Dhruv Bagora

DevSecOps Solutioning Engineer with 1+ year of experience designing and delivering enterprise-grade infrastructure solutions across multi-cloud environments (AWS, GCP, E2E Networks) in a fintech environment. Expertise in Kubernetes cluster operations, GitOps with ArgoCD, middleware upgrades, CIS benchmark hardening, and building custom Helm charts and automation tooling from scratch.

Red Hat Certified System

Administrator (RHCSA) with hands-on experience in security hardening, WAF rule management, CI/CD pipelines, and L1 monitoring automation using Python. Proven ability to design zero-downtime migration and upgrade strategies and architect scalable, secure solutions at the intersection of DevOps and Security.

DevSecOps Solutioning Engineer at Dronapay (2025-04 – Present)

Fintech environment

• Designed and delivered end-to-end technical and architectural DevSecOps solutions across multiple enterprise fintech clients, operating across a multi-cloud setup spanning AWS, GCP, and E2E Networks.
• Led complex middleware upgrades on Kubernetes across critical open-source components including Apache Kafka, Redis, Trino, kube-Prometheus-stack, Apache Spark, JupyterHub, and MLflow with zero service disruption.
• Architected and developed Trino Scale Webhook from scratch — a Python/Bash-based Kubernetes webhook application deployed via a custom Helm chart that dynamically updates Trino query concurrency and resource group limits in the database in response to HPA scaling events triggered by Alertmanager.
• Executed zero-downtime GKE node pool upgrades ensuring full application availability throughout the transition across client environments.
• Designed and deployed CibSeven (Camunda successor) on Kubernetes by authoring custom Helm charts and a custom Docker image, replacing end-of-life Camunda for workflow orchestration needs.
• Migrated all Helm charts to an OCI-compliant AWS ECR private registry to support air-gapped, internet-restricted environments; re-integrated charts with ArgoCD enabling zero-downtime redeployment across all applications.
• Created custom Helm charts for Kafka 4.0.0 cluster deployment from scratch due to absence of available open-source charts for the version.
• Led VACA system hardening activities — coordinated CIS Benchmark-based vulnerability scanning, triaged findings, implemented OS and application-level remediations, and compiled evidence packages for vendor sign-off.
• Implemented and tuned AWS WAF rules across web application environments to protect against OWASP Top 10 threats and DDoS attack vectors.
• Developed Python-based L1 monitoring automation that analyses component logs, detects errors and warnings, dispatches alert emails to registered recipients, and auto-creates GitLab tickets assigned to L2 engineers — significantly reducing manual monitoring overhead.
• Managed GitOps workflows using ArgoCD, maintained multi-environment Helm releases, and improved deployment pipelines across dev, MSIT, and production clusters.

DevOps Intern at GKM IT (2024-07 – 2025-01)

• Gained practical exposure to DevOps principles, infrastructure management, disaster recovery strategies, and CI/CD pipeline workflows on live client projects.
• Configured and managed AWS WAF rules for a client to mitigate DDoS attacks and enforce IP-based access control policies.
• Worked on serverless application deployments and acquired hands-on experience with cloud infrastructure management, Linux networking, and automation.

Bachelor of Technology in Computer Science – Techno India NJR Institute of Technology (2025)