Sudhanshu Lavi

DevSecOps, DevOps, and SRE Leader with 13+ years of experience driving secure cloud transformation, CI/CD automation, GitOps, Kubernetes, and platform engineering across AWS and Azure environments. Expertise in Terraform, Jenkins, GitHub Actions, Argo CD, Flux CD, secure SDLC, cloud security, observability, and enterprise DevSecOps governance. Proven success leading engineering teams, improving platform reliability, and delivering scalable SaaS solutions across Healthcare, FinTech, and Video Technology domains.

Technical Leader - Eli Lilly India Pvt Ltd - Bangalore

(2025-02)

• Led enterprise-wide DevSecOps transformation across AWS, Kubernetes (EKS/AKS), GitHub Actions, Terraform, Python, JFrog Artifactory, Argo CD, and Flux CD to enable scalable SaaS and multi-tenant platform delivery
• Architected secure CI/CD pipelines integrating SonarQube, Snyk, Checkmarx, GitHub Advanced Security (GHAS), CodeQL, GitLeaks, TFsec, OWASP Dependency-Check, OWASP ZAP, Clair Kyverno, and JFrog Artifactory to embed SAST, DAST, container security, IaC scanning, Kubernetes hardening, dependency governance, artifact management, and policy enforcement into the SDLC
• Established enterprise quality gates in CI/CD enforcing secure pull request validation, code coverage thresholds, secrets detection, vulnerability severity controls, dependency governance, compliance checks, and controlled release approvals prior to production deployment
• Implemented automated alerting and security monitoring using Falco, CloudWatch, Prometheus, Grafana, ELK, and Slack/MS Teams integrations to provide real-time visibility into threats, compliance violations, suspicious container behavior, and CI/CD security failures
• Led remediation initiatives for critical vulnerabilities including SQL Injection (SQLi), Cross-Site Scripting (XSS), IAM privilege escalation risks, Kubernetes misconfigurations, insecure container images, exposed secrets, and vulnerable opensource dependencies
• Implemented GitOps deployment models with Argo CD and Flux CD to deliver secure, auditable, automated, and scalable Kubernetes workflows, including blue-green deployment strategies
• Built Infrastructure-as-Code governance frameworks using Terraform and Python automation to integrate security validation, policy-as-code enforcement, compliance scanning, and cloud security controls
• Developed DevSecOps governance dashboards tracking deployment frequency, mean time to recovery, change failure rate, vulnerability trends, release quality, compliance posture, and operational reliability indicators
• Collaborated with executive directors, enterprise architects, security, compliance, and engineering stakeholders to align DevSecOps strategy, governance, and implementation with business and operational objectives
• Led and mentored SRE and Platform Engineering teams supporting enterprise cloud platforms, MLOps workloads, reliability engineering, automation, observability practices, and secure software delivery
• Received Excellence Award (2025 – Q4) for enterprise DevSecOps implementation and secure CI/CD transformation initiatives

Senior Delivery Engineer - Smarsh India Pvt Ltd - Bangalore

(2023-01 - 2025-01)

• Led automation and DevSecOps initiatives for SaaS multi-tenant platforms across AWS, Kubernetes, Jenkins, GitHub Actions, Argo CD, and Flux CD to improve delivery speed, reliability, and security
• Implemented secure CI/CD pipelines integrating SonarQube, Snyk, Checkmarx, GitLeaks, CodeQL, TFsec, OWASP ZAP, Qualys, and Kyverno to enable SAST, DAST, container security, IaC validation, and Kubernetes policy enforcement
• Automated AWS infrastructure provisioning with Terraform, AWS CDK, and Python Boto3 for EKS, EC2, IAM, API Gateway, WAF, ECR, RDS, Route53, and CloudWatch to standardize, harden, and streamline environment builds
• Established secure SDLC quality gates with automated vulnerability detection and remediation, secrets scanning, compliance validation, and release governance aligned with ISO27001, SOC2, PCI-DSS, and HIPAA requirements
• Led FinOps and cloud cost optimization initiatives using AWS Cost Explorer and CloudWatch, identifying underutilized resources, rightsizing workloads, and decommissioning unused infrastructure to reduce cloud spend
• Developed operational dashboards, alerting, and observability solutions using CloudWatch, Grafana, ELK, Prometheus, and AWS X-Ray to enhance platform reliability, security monitoring, and incident response
• Collaborated with executive leadership, security, compliance, and engineering teams to drive DevSecOps governance, cloud modernization, and enterprise platform reliability initiatives

