Cloud & Kubernetes Platforms
Designing and operating AWS environments (EKS, EC2, S3, Lambda, VPC) and GKE clusters — autoscaling, capacity planning, and cost optimization for production workloads.
- AWS
- EKS / GKE
- Terraform
- Helm
01. About
$ whoami
devops engineer · platform builder · reliability nerd
$ uptime --mindset
high availability, least privilege, automate everything
$
I'm Harshit — a systems-focused engineer. I build infrastructure that just works: fast, secure, observable, and boring in the best possible way.
I own the full path to production — networking, Kubernetes, CI/CD, and every guardrail around it. In the last two years I've led a Kubernetes migration, moved CI/CD from Jenkins to GitHub Actions with GitOps delivery, migrated configuration management to Ansible, and driven an enterprise Bitbucket-to-GitHub move — with security and IAM designed in, not bolted on.
Lately my scope has widened: testing infrastructure that makes every release safer, infrastructure for AI workloads and AI-assisted developer tooling, and treating security, compliance and governance as first-class platform features.
3+Years in production infrastructure
4Major migrations led end-to-end
40%Infra cost reduction achieved
90%App performance improvement
02. What I Do
CI/CD & Release Engineering
Building and migrating delivery pipelines — Jenkins to GitHub Actions, GitOps with ArgoCD and FluxCD — so shipping to production is boring, fast, and reversible.
- GitHub Actions
- Jenkins
- ArgoCD
- FluxCD
Security, Compliance & Governance
IAM design and least-privilege access, secrets management, vulnerability remediation, audit readiness, and access-governance processes that hold up under review.
- IAM
- Least privilege
- Audits
- Secrets mgmt
Observability & Reliability
Monitors, dashboards, alerting and on-call workflows with Datadog, Grafana, CloudWatch and Zenduty — catching issues before customers do and shortening MTTR.
- Datadog
- Grafana
- CloudWatch
- Zenduty
AI & Testing Infrastructure
Standing up infrastructure for AI workloads and AI-assisted developer tooling, plus test environments and automation that make every release safer to ship.
- AI tooling infra
- Test environments
- Automation
Networking & Linux Foundations
VPC design, DNS, TLS, reverse proxies, load balancers and firewalls — with the Linux administration depth to debug anything from packet to process.
- VPC / DNS
- Nginx
- TLS
- Linux
03. Experience
Nov 2024 — Present
Cloud Infrastructure Engineer · DevOps — Jumbotail Technologies
Bangalore, India
- Own cloud infrastructure end to end on AWS — networking (VPCs, load balancers, firewalls), compute (EKS, EC2), storage and serverless — from provisioning through production operations.
- Led planning and execution of a Kubernetes migration, cutting infrastructure cost by 40% while improving reliability and deployment velocity.
- Migrated CI/CD from Jenkins to GitHub Actions with GitOps delivery via ArgoCD, and moved configuration management onto Ansible for repeatable, auditable provisioning.
- Drove an enterprise migration from Bitbucket to GitHub with IAM policies and security standards designed in from the start.
- Built testing infrastructure and automated environments that make releases safer, and infrastructure supporting AI workloads and AI-assisted developer tooling.
- Strengthened security, compliance and governance: access reviews, least-privilege IAM, security monitoring, and audit-ready processes.
- AWS
- Kubernetes
- GitHub Actions
- ArgoCD
- Ansible
- Terraform
- Datadog
Mar 2024 — Nov 2024
DevOps Engineer · Internship — Dataweave
Bangalore, India
- Deployed containerized applications with Kubernetes and Docker; managed compute, databases and load balancers.
- Configured AWS IAM policies and access-management practices, reducing unauthorized-access incidents by 40%.
- Set up GitOps pipelines with FluxCD and administered Linux environments, improving deployment automation across teams.
- Kubernetes
- Docker
- FluxCD
- AWS IAM
- Linux
Mar 2023 — Feb 2024
Software Developer Intern — Cnetric Enterprise Solutions
Bangalore, India
- Integrated GraphQL Shopify endpoints and designed microservices in Node-RED, improving data-flow efficiency by 20%.
- Automated the CI/CD pipeline, accelerating the development lifecycle by 30% and cutting deployment errors by 25%.
- GraphQL
- Node-RED
- CI/CD
- E-commerce
04. Infrastructure Work
Selected platform initiatives I've led or built, told as problem → approach → outcome. Details are intentionally generic — the patterns are what matter.
K8S
Kubernetes Platform Migration
ProblemLegacy VM-based workloads were expensive and slow to scale.
BuiltA phased migration to Kubernetes (EKS): workload audit, right-sizing, autoscaling, and a cutover with rollback paths at every step.
Result40% lower infra cost, faster deployments, self-healing workloads.
