Rohith Reddy Veeravelly

Seasoned Senior DevOps and Platform Engineer with over 6 years of progressive, hands-on experience in delivering scalable, secure, and resilient infrastructure across multi-cloud environments (AWS, Azure, GCP). My journey began with a foundation in software engineering, working in fast-paced consultancy environments, and steadily evolved into leadership roles in DevOps, SRE, and Cloud Platform teams in enterprise-scale financial institutions. I bring a unique mix of coding excellence, automation rigor, cloud-native engineering, and systems thinking.

I specialise in architecting infrastructure-as-code using Terraform, Pulumi, and Bicep, implementing GitOps CI/CD workflows with GitHub Actions, GitLab CI, Jenkins, and managing containerized workloads on EKS/AKS with Helm, Istio, and Kubernetes. Skilled at building self-hosted runners, AMI baking, secure secret management with Vault, and deploying full observability stacks using Grafana, Prometheus, Loki, and Azure Monitor. My work spans platform resilience, infrastructure security, performance optimisation, automation at scale, and collaboration across teams.

I have introduced cost control (Infracost, Kubecost), policy enforcement, and robust secret rotation strategies using Vault and Key Vault.

Experience designing and operating Landing Zones, driving hybrid cloud migrations from on-prem environments, and managing site-to-site VPN, Zscaler integration, and network segmentation. I contribute to CAB forums, lead incident post-mortems, write thorough Confluence documentation, and champion agile rituals like backlog grooming, retrospectives, and sprint demos. Trusted by leadership to lead from the front, I've consistently introduced automation-first mindsets, improved team efficiency, and mentored juniors across DevOps and platform functions.

In the 2026 landscape of AI-assisted DevOps and platform reliability, I stay ahead with an awareness of tools like Cilium, Falco, eBPF-based security, AI-led observability, and platform experience tooling like Backstage. While I understand how AI supports automation, I ensure every solution remains human-friendly, auditable, and maintainable. I'm passionate about building internal platforms that engineers love, securing systems without slowing them down, and making infrastructure boring, reliable, and delightful.

Sr DevOps Engineer at Discover Financial services (2023-05 – Present)

• Led the design and automation of AWS Landing Zone to support multi-account governance, VPC peering, SCPs, and security baselines.
• Built reusable Terraform modules for infrastructure provisioning, with with validate, fmt, import, and output patterns tested via pytest-terraform and integrated in GitHub Actions.
• Developed custom AMI bake pipelines using Packer, Jenkins, and GitHub runners, with self-hosted GitHub runners deployed in hardened VNets.
• Delivered secure CI/CD pipelines using GitHub Actions for application and infrastructure deployments across EKS, AKS, and VM targets.
• Enabled GitOps practices using ArgoCD for Kubernetes deployment automation and environment management.
• Created Helm charts to manage Kubernetes workloads including Prometheus, Grafana, and business-critical container apps.
• Configured AWS GuardDuty, Azure Defender for Cloud, Azure Sentinel, and CloudWatch Log Analytics Workspace for cloud-native threat detection and telemetry.
• Automated AMI lifecycle for Windows servers with 90-day refresh and patching pipelines aligned with CAB change management windows.
• Supported on-call SRE operations, ran secure incident response reviews, and drove root-cause documentation in Confluence.
• Built secured secrets workflows using HashiCorp Vault, including dynamic AWS credentials, policy-based access, and audit logging.
• Defined change management processes for standard change (5-day) and emergency changes within CAB forums.
• Enabled cost monitoring using Infracost, integrated with pull requests for real-time infra budgeting.
• Managed VPN gateways, VNet peering, NATs, and hybrid connectivity (on-prem to cloud) using Azure VPN Gateway, AWS Site-to-Site VPN.
• Integrated Backstage to build internal developer portals, improving discovery, onboarding, and pipeline visibility.
• Collaborated across SRE, Platform, Security, and Engineering teams to deploy secure, observable, and cost-efficient environments.

DevOps Engineer at Wipro (2019-12 – 2022-01)

• Spearheaded migration of on-prem workloads to AWS using Terraform, Ansible, and CloudFormation templates.
• Created infrastructure as code workflows that auto-provisioned EC2, VPC, S3, IAM, RDS with DR and multi-AZ replication.
• Deployed and operated Kubernetes (EKS/AKS) clusters with Helm, supporting auto-scaling applications and CI integrations.
• Implemented CloudWatch alarms, log agents, and Grafana dashboards for proactive monitoring and auto remediation.
• Introduced secret rotation practices using Vault with dynamic secrets and Azure Key Vault integration.
• Optimised Jenkins pipelines for Maven and Gradle builds, Docker packaging, and integration with SonarQube and Nexus.
• Enabled developers with ephemeral test environments using Terraform + Ansible + Jenkins combo pipelines.
• Standardised infrastructure builds using GitOps, implemented with GitLab CI/CD and ArgoCD.
• Built custom pre-commit hooks to run terraform fmt, validate, and policy enforcement with Sentinel.
• Supported SIT-to-SIT VPN connections, and scripted Intune-based ZScaler connector deployments.
• Maintained incident/change management workflows using ServiceNow, including secure handoffs and rollback plans.
• Led implementation of multi-cloud deployments using Pulumi for Azure workloads, tightly integrated into sprint cadences.
• Managed code artifacts via JFrog Artifactory, with promotion pipelines from Dev to Staging to Prod.
• Contributed to the rollout of Cloud Native Logging using Fluentd, Elasticsearch, and Grafana Loki.
• Partnered with security to integrate Falco and Sysdig for eBPF-based runtime container protection.

LV3 Software Engineer at Wipro (2017-08 – 2019-12)

• Built Java & Python microservices and automated their deployment to AWS using CloudFormation and shell scripts.
• Developed Lambda-backed APIs and managed API Gateway integration with secure keys and usage plans.
• Containerised backend apps with Docker and deployed on ECS; introduced the team to Docker Compose workflows.
• Wrote first Jenkins pipeline for the team that deployed code changes to QA on push to Bitbucket.
• Integrated SonarQube quality gates and PMD scanning into CI workflows.
• Automated EC2/AMI backups using Boto3 scripts and cron jobs.
• Created bash scripts for testing infrastructure drift and triggering alerts.
• Supported testing automation using Pytest and Postman, enabling faster feedback for REST services.
• Refined build toolchains using Maven and Gradle, including multi-module Java project support.
• Used Git and later helped the team adopt GitLab and merge-request based workflows.
• Deployed simple monitoring stack using Nagios, CloudWatch, and logs parsed via shell.
• Learned about infrastructure as code, first through AWS Console, later scripting into Terraform.
• Became the team's go-to for networking config: route tables, internet gateways, and VPC subnetting.
• Introduced colleagues to wiki documentation using Confluence and supported team onboarding.
• Contributed to incident writeups, postmortems, and retrospectives that became part of team rituals.

Masters in Data Science – Coventry University (2022-01 – 2023-03)

Bachelor's in Electronics & Communications Engineering – Aurora Engineering College (2013-06 – 2017-04)