Senior SRE, Platform and DevSecOps Engineer | AWS | Kubernetes | Terraform | 8 yrs | Cloud Architecture
Hi, I'm nvimq - a Senior SRE, Platform and DevSecOps Engineer with 8 years of experience across FinTech, SaaS, and e-commerce. I build resilient cloud architectures, Kubernetes platforms, and CI/CD pipelines where uptime and clean releases are non-negotiable.
My engineering philosophy is simple: Infrastructure as Code starts every system, and security is built-in from day one.
- Platform Engineering & GitOps: I design self-service developer portals using Backstage and Crossplane. GitOps (ArgoCD/Flux) drives all releases, making rollbacks as simple as a git revert.
- Cloud & Architecture: Extensive multi-account AWS environments (Terraform/OpenTofu, Terragrunt, AWS Organizations) built on least-privilege principles, cutting IAM escalation risks by 80%.
- Kubernetes & Network Security: I own the full K8s lifecycle (EKS). From cluster architecture and Karpenter scaling to eBPF-powered Cilium networking and Istio service meshes. Policy-as-Code (Kyverno, OPA) blocks drift and misconfigurations before they apply.
- DevSecOps: Security is a gate, not an afterthought. SonarQube, Trivy, and Gitleaks are embedded deep into GitLab CI so vulnerabilities surface before production, not after. Dynamic secrets are handled by HashiCorp Vault.
- SRE & Observability: Architected around SLIs and SLOs. A unified stack of Prometheus, Grafana, OpenTelemetry, and VictoriaMetrics gives correlated metrics and traces, which is what actually cuts detection time and MTTR.
- Resiliency: Disaster recovery is proven, not theoretical. I have rebuilt production environments after full provider-side data loss and engineered automated restore testing so it never repeats.
- Cloud & IaC: AWS, Azure, Terraform, OpenTofu, Terragrunt, Crossplane, Packer, Ansible, Cloudflare
- Containers & Orchestration: Kubernetes (EKS/AKS), containerd, Helm, ArgoCD, Flux, Kyverno
- Networking & Service Mesh: eBPF (Cilium, Calico), Istio, HAProxy, Nginx
- CI/CD: GitLab CI, GitHub Actions, Jenkins
- Observability & Reliability: OpenTelemetry (OTel), Prometheus, Grafana, Loki, VictoriaMetrics, Datadog
- Security & Compliance: HashiCorp Vault (OIDC/mTLS), IAM SCPs, Trivy, SonarQube, OPA
- Programming & Scripting: Golang, Python, Bash
| Platform | Achievement / Event | Ranking |
|---|---|---|
 HackerRank |
Project Euler+ | Top 0.02% (#49 of 256,473) |
 Hack The Box |
Cyber Apocalypse CTF 2026 | Top 7.7% (#519 of 6,744) |
| HackerRank |
Orchestrate Hackathon (Aug '26) | Top 3.6% (#72 of 1,983) |
(Plus 70+ completed labs and challenges across HTB, TryHackMe, LeetCode, and LetsDefend - see full activity)
| Issuer | Certification | Verification |
|---|---|---|
 The Linux Foundation |
Securing Your Software Supply Chain with Sigstore (LFS182) | Verify |
 Amazon Web Services |
AWS Knowledge: Amazon EKS | Verify |
| Amazon Web Services |
AWS Knowledge: Cloud Essentials | Verify |
| Cilium AI/ML Security | Verify | |
| Discovery: SecOps Engineer | Verify | |
 Tigera |
Certified Calico Operator: eBPF | Verify |
 Anthropic |
Claude with Amazon Bedrock | Verify |
| Kubernetes Cluster Lifecycle Management | Verify | |
| Infrastructure Identity for Platform Engineers | Verify | |
 Docker |
Docker Foundations Professional Certificate | Verify |
 Canonical |
Ubuntu Linux Professional Certificate | Verify |
| HackerRank |
Go (Intermediate) & SQL (Advanced) | Verify |
 Snyk |
OWASP Top 10 | Verify |
 IBM |
System & Network Security / Cybersecurity Fundamentals | Verify |
| Chaos Engineering | Verify |
Open to conversations on infra scaling, platform design, or CNCF.