Lead Devops Engineer
CurrentCloud Migration & Infrastructure AutomationLed the migration from a single AWS account to a Control Tower setup with 20+ accounts, improving security and compliance. Managed EC2, RDS, ECS, and other resources with minimal downtime.GitLab On-Prem to Cloud Migration Transitioned GitLab from on-prem to cloud, streamlining collaboration and CI/CD processes. Migrated from single-state Terraform files to app-specific files for faster deployments and rollbacks. Developed versioned service modules for better change tracking between environments.ECS Improvements Implemented Dynatrace container definitions for tracing, logging, and metrics. Managed secrets and configurations securely with AWS Secrets Manager and Parameter Store. Enabled IAM authentication for secure developer access to RDS and ElastiCache, eliminating password management issues.Networking & Security Used Transit Gateway to route public traffic through a network firewall, enhancing security. Deployed Web Application Firewalls (WAF) and private account peering to secure public applications. Improved ECS delivery time from weeks to hours with autoscaling, cutting costs and increasing availability.CI/CD Automation with GitLab Deployed autoscaling GitLab runners, reducing pipeline times by up to 60%. Integrated Dynatrace to optimize runner fleet sizing, balancing cost and performance. Created multiple runner types with scope-specific access to secure critical environments. Shifted from manual deployments to automated CI/CD pipelines, handling database migrations and security checks. Managed 50+ deployments with GitLab-CI templates, allowing updates to be rolled out across pipelines efficiently.Security & Compliance Implemented Checkov and Tflint with custom rules to enforce coding standards within merge requests. Applied SAST and container scanning to maintain security compliance during deployments.