Puneet Rekhi

Infrastructure and DevOps Engineer with 5+ years of experience building secure, scalable, and resilient AWS and Kubernetes platforms across automotive and BFSI domains. At Thoughtworks, I support reliability and platform engineering for 30+ microservices on AWS EKS, leading GitOps-based CI/CD modernization, Karpenter adoption, disaster recovery initiatives, and DevSecOps practices as Security Champion across 5 engineering teams. Delivered ₹15–20 lakh in annual infrastructure savings, 40% faster deployments, and a 35% improvement in Mean Time to Detect.

AWS DevOps Engineer Professional certified.

Infrastructure Engineer at Thoughtworks (2024-06 – Present)

Client: Mercedes-Benz, Domain: Automotive

• Architected and automated AWS infrastructure using Terraform and Helm across 3 environments (dev, staging, prod) for 30+ microservices, enabling consistent, secure, and scalable multi-environment deployments with IaC best practices.
• Migrated 40+ CI/CD pipelines from GoCD to GitHub Actions, applying GitOps-based workflow principles with OIDC-based authentication and parallelised jobs, increasing deployment speed by 40% and reducing build failures by 25% over 3 months.
• Replaced Cluster Autoscaler with Karpenter, achieving 30% better node utilization and reducing EC2 spend by 25%.
• Led end-to-end migration of 30+ microservices to a new VPC and EKS cluster over 3 months, integrating Transit Gateways, shared endpoints, and network policies to optimize inter-project connectivity and save an estimated ₹15–20 lakh annually.
• Built 10+ Datadog dashboards and 20+ alert rules for EKS workloads covering pod health, resource saturation, and error rates, reducing Mean Time to Detect (MTTD) by 35% and reducing alert fatigue by 30%.
• Appointed Security Champion for the Mercedes-Benz account; led DevSecOps initiatives across 5 engineering teams, conducting regular security reviews, remediating 12+ vulnerabilities, auditing IAM permissions, and implementing least-privilege controls across 22 roles to close SOC2 compliance gaps.
• Strategised and implemented a Backup and Disaster Recovery (DR) framework for 3 RDS databases and 15 critical S3 buckets using AWS Backup, S3 Object Lock (Compliance mode), versioning, and IntelligentTiering; established less than 8 hours of RPO/RTO target, verified through 3 successful DR tests, and reduced long-term storage costs by 22% through automated lifecycle policies and intelligent tiering.
• Introduced and used AWS Trusted Advisor across the account to surface actionable security, cost, performance, and fault tolerance recommendations; decommissioned 18–20 underutilized EC2 instances, rightsized 15 instances, resolved 2 IAM key rotation warnings, fixed 4 critical security configuration gaps, and yielded $15,000–$20,000 in monthly cost optimizations ($180,000–$240,000 annually).
• Conducted an IAM access audit across the account; identified 7 overprivileged roles used in CI/CD workflows and automation scripts; created 15 scoped least-privilege roles, remapped 22 roles representing ~40% of the account's IAM footprint, and closed 2+ SOC 2 compliance gaps while reducing the attack surface.
• Driving weekly knowledge-sharing sessions on DevOps and cloud infrastructure topics over 3 months with 10-15 attendees per session, improving developer self-sufficiency and facilitating adoption of DevOps patterns and cloud-native practices across the account.
• Partnered with Mercedes-Benz CloudOps teams to maintain SLA/OLA compliance, resolving 5+ production incidents with <2 hour average MTTR and ensuring 99% service availability across all cloud deployments.

System Engineer – Cloud & DevOps at Tata Consultancy Services (TCS) (2021-01 – 2024-06)

Client: OP Financial Group, Domain: BFSI

• Designed and implemented AWS-based cloud infrastructure across 12+ enterprise-scale applications, achieving 99.9% availability and supporting scalability and resilience requirements for BFSI operations.
• Developed and automated 30+ CI/CD pipelines using Jenkins, reducing manual deployments by 80%, improving build-to-release cycle time by 40%, and enabling faster feature delivery across development teams.
• Containerized 10 legacy Java and Python applications using Docker, reducing deployment time from 15 minutes to under 5 minutes, and orchestrated deployments using Kubernetes across staging and production environments.
• Built 10+ reusable Terraform modules with remote state management for VPC, EC2, RDS, and networking, cutting environment provisioning time by 60% and enabling consistent multi-environment infrastructure rollouts.
• Developed and deployed centralized logging and monitoring using Prometheus and CloudWatch across 15+ applications, reducing Mean Time to Resolution (MTTR) by 50% and improving system stability for teams.
• Strengthened cloud security posture by segregating 25+ IAM roles, managing 12+ KMS keys, and implementing automated secret rotation policies across 20+ secrets, ensuring compliance with BFSI financial security standards.
• Participated in rotational on-call support for production environment, maintaining 98% SLA/SLO targets, achieving 45-minute average incident resolution time (MTTR), and responding to 25+ production incidents over 3.5 years.

Master of Computer Applications in Computer Applications – IGNOU (2021 – 2023)

Bachelor of Computer Applications in Computer Applications – Mewar Institute of Management (2017 – 2020)