Asik R.

Designed a multi-region architecture with automatic failover for a microservices application. Transitioned Infrastructure as Code from Terraform to Crossplane for various resources, including VPC, EKS, and RDS, enabling GitOps-based provisioning. Managed GitOps implementation with ArgoCD, configuring SSO with Dex, and utilized auto-image-updater along with the apps-of-apps pattern for deploying helm charts to multiple EKS clusters. Converted nginx-ingress to Traefik and Istio ingress gateway for applications. Developed a GitHub Actions pipeline to manage CI and artifact pushes to ECR and Nexus. Handled multiple RDS PostgreSQL databases and Redis clusters while configuring cross-region replication. Established a monitoring stack utilizing Grafana and Loki for logging and alerts.

Engineered a multi-environment network architecture in AWS featuring centralized monitoring, security, and governance through automation. Developed automated deployment pipelines coupled with a self-service portal, facilitating independent application releases and rollbacks by development teams. Led the design of an active-passive fault tolerance production environment and executed chaos engineering tests. Transitioned over 15 Terraform modules to Terragrunt for AWS/GCP resources, instituting testing protocols for all Infrastructure as Code modules utilizing Inspec. Oversaw autoscaling for several gRPC core services via KEDA and Istio, using custom metrics. Managed 12+ Kubernetes clusters across 6 environments, with enabled Istio service-mesh monitoring and alerting on the LGTM stack using OpenTelemetry. Implemented cross-region replication for Amazon RDS and ElastiCache, executing MySQL schema migrations with golang-migrate. Conducted bi-weekly releases in the RTL environment and managed deployments across multiple customer environments. Upgraded Jenkins nodes on the EKS cluster to version 1.32 and migrated CI pipelines to Kaniko, resulting in a 30% reduction in CI time. Enforced security compliance standards such as SOC2 and ISO-27001 with tools like Cloud Custodian and SecurityHub.

Led design efforts for multiple self-hosted Kubernetes clusters employing Cluster-API on AWS and GCP, supporting application and data science workloads, along with monitoring via ELK and Prometheus. Implemented continuous integration and deployment (CI/CD) pipelines within Jenkins to automate build, testing, and deployment processes to EKS and Lambda, also incorporating smoke testing. Established a multi-environment setup featuring VPC and private EKS cluster using Terragrunt, aligned with security best practices. Developed environments adhering to ISO 27001 standards using Terraform and Ansible, complemented with a standard disaster recovery plan.

Created over 25 Ansible roles aimed at automating routine tasks for development teams, integrated into CI systems. Configured high-availability RDS (Postgres) with fault tolerance features, including standalone DB and read replicas. Developed and implemented Filebeat for the ELK stack across multiple Kubernetes clusters and critical applications, leveraging OpenTelemetry for alert management. Utilized Kubernetes jobs for data science workloads on spot instance nodes to achieve cost savings. Managed Kubernetes clusters and nodes, ensuring seamless updates to newer versions without introducing downtime. Contributed to ChatOps development by automating existing tools using a Slack Chatbot implemented in Python.