Karu Thevar

Experienced in driving large-scale IT transformations across cloud platforms, I specialize in application modernization, cloud migration, and security optimization. I’ve successfully led the transformation of legacy monolithic applications into cloud-native microservices, migrating workloads to AWS, Azure, and GCP while implementing Continuous Integration and Delivery (CI/CD) pipelines for scalability, security, and operational efficiency. Leveraging Generative AI, I’ve automated code generation, infrastructure templates, and migration scripts, while driving data-driven decision-making through predictive analytics, compliance reporting, and performance optimization. With extensive expertise in Identity and Access Management (IAM), I have designed secure solutions for enterprises with 10,000+ users, implementing robust monitoring, auditing, and compliance systems using technologies such as PKI, SSL, LDAP, and SSO. As a leader in data center migrations, I’ve executed 15 large-scale moves for Fortune 500 companies, optimizing performance, security, and cost. I also engineered disaster recovery and business continuity plans to ensure critical business applications meet RPO and RTO requirements. I’m experienced in integrating Secure DevOps principles across SDLC, conducting vulnerability assessments, and ensuring compliance with regulatory frameworks like NIST, HIPAA, and ISO 27001. I’ve also designed high-performance computing grids and optimized IT budgets for multimillion-dollar savings across enterprises. With a strong background in Governance, Risk, and Compliance (GRC), I’ve developed frameworks to mitigate cybersecurity risks, especially during organizational transitions. I’m passionate about upskilling teams and have trained over 800 professionals, driving organizational transformation in cloud technologies and IT management.

IT Infrastructure and Security Architect with expertise in managing IT infrastructure, cyber security, and operations across hybrid environments. Led initiatives in DevOps, SysOps, SRE, CI/CD, and Incident Response, overseeing 200+ servers, including physical, virtual, and containerized workloads on AWS EC2/ECS/EKS/AKS for the Dept. of Family Resources. Successfully migrated microservices from Docker Swarm to Kubernetes/OpenShift clusters and reduced server footprint from 400+ to under 200 servers through strategic capacity planning. Managed full security lifecycle for applications, addressing gaps with compensating controls and ensuring compliance with standards like NIST, HIPAA, and OWASP. Transitioned monolithic systems (IBM Curam, Oracle EBS) to microservices using JHipster, Spring Cloud Config, and MongoDB, while migrating across VMware, Cisco Hyperflex, Ubuntu, and Red Hat platforms. Expertise in Palo Alto Firewalls and Windows-to-Linux application migrations. Implemented multi-layered security architectures, conducted OWASP Top 10 assessments, SAST, DAST, and vulnerability remediation. Led security awareness programs and achieved compliance with MARS-E, HIPAA, and industry standards. Automated CI/CD pipelines using Terraform, Ansible, CloudFormation, and scripting languages like Python, Bash, and PowerShell. Integrated security tools (SonarQube, Selenium) into workflows and enhanced container security with image signing and scanning. Developed decommissioning processes, optimized observability tools (ElasticSearch, Splunk), and improved log analysis with ELK stacks. Managed IAM for 500,000+ users and ensured data encryption across AWS services. Provided strategic risk management, supported audit preparations, and delivered actionable recommendations to senior leadership. Advocated for automation and operational resilience, driving Agile-based operations for SRE and Security Ops.

Middleware and Web Application Management leader with extensive experience overseeing operations for 900+ websites, serving 3,000+ internal users and 100,000+ external users across 150+ countries. Led cross-functional teams in development, OS, networking, QA, and security to ensure seamless operations across various environments, including development, QA, UAT, production, and disaster recovery. Spearheaded platform upgrades, migrating legacy applications to VMware ESX and Cisco UCS/Hyperflex environments. Coordinated with global teams to launch country-specific websites, aligning with business needs. Led security and compliance efforts, ensuring 24/7 monitoring, patch management, and adherence to federal regulations like SLA and OLA metrics. Implemented enterprise-grade IAM solutions and led vulnerability assessments, SAST, DAST, and root cause analysis for critical systems' availability and security. Automated administrative tasks using Ansible, Terraform, Chef/Puppet, and scripting languages, optimizing operational efficiency. Managed disaster recovery and business continuity for critical applications across multiple data centers, ensuring high availability with minimal business disruption. Utilized tools like Splunk, Elasticsearch, and DataDog for resource monitoring and performance analysis, providing regular reports to stakeholders. Led stakeholder engagement, orchestrating client communications, risk assessments, and project milestones. Directed hardware commissioning and decommissioning, ensuring alignment with business requirements and ongoing initiatives.

Experienced Middleware Consultant and Infrastructure Specialist with a strong background in managing and transitioning middleware services across diverse environments. Led the knowledge transfer process and developed incident, change, and problem management processes for Onshore and Offshore teams. Supported middleware infrastructure with technologies such as WebSphere, WebLogic, MQ Series, Apache, IHS Web Servers, and Siteminder Policies on Windows and Linux servers. Managed infrastructure migration, disaster recovery exercises, and data center consolidations. Oversaw the migration of numerous hosts to different datacenters, including configurations for SSL security and intranet applications. Led teams through successful application infrastructure migrations, server consolidations, and security configurations. Experienced in supporting web applications on a variety of systems such as Apache, WebLogic, WebSphere, IIS, and Oracle, across multiple UNIX and Linux environments. Provided support for application builds, deployments, and troubleshooting, while managing user identities and group accounts. Proficient in designing and implementing highly available applications, including custom-built web applications and virtual infrastructures. Extensive experience with VMware ESX, VMware Virtual Center, and RedHat Linux for virtual environments. Led the design and implementation of high-performance clustering GRID systems, conducting maintenance and health monitoring using tools like Nagios and Zabbix. Proven ability to deliver efficient, secure, and scalable solutions in complex and dynamic environments.