Zero-Trust Networking in Multi-Cloud EKS Environments
An architectural deep-dive into implementing Istio service mesh with SPIFFE/SPIRE for identity-based security across AWS and GCP nodes.
IstioSPIFFEEKSGCP
SYSTEM STATUS: OPERATIONAL|NODE: PROD-CLUSTER-01|SECURITY: HARDENED
[DevOps Engineer | Security Engineer | MLOps Engineer]
_
Engineering high-availability architectures that bridge the gap between heavy infrastructure and autonomous AI systems.
94%Infra cost reduction
100+Microservices managed
99.99%Uptime SLA
$ initializing RINKU_SHARMA v2.0.4...
$ loading kernel modules [ DevOps, k8s, Docker, Terraform, Nginx, AI, Security ]...
$ mounting cloud volumes [AWS, GCP, AZURE]...
$ neural_threat_engine.start() → ACTIVE
$ all systems nominal. uptime: 99.99%
KUBERNETES4/5
TERRAFORM4/5
PYTORCH3/5
AWS / GCP4/5
SCROLL TO EXPLORE
About the Engineer
Solving at scale.
Automating with precision.
With over 2 years of professional experience in DevOps engineering , I specialize in building, automating, and maintaining secure and scalable infrastructure within cloud-native environments. I am passionate about leveraging cutting-edge technologies to solve complex operational challenges and deliver reliable, high-performance systems. My approach is rooted in the belief that reliability is a feature, not an afterthought.
Currently, I am focused on the intersection of DevOps and Generative AI, developing deployment pipelines that allow machine learning models to scale securely from sandbox to production with zero downtime.
☁
Cloud & Infrastructure
Provision AWS infrastructure via Terraform; enable consistent multi-environment deployments.
⬢
Scalability & Reliability
Ensure high availability, load balancing, and fault-tolerant microservices systems.
🛡
Security & Compliance
Enforce IAM policies, secrets management, and secure system configurations.
🧠
AI/ML Enablement
Develop MLOps pipelines for model deployment and API-driven integrations.
🔐
DevSecOps Practices
Integrate SAST, dependency, and container scanning into CI/CD pipelines.
Academic Path
Education Portfolio.
Rajasthan Technical University - Jaipur Engineering College
Bachelor of Technology - Computer Science & Engineering
CGPA
8.5 / 10 / 10.0
Board of Secondary Education, Rajasthan
Senior Secondary School - PCM
Percentage
89%
Board of Secondary Education, Rajasthan
Secondary School - All Subjects
Percentage
71%
Capabilities Matrix
Engineering Reliability & AI Infrastructure.
Specializing in production-grade orchestration, automated security pipelines, and high-performance inference clusters.
DevOps & Orchestration
Kubernetes / EKS / GKE97%
ArgoCD / GitOps94%
Helm / Kustomize92%
GitHub Actions / Jenkins90%
Docker / Buildah96%
AI & Data Engineering
PyTorch / HuggingFace77%
Kubeflow / MLflow70%
LangChain / RAG Systems75%
Vector DBs (Pinecone/Weaviate)70%
Containers & Orchestration
Docker / Docker-compose85%
Kubernetes82%
ArgoCD / GitOps88%
Helm / Kustomize / Istio Service Mesh80%
OpenTelemetry / Grafana Stack91%
SecOps & Infrastructure
Terraform / OpenTofu95%
Zero Trust / OPA Gatekeeper88%
SSL-TLS / fail2ban93%
HashiCorp Vault / PKI86%
SAST/DAST / Container Scanning84%
Programming Language
Python80%
Java70%
C/C++60%
Shell Scripting85%
Continuous Integration & Delivery
GitHub Actions85%
Jenkins82%
Bitbucket Pipelines88%
GitLab CI/CD80%
SecOps
- ▸ SIEM/SOAR Integration
- ▸ Zero Trust Architecture
- ▸ OPA / Policy as Code
Infrastructure
- ▸ AWS (Core Services)
- ▸ GCP
- ▸ Azure (DevOps)
Observability
Grafana, Prometheus, ELK Stack, and OpenTelemetry implementation for 99.99% uptime monitoring.
GrafanaPrometheusELKOpenTelemetryJaeger
Production Timeline
Professional History.
✓
Led migration of monolith services to a multi-region EKS mesh, reducing end-to-end latency by 120ms across all production workloads.
✓
Implemented shift-left security across 100+ microservices with automated SAST/DAST scanning integrated directly into Bitbucket pipelines.
✓
Designed and maintained Helm chart library of 40+ reusable templates, standardizing deployment configs across all engineering squads.
✓
Configured Jenkins-based CI/CD pipelines with parallel stage execution, cutting average build time from 18 minutes to 6 minutes.
✓
Optimized Docker image build strategy using multi-stage builds and layer caching, reducing average image size by 65%.
✓
Established GitOps-driven release workflows with ArgoCD, enabling fully auditable, rollback-capable deployments with zero downtime.
TECH STACK
AWSEKSArgoCDKubeflowBitbucket-pipelinesDockerJenkinsHelm
📊
Data-Driven Scale
Every architectural decision is backed by telemetry. We don't scale until the metrics prove a bottleneck, ensuring maximum cost efficiency.
🔐
Security as Code
Security is not a gated process; it is a CI/CD requirement. Policy as Code (OPA) ensures compliance is baked into the infrastructure from the first line of HCL.
Engineered Impact
Strategic Projects.
Exploring the intersection of scalable infrastructure, proactive security, and autonomous AI systems. These case studies highlight technical solutions designed for enterprise-grade resilience.
PRODUCTIONInfrastructure
Global Scale Multi-Cloud Orchestration
KubernetesArgoCDTerraformGitOps
ACTIVE DEVAI / Security
Neural Threat Detection Engine
PyTorchTransformersCUDAKafka
DEPLOYEDObservability
Ops-Insights V2
GrafanaPrometheusOpenTelemetryClickHouse
COMPLETEDSecurity
Zero-Trust Network Migration
IstioSPIFFEVaultOPAEnvoy
Ready to architect the future?
I am currently open to consulting for high-complexity infrastructure projects and AI-driven security implementations.
Credentials & Connectivity
Verified Certifications.
Validation of technical expertise through industry-standard certifications.
☁
AWS Certified Solutions Architect
PROFESSIONALProfessional Grade Architecture & Design Patterns
⬡
CKA – Certified Kubernetes Administrator
EXPERTLinux Foundation Certified Kubernetes Expert
🛡
CompTIA Security+
CERTIFIEDSY0-601 Infrastructure Security
🧠
Azure AI Engineer
ASSOCIATEAssociate AI-102 – AI Solutions Design
⊞
HashiCorp Certified: Terraform Associate
CERTIFIEDInfrastructure as Code (IaC) Mastery
Technical Insights
Scaling Vector Databases for Production RAG Pipelines
Latency benchmarking of Pinecone vs. Weaviate when handling 100M+ embeddings in a distributed LangChain application.
RAGPineconeLangChainEmbeddings
Optimizing GitHub Actions for Large-Scale Monorepos
Reducing build times by 65% through custom ephemeral self-hosted runners and intelligent cache-keying strategies.
GitHub ActionsCI/CDMonorepoCaching
Initialize Connection
Let's build something robust.
Interested in discussing infrastructure scalability, AI integration, or new opportunities? Drop a line and let's build something robust.
AVAILABILITYOpen to Consulting
RESPONSE TIME< 24h
TIMEZONEUTC+5:30 (IST)