Debashish Behera

Architected a zero-trust AKS environment with Managed VNet isolation, Private Endpoints, NAT Gateways, and Azure Key Vault integration via Secrets Store CSI Driver — automating secure secret injection into pods while preventing data exfiltration across all microservice workloads. Implemented passwordless GitHub Actions deployments via OIDC federation with Azure Entra ID; configured App Registration federated credentials with repo/branch-scoped subject claims, provisioned User-Assigned Managed Identities with scoped Contributor roles, and resolved AADSTS700213 assertion failures — eliminating all long-lived credentials across deployment pipelines. Engineered cross-architecture Docker builds on amd64 GitHub Actions runners targeting ARM64 AKS user node pools using Docker Buildx and QEMU — leveraging QEMU's binary translation layer to emulate ARM64 instruction sets on x86 hardware; isolated CPU-bound Node.js compilation to the native amd64 host via $BUILDPLATFORM stage pinning to bypass QEMU emulation overhead and prevent illegal instruction faults, while confining QEMU emulation strictly to the lightweight final nginx runtime stage — produ

Devops Engineer - SumatoIQ Technologies

(2026-02)

• Architected a zero-trust AKS environment with Managed VNet isolation, Private Endpoints, NAT Gateways, and Azure Key Vault integration via Secrets Store CSI Driver — automating secure secret injection into pods while preventing data exfiltration across all microservice workloads.
• Implemented passwordless GitHub Actions deployments via OIDC federation with Azure Entra ID; configured App Registration federated credentials with repo/branch-scoped subject claims, provisioned User-Assigned Managed Identities with scoped Contributor roles, and resolved AADSTS700213 assertion failures — eliminating all long-lived credentials across deployment pipelines.
• Engineered cross-architecture Docker builds on amd64 GitHub Actions runners targeting ARM64 AKS user node pools using Docker Buildx and QEMU — leveraging QEMU's binary translation layer to emulate ARM64 instruction sets on x86 hardware; isolated CPU-bound Node.js compilation to the native amd64 host via $BUILDPLATFORM stage pinning to bypass QEMU emulation overhead and prevent illegal instruction faults, while confining QEMU emulation strictly to the lightweight final nginx runtime stage — produ
• Deployed Azure Front Door (Standard) as a global reverse proxy with automated SSL, HTTP-to-HTTPS redirection, and path-based nginx ingress rewrite rules for multi-service API routing; implemented Argo Rollouts canary delivery with weighted traffic splitting and automated analysis templates to enforce zero-downtime production safety gates.

Data Science Intern - ByteIQ Analytics

(2025-01 - 2025-07)

• Developed a secure AWS data environment with a private RDS (Postgres) instance accessed via EC2 SSH tunnel; built a data processing pipeline incorporating fuzzy matching, vector encodings, semantic search, and cosine/euclidean similarity scoring to link and cluster unmatched entries.
• Engineered a cross-database Python pipeline to fetch, transform, and synchronize data across systems using conditional inserts and rule-based updates; integrated S3 data ingestion via Boto3.

Bachelor of Technology - Electrical Engineering - National Institute of Technology, Rourkela (2021 - 2025) Odisha, India