Gaurav Magha

DevOps / DevSecOps engineer with 7 years of experience running production infrastructure on AWS and Kubernetes (EKS and on-premises) in a regulated fintech environment. Own the Kafka and Debezium CDC platform end to end, and run vulnerability management, CI/CD security gates, observability and infrastructure as code across staging and production. Regular contributor to PCI DSS, VAPT and client security audits, with a focus on repeatable infrastructure, practical security controls and measurable reliability.

DevOps Engineer II (DevSecOps) at Credgenics (2023-04 – Present)

• Own production and non-production Kafka across AWS MSK and self-managed clusters (including a 3-broker, 3-ZooKeeper, 2-Kafka-Connect setup), covering upgrades, access control, alerting and incident response.
• Implemented role-based access control and audit logging for Kafka through Kafka UI, with role-aligned permissions.
• Resolved critical Kafka and CDC incidents, including an on-premises KRaft quorum failure caused by disk exhaustion and Debezium PostgreSQL replication failures on partitioned tables.
• Led the Apache Airflow upgrade from 2.4 to 2.10 across EKS and on-premises Kubernetes, with staging on Airflow 3; fixed executor deprecations, scheduler OOMs and task-slot leaks.
• Moved Airflow deployments from manual Helm execution to Jenkins pipelines for repeatable releases.
• Built Terraform provisioning and Ansible configuration for staging and production, with reviewed plans, drift checks, idempotent runs and documented rebuild validation.
• Upgraded production EKS clusters with hardened configurations, enforcing Pod Security Standards and NetworkPolicies; maintain etcd backup procedures for on-premises control planes.
• Run vulnerability management for Critical and High findings from discovery to verified closure, validating every fix with follow-up scans across staging and production.
• Remediated critical CVEs on EC2 hosts (Jenkins, web and SFTP/payment servers), AWS Inspector findings in ECR images using Trivy, an MLflow path-traversal CVE and a Redis cluster TLS misconfiguration.
• Built shift-left security into Jenkins CI/CD: SAST, SonarQube, DAST with OWASP ZAP, plus dependency, secret, IaC and container image scanning, with policy gates that block agreed high-risk findings.
• Configured AWS WAF rules and GuardDuty threat detection; maintain the Wazuh and CloudTrail security alerting pipeline.
• Core contributor to PCI DSS, VAPT and partner financial-institution security audits.
• Drove the migration from ELK to Coralogix after proof-of-concept evaluations of SigNoz and CubeAPM; rolled out OpenTelemetry collectors on Kubernetes.
• Standardized structured logging for 5 priority services (timestamp, service, environment, severity, correlation ID, trace ID), with redaction, access control and retention defined per data class.
• Tuned OpenTelemetry collector pipelines (queue/retry, memory limits, metric cardinality, histogram buckets), removing unbounded labels to reduce ingestion volume and dropped telemetry.
• Built dashboards and actionable alerts for Kafka broker/ISR health, consumer lag, Kafka Connect task failures, Debezium lag, Kubernetes restarts and Airflow scheduler health, each with an owner and runbook.
• Led twice-monthly production releases with integrated security checks; built multi-region CI/CD and multi-stage Docker builds that reduced build time and image size.
• Reduced cloud spend by removing idle EC2/EBS, stale snapshots and ECR storage, scheduling non-production environments and tuning log ingestion, with savings tracked from billing data.
• Automated employee access provisioning and deprovisioning with Python; automated recurring operations with Bash and Groovy.

DevOps Engineer I at Credgenics (2021-04 – 2023-04)

• Deployed and operated Kubernetes workloads on Amazon EKS and resolved cluster-level issues across environments.
• Built and maintained CI/CD pipelines using Jenkins, GitLab CI/CD and GitHub Actions; configured Devtron as an additional delivery platform.
• Led bi-weekly production releases across teams with zero-downtime deployments and post-release issue resolution.
• Managed the ELK Stack in staging and production, with dashboards and alerts for faster incident response.
• Designed infrastructure-wide monitoring and alerting for proactive detection of service issues.
• Core security team member for internal and external VAPTs, PCI DSS and partner audits; tracked remediation to keep infrastructure audit-ready.
• Strengthened infrastructure security through patch management and system access controls.

DevOps Engineer at Northcorp Software Pvt. Ltd. (2019-05 – 2020-11)

• Designed end-to-end Jenkins CI/CD pipelines for application build and delivery.
• Provisioned and administered Linux servers on AWS EC2, with CloudWatch alarms and email notifications for key instance metrics.
• Wrote Python automation to manage GitLab repositories and consolidate AWS Savings Plans recommendations from multiple accounts into a single report.

B.Tech – Delhi Technological University (DTU), Delhi (2012 – 2016)