I design, automate and operate production AWS infrastructure. My day-to-day spans
CI/CD pipeline engineering, Infrastructure as Code with Terraform, Docker and Amazon ECS/ECR,
and monitoring with CloudWatch — plus Linux, networking, security and cost optimization work that
keeps production healthy.
Automation mindsetIf I have to do it twice, I automate it — Terraform, shell and Python.
Production deploymentsRelease workflows with CodeBuild, CodeDeploy, ECR and CI/CD tooling.
Reliability & monitoringCloudWatch alarms, SNS and uptime monitoring to catch issues before users do.
Security & costIAM least privilege, Secrets Manager, KMS, AWS Config and FinOps practices.
collaborative
Work closely with developers. Blameless postmortems and shared ownership — "you build it, you run it."
automate-first
Repeatable, reviewable infrastructure over manual steps.
secure-by-default
Least privilege, managed secrets, backup and disaster recovery strategy.
02 · skills
Technical expertise.
Core competencies built through production experience across multiple organizations and cloud environments.
The reference pattern I build and run on AWS — from commit to monitored workload. Hover or tap a node to inspect it.
ci/cd pipeline
From commit to monitored release.
AWS deployment flow · reference architecture
CodeGit Changes are committed and pushed to version control.
RepoGitHub · GitLab A push to the main branch triggers the pipeline automatically.
BuildAWS CodeBuild · GitLab CI/CD · GitHub Actions Builds and validates the application before deployment.
TestPipeline test stage Standardized test stage plus automated security and vulnerability checks.
ImageDocker The application is packaged into a versioned container image.
ECRAmazon ECR Images are pushed to a private registry, ready to roll out.
DeployAWS CodeDeploy · Amazon ECS Automated rollout with rollback handling — no manual steps.
EC2 / ASGAmazon EC2 · Auto Scaling · Docker Compose Services run isolated; secrets are injected from AWS Secrets Manager at startup.
HealthHealth checks Health checks confirm the new release is serving correctly.
MonitorCloudWatch · SNS · Uptime Kuma Metrics, logs and alarms notify the team before users notice.
stageCodeGit
Changes are committed and pushed to version control.
reference architecture
From load balancer to monitored workload.
04 · projects
Infrastructure projects.
Real engineering work — source on GitHub, write-ups on Medium.
kubernetes · ci/cd · terraform · case study
Cloud-Agnostic Zero-Downtime Deployment Platform
Terraform-provisioned platform that ships one signed, scanned image digest from dev to production, with metric-gated rollouts, automatic rollback and queue-based autoscaling. Tested on Kubernetes: 36,001 requests during a live rollout, 0 failed.
Kubernetes
Helm
Terraform
GitHub Actions
Trivy
Cosign
KEDA
Argo CD
PostgreSQL
Redis
production · current role
Quralyst AI Platform
Production AWS for an AI-driven deal-sourcing platform (Indago Research): containerized services, automated releases, TLS, managed secrets and alerting.
EC2
Docker Compose
Nginx
CodeBuild
CodeDeploy
ECR
CloudWatch
aws · containers
Scalable Web App on ECS + EC2
Flask app with zero-downtime blue-green releases, auto-scaling, Multi-AZ and PostgreSQL on RDS — provisioned with Terraform.
ECS
ALB
RDS
Terraform
Docker
observability
Monitoring & Alerting
Uptime Kuma checks critical services across Dev, Staging and Production, with Microsoft Teams and mobile call alerts.
Uptime Kuma
MS Teams
Alerting
devsecops
Security Check Automation
Automatic security checks in the pipeline scan code and containers before deployment.
DevSecOps
CI/CD
Containers
aws · governance
AWS Best Practices
Least-privilege IAM, credentials in Secrets Manager, and Terraform-provisioned resources for repeatable deployments.
IAM
Secrets Manager
Terraform
github.com/Girish7010
More on GitHub & Medium
Repositories, infrastructure experiments and write-ups.
Infrastructure: production AWS on EC2 for an AI-driven deal-sourcing platform — containers, release automation, TLS, secrets and alerting.
EC2
Docker
Compose
CodeBuild
CodeDeploy
ECR
Nginx
Secrets Manager
CloudWatch
SNS
JumpCloud
Built and operate production AWS infrastructure on EC2, running frontend, backend, scraper and Redis workloads as isolated Docker and Docker Compose services.
Implemented end-to-end deployment automation with AWS CodeDeploy, CodeBuild and Amazon ECR, removing manual deployment steps.
Configured Nginx as a reverse proxy with domain-based HTTP/HTTPS routing and SSL/TLS termination.
Integrated AWS Secrets Manager to inject credentials and configuration into containers at startup, eliminating hard-coded secrets.
More contributions
Engineered CloudWatch monitoring, alarms and SNS notifications — including EC2 network-traffic alerting — to detect issues before user impact.
Improved stability by isolating browser-based workloads into a dedicated Playwright scraper worker; evaluated Auto Scaling (Launch Templates, ASG, ALB) for scalable tiers.
Resolve production incidents end to end across Docker containers, deployments, Nginx, SMTP authentication, CloudWatch alarms and EC2 CPU, memory and disk.
Led JumpCloud evaluation and implementation planning with Google Workspace integration and AWS access alignment (MFA, SSO, access control, managed devices).
Infrastructure: multi-environment AWS with Terraform, ECS delivery pipelines, monitoring, compliance and cost governance.
Terraform
GitLab CI/CD
Docker
ECS
CloudWatch
Uptime Kuma
AWS Config
Budgets
Cost Explorer
RDS
Automated infrastructure provisioning with Terraform for consistent, repeatable deployments across Dev, Staging and Production.
Built and maintained CI/CD pipelines using GitLab CI/CD and Docker for Amazon ECS deployments, standardizing build, test and release stages.
Designed monitoring and alerting with CloudWatch and Uptime Kuma integrated into Microsoft Teams for real-time service health visibility.
Delivered cloud cost optimization using AWS Budgets, Cost Explorer and Cost Anomaly Detection, decommissioning unused resources.
More contributions
Configured centralized logging and proactive alerting to identify and resolve infrastructure issues early, reducing unplanned downtime.
Enforced continuous security and compliance through AWS Config drift detection and automated vulnerability checks via shell scripting.
Executed database migrations and version upgrades with minimal downtime, and managed full cloud account migrations from assessment to post-migration optimization.
Architected scalable, secure AWS solutions to customer requirements with cross-functional teams.