Rohit Gunjal

AWS-certified DevOps & Cloud Platform Engineer with 4 years' experience architecting secure, multi-environment Amazon EKS platforms and Flux CD GitOps delivery pipelines for regulated financial-services clients (AVIVA UK, Citi Bank). Proven record cutting container image vulnerabilities by 90%, reducing MTTR from 2 hours to 15 minutes, and sustaining 50,000+ daily transactions at 99.9% uptime. Specializes in Kubernetes, Terraform, DevSecOps automation, and secrets governance in high-compliance environments.

Software Engineer – DevOps & Cloud Platform Engineering at Wipro Limited (2022-09 – Present)

• AVIVA UK – Digital Insurance Platform | Enterprise AWS EKS & GitOps Delivery (Dec 2023 – Present)
• Platform architecture: Architected a secure, reusable Amazon EKS platform across dev, test, staging, pre-prod, and production using modular Terraform with S3-backed remote state, control-plane hardening, node security groups, KMS encryption, and OIDC/IRSA workload identity.
• GitOps delivery: Built end-to-end GitOps pipelines with Flux CD, shipping Helm charts and Kustomize overlays via reusable HelmReleases and Kustomizations for controlled, auditable environment promotion.
• Container security: Hardened multi-stage Docker builds for 10+ microservices and embedded Aqua Security (Trivy) scanning into CI/CD — cutting image vulnerabilities 90% and release cycle time 30%.
• Observability: Reduced MTTR from 2 hours to 15 minutes by implementing Datadog APM and AWS CloudWatch monitoring.
• Cluster operations: Owned Kubernetes namespace isolation, RBAC, and least-privilege workload identity; integrated Karpenter autoscaling, VPC CNI, CoreDNS, EBS CSI, Pod Identity, and Secrets Store CSI across a multi-tenant cluster estate.
• Secrets management: Implemented centralized secrets management with HashiCorp Vault, wiring dynamic secrets injection into Kubernetes workloads via Secrets Store CSI — achieved 100% secrets-rotation compliance across all environments.
• Networking & governance: Delivered environment-isolated networking via Terraform-managed EKS egress controls, KMS-encrypted ElastiCache Redis, Route 53 DNS, Kong Gateway/ExternalDNS, and mandatory governance tagging for cost and compliance tracking.
• CI/CD pipelines: Built Azure DevOps YAML pipelines for Terraform and Kubernetes delivery with Git pull-request gating and automated validation, improving change traceability and cutting new-engineer onboarding time.
• Database administration: Administered and tuned PostgreSQL on AWS RDS — connection-pool tuning and query optimization sustaining 50,000+ daily transactions at 99.9% uptime for a regulated insurance workload.
• Citi Bank – Linux Infrastructure Support | RHEL Administration & Configuration Management (Dec 2022 – Dec 2023)
• Infrastructure administration: Administered and maintained a 350+ server RHEL Linux estate for a Citi Bank engagement, using Ansible playbooks for configuration management, patch deployment, and regulatory compliance enforcement.
• Automation: Automated provisioning, patching, and compliance checks with Ansible, reducing manual administration effort and standardizing configuration consistency across a large, security-sensitive banking server fleet.

B.E. in Electrical Engineering – Amrutvahini College of Engineering, SPPU (2018 – 2022)