Chirag K S

Results-oriented DevOps Engineer with 5.0 years of experience (including non-IT and IT), of which 3.6 years are dedicated to designing cloud and CI/CD pipelines (Azure DevOps, Jenkins, GitHub Actions). Skilled at creating scalable, secure, and automated solutions that improve delivery speed and reliability. Motivated by continuous learning and a growth mindset, with the ability to contribute effectively to innovative, high-impact teams.

Systems Engineer (DevOps) - Epam Systems - London

(2024-07 - 2025-02)

Leading fintech clearing house, serving Major international exchanges and platforms.

• Engineered and optimised a low-latency, cloud-native CI/CD pipeline for LSEG's customer-facing Node.js financial project using GitHub Actions with a self-hosted agent, cutting build start times from 5 min to 2.5 min to meet real-time market data requirements; migrated the existing Jenkins to GitHub Actions pipeline.
• Integrated rigorous DevSecOps practices across microservices, including code coverage validation, SonarQube quality checks (SAST), Trivy vulnerability scanning, and OWASP (SCA, DAST), while adhering to financial industry regulatory requirements to mitigate security risks for trading platform workloads.
• Containerised applications using Docker with commit-SHA tagging for pushes to enable traceability, along with documentation of technical aspects and deployment guides. AI agents were used to manage the Docker images and containers.
• Deployed customer-facing applications to a multi-environment, high-availability AWS EKS cluster with an HPA, maintaining 99.99% uptime and ensuring uninterrupted access to critical London Stock Exchange Group market data tools.
• Built reusable Terraform modules and managed Terraform Cloud workspaces to automate AWS networking and EKS infrastructure provisioning, establishing a fully auditable configuration and managing the Platform in line with LSEG's financial compliance mandates, with state locking and drift detection using Driftctl cli.

Systems Engineer (DevOps) - Epam Systems

(2025-03 - 2025-07)

Leading Automotive domain; automated web server deployment.

• Created an Ansible playbook with a Control Node: Ubuntu 24.04 LTS and a Managed Node: Amazon Linux. Created both nodes and configured secure SSH authentication between them using Terraform scripts.
• Defined Ansible inventory for remote host management. Developed and executed Ansible playbooks to automate Apache web server installation and configuration.
• Used loops, variables, and error handlers to deploy a custom web page to the target machines.

Systems Engineer (DevOps) - Epam Systems

(2025-01 - 2025-08)

Healthcare project delivering innovative solutions to meet the evolving needs of patients.

• Designed and implemented a secure multi-tier cloud architecture using Azure Pipelines and Azure Active Directory to enforce role-based access control for Novartis' pharmaceutical research applications, ensuring compliance with healthcare data standards.
• Orchestrated and optimised a production Azure Kubernetes Service cluster, configuring multi-Availability Zone (multi-AZ) deployments to achieve 99.9% uptime and enable auto-scaling for variable research workloads.
• Reduced Azure Blob Storage costs by implementing serverless Azure Function triggers to automate lifecycle management of unused research datasets, using Python scripts that delivered measurable reductions in cloud spend.
• Deployed and managed a GitOps continuous delivery framework using Argo CD, installed and configured via Helm charts, to standardise application deployments across non-production and production environments for Novartis' internal research tools.

Consultant - Capgemini Technologies

(2023-02 - 2023-12)

It is a global network of independent advisory and accounting firms, built with Flask and MySQL, designed to handle 100 concurrent users.

• Set up on-premises Kubernetes clusters using Kubeadm and led the migration of workloads to AWS EKS, with NLB integrated with API Gateway, thereby streamlining container orchestration for HLB International's core financial applications.
• Built scalable CI/CD pipelines using Jenkins shared libraries, embedding DevSecOps guardrails, integrating static code analysis (SAST) to identify code issues early in the development lifecycle, OWASP dependency scanning, and automated compliance checks using Checkov, and enabling email notifications via SMTP for CI/CD pipeline build results, with build artefacts stored in the Nexus repo.
• Optimised Docker image size by 40% to accelerate release cycles, enforced RBAC, security best practices, and secrets management in Kubernetes for secure deployments, used MySQL RDS StatefulSet as the database, and provided data plane troubleshooting using the Kubectl AI agent with an OpenAI LLM.
• Developed Python automation scripts to monitor server resource utilisation and automate Jenkins job backups to AWS S3, file cleanups, and removal of stale EBS volumes, with scheduling via EventBridge, thereby eliminating manual effort and reducing the risk of data loss and costs by 70%.
• Created IAM groups, users, and roles with fine-grained permissions; used Gen AI library components to automate tasks, including Bedrock services for managing and cleaning up Docker images.
• Deployed and configured full-stack monitoring with Prometheus as a DaemonSet and Grafana (via Helm) to provide real-time visibility into cluster performance, reducing mean time to resolve (MTTR).
• Implemented Terraform scripts to automate CloudWatch metrics for ASG, ensuring fault-tolerant high availability. Utilised AWS Inspector to scan the repo. Hosted the website on an Nginx server with SSL and implemented automation using an Ansible playbook and modules.

Consultant - Capgemini Technologies

(2022-07 - 2022-12)

It is an IoT-based application for a chocolate-producing plant.

• Maintained version control for source code in Azure Repos, managing feature branches and release workflows to support collaborative development of Mondelez's e-commerce and supply chain management tools, thereby reducing merge conflicts through streamlined branch governance.
• Automated provisioning of Azure cloud infrastructure using Terraform, reducing environment setup time by 40% and eliminating manual configuration errors. Implemented monitoring with Prometheus and Grafana, and configured proactive alerting via Alert Manager with custom alert rules to ensure high availability of business applications, delivered via email; utilised Azure Vault for secrets management.
• Developed end-to-end CI/CD pipelines for Azure Function Apps and AKS-hosted workloads using Azure Pipelines (classic editor and YAML), with Azure SQL, reducing manual deployment steps and improving release consistency across non-production and production environments by 50%. Collected and analysed logs using Loki and Promtail.

Production Supervisor - National Industries

(2020-03 - 2022-03)

Supervised production operations and quality control for drinking water, ensuring compliance with industry standards and supporting business development initiatives.

Internship - Aurigo Software Technologies

(2019-06 - 2020-01)

Conducted manual testing of SaaS software, detected and documented 7-8 bugs; wrote test cases and learned the basics of creating an Azure DevOps pipeline, pushing artefacts to the JFrog repository, and ensuring security.

Bachelor of Engineering (B.E.) - Mechanical Engineering - VTU University (2016)