Portfolio

Enterprise Cloud & DevSecOps Projects

Here's a selection of impactful projects I've delivered across Mahindra Group, HDFC Securities, and CRISIL:

🏢 Project 1: Enterprise Cloud Security & IAM Governance

Client: Mahindra Last Mile Mobility
Duration: Oct 2021 – Present
Technologies: AWS, Prisma Cloud, IAM, Security Operations

Challenge

Enterprise AWS infrastructure with legacy IAM practices, multiple compliance vulnerabilities, and no centralised security posture visibility.

Solution

Led enterprise AWS IAM → SSO migration across staging and production with MFA enforcement and role-based access control
Owned Prisma Cloud CSPM operations, identifying and remediating 100+ critical vulnerabilities across IAM, S3, EC2, ECS, and VPC
Hardened infrastructure by eliminating public exposure, enforcing HTTPS everywhere, and fixing privilege escalation paths
Managed production lifecycle: EC2 patching, AMI planning, ECS troubleshooting, security agent rollout

Impact

✅ Achieved full AWS security compliance posture
✅ Reduced security vulnerabilities from 100+ to zero critical issues
✅ Eliminated lateral movement risk through zero-trust enforcement
✅ Enabled continuous security monitoring and remediation

🔗 Project 2: Cloud-Native API Platform on Kubernetes

Client: Mahindra Holidays
Duration: Oct 2021 – Present
Technologies: Apigee Hybrid, Azure Kubernetes Service (AKS), Terraform, API Security

Challenge

Design and deploy a secure, multi-region API platform capable of handling enterprise traffic with OAuth 2.0, JWT, and mTLS authentication.

Solution

Architected Apigee Hybrid on AKS with multi-region, high-availability topology and enterprise security integration
Engineered 20+ API proxies enforcing OAuth 2.0, JWT, mTLS, TLS termination, Spike Arrest, Quota, and Caching
Automated all configurations via Terraform and CI/CD — zero-touch, repeatable deployments
Built unified observability stack: Cloud Monitoring + Splunk/ELK + Apigee Analytics for SLA tracking

Impact

✅ Deployed secure, multi-region API platform supporting internal and external APIs
✅ Reduced API deployment time by 70% through automation
✅ Achieved 99.99% API platform uptime with real-time health visibility
✅ Enabled secure OAuth 2.0 and mTLS across 20+ API proxies

☁️ Project 3: Cloud Migration & Infrastructure Architecture

Client: Mahindra Finance
Duration: Oct 2021 – Present
Technologies: AWS, Terraform, EC2, RDS, CloudWatch, Prometheus, Grafana

Challenge

Migrate 40+ on-premises applications to AWS while maintaining uptime, ensuring disaster recovery, and reducing infrastructure costs.

Solution

Designed and executed migration of 40+ applications to AWS using Terraform, cutting provisioning time by 60%
Architected EC2-based application tiers with robust DR strategies, SQL log shipping, and NAS-to-AWS data migration via NetApp ONTAP
Built CloudWatch + Prometheus-Grafana observability, reducing incident MTTR and enabling proactive capacity management
Implemented Terraform IaC for repeatable, version-controlled AWS provisioning

Impact

✅ Successfully migrated 40+ applications with zero downtime
✅ Reduced infrastructure costs significantly through right-sizing
✅ Achieved 60% faster provisioning time
✅ Reduced incident MTTR by 50% through observability improvements

🔒 Project 4: DevSecOps Pipeline Engineering

Client: HDFC Securities
Duration: Oct 2021 – Present
Technologies: Jenkins, GitLab CI/CD, Snyk, SonarQube, Checkmarx, EKS, DevSecOps

Challenge

Design enterprise CI/CD pipelines with integrated security scanning, enabling secure code delivery at scale without slowing developer velocity.

Solution

Designed enterprise CI/CD pipelines with fully integrated SAST, SCA, and DAST security gates (Snyk, SonarQube, Checkmarx)
Implemented shift-left DevSecOps principles — security checks run at commit, build, and deploy stages
Secured EKS microservices with pod security policies, namespace isolation, network policies
Built ELK logging pipelines and custom Kibana dashboards for real-time pipeline health and security visibility
Developed Developer Portals and SecOps Dashboards, reducing developer onboarding time
Automated compliance and vulnerability reporting workflows for continuous audit readiness

Impact

✅ Enabled zero-manual-review security delivery at scale
✅ Reduced developer onboarding time by 40%
✅ Achieved continuous compliance readiness with automated reporting
✅ Shifted security left — caught 95%+ of vulnerabilities before production

🔗 Project 5: Microservices Security with Service Mesh

Client: CRISIL Limited
Duration: Oct 2021 – Present
Technologies: Cilium, Kong, Kubernetes, Zero-Trust Security, NetApp Trident

Challenge

Secure distributed microservices architecture with fine-grained network policies, preventing lateral movement and enabling zero-trust security.

Solution

Enforced zero-trust microservices architecture using Cilium service mesh with fine-grained network policies
Deployed Kong API Gateway for intelligent routing, authentication, rate limiting, and performance tuning
Implemented Astra Trident + NetApp Cloud Manager for Kubernetes persistent storage with automated provisioning
Eliminated lateral movement risk through microsegmentation at the service level

Impact

✅ Achieved zero-trust architecture across microservices
✅ Reduced lateral movement attack surface to near-zero
✅ Enabled fine-grained network policies for compliance
✅ Automated Kubernetes storage provisioning and data protection

📚 Technical Blog

cloudwithjk.hashnode.dev — Practical DevSecOps & cloud tutorials from real enterprise projects

💼 Key Metrics Across All Projects

Metric	Impact
Cloud Infrastructure Migrated	40+ applications
Security Vulnerabilities Remediated	100+ critical issues
API Proxies Deployed	20+ production APIs
CI/CD Pipeline Coverage	Enterprise-wide, 100+ teams
Platform Uptime	99.99%
Deployment Time Reduction	60-70% faster
MTTR Improvement	50% reduction

Let's Work Together

If you're looking for someone to help with:

Cloud architecture design
DevSecOps transformation
Kubernetes security and platform engineering
Multi-cloud strategy

Get in touch →