Devops Engineer
Current• Delivered a GCP Marketplace project by deploying Kubernetes applications using Helm, optimizing performance and scalability.• Implemented centralized logging with Fluentd and monitoring with GCP Managed Prometheus, ensuring real-time alerts and custom dashboards for effective issue resolution.• Migrated self managed Elasticsearch from GKE to GCP Elastic Cloud, setting up backup policies to enhance scalability and data protection.• Provisioned cloud infrastructure using Terraform to automate and streamline resource management.• Designed and managed CI/CD pipelines in Jenkins for continuous integration and delivery, automating build, test, and deployment processes.• Optimized cloud costs by implementing Kubernetes cron jobs to auto-scale down nodes during off-peak periods.• Deployed a static website on Google Cloud Storage (GCS) using an Application Load Balancer (ALB), ensuring secure and efficient traffic distribution by attaching an SSL certificate. Implemented Cloud CDN to optimize content delivery, significantly enhancing performance and scalability.• Deployed OpenVPN for secure remote access and GCP HA VPN for high-availability connectivity between cloud and on-premises environments.• Enhanced security by scanning Docker images with Trivy to detect vulnerabilities before deployment.• Used Burp Suite and OWASP ZAP to find and resolve web application vulnerabilities, ensuring a secure codebase.• Implemented high-performance load balancing and DDoS protection using HAProxy and EnvoyProxy, while enforcing robust security measures such as CORS, iframe protection, source-based rate limiting, and XSS (Cross-Site Scripting) prevention. Additionally, strengthened security headers by configuring Referrer Policy, Strict Transport Security (HSTS), Content Security Policy (CSP), X-Download-Options, and X-Content-Type-Options.
