Built optimized multi-branch Jenkins pipelines with Maven, SonarQube, Nexus, and Docker scans, deploying via ArgoCD.

Led AWS cost optimization across Ohio & N. Virginia regions, cutting yearly spend from $370K to $180K.

Investigated a Vault alert triggered by list-secrets API calls from pods; enforced least-privilege IRSA mappings and rotated all secrets.

Implemented centralized policy enforcement with Open Policy Agent (OPA) and Kyverno in Kubernetes clusters.

Integrated application and Kubernetes logs into ELK; resolved Kafka consumer lag and tuned Postgres writes.

Automated Terraform + Ansible workflows for zero-downtime EKS deployments.

Designed Prometheus/Grafana dashboards with alerting rules on pod latency, Kafka lag, and Redis CPU usage.

Implemented KEDA-based autoscaling tied to RabbitMQ queue depth for async workloads.

Designed and deployed ArgoCD GitOps workflow for production microservices.

Mitigated Vault secrets exposure risk by implementing automated secrets rotation and fine-grained RBAC.

Integrated DevSecOps practices including static code analysis, container scanning, and secret scanning in pipelines.

Conducted disaster recovery drills simulating regional AWS failures.

Resolved SSH instability for 30+ users by tuning sshd config and system limits.

Diagnosed and mitigated a 504 error surge in VoIP services on EKS.

Led a Kubernetes war room resolving CoreDNS failures.

Automated SSL certificate expiry checks via Python.

Applied Splunk SEDCMD transformations on Universal Forwarder to redact PII from logs.

Resolved Istio x509 handshake failures post-upgrade.

Orchestrated emergency CVE patch rollout on prod VMs via Ansible dynamic inventory.

Built Ansible playbooks for golden image patching and middleware deployments.

Implemented Splunk alerts for 5xx errors and integrated with Slack.

Enhanced RBAC policies on Kubernetes by mapping LDAP groups to service accounts.

Optimized Docker image builds by applying multi-stage builds and BuildKit caching.

Automated TLS certificate rotation with Ansible and OpenSSL.

Resolved Redis session key explosion due to UUID-based IDs in multi-regional clusters.

Implemented chaos simulation drills to test cluster resilience.