Lead DevOps Engineer - Synamedia India Pvt Ltd - Bangalore

(2020-12 - 2023-01)

• Led a team of 15 DevOps/SRE engineers delivering enterprise DevOps and DevSecOps initiatives across AWS and Kubernetes platforms
• Designed and implemented CI/CD pipelines with Jenkins, SonarQube, Argo CD, Flux CD, and Terraform to enable secure, scalable SaaS deployments
• Integrated SonarQube quality gates to enforce code coverage, vulnerability scanning, code quality checks, and secure release governance across development workflows
• Implemented DevSecOps tooling including Snyk, Checkmarx, CodeQL, GitLeaks, TFsec, Trivy, OWASP ZAP, and Qualys for SAST, DAST, dependency, container, and IaC security validation
• Built CloudWatch dashboards and established monitoring, alerting, and observability solutions to enhance platform reliability, operational visibility, and incident response
• Supported development teams with CI/CD onboarding, deployment troubleshooting, release validation, secure coding practices, and platform engineering guidance
• Collaborated with senior managers, product managers, security teams, and stakeholders on delivery planning, backlog prioritization, release governance, and engineering operations
• Managed resource allocation, sprint planning, utilization tracking, and engineering delivery coordination across DevOps and platform initiatives

Build and Release Engineer - SRE - General Electric Health Care - Bangalore

(2018-06 - 2020-12)

• Worked as a Build and Release Engineer at GE Healthcare, utilizing Terraform to provision AWS infrastructure, onboard servers, and create Golden AMI.
• Automated EC2 instance management with AWS Lambda and EventBridge, enhancing operational efficiency and uptime.
• Implemented CI/CD pipelines using Jenkins for deploying applications, running Ansible playbooks, and integrating software configurations.
• Configured and deployed Kubernetes clusters on AWS EKS, optimizing application scalability and management.
• Wrote Docker files to create customized Docker images, containerizing web applications and managing networking setups.
• Integrated ELK stack with AWS S3 and Lambda for monitoring, creating customized dashboards for enhanced insights.
• Streamlined infrastructure provisioning and management using Terraform and automated workflows for improved deployment speed.

Senior Software Engineer - IBM India Pvt Ltd - Bangalore

(2015-03 - 2018-04)

• Worked as a Senior Software Engineer in IBM, focusing on an internal CRM tool.
• Implemented Infrastructure as Code using Terraform to manage AWS infrastructure, enabling better tracking and rollback.
• Spearheaded the migration of enterprise applications from on-premise to AWS Cloud, optimizing resource management.
• Engineered and maintained a CI/CD pipeline with Jenkins and Terraform, streamlining deployment processes.
• Managed AWS services including EC2, VPC, IAM, and Route 53, enhancing system reliability and performance.
• Developed and managed IAM user roles and custom policies for enhanced security and access control.
• Automated data lifecycle management and backup processes in AWS S3 and Glacier, ensuring data integrity.

Jr. Software Engineer - SRM Techsol Pvt Ltd - Lucknow

(2013-01 - 2015-03)

• Managed AWS services including EC2, VPC, IAM, Route 53, CloudWatch, S3, ELB, RDS, SNS, SQS, and Auto Scaling to support secure and scalable cloud infrastructure operations
• Designed and implemented end-to-end CI/CD pipelines using Jenkins to automate deployment of three-tier applications on AWS EC2 environments
• Automated Linux server provisioning, deployment, patching, and monitoring using AWS CloudWatch and Kibana to enhance reliability and observability
• Collaborated with development and infrastructure teams to streamline deployment automation, release management, and overall operational efficiency
• Completed DevOps certification training from Linux Academy with a focus on AWS, CI/CD pipelines, and infrastructure automation practices
• Recognized with an organizational award for initiative and contributions to DevOps automation and cloud engineering projects

Bachelor of Technology - Information Technology - IET Dr. RMLAU (2012)