Bhanu Prakash Email & Phone Number

Bengaluru, Ka, In

Bengaluru, Karnataka, India

1. Auditing existing workloads for SOC2 by following best practices, submitting required proofs on security and availability pillars for getting SOC2 certified - helped with gaining customers trust on using products and services2. Optimizing cloud infra costs by rightsizing EC2's and updating to latest instance types, adding lifecycle rules to S3 buckets, updating managed services (RDS, Elasticache, Opesearch) to use graviton instance type, - attributed with reducing approx. 20-25%… Show more 1. Auditing existing workloads for SOC2 by following best practices, submitting required proofs on security and availability pillars for getting SOC2 certified - helped with gaining customers trust on using products and services2. Optimizing cloud infra costs by rightsizing EC2's and updating to latest instance types, adding lifecycle rules to S3 buckets, updating managed services (RDS, Elasticache, Opesearch) to use graviton instance type, - attributed with reducing approx. 20-25% costs3. Formulated AWS IAM policies with least privileges for developers access using SSO - reduced operational overhead and improved security4. Implemented IaC framework using terraform/terragrunt for infrastructure provisioning, setup bitbucket pipelines for infrastructure deployment - reduced operational overhead and improved efficiency5. Setup self-hosted runners for bitbucket pipelines - improved latency to connect with third-party services and security, updated bitbucket pipelines to use AWS OIDC IAM roles instead of user access keys improving security6. Optimizing the legacy jenkins systems and automations used for EC2 based deployments using code deploy7. Automation of access provision and termination using jenkins for various infra tools8. Managing production EKS clusters and helping teams creating new services in EKS using in-house tool Astra - it uses ArgoCD for GitOps and Kustomize for creating k8s manifests9. Creating base images and pipeline to push to images to ECR and scan for any vulnerabilities, advocating application teams on best practices to create application specific images using multi-stage builds10. Creating dashboards in New relic and alerts integrated with pager duty11. Automation of AMI creation using packer, terraform and jenkins to create vulnerable free AMI's, used Amazon Inspector for vulnerability scanning and publishing the AMI's post fixing the vulnerabilites Show less