Sr. DevOps & Cloud Security Engineer · 5+ Years

Rupesh

Kumar

Azure · AWS · GCP · DevSecOps · Team Leadership

Designing secure, enterprise-grade cloud infrastructure and embedding security at every layer of the software delivery lifecycle. Specialist in DevSecOps architecture, Azure API Management delivery, multi-cloud migration, and application modernisation — serving enterprise clients across Canada and the United States. Currently building and mentoring a team of 7–8 engineers.

90%

Deploy time reduction

99.99%

Uptime delivered

40%

Cost savings achieved

7–8

Engineers mentored

Azure Kubernetes · CKA DevSecOps APIOPS Defender for Cloud Microsoft Purview OWASP ZAP · Trivy · SonarQube Terraform Paketo Buildpacks Azure Synapse · ADF Team Lead — 7–8 Eng. Canada · US Clients

Hire Me View Projects Download CV

Career at a Glance

Experience

5+ years

Team Mentored

7–8 engineers

Certifications

5 + 2 in progress

Cloud Platforms

3 Azure · AWS · GCP

Client Markets

CA & US

Projects Delivered

10+ enterprise

Open to new opportunities

01 — Profile

About Me

I'm Rupesh Kumar, a Senior DevOps & Cloud Security Engineer with over 5 years of hands-on experience architecting enterprise cloud platforms and driving security across the full software delivery lifecycle.

My expertise spans the complete DevSecOps spectrum — from designing hybrid cloud architectures and orchestrating workload migrations across AWS, Azure, and GCP, to implementing enterprise security posture management with Microsoft Purview and the full Microsoft Defender suite. I manage Azure API Management deployments using GitOps-driven CI/CD pipelines, deliver cloud-native application modernisation using Paketo Buildpacks, and build data platform delivery pipelines for Azure Synapse and Data Factory.

As an engineering leader, I've built and mentored a cohort of 7–8 engineers through structured training programmes — from onboarding to production-ready capability. I've delivered for enterprise clients in Canada and the United States and hold a strong record of measurable impact across deployment efficiency, cost savings, and system reliability.

Multi-Cloud Architect

Azure, AWS & GCP migrations and hybrid solutions at enterprise scale

Security Specialist

DevSecOps, Purview, Defender Suite, CSPM, SAST/DAST, WAF

Engineering Leader

Mentoring 7–8 engineers to production-ready DevOps capability

Global Delivery

Enterprise client delivery across Canada and the United States

Get in Touch Download CV

Available Now

02 — Career

Work Experience

Enterprise delivery across government, cloud security, and data platform engineering.

Dec 2022 — Present

Optimus Information India Pvt. Ltd

Noida, India

Current Role

Senior DevOps Engineer

Lead and mentor a team of 7–8 DevOps engineers through structured training programmes, developing talent from onboarding to production-ready capability and improving team delivery quality and incident response times.
Architect and deliver end-to-end Azure API Management (APIM) solutions using a GitOps-driven CI/CD strategy — integrating Azure Front Door and Application Gateway with WAF — serving enterprise clients across Canada and the United States.
Design and implement enterprise DevSecOps pipelines embedding OWASP ZAP, Trivy, and SonarQube for SAST/DAST/container scanning within GitHub Actions and Azure DevOps workflows.
Deploy and configure Microsoft Purview for organisation-wide data governance, compliance management, and information protection across multi-tenant Azure environments.
Implement Defender for Cloud, Defender for DevOps, and Defender for Containers — establishing a unified CSPM posture and proactive workload threat detection strategy.
Lead AWS-to-Azure and GCP-to-Azure migrations — overseeing workload re-architecture, identity federation, network topology redesign, and cutover execution.
Design hybrid cloud architectures integrating on-premises infrastructure with Azure for compliance-sensitive workloads requiring data residency controls.
Modernise Java applications from Azure Spring Apps to Azure Container Apps using Paketo Buildpacks — standardising reproducible container builds without code changes.

