Aakash Sheoran

Architected a fully private, production-grade AKS platform from scratch (private control/data plane, dedicated VNet, Azure AD/RBAC) using managed identity and workload identity federation across 2 dedicated Kubernetes ServiceAccounts, eliminating stored credentials for 100% of Azure service authentication.

Designed

Istio-based service mesh ingress with Gateway/VirtualService routing and a private Application Gateway entry point, backing 2 Kubernetes Deployments and Services (FastAPI + Next.js)—enabling zero-downtime, path-based traffic routing at scale.

Secured

Azure SQL, Key Vault, and Azure AI Foundry behind private endpoints with public access disabled; applied RBAC across 3+ Azure services, migrated 7+ credentials into Key Vault, and resolved 3 critical pre-production issues—integrating Azure AI Foundry (GPT-4o) and Azure AI Search into a zero-hardcoded-secret architecture.

Associate Software Engineer at HestaBit Technologies (2026-03 – Present)

• Architected a fully private, production-grade AKS platform from scratch (private control/data plane, dedicated VNet, Azure AD/RBAC) using managed identity and workload identity federation across 2 dedicated Kubernetes ServiceAccounts, eliminating stored credentials for 100% of Azure service authentication.
• Designed Istio-based service mesh ingress with Gateway/VirtualService routing and a private Application Gateway entry point, backing 2 Kubernetes Deployments and Services (FastAPI + Next.js)—enabling zero-downtime, path-based traffic routing at scale.
• Secured Azure SQL, Key Vault, and Azure AI Foundry behind private endpoints with public access disabled; applied RBAC across 3+ Azure services, migrated 7+ credentials into Key Vault, and resolved 3 critical pre-production issues—integrating Azure AI Foundry (GPT-4o) and Azure AI Search into a zero-hardcoded-secret architecture.
• Containerized 14+ web applications across client and internal projects using multi-stage Docker builds, cutting image sizes up to 60%; architected Docker Compose setups with hot-reload volumes, reducing local environment setup time by 90%.
• Orchestrated Jenkins CI/CD pipelines with BitBucket webhook integration for zero-downtime staging releases; configured Nginx and Apache2 reverse proxies with SSL termination across 14+ client and internal projects.
• Administered MySQL, PostgreSQL, and MongoDB instances, enforcing role-based access controls across diverse project environments.

Trainee Software Engineer at HestaBit Technologies (2025-11 – 2026-02)

• Engineered multi-agent AI workflows utilizing AutoGen with a 5+ agent architecture (Planner–Worker(s)–Critic–Optimizer–Summarizer), integrating tool-calling agents and task orchestration pipelines to automate complex reasoning processes.
• Implemented robust RAG pipelines using FAISS-based vector retrieval, semantic search, dynamic document chunking, and context-aware prompting, enhancing enterprise knowledge extraction accuracy.
• Designed scalable Node.js REST APIs employing a layered design (Controller – Service – Repository), instituting centralized error handling and structured Winston logging to optimize system reliability.

B.Tech in Computer Science Engineering – Bennett University (2022 – 2026)

Class 12 – Sainik School Kunjpura (2018 – 2021)