Afsar Khan

Results-driven DevOps and Platform Engineer with 12+ years of IT infrastructure experience, including 5+ years specializing in cloud-native platforms and Kubernetes at enterprise scale. Proven track record designing and automating scalable infrastructure across AWS and GCP, implementing robust CI/CD pipelines, and leading DevOps transformations. Deep expertise in EKS and GKE cluster lifecycle management, Infrastructure as Code using Terraform and CloudFormation, service mesh with Istio, and platform observability with Prometheus and Grafana.

Associate Consultant - DevOps and Platform Engineering at Tata Consultancy Services (2022-12 – Present)

• Orchestrated and automated GKE cluster provisioning on GCP using StackBuilder, Terraform, and Jenkins pipelines, reducing manual deployment effort and improving infrastructure consistency across environments.
• Designed and implemented highly scalable, upgradeable AWS EKS clusters and surrounding infrastructure using Terraform and CloudFormation, supporting multi-tenant production workloads.
• Administered Kubernetes infrastructure across AWS EKS, GCP GKE, and on-premise environments, ensuring high availability, security, and operational resilience.
• Supported AWS Landing Zone operations by provisioning and onboarding AWS accounts, configuring IAM roles, permissions, policies using Terraform.
• Implemented and managed Istio service mesh for advanced traffic routing, mTLS enforcement, and service observability across distributed microservices architectures.
• Strengthened DevOps security posture by integrating OPA Gatekeeper policy enforcement, Snyk vulnerability scanning, SonarQube SAST, and IAM least-privilege controls into CI/CD pipelines.
• Deployed and operated core AWS services including VPC, EC2, EKS, IAM, Security Groups, CloudWatch, and CloudTrail.
• Automated GCP service account provisioning across multiple projects and environments using Terraform, improving governance, auditability, and consistency.
• Proactively monitored Kubernetes clusters using Prometheus and Grafana, leveraging K9s, Kubernetes Studio, and custom kubectl plugins to significantly speed up root cause analysis and minimize incident resolution time.
• Collaborated with cross-functional teams in Agile environments, participating in sprint planning, backlog refinement, and daily stand-ups. Utilized Jira for issue tracking and sprint management, and Confluence for technical documentation, operational runbooks, and knowledge sharing.
• Provided technical leadership, mentoring and guided junior DevOps engineers through structured knowledge-sharing sessions, increasing team delivery velocity and technical depth.

DevOps Engineer at ILink Infosoft Pvt. Ltd. (2019-09 – 2022-10)

• Deployed and optimized production-grade Kubernetes clusters on bare-metal servers using Rancher RKE v1 on Fedora CoreOS, enabling on-premise cloud-native capabilities.
• Automated Fedora CoreOS node provisioning via PXE boot and Ignition configs, reducing node bootstrap time and ensuring repeatable, secure deployments.
• Deployed highly available stateful workloads including PostgreSQL, MinIO, and Keycloak on Kubernetes using operator patterns and hostPath volumes.
• Implemented Kubernetes audit policies to capture security-critical events and forwarded structured logs to Grafana via Promtail for centralized analysis.
• Deployed and tuned Calico CNI and Istio service mesh; implemented Kubernetes NetworkPolicies and Istio VirtualServices, DestinationRules and Gateways for secure inter-service and external communication.
• Established comprehensive observability stack covering Kubernetes nodes, Linux VMs, and Windows VMs using Prometheus, Grafana, Alertmanager, Node Exporter, and WMI Exporter.
• Managed full lifecycle of Rancher server including installation, upgrades, and downstream cluster provisioning; supported Alpine, CentOS, Fedora, and CoreOS distributions.
• Diagnosed and resolved complex issues in virtual server and Kubernetes environments, reducing mean time to resolution across production incidents.

Senior IT Executive at Bonaz Capital Research Firm (2018-12 – 2019-08)

• Deployed and managed calling server on CentOS, Spark chat server, Zimbra mail server, and internal CRM platform for the organization.
• Maintained network security through wireless configuration hardening and MAC address filtering; oversaw hardware and network asset inventory.
• Mentored colleagues on remote troubleshooting techniques, improving team incident response efficiency.

Global Support Engineer at Matrix Technologies Pvt. Ltd. (2016-10 – 2018-08)

• Managed Samba NFS, Apache web server, and WDS/DHCP on Windows Server 2008; performed daily VMware administration including VM backups, snapshot management, template cloning, and performance reporting.
• Administered Office 365 for email, licensing, and backup across the organization; streamlined cloud data backup using Vaultize, Druva, and OneDrive.
• Managed provisioning of virtual machines and operating systems in alignment with company policy and security standards.

System Analyst at Yash Technologies Pvt. Ltd. (2010-11 – 2014-11)

• Configured Linux environments including RHEL, CentOS, and Ubuntu on VMware Workstation and Microsoft Virtual PC to meet project and team requirements.
• Resolved hardware, software, and licensing issues to maintain operational efficiency and uptime across the organization.
• Provided remote technical support via TeamViewer, VNC, AnyDesk, and Ammyy Admin, ensuring timely resolution of end-user issues.

BCA