Available for new work
Sanjay.
DevOps & AWS Cloud Engineer Chennai, India
Cloud engineer at Compunet Connections. I manage AWS infrastructure and deployments for client applications, from CI/CD pipelines to locked-down servers.
View Projects Last playedSong title — Artist
// About
I build and manage AWS infrastructure for client applications, with a focus on reliable deployments and secure, automated operations.
- Cloud infrastructureBuilt complete AWS dev, staging and production environments with VPC, EC2, RDS, S3 and CloudFront.
- CI/CD automationAutomated application deployments by migrating from manual releases to CI/CD pipelines using Jenkins, Bitbucket Pipelines, AWS CodePipeline and CodeBuild.
- Linux server securityHardened a production Ubuntu server with key-only SSH, default-deny iptables rules and outbound filtering, making Nginx the only public entry point for applications.
- AWS securityReplaced EC2 SSH access with SSM Session Manager, kept RDS private and encrypted with credentials in Secrets Manager, and served private S3 content through CloudFront using Origin Access Control.
// Education
Where I studied.
-
2022 — 2026
B.E. Computer Science and EngineeringRajalakshmi Engineering College, Chennai · CGPA 7.41
-
2021 — 2022
Class 12Sri Chaitanya Techno School · Grade 80.2%
-
2019 — 2020
Class 10PSBB Millennium School · Grade 81.4%
- AWS
- Jenkins
- Docker
- Ubuntu
- Nginx
- Bash
- Python
- MySQL
- PostgreSQL
- Redis
- Git
- GitHub
- GitHub Actions
- Bitbucket
- Prometheus
- Grafana
// Tools
The stack behind the work.
The cloud, automation and infrastructure tools I work with.
Cloud (AWS)
- EC2
- VPC
- S3
- RDS
- CloudFront
- IAM
- CloudWatch
- CloudFormation
- Systems Manager
- Secrets Manager
- SNS
- SES
- ACM
CI/CD & Containers
- Jenkins
- GitHub Actions
- Bitbucket Pipelines
- CodePipeline
- CodeBuild
- Docker
- Docker Compose
Monitoring
- Prometheus
- Alertmanager
- Grafana
- Loki
Linux & Web Servers
- Ubuntu
- Nginx
- systemd
- iptables
- SSH
Scripting
- Bash
- Python
Databases
- MySQL
- PostgreSQL
- Redis
Version Control
- Git
- GitHub
- Bitbucket
// Selected work
Three projects, each with its own signal.
01 / Role · Year
Project One
A short summary of the problem, what you did about it, and what changed because of your work.
- +00% Key result
- 00k People reached
02 / Role · Year
Project Two
A short summary of the problem, what you did about it, and what changed because of your work.
- −00% Time saved
- 0× Faster delivery
03 / Role · Year
Project Three
A short summary of the problem, what you did about it, and what changed because of your work.
- +00% Key result
- 00 Awards or launches
// Experience
Where I've worked.
-
Ongoing
AWS DevOps Engineer
Compunet Connections
Retrex · AWS staging environment in Sydney · Sep — Oct 2026
- Built a production-mirroring staging environment in AWS Sydney for a three-service property platform (React frontend, PHP/Lumen API with 421 routes, Go service): VPC, EC2, RDS MySQL 8.4, a private S3 bucket behind CloudFront with Origin Access Control, ACM and Secrets Manager.
- Kept it at about $68 a month, a third of the $186 production design, by leaving out the NAT Gateway, load balancer and WAF and letting the server's HTTPS port accept traffic only from CloudFront.
- Moved the 142-table MySQL database into encrypted, private RDS, re-dumping it with hex-encoded binaries and utf8mb4 after a UTF-16 dump corrupted the geometry columns.
- Secured it end to end: HTTPS all the way to the server, SSM Session Manager instead of SSH, IMDSv2, an instance role that can read only one secret, and a config audit before go-live. A code review of the Go service found 12 deployment issues, including bearer tokens written to request logs.
- Fixed the launch blockers:
.envand.gitdownloadable from the web root, a 403 on/api/, a 502 behind CloudFront, and every Go signup failing on migrations missing from the repository. - Set up monitoring and email: 7 CloudWatch alarms across two regions with SNS alerts, custom memory and disk metrics, and Amazon SES with DKIM, SPF and DMARC all passing.
- Confirmed the API returns byte-identical responses to the source environment, and wrote the staging and production plans, 29-step build runbooks, a CloudFormation import plan and a CodePipeline / CodeBuild CI/CD plan.
// Contact