Lasith Koswatta Gamage Email & Phone Number

Melbourne, Vic, Au

Melbourne, Victoria, Australia

► Spearheaded the transition of on-premise Informix databases to AWS EC2, driving the strategic initiative to migrate away from datacenter operations► Provided organisation-wide guidance on best practices for cloud security and cost optimization, ensuring robust and efficient cloud infrastructure management across the company► Facilitated a zero-downtime migration for Spring Boot Java microservices, shifting from Hashicorp Vault's MySQL Secrets engine for database credentials to AWS IAM Auth for RDS, streamlining credential management with AWS native solutions► Enhanced the efficiency of a GitHub Workflow responsible for provisioning AWS IAM roles for use by other workflows, reducing execution time by 45% by adopting Python Thread Pools for multi-threading ► Implemented a GitHub Workflow for routine cleanup of sandbox AWS accounts, integrating filters to protect management resources, thereby eliminating costs associated with abandoned resources

► Managed the routine operations of our Vault clusters: steering rolling upgrades, troubleshooting client-side Vault issues, and evaluating Terraform policies for compliance against organisation standards► Developed a Terraform module for secure Vault interactions by Kubernetes applications, enforcing strict access controls via service account and namespace restrictions► Architected a secure Terraform backend for Vault by implementing "Least Privileges'" for S3 Bucket and KMS policies, supplementing Pull Requests with differential reports for better decision-making and achieving an 87% decrease in compliance verification times► Orchestrated a lost quorum recovery effort for a compromised production Vault cluster, offering my technical guidance to help navigate the team through the recovery phase and restore stability► Accelerated the adoption of the custom GitHub Secrets Engine for Vault, granting developers the ability to generate ephemeral, finely-scoped GitHub access tokens, vital for our GitHub migration strategy

► Documented strategies for the recovery of HashiCorp Vault clusters, leveraging Integrated Storage Snapshots in S3 for seamless restoration across all environments.► Extended our Bash and Golang-based deployment tooling to support the migration from on-premises Kubernetes environments to Amazon EKS.

Victoria, Australia

Roles:► Engineered a resilient and self-healing AWS EC2 architecture to deploy a robust connector between Netskope Cloud and Azure Sentinel, ensuring seamless data flow and enhancing security incident response capabilities► Orchestrated and executed scheduled upgrades of databases deployed as pods on Kubernetes, leveraging rolling update strategies to minimize downtime and maintain high availability for critical data services► Spearheaded the organizational transition from aws-okta to saml2aws for AWS STS credential generation, streamlining the authentication process, improving security posture, and increasing operational efficiency across development teams

Mulgrave, Victoria, Australia

Roles► Administered a Moodle LMS; automating maintenance jobs, integrating Moodle REST API with business processes► Consulted the transition from the Physical Campus to a Virtual Zoom Campus► Developed a PHP-based Integrated Information System, hosted on AWS EC2, that interfaced with our Moodle LMS via the Moodle REST API; provided Tutoring Assistants with a dashboard to monitor a students progress

Melbourne, Victoria, Australia

► Assumed a hybrid role that blended technical and product management responsibilities, engaging directly with clients to capture their website requirements and translating them into Adobe XD prototypes► Designed and implemented PHP websites, using MySQL for the database tier, to highlight popular services and feature blog posts for dynamic content► Implemented a scalable AWS EC2 architecture for client websites, ensuring efficient static asset delivery through the combination of S3 and Cloudflare CDN

Bachelor Of Engineering, Computer Software Engineering

Academic Achievements: ► Faculty of Engineering Dean's Honour List (2018)

Vce, Year 12