Senior Platform Engineer with 12 years of infrastructure operations experience designing, deploying, and operating secure, scalable, and highly available cloud platforms across Azure, AWS, and OCI.
I specialize in regulated, mission-critical environments — banking and financial services payment platforms, enterprise SaaS cloud migrations, and hybrid-cloud platform engineering — where GitOps, DevSecOps, and compliance-by-design are non-negotiable.
Certified Red Hat OpenShift, HashiCorp Terraform & ITIL — actively pursuing RHCA in OpenShift. I make the secure path the easy path for development and operations teams.
| Project | Description | Stack |
|---|---|---|
| openshift-single-node-upgrade-disconnected | SOP and runbook toolkit for disconnected OpenShift SNO upgrades (4.18), covering preflight gates, mirror validation, troubleshooting, and manifests | OpenShift Shell oc-mirror Quay |
| Infra-Projects-Azure | Azure OpenShift (ARO) infrastructure monorepo — layered Terraform for network, DNS, identity, Key Vault, ACR, and ARO cluster plus CI/CD and GitOps scaffolds | Terraform Azure ARO Key Vault ACR |
| openshift-sno-azure | Single Node OpenShift on Azure via supported IPI (openshift-install); Terraform owns DNS, installer owns cluster lifecycle |
OpenShift Azure Terraform Shell |
| rhel-automation-lab | Destroyable AWS RHEL automation lab — Terraform VPC/EC2, Ansible over SSH bastion, RHEL 9/10 nodes, GitHub Actions validate-only CI | Terraform AWS Ansible RHEL GitHub Actions |
| aztf-aks-gitops | Enterprise Azure AKS IaC framework with modular Terraform, private cluster patterns, and Flux v2 GitOps (Helm, Kustomize, Flagger) | Terraform AKS Flux Helm Kustomize |
| awx-selfhosted | Self-hosted AWX lab on k3s with operator-based install, setup docs, and lifecycle runbooks | AWX Ansible k3s Docker PostgreSQL |
Deep hands-on experience building and operating banking-grade platforms across APAC — from legacy payment modernisation to cloud-native OpenShift delivery in highly regulated environments.
banking_platforms:
- APAC payment hub modernisation (CMS migration from legacy payment rails)
- Multi-country, multi-region payment processing on OpenShift (on-prem + ARO)
- Core banking middleware: WebLogic, Oracle Payment stack, Treasury & Cash Management (VAM)
- Hybrid-cloud banking workloads on AWS with HA connectivity and DR design
compliance_governance:
- MAS TRM · PCI DSS · CIS Benchmarks
- RBAC · NetworkPolicy · Pod Security Standards · OAuth/OIDC federation
- Audit-ready GitOps pipelines with automated approvals and release traceability| Layer | Technologies |
|---|---|
| Platform | Azure Red Hat OpenShift (ARO), OpenShift 4.x, Kubernetes, Azure API Management |
| Payments & Middleware | WebLogic, Oracle Payment stack, VAM, Apache Tomcat |
| IaC & GitOps | Terraform, Argo CD, Helm, Kustomize, Azure DevOps |
| Security & Compliance | ACS, Sentinel, Defender for Cloud, OAuth/OIDC, Azure WAF |
| Observability & SRE | Prometheus, Grafana, Loki, Splunk, Azure Monitor, Application Insights |
| Cloud | Azure (primary), AWS (hybrid banking), on-premises VMware |
Led a large-scale Oracle Service Cloud (OSvC) platform migration — a global lift-and-shift programme moving 400+ production workloads from legacy hosting to Oracle Cloud Infrastructure (OCI) with zero-compromise on availability, security, and operational continuity.
OSvC (Oracle Service Cloud), formerly RightNow CX, is Oracle's enterprise CRM and customer service SaaS platform — supporting globally distributed, multi-tenant application estates at scale.
