Jahangeer

Senior Cloud Infrastructure and DevOps Engineer with 4 years of hands-on experience managing multi-account AWS environments, production EKS clusters, Kubernetes workloads, CI/CD, security, observability, governance, and cost optimization. Delivered over ₹2+ crore (~$240K) in annual recurring savings through cloud architecture optimization, workload migrations, and replacement of paid third-party services with self-hosted solutions. Drive security and DevSecOps initiatives spanning SIEM, runtime security monitoring, SBOM/SCA, DAST, network security assessments, security remediation, security awareness, and fintech compliance audits.

Work closely with development teams on day-to-day infrastructure troubleshooting, deployment issues, security findings, and operational improvements. Leverage AI-assisted engineering tools such as Amazon Q Developer and Kiro to accelerate infrastructure troubleshooting, automation, and operational workflows.

Senior Infrastructure Engineer at Rupifi Technology Solutions Private Limited (2024-10 – Present)

• Cloud Infrastructure & Operations: Operate production and non-production AWS infrastructure, including multiple Amazon EKS clusters, Kubernetes workloads, Helm deployments, HPA/Karpenter autoscaling, capacity management, monitoring, troubleshooting, production support, and infrastructure maintenance.
• Developer & Platform Support: Work closely with development teams on day-to-day infrastructure and deployment issues, troubleshooting application failures, Kubernetes workloads, AWS services, CI/CD failures, connectivity issues, and environment-related problems while keeping deployment infrastructure and pipelines up to date.
• Cloud Governance & AWS Security: Drive AWS governance and security posture across multiple accounts under AWS Organizations, IAM reviews, and DNS security controls. Led initiatives to reduce long-lived AWS credential usage by migrating services from AWS access tokens toward IAM role-based access. Implemented stronger TLS configurations by removing outdated TLS protocols and weak cipher suites.
• ETL Platform Modernization: Led the multi-phase migration of the company's CDC/ETL platform from Fivetran Cloud to PeerDB Cloud and ultimately self-hosted PeerDB on EKS, supporting PostgreSQL-to-BigQuery data pipelines while reducing third-party dependency and recurring platform costs.
• Observability & Incident Management: Manage AWS CloudWatch, Prometheus and Grafana monitoring infrastructure, including real-time operational and CI/CD alerting to Slack to improve incident visibility, response, and incident management.
• DAST & Vulnerability Automation: Built centralized DAST and infrastructure security assessment automation using OWASP ZAP, Nuclei, and Nmap, with scheduled scans and automated vulnerability reports archived in S3 for tamper-proof audit evidence.
• SIEM & Threat Monitoring: Deployed and customized Wazuh SIEM with security dashboards and detection use cases covering OWASP-related threats, container escape indicators, and infrastructure events, wired with real-time Slack alerting.
• Audit Leadership & Security Culture: Act as technical SPOC for ISO 27001, CICRA / CISA, VAPT, and fintech security assessments, coordinating technical evidence, responses, remediation activities, and follow-ups with internal teams and external assessors to support successful audit and assessment completion.
• Cloud Cost Optimization: Executed major infrastructure optimization initiatives delivering ₹2+ crore in annual recurring savings, including refactoring legacy workloads from ECS/Elastic Beanstalk to S3 + CloudFront (75% cost reduction for migrated assets).
• DevSecOps Integration: Integrated automated security checks into GitHub/CI/CD workflows using TruffleHog for secret scanning, SonarQube for code quality/security analysis, Syft for SBOM generation, and Grype for vulnerability/SCA scanning.
• Access Hardening & DNS Remediation: Eliminated routine SSH-based administrative access in favor of AWS Systems Manager Session Manager, conducted IAM and SCP reviews, and eliminated dangling DNS records to mitigate domain-takeover risks.
• Infrastructure & Database Maintenance: Coordinate infrastructure maintenance and upgrades across AWS RDS, Kubernetes clusters, and internal platforms, validating changes in lower environments before production rollout and using controlled maintenance windows to minimize application impact.

Infrastructure Engineer at Rupifi Technology Solutions Private Limited (2023-06 – 2024-10)

• CI/CD Automation: Built and managed end-to-end automated deployment pipelines using GitHub, AWS CodePipeline, AWS CodeBuild, ECR, Helm, EKS, S3, and CloudFront, while supporting developers with pipeline failures, build and deployment troubleshooting, and release-related issues.
• Observability & Runtime Security: Implemented Prometheus and Grafana monitoring and alerting for application health and infrastructure visibility.
• Infrastructure Operations: Supported day-to-day AWS and Kubernetes operations, infrastructure maintenance, application deployments, environment troubleshooting, and developer requirements.
• Identity & IT Operations: Managed onboarding, offboarding, and access lifecycle for 300+ employees across 16+ enterprise platforms, including AWS, GitHub, Slack, Google Workspace, Microsoft Workspace, Firebase, Jira, Metabase, and Sentry.

Infrastructure Engineer Intern at Rupifi Technology Solutions Private Limited (2022-12 – 2023-06)

• Supported AWS operations, CI/CD pipeline maintenance, and developer access requests; transitioned to full-time role based on technical execution and ownership.

Master of Computer Applications (MCA) – University of Kashmir - College: IITM