Suma Garapati

DevOps Engineer with 8+ years of experience building, automating, and securing cloud infrastructure, including 6+ years supporting enterprise workloads at EY on Microsoft Azure. Strong in Infrastructure as Code (Bicep, Terraform), CI/CD with GitHub Actions, GitLab, and Azure DevOps, Kubernetes, private networking, identity and access management, and PowerShell and Ansible automation. Experienced in deploying Azure OpenAI and Azure AI Foundry environments and managing model deployments.

Microsoft Certified

DevOps Engineer Expert (AZ-400) and Azure Administrator (AZ-104), with additional experience in AWS and Linux.

DevOps Engineer at Ernst & Young (EY) (2020-06 – Present)

• Provision and manage Azure infrastructure as code using Bicep (primary) and Terraform, delivering repeatable, version-controlled deployments across DEV, QA, and PROD, including migration of on-premises applications to Azure.
• Build and maintain YAML CI/CD pipelines with GitHub Actions and GitLab CI/CD to deploy to Azure, and took part in moving deployments from Azure DevOps to GitHub Actions.
• Deploy Azure OpenAI and Azure AI Foundry environments through GitHub Actions, provisioning models such as GPT-5 and GPT-4.5 and adjusting token capacity and limits to meet each application's requirements.
• Deploy and monitor 20+ front-end and back-end applications on Azure Web Apps and Azure containers using YAML pipelines, publishing build artifacts to JFrog Artifactory and releasing from there to the target environment.
• Deploy and manage workloads on Azure Kubernetes Service (AKS), writing YAML manifests for Deployments, ConfigMaps, Secrets, and namespace management across multiple environments.
• Troubleshoot Kubernetes cluster and pod-level issues, analyzing logs and resource metrics to identify and resolve root causes.
• Build and maintain Grafana dashboards to visualize AKS cluster health, node metrics, and application metrics for real-time visibility.
• Configure Prometheus alerting rules and thresholds to proactively detect infrastructure and application issues before they impact production.
• Use Loki for centralized log aggregation and review across Kubernetes workloads, streamlining troubleshooting and root cause analysis.
• Use Ansible Tower to automate infrastructure deployment, DNS configuration, and SSL certificate rollout, replacing repetitive manual work.
• Strengthen application security by moving Key Vault, Storage Accounts, and Azure SQL onto private endpoints and secure subnets, keeping resource-to-resource traffic off the public internet.
• Design and maintain Azure networking, including VNets, subnets, NSG rules, and BGP routing for ExpressRoute connectivity between on-premises data centers and Azure.
• Enforce least-privilege access with Azure RBAC, Entra ID groups, and permissions, controlling which team members can view or modify resources based on their roles.
• Configure Entra ID app registrations end to end, including redirect URIs, API permissions, and group-based access, and manage DNS, custom domains, and SSL/TLS certificates for Web Apps, renewing them ahead of expiry to prevent outages.
• Centralize logs in Log Analytics Workspace and use Web App logs, Azure Monitor, Service Health, and Network Watcher to verify application health, diagnose incidents, and reduce service degradation.
• Replace manual portal changes with PowerShell and YAML automation for Web App settings, environment variables, patching, imaging, and backups of Azure SQL, App Services, Key Vault, and Storage.
• Build and maintain disaster recovery pipelines in Azure to automate failover and recovery, reducing manual steps and recovery time during outages.
• Provide bi-weekly on-call support for production issues, updates, and patching.

DevOps Engineer at DevFacto Technologies (2019-06 – 2020-05)

• Built AWS infrastructure (VPC, EC2, S3, IAM, EBS, Lambda, RDS, Auto Scaling) with CloudFormation and Terraform.
• Created and optimized Jenkins CI/CD pipelines and led infrastructure automation using Jenkins, Chef, and Terraform; migrated applications to AWS.
• Managed microservices with Docker, Kubernetes, and OpenShift, including deployment, monitoring, and maintenance of the OpenShift Container Platform.
• Deployed and managed workloads on Amazon EKS, including Deployments, namespace management, and troubleshooting of cluster and pod issues.
• Monitored EKS cluster and application health using Prometheus, tracking key infrastructure and performance metrics.
• Used Ansible and Ansible Tower for configuration management and stored infrastructure and application dependencies in version control.
• Defined AWS Security Groups to control inbound and outbound traffic to EC2 instances.
• Administered Git repositories and access controls, onboarded teams to GitHub, Jenkins, and Ansible, and provided Level 3 support for Jira and Bitbucket.

DevOps Engineer at ValueLabs Pvt. Ltd (2016-06 – 2017-08)

• Installed, configured, and maintained Linux servers (RHEL, CentOS, Debian, SUSE) across multiple data centers, using Kickstart for automated builds.
• Migrated physical servers to AWS and managed scalable infrastructure with Puppet for configuration management.
• Automated Java application deployments and server configuration with Puppet modules and Python scripts.
• Set up Nagios monitoring, LDAP authentication, PostgreSQL servers, and VMware environments; supported Agile delivery with Git, Jenkins, and Jira.

Master's in Quality Systems Engineering – Concordia University (2017-09 – 2019-05)

Bachelor's in Information Technology – JNTUK (2012-09 – 2016-05)