programme:
name: Oracle Service Cloud (OSvC) — OCI Lift-and-Shift
scale: 400+ workloads · globally distributed · multi-region
strategy: Terraform-driven provisioning · phased cutover · HA/DR validated
workload_types:
- Oracle WebLogic application servers
- Oracle database & middleware tiers
- Kafka / ZooKeeper messaging clusters
- Consul service discovery & configuration
- F5 BIG-IP load-balanced frontends
- Hosting Management System (HMS) platform lifecycle| Layer | Technologies |
|---|---|
| Cloud Target | Oracle Cloud Infrastructure (OCI) — Compute, Networking, IAM, Block Storage |
| IaC & Automation | Terraform (modular, remote state), Ansible (middleware provisioning) |
| CI/CD & Orchestration | Jenkins, Rundeck, container-based deployment workflows |
| Middleware & Apps | Oracle WebLogic, Oracle Database, Apache Tomcat |
| Messaging & Discovery | Apache Kafka, ZooKeeper, HashiCorp Consul |
| Load Balancing & Security | F5 BIG-IP (LTM/ASM), SSL/TLS termination, iRules, WAF policies |
| Platform Operations | HMS (Hosting Management System), Nagios, formal RCA processes |
| Scripting | Python, Bash, Shell, YAML |
| Platform Architecture | Security & Compliance | Operations & SRE |
|---|---|---|
| Hybrid & multi-cloud design (Azure/AWS/OCI) | PCI DSS · MAS TRM · CIS Benchmarks | Observability · Incident Response · RCA |
| OpenShift / AKS / EKS platform engineering | DevSecOps · shift-left security | DR & HA design · BCP validation |
| Self-service & GitOps platform models | IAM · RBAC · OAuth/OIDC federation | SLO/SLI · proactive alerting |
| Infrastructure as Code at enterprise scale | Container scanning · admission controls | Cost optimization · FinOps alignment |
| Enterprise SaaS cloud migration (lift-and-shift) | SIEM · CSPM · WAF · network segmentation | Day-2 ops · drift detection · remediation |
☁️ Cloud Platforms & Virtualization
| Category | Tools & Services |
|---|---|
| Microsoft Azure | ARO, AKS, Azure Arc, AVS, Azure Migrate, Azure Firewall, VPN, NSGs, DNS, Load Balancer, ACI, API Management, Key Vault |
| Amazon Web Services | EC2, EKS, VPC, Route 53, ALB/NLB, S3, IAM, ACM, Auto Scaling, CloudWatch, VPC Flow Logs |
| Oracle Cloud (OCI) | Compute, VCN, IAM, Block Storage — OSvC lift-and-shift at 400+ workload scale |
| On-Premises | VMware vSphere/ESXi, hybrid cloud interconnectivity |
☸️ Kubernetes, OpenShift & Platform Engineering
| Category | Tools & Services |
|---|---|
| Orchestration | OpenShift 4.x (OCP/ARO), Kubernetes (AKS, EKS), Docker |
| Multi-Cluster Ops | Red Hat Advanced Cluster Management (ACM), GitOps promotion workflows |
| Security | Red Hat Advanced Cluster Security (ACS/roxctl), Pod Security Standards, NetworkPolicy, Trivy |
| Packaging & Delivery | Helm, Kustomize, Flux CD, Argo CD |
| Middleware | WebLogic, Apache Tomcat, Kafka/ZK, Consul |
🏗️ Infrastructure as Code & Automation
| Category | Tools & Services |
|---|---|
| IaC | Terraform (modular, remote state, policy-as-code), Ansible Core |
| Enterprise Automation | Ansible Automation Controller (AWX), custom roles & collections |
| OS Lifecycle | Red Hat Satellite — patching, Content Views, compliance reporting |
| Runbook Automation | Rundeck, Jenkins pipeline orchestration |
🔄 CI/CD, GitOps & DevSecOps
| Category | Tools & Services |
|---|---|
| CI/CD Platforms | Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins |
| GitOps | Flux CD, Argo CD (declarative deploys, health checks, progressive delivery) |
| Quality & Security Gates | SonarQube, Trivy, ACS image scanning, automated approvals |
| Release Strategies | Blue-Green, Rolling deployments, audit-ready release pipelines |
🛡️ Security, Identity & Networking
| Category | Tools & Services |
|---|---|
| Identity & Access | IAM, RBAC, OAuth/OIDC, Azure AD / LDAP federation |
| Cloud Security | Microsoft Defender for Cloud, Sentinel (SIEM), CSPM, Azure WAF |
| Load Balancing & Traffic | F5 BIG-IP (LTM/ASM), iRules, SSL offload, HA failover |
| Compliance Frameworks | PCI DSS, MAS TRM, CIS Benchmarks, SVA/SCA remediation |
📊 Observability & Tooling
| Category | Tools & Services |
|---|---|
| Metrics & Dashboards | Prometheus, Grafana, Azure Monitor, Application Insights, Log Analytics |
| Logging & SIEM | Loki, Splunk, Microsoft Sentinel, Nagios, Zabbix |
| Collaboration & ITSM | Jira, Confluence, ServiceNow, Slack, GitHub |
💻 Languages & Scripting
Python · Bash · Shell · YAML · HTML/CSS · HCL (Terraform)
Active / No Expiry · In Progress · Inactive
| Certification | Provider | Status |
|---|---|---|
| Red Hat Certified Specialist in OpenShift Advanced Cluster Management | Red Hat | Active · exp. 2029 |
| Red Hat Certified Specialist in OpenShift Advanced Cluster Security | Red Hat | Active · exp. 2029 |
| Red Hat Certified OpenShift Administrator (EX280) | Red Hat | Active · exp. 2029 |
| Red Hat Certified Specialist in OpenShift Automation & Integration (EX380) | Red Hat | Active · exp. 2029 |
| HashiCorp Terraform Associate (003) | HashiCorp | Active · exp. 2027 |
| ITIL 4 Foundation | AXELOS | No Expiry |
| Red Hat Certified Architect in OpenShift (RHCA) | Red Hat | In Progress |
| Red Hat Certified Specialist in Ansible Automation Platform | Red Hat | In Progress |
| Red Hat Certified Engineer (RHCE) | Red Hat | Inactive |
| Microsoft Certified: Azure Administrator Associate (AZ-104) | Microsoft | Inactive |
| Oracle Cloud Infrastructure Certified Architect Professional | Oracle | Inactive |
Open to conversations about platform architecture, banking infrastructure, Oracle cloud migrations, OpenShift/Kubernetes, and reliable cloud-native delivery.
"Create a clear path forward, make the secure path the easy path, and leave systems stronger than you found them."