and future reference. – Developed and implemented application support processes to ensure high availability of critical applications. – Monitored system performance, identified bottlenecks, and implemented solutions to improve performance. – Performed regular maintenance tasks such as patching, security updates, log reviews, backups. – Developed scripts to automate various system administration tasks. – Migrated existing applications from legacy platforms onto modern Linux distributions. – Researched new technologies in order to stay current with industry trends. – Ensured high availability of critical services through automated failover techniques. – Communicated with clients to understand system requirements. – Provided technical guidance for system development and troubleshooting. – Solving issues using ITIL process and preparing RCA for all the critical incidents.

– Troubleshooting of daily issues that are raised in ATM Machine both hardware and software related issue. – DFS Tool rising ticket & solving problem. – Handling escalation for long pending calls. – Ensuring the number pad functions smoothly and buttons punch in right digits with a single press. – Maintaining display board to ensure it presents information in clear and bold letters. – Examining automatic printer and making sure it delivers a transaction receipt promptly on receiving the instructions. – Fixing up the toner and inkjet within the printer installed inside the ATM machine.