Ram Nath

Engineer-architect with 22 years building and shipping production systems inside customer environments — embedded with the client, not reviewing from outside. Hands-on across Python, event-driven microservices, Kubernetes and dual-cloud AWS + Azure, with a delivery record that runs from discovery through a working first slice to a governed production handover.

Currently focused on GenAI platform delivery: retrieval-augmented generation, vector search, self-hosted and air-gapped LLM deployment, evaluation harnesses and LLMOps guardrails.

The differentiator: most GenAI builders move fast and then stall for months at an enterprise security review. I have spent a career on the other side of that review — designing the scanning gates, identity boundaries, network segmentation and audit evidence that regulated client's demand. I can take a model from prototype to an audited production deployment inside a bank, a telco or a manufacturer without the pilot dying in governance.

Principal Architect — Infrastructure & Platform - Persistent Systems

(2024-10)

Embedded with a global manufacturing and safety-products enterprise — customer-facing delivery across a 39-account AWS organisation and a 15-subscription Azure estate. Operate as the client-facing technical lead: run discovery across the estate, set target architecture, then deliver it alongside the customer's own engineering teams — carrying work from assessment through change approval to production cutover.

• Architected and delivered cross-region disaster recovery for a 94-host JD Edwards ERP estate spanning six AWS accounts, reaching 94/94 host backup coverage; identified that backup plans carried no cross-region CopyActions — leaving effective DR RPO unbounded — and closed the gap with encrypted cross-region AMI copy anchored to specific image IDs.
• Designed the inspection-first network target model, replacing AWS Network Firewall with a centralised Palo Alto VM-Series and Zscaler GWLB hub across a multi-region Transit Gateway fabric; validated the vendor design against live AWS state and caught that its import scope omitted in-use route tables before cutover.
• Re-architected internet-facing edge security to a Zero Trust model: replaced 0.0.0.0/0 ingress with per-load-balancer security groups scoped to Cloudflare prefix lists and partner allowlists, and drove 14 findings and 27 remediation actions to closure — including a WAF-bypassing ALB tier and a broken east-west inspection path.
• Built a zero-critical-CVE container security framework — Trivy and Grype dual scanning, Chainguard distroless base images, OPA/Gatekeeper policy-as-code and Keycloak SSO/MFA — eliminating all critical vulnerabilities and reducing high-severity findings by 96.7% (300 to 10). The same supply-chain control pattern now applies directly to model, weight and dependency provenance for AI workloads.
• Delivered an on-premises Kubernetes platform for an open-source semiconductor design toolchain (Caravel) shipped to a global chip manufacturer: self-healing microservices on bare-metal Kubernetes with Longhorn distributed storage, phased release delivery and vulnerability remediation to zero criticals.
• Converted recurring AWS and Azure build patterns into a five-module Terraform library with guarded PowerShell and AWS CLI workflows, and proved both diverse 1 Gbps Direct Connect circuits active/active across two metros from CloudWatch evidence before authoring the coordinated failover test plan.

Senior DevOps / Platform Architect - Sterlite Digital (STL)

(2021-01 - 2024-08)

• Architected and part-built an event-driven CLM platform end to end: a decoupled web tier behind Azure Front Door, eight containerised .NET microservices exposed through API Gateway path routing, each owning its own database, integrated via a Dapr sidecar abstracting service bus and state store behind a standard API.
• Designed the full contract build pipeline: authenticated blob upload, Azure Function trigger, Trend Micro malware scan, result routed through a Logic App to a Service Bus topic, consumed by a dedicated microservice that orchestrated chained GitHub Actions build workflows and wrote lifecycle status back.
• Made the pipeline safe under at-least-once message delivery by enforcing idempotency at the service layer — lifecycle state checked in the per-service database before any build action, so message redelivery after a consumer failure could not trigger a duplicate build.
• Wrote the Veracode security gate from scratch in PowerShell: provisioned the Veracode CLI onto self-hosted runners, handled credential retrieval and server reachability, collected and bundled build artefacts, applied size thresholds with a separate large-artefact path and version-based exclusion rules, then submitted, polled by scan ID and returned an automated pass/fail — replacing a manual review checkpoint with a fully automated release gate.
• Ran a four-environment estate (dev, QA, pre-production, production) plus a dedicated penetration-test environment rebuilt on a six-month cycle to keep vulnerability testing against a clean baseline.
• Delivered the orchestration platform for telco edge data centres: a web control plane driving Ansible-based provisioning and lifecycle management of compute at city-level edge sites from a central location, giving operators a single point of control over a geographically distributed estate.
• Built enterprise automation frameworks in Terraform, Ansible, Azure DevOps, Jenkins and GitHub Actions, and implemented observability and SRE practice with Prometheus, Grafana, Datadog and centralised logging.

Principal Consultant — Cloud DevOps - TIBCO Software India

(2019-07 - 2021-01)

Architected secure hybrid cloud platforms across OpenStack, Azure and GCP for enterprise workloads, and defined reusable Terraform and Ansible reference patterns adopted across delivery teams to accelerate build and enforce standards.

Systems Architect — Hybrid Cloud - UST Global

(2018-06 - 2019-07)

Built a private and hybrid cloud product on OpenStack for SDN/NFV workloads, working across the Horizon dashboard and the underlying Nova, Neutron and Keystone service APIs — early, direct exposure to API-driven platform architecture where the UI is purely a client of independent services.

• Established repeatable deployment and integration patterns across VMware, AWS and OpenStack environments.

PG Programme in Business Management - Business Management - IIM Rohtak

PG Program in Cyber Security - Cyber Security - IIT Palakkad

PG Program in DevOps & IoT - DevOps & IoT - BITS Pilani & Purdue University

Bachelor of Business Management - Business Management - Kuvempu University

Diploma in Instrumentation & Control Engineering - Instrumentation & Control Engineering