Ankur Chauhan

Results-driven DevOps Engineer with extensive experience in enhancing reliability and availability through expert CI/CD pipeline implementation. Skilled in Infrastructure as Code (IaC) using Terraform, containerization (Docker, Kubernetes), and monitoring tools (Prometheus, Grafana). Proven ability to execute upgrades with zero downtime. Adept at fostering collaborative DevOps culture and optimizing development and operations for accelerated, high-quality software delivery. Critical thinking DevOps Engineer with extensive understanding of high availability architecture and concepts. Purpose-driven professional with capacity to be strong team player plus work effectively independently.

On prem to Cloud Migration

• Migration of on prem stack to cloud stack all three layers
• Setting up cloud stacks
• Migrating without any impact and zero down time

Stack setups

• Established robust 3-tier application stacks on major cloud platforms, optimizing scalability
• and performance
• Handling them and making them live
• Making sure of scalability and availability of the stack

Security and PCI compliance

• Insuring stack security
• AMI Harding , Security Group Harding
• Implementing wazuh and Suricata

Architecture updates

• Identify major issue causing mysterious 502's in architecture
• Moved CLB to ALB with proper configuration
• Rolled out changes in 12 regions without impact

WS Service Upgrade 

• Upgraded 10+ production MySQL servers, including a 4 TB database, in a 30-minute window with zero downtime or data loss.
• Executed a seamless Amazon MSK (Managed Streaming for Apache Kafka) upgrade, ensuring no data loss and minimal impact on running services.

Terraform EKS Module Upgrade 

• Led the upgrade of a Terraform EKS module to incorporate best practices for scalability, high availability, and security.

SSL Certificate Renewal for 1000+ Domains (Zero-Downtime)

• Developed and implemented a Blue-Green deployment strategy for SSL certificates, ensuring seamless validation and switch-over without impacting active traffic.
• Configured load balancers (AWS ALB/NLB, NGINX) to dynamically update certificates, ensuring no dropped connections or performance degradation.
• Leveraged the ACME protocol for automated certificate renewals, using DNS validation for enhanced security and operational efficiency.