- EKS
- Autoscaling
- Cost optimization
CI
Jenkins → GitHub Actions Migration
ProblemA sprawling Jenkins estate: high maintenance, snowflake pipelines.
BuiltDelivery rebuilt on GitHub Actions — reusable workflows, OIDC cloud auth with no long-lived keys, ArgoCD for GitOps deployment.
ResultPipelines as reviewable code, secretless auth, consistent releases.
- GitHub Actions
- OIDC
- ArgoCD
CFG
Ansible Configuration Migration
ProblemServer configuration lived in scripts and tribal knowledge.
BuiltEverything moved into Ansible — inventories, roles, idempotent playbooks — so any environment can be rebuilt or audited from source control.
ResultZero drift — config changes reviewed like code.
- Ansible
- IaC
- Idempotency
VCS
Bitbucket → GitHub Enterprise Migration
ProblemAn organization's entire source control needed to move — without losing history or trust.
BuiltFull repository migration with history, branch protections, team/permission mapping, and IAM aligned to security standards from day one.
ResultZero-loss migration with stronger access governance than before.
- GitHub
- IAM
- Branch protection
TST
Testing Infrastructure
ProblemReleases needed a safety net beyond unit tests.
BuiltTest infrastructure and automated environments that exercise changes realistically before they reach production.
ResultRegressions caught before customers see them.
- Test environments
- Automation
- Release safety
AI
AI Infrastructure & Tooling
ProblemTeams wanted AI capability; the platform had no safe way to provide it.
BuiltProvisioning for AI workloads and rollout of AI-assisted developer tooling — with access control, cost visibility and usage governance from the start.
ResultAI adoption with governance built in, not bolted on.
- AI workloads
- Developer tooling
- Guardrails
SEC
Security, Compliance & Governance
ProblemSecurity treated as an afterthought becomes audit pain and real risk.
BuiltLeast-privilege IAM across cloud and tooling, secrets management, vulnerability remediation cycles, security monitoring, and documentation that keeps audits calm.
ResultA platform that is compliant by construction — and provably so.
- Least privilege
- Audit readiness
- Monitoring
05. Projects
Command Execution Tool
Go backend API that executes OS commands with a real-time frontend for input and output — a small remote-ops console.
- Go
- Docker
- REST API
k8s-infra
Hands-on Kubernetes infrastructure lab — manifests, shell tooling and cluster experiments used for real platform learning.
- Kubernetes
- Shell
- Infra as Code
gke-learning
Google Kubernetes Engine deep-dive — multi-cloud K8s beyond EKS: cluster setup, workloads and GCP-native patterns.
- GKE
- GCP
- Kubernetes
mono-repo-flux
GitOps monorepo wired to FluxCD — declarative delivery where a git push is the deployment.
- FluxCD
- GitOps
- Kubernetes
Graphical Password Auth
Smart India Hackathon project — image-based authentication tested to resist brute-force and dictionary attacks.
- Django
- Security
- JavaScript
terraform-learn
Infrastructure-as-Code workbench — HCL modules and AWS provisioning patterns built from scratch.
- Terraform
- HCL
- AWS
06. Writing
I write plain-language deep-dives on infrastructure at harshitpaneri.hashnode.dev.
May 2026
HTTP vs HTTPS: A Plain-Language Guide to How the Internet Keeps Your Data Safe
Nov 2025
GitHub Actions to S3 Bucket Sync with OIDC Authentication
Sep 2025
Debugging Kubernetes Pods Stuck in Pending: A Step-by-Step Guide
Jun 2025
How to Set Up an AWS SFTP Server with S3 Integration
Apr 2025
How to Set Up Nginx as a Reverse Proxy with Free SSL (Let's Encrypt)
Sep 2023
From Closed Doors to Open Source
07. Certifications
Salesforce Associate
Salesforce platform fundamentals
MTA: Python Programming
Microsoft Technology Associate
Amazon ML Summer School
Machine learning program by Amazon
MongoDB Basics (M001)
MongoDB University
JavaScript Foundation
JavaScript fundamentals certification
IBM Web Development
Internship certification program
08. Community
Speaker — Google I/O Extended
Spoke at the Google I/O event hosted by GDG Udaipur.
Open Source
Worked with cloud-native open-source projects including Meshery (CNCF) and SigNoz; ran a 10★ Hacktoberfest starter repo for first-time contributors.
Mentorship
Mentor at Social of Code '23 and Script Winter of Code '22; DevRel mentee at Keploy 4.0.
GDSC & FOSS Communities
Organizer and active participant across Google Developer Student Clubs and FOSS events.
09. Contact
Let's build something reliable.
Whether it's an infrastructure problem worth solving, a role worth discussing, or just a good conversation about systems — my inbox is open.
Say hello