Uday Chander Vattepu

Senior AEM DevOps and Platform Engineer with extensive experience designing, building, and operating enterprise-scale AEM platforms across large distributed infrastructure environments. Skilled in Infrastructure-as-Code, container orchestration, CI/CD automation, and platform reliability practices that keep high-traffic environments secure, scalable, and highly available. Combines deep AEM architecture and upgrade expertise with modern DevOps and platform engineering practices — automating provisioning, hardening security, and building self-service tooling that reduces operational toil for engineering teams.

Senior AEM DevOps & Platform Engineer at Apple Inc (2016-03 – Present)

• Architected enterprise-scale AEM platform infrastructure supporting high‑traffic applications.
• Led deployment and operations of AEM 6.5 LTS environments including Author, Publish, and Dispatcher layers.
• Managed large-scale production AEM environments ensuring high availability, performance, and reliability.
• Performed AEM Service Pack, CFP, and Forms patch upgrades ensuring platform stability and security compliance.
• Led upgrades from AEM 6.1, 6.3 / 6.4 to AEM 6.5 improving platform performance and maintainability.
• Upgraded Java runtime, Apache HTTPD, ImageMagick, and VIPS ensuring compatibility and performance.
• Handled Apple Cloud quota approvals and provisioned new virtual machines based on infrastructure requirements.
• Created and configured Shield VIPs and implemented Global Server Load Balancing (GSLB) for production traffic.
• Collaborated with DNS teams to configure end-user domains routing traffic through GSLB and Shield VIPs.
• Managed enterprise TLS/SSL and x509 certificate lifecycle for secure platform communication.
• Automated infrastructure provisioning and configuration management using Ansible.
• Designed and deployed a custom Ops-Agent automation framework (Bash/Python) across bare-metal VMs and Kubernetes sidecars, automating SSL/TLS certificate monitoring, system metrics collection, and scheduled health checks via cron and yacron.
• Extended Ops-Agent into a containerized sidecar pattern using Helm charts with Horizontal Pod Autoscaling, providing Splunk log forwarding and OpenTelemetry Java agent instrumentation across multiple application portfolios with no changes to app images.
• Automated kernel live-patching (kpatch) and Apache upgrades across production fleets via Ansible, integrated with internal Rio CI/CD pipelines and Radar for automated issue tracking.
• Integrated enterprise secrets management (Whisper) into Ansible-driven certificate renewal and patching workflows.
• Automated SSH bastion host provisioning and access policy enforcement, including password rotation and expiration, for automation service accounts across production environments.
• Adopted AI-assisted, LLM-based code review tooling to automate pull request summarization and security review across automation playbook repositories.
• Authored Terraform modules to provision and version-control cloud infrastructure as code, enabling repeatable, auditable environment builds.
• Rebuilt hardened AEM Author, Publish, and Dispatcher nodes on RHEL 8 Apple Cloud VMs.
• Performed JVM tuning, GC optimization, kernel tuning, and filesystem performance tuning.
• Built and maintained CI/CD pipelines using Jenkins, Git, Maven, Puppet, and Chef.
• Engineered Kubernetes deployments using Helm charts for containerized workloads.
• Containerized platform services using Docker to standardize build and deployment environments across AEM tiers.
• Automated backup and disaster recovery workflows using AWS CLI, S3, EBS snapshots, and AMIs.
• Managed artifact repositories including Nexus and JFrog Artifactory.
• Built self-service automation and golden AMI/VM image pipelines, reducing manual provisioning effort and platform onboarding time.
• Implemented monitoring and alerting using Splunk and internal observability platforms.
• Diagnosed and resolved AEM repository performance issues including query optimization.
• Migrated source control systems from SVN to Git and integrated CI/CD workflows.

Master of Science in Computer Science – Harrisburg University