Spandana Gayam

• Provisioned and managed AWS infrastructure (EKS, EC2, S3, RDS) using Terraform modules, automating multi-environment setups following best practices. • Automated infrastructure provisioning and deployments with Terraform, Ansible, and IaC principles for consistent, version-controlled rollouts. • Built and optimized CI/CD pipelines using GitLab CI and Azure DevOps, integrating SonarQube, Prisma Cloud, Docker, and Kubernetes. • Containerized and deployed microservices to EKS using Helm, Ingress, and cert-manager, enabling HA, auto-scaling, and automated SSL/TLS. • Wrote automation scripts (Python, PowerShell, Bash) for infra updates, EC2 optimization, snapshotting, and scaling—saving ~30% in costs. • Integrated AWS Secrets Manager with Kubernetes via External Secrets Operator, improving secret security and automation. • Automated SQL/NoSQL DB tasks (PostgreSQL tuning, RDS snapshots, Redis caching, DR strategies) to improve resilience and performance. • Implemented GitOps workflows with Terraform and Helm for infra consistency and drift prevention. • Enforced Kubernetes security: PSP, RBAC, IRSA, encrypted secrets, network hardening (SGs, NACLs, WAF). • Deployed centralized observability with Prometheus, Grafana, CloudWatch, Fluent Bit, and Splunk for real-time monitoring and logging. • Configured Pod Disruption Budgets and Priority Classes for zero-downtime during rolling upgrades. • Created reusable Terraform modules with tagging, cost allocation, and alarm integrations for governance. • Led architecture reviews and mentored teams on GitOps, DR, and security best practices. • Secured S3 with encryption, cross-account replication, and IAM policies. • Built API Gateway + Lambda integrations with throttling and auth for high-traffic workloads.

• Provisioned and managed AKS & EKS clusters using Terraform, Bicep, Helm, and Ansible, enabling full IaC lifecycle across dev, staging, and prod. • Automated Azure & AWS infrastructure (EC2, S3, RDS, IAM, networking) with Terraform modules and CloudFormation for consistent deployments. • Built and optimized CI/CD pipelines in GitLab CI/CD, Azure DevOps, and Jenkins, integrating SonarQube, Prisma Cloud, ACR, and Docker/Kubernetes deployments. • Implemented GitOps workflows with Helm and GitLab for controlled, auditable Kubernetes lifecycle management. • Integrated Vault and Azure Key Vault for dynamic, secretless authentication in Kubernetes workloads. • Designed secure ingress using Azure Application Gateway, ALB Ingress, cert-manager, and Let’s Encrypt for automated TLS/SSL. • Automated AKS operations with Python and Bash for upgrades, pod scaling, and cert management. • Migrated monoliths to Dockerized microservices, cutting deployment times by 60% using automated blue-green strategies. • Integrated MongoDB, PostgreSQL, MySQL, Redis with Kubernetes using Secrets and PVCs for secure data management. • Implemented HPA/VPA with Azure Monitor for dynamic scaling of critical AKS workloads. • Hardened clusters with Azure Policy, CIS benchmarks, security hub findings, network policies, and namespace isolation. • Deployed Azure Firewall, NSGs, and Private Endpoints to secure AKS control planes and nodes. • Built centralized monitoring & alerting with Prometheus, Grafana, and Azure Monitor for proactive performance tracking. • Embedded DevSecOps by integrating SonarQube, Prisma Cloud scanning, and vulnerability checks into CI/CD. • Enforced Git branching strategies, code review policies, and approval workflows to strengthen development governance. • Partnered with architecture, security, and cloud teams to drive Kubernetes governance, cost optimization, and compliance.

• Built end-to-end CI/CD pipelines and standardized release processes using Jenkins, SVN, Git, and Nexus, reducing manual effort and enabling zero-touch deployments. • Integrated SonarQube with pipelines to enforce coding standards, run static code analysis, and deliver quality reports. • Designed and deployed full AWS infrastructures with CloudFormation (VPC, subnets, NAT, SGs, EC2, RDS) and automated backups/AMIs using AWS CLI. • Created IAM policies for secure role-based access and supported legacy app/data migration using AWS Snowball. • Automated web and database deployments across AWS and on-prem, resolving build issues, dependency conflicts, and versioning challenges with dev teams. • Managed artifact lifecycles with Maven and Nexus, optimizing shell scripts, POM files, and build configurations. • Implemented branching and tagging strategies in Git/SVN for reproducible builds and coordinated multi-environment deployments. • Monitored and optimized build/deployment health using Jenkins and custom scripts for high availability and stability. • Automated environment provisioning and integrated unit, integration, and regression tests into CI/CD workflows. • Maintained documentation for build, deployment, and release processes to support audits, KT, and operational consistency.

• Installed, configured, and maintained Red Hat Enterprise Linux (RHEL) 5.x/6.x, CentOS, Solaris, and HP-UX servers, including kernel tuning and performance optimization. • Managed user accounts, groups, and permissions; implemented centralized authentication via LDAP and NIS. • Configured and maintained essential network services: TCP/IP, DNS, DHCP, NFS, FTP, SMTP, SAMBA, Apache HTTP/HTTPS, and VPN. • Applied OS patches, performed upgrades, and managed RPM/deb-based package installations; automated tasks using Bash and Shell scripts. • Monitored system performance and availability using Nagios and Cacti; configured alerts, dashboards, and performance reports. • Managed file systems and storage: LVM, VXVM, ZFS, RAID (software and hardware), snapshots, and backups. • Automated system administration tasks using Shell scripts, Cron jobs, and Kickstart (RHEL) or Jumpstart (Solaris) for OS provisioning. • Installed, configured, and maintained virtualization environments: VMware ESX/ESXi, XEN, and KVM for high-availability workloads. • Managed database servers including MySQL, PostgreSQL, and Oracle; performed backups, restores, and basic performance tuning. • Configured and troubleshot enterprise messaging services (Sendmail, Postfix, Qmail) and web servers (Apache, Tomcat). • Performed basic security hardening: firewall rules, SELinux configuration, SSH key management, and sudo policies. • Supported system migrations, capacity planning, and disaster recovery exercises, ensuring high availability and uptime. • Maintained version control for scripts and configuration using SVN or Git; collaborated with development teams for deployments.