Suraj Kumar Sah — Lead DevOps Engineer
I build securecloud platformsthat scale.
7+ years designing, migrating and securing production infrastructure across AWS, Azure and GCP — with deep expertise in Kubernetes, Terraform, platform engineering and security.
CKA Certified · Multi-Cloud · Kubernetes · Security · Platform Engineering
7+
Years Experience
DevOps & Cloud Security · AWS / Azure / GCP
9+
Cloud Migrations
Zero-downtime execution
CKA
Certified Kubernetes Administrator
CNCF Certified
IEEE
Published Author
2+ research papers
What I own, end to end.
Four areas of accountability — from platform architecture to audit-ready compliance.
Cloud & Platform Architecture
Multi-cloud architecture across AWS, Azure and GCP — landing zones, network design, and internal platforms that let teams ship without fighting infrastructure.
AWS · Azure · GCP · EKS / GKE / AKS · Infrastructure architecture · Platform engineering
Kubernetes & Cloud Native
Production Kubernetes from scratch and at scale — cluster architecture, service mesh, autoscaling, backup strategy and day-2 reliability operations.
Kubernetes · Helm · ArgoCD · GitOps · Istio · Karpenter · Velero · Reliability
Infrastructure Automation
Everything as code — Terraform-managed cloud estates, version-controlled environments, and CI/CD pipelines with security gates built in, not bolted on.
Terraform · Terraform Cloud · GitHub Actions · CI/CD · Ansible · Environment automation
Security & Compliance
SOC 2 Type II and PCI DSS programs end to end — controls, continuous monitoring, endpoint posture and compliance automation that survives audits without heroics.
SOC 2 · PCI DSS · CIS Benchmarks · Wazuh · Trivy · OWASP ZAP · GuardDuty · Macie · FleetDM
Infrastructure should disappear into the platform.
Reliable infrastructure should enable developers rather than become something they constantly manage. The measure of a good platform is how little a team has to think about it — a pull request goes in, and a secure, observable, production-grade deployment comes out.
Everything between those two points — pipelines, policy, provisioning, rollout, monitoring — is the platform’s job. That’s what I build.
The path a pull request takes
Developer opens a pull request
CI runs — build, tests, security scans
Merge — ArgoCD syncs the change
Rollout to Kubernetes
Observed — metrics, alerts, compliance checks
Running in production on AWS / Azure / GCP
Engineering that had to work.
Migrations, compliance programs and platforms — real systems delivered under real constraints.
SOC 2 & PCI DSS Compliance Program
Led an org-wide SOC 2 Type II certification effort alongside PCI DSS controls, with continuous monitoring and automated compliance.
Wazuh · FleetDM · SonarQube · Trivy · OWASP ZAP · Snyk · Terraform Cloud · PCI DSS
Multi-Environment EKS GitOps Platform
Built a GitOps-driven, autoscaling EKS platform spanning multiple environments and production teams.
AWS EKS · ArgoCD · Karpenter · Helm · Velero · Terraform · Prometheus · Grafana
AWS to GCP Infrastructure Migration
Migrated production Kubernetes infrastructure from AWS to GCP while maintaining Dev, Staging and Prod parity.
GCP · GKE · Velero · Cloud Build · Cloud Deploy · Terraform · Ansible · Istio
Building something that needs reliable infrastructure?
Open to discussing platform engineering, cloud architecture, Kubernetes, migrations, infrastructure automation, security and relevant leadership opportunities.
Let’s Talk