Feb 2021 — Nov 2022

Wipro Ltd / NIC Project

Noida, India · Government of India

Cloud Administrator

Managed cloud infrastructure for the National Informatics Centre (NIC) — a mission-critical Government of India IT agency — ensuring high availability of citizen-facing systems.
Provisioned and maintained Azure infrastructure including VMs, VNets, Storage Accounts, and Azure Kubernetes Service (AKS) clusters at production scale.
Implemented monitoring with Grafana and Prometheus, reducing mean time to detect incidents through proactive alerting and performance dashboards.
Automated infrastructure provisioning using Terraform and Ansible, eliminating manual configuration drift and accelerating environment setup.
Built and maintained CI/CD pipelines in Azure DevOps and Jenkins for government application release workflows.

03 — Expertise

Technical Skills

A broad, battle-tested toolkit built across five years of enterprise cloud engineering and security delivery.

☁️Cloud Platforms

Azure (Primary)AWSGCP Azure Container AppsAzure Spring Apps Azure Front DoorApplication Gateway Azure SynapseAzure Data FactoryHybrid Cloud

🛡️Security & Compliance

Microsoft PurviewDefender for Cloud Defender for DevOpsDefender for Containers OWASP ZAPTrivySonarQube DevSecOpsCSPMWAFSAST/DAST

⚙️DevOps & CI/CD

GitHub ActionsAzure DevOpsJenkins APIOPSAPIM Paketo BuildpacksGitOpsBlue-Green Deployment

🐳Containers & Orchestration

Kubernetes (CKA)DockerAKS AWS EKSPaketo BuilderHelmArgoCD

🏗️Infrastructure as Code

TerraformAnsibleBicep ARM TemplatesPythonBashPowerShell

📊Monitoring, Data & Networking

GrafanaPrometheusAzure Monitor Log AnalyticsPower BI VNet / NSGPrivate EndpointsCDNDNS

🤝Leadership & Process

Team Mentoring (7–8 Eng.)Agile / Scrum Client ManagementTechnical Training Knowledge TransferDocumentation

🌐Domain & Delivery

Canada & US ClientsGovernment Projects Enterprise SaaSWordPress / CMS Data PlatformsApp Modernisation OpenAI / AI Integration

04 — Delivery

Project Highlights

A curated record of enterprise projects with measurable outcomes — across cloud, security, and platform engineering.

Oct 2023 — Jan 2024

Gov Utilities Commission Portal

99.99% uptime · 40% faster page loads · 50% faster recovery

Deployed a multisite WordPress platform on Azure with zero-downtime blue-green deployments. Optimised performance through Azure Front Door caching and CDN, cutting page load times by 40%. Accelerated deployments 30% via Azure DevOps pipelines and automated backups, reducing recovery times by 50%. Provisioned infrastructure with Terraform and hardened security with WAF rules and traffic filtering.

Azure Front DoorBlue-Green Deploy TerraformWAFAzure DevOpsCDN

May 2024 — Feb 2025

Client Portal — Azure Container App

WAF score 58% → ongoing hardening · DevSecOps embedded

Developed a containerised client portal using GitHub Actions CI/CD and automated infrastructure deployment with Bicep scripts. Configured Azure Dashboard monitoring and produced comprehensive pre- and post-deployment documentation. Contributed to solution architecture design. Improved Azure WAF score from 58% and embedded DevSecOps practices — SonarQube for code quality, Trivy for vulnerability scanning.

Azure Container AppsBicep GitHub ActionsSonarQubeTrivyWAF

Jul 2023 — Present

POS Machine Software Platform

90% deploy time reduction · 40% cost savings · 95% issue resolution rate

Automated resource provisioning with Terraform, reducing deployment time by 90%. Developed Azure Dashboards to monitor performance, achieving 40% cost savings through Reserved Instances and Azure Savings Plans. Maintained a 95% same-day issue resolution rate through active troubleshooting and optimised CI/CD pipelines in Azure DevOps.

TerraformAzure DevOps Azure MonitorReserved InstancesCost Management

Oct 2024 — Present

Enterprise Data Warehouse Platform

Git-controlled multi-env deployments · Synapse + ADF + Power BI

Designed and implemented Azure DevOps CI/CD pipelines to automate deployments for Azure Synapse Analytics, Azure Data Factory, and Power BI. Integrated Git version control and enabled seamless workspace cloning across development, test, and production environments — establishing a fully governed data delivery pipeline.

Azure SynapseAzure Data Factory Power BIAzure DevOpsGit

Jan 2025

DevSecOps Node.js CI/CD Pipeline

+30% code quality · +40% security coverage · −25% Docker vulnerabilities

Designed a Jenkins CI/CD pipeline for a Node.js application, integrating SonarQube (improving code quality by 30%), OWASP ZAP (enhancing security coverage by 40%), and Trivy (reducing Docker container vulnerabilities by 25%). Accelerated overall pipeline performance by 35%, demonstrating a fully automated shift-left security approach.

JenkinsSonarQube OWASP ZAPTrivyNode.jsDocker

Mar 2025 — Apr 2025

Three-Tier Application on AWS EKS

−20% operational cost · 99.9% availability · 50% better traffic handling

Deployed a scalable three-tier web application (React, Node.js, MongoDB) on AWS EKS, reducing operational costs by 20% through Kubernetes orchestration and AWS ALB load balancing. Achieved 99.9% availability and handled traffic spikes 50% more efficiently than the previous architecture.

AWS EKSKubernetes AWS ALBReactNode.jsMongoDB

Additional Projects

Feb 2025

OpenAI Chatbot — ARM Template Deployment

Built and launched ARM templates delivering 40% faster deployment and 95% improvement in configuration accuracy. Designed GitHub Actions CI/CD pipelines for smooth production rollouts.

ARM TemplatesGitHub ActionsOpenAI

Apr 2025

Multi-Tier Terraform & Ansible Infrastructure

Architected multi-tier infrastructure on AWS using Terraform and Ansible, reducing manual intervention by 85% and improving deployment times by 50%. Ensured 99.95% HA handling a 60% traffic increase with zero downtime.

TerraformAnsibleAWSHA Architecture

Mar 2025

Kubernetes Grafana Monitoring & Visualisation

Implemented Prometheus, Grafana, and Advisor for a Kubernetes environment, reducing incident detection time by 40% and improving system stability by 25%. 90% of issues resolved within 15 minutes via real-time dashboards.

GrafanaPrometheusKubernetesMonitoring

Feb 2023 — May 2023

Weekly Status Report Portal

Integrated cloud infrastructure with Docker, Kubernetes, and Azure Front Door, reducing manual setup by 70%. Leveraged blue-green deployments for 99.9% uptime with downtime under 5 minutes. Enhanced reliability with Active Geo-Replication.

DockerKubernetesAzure Front DoorBlue-Green

Domain Expertise

🔗

Azure APIM CI/CD Delivery

Managing Azure API Management configurations through a GitOps-driven CI/CD pipeline strategy — integrating Azure Front Door for global routing and Application Gateway with WAF for enterprise clients in Canada and the US.

APIMAzure Front DoorWAFTerraformGitOps

🛡️

Microsoft Defender & Purview Suite

Implemented Purview for data governance and compliance. Deployed Defender for Cloud, Containers, and DevOps — establishing a unified CSPM posture across enterprise tenants.

PurviewDefender for CloudCSPM

☁️

Multi-Cloud Migration

Led AWS-to-Azure and GCP-to-Azure migrations including workload re-architecture, identity federation, and hybrid cloud design for compliance-sensitive organisations.

AWS → AzureGCP → AzureHybrid Cloud