ARUN KUMAR

• • Architected and deployed an enterprise Claude AI Gateway on AWS ECS Fargate using AWS CDK/TypeScript, standardizing corporate access to Anthropic Claude via Amazon Bedrock.
  
  • Integrated Okta OIDC using RFC 8628 Device Authorization Flow, replacing static API keys with temporary signed JWT session tokens for secure corporate SSO.
  
  • Developed a PostgreSQL-based AI budget governance engine with configurable daily/weekly/monthly spend limits for users, groups, and organizations, with automated 429 rate-limiting circuit breakers.
  
  • Designed highly available private VPC architecture with internal IPv4 ALB, TLS 1.3 ACM termination, Route 53 private hosted zones, and 3-tier Security Group isolation.
  
  • Implemented AWS OpenTelemetry (ADOT) Collector sidecars for OTLP metrics and audit logging to CloudWatch, enabling real-time observability and compliance monitoring.
  
  • Deployed enterprise AI workloads using Microsoft Azure AI Foundry and configured secure, scalable AI application and model deployment environments.
  
  • Deployed and managed Azure Web Apps (App Service), including application configuration, environment-specific settings, identity/access controls, and monitoring.
  
  • Designed multi-AZ ALB and EC2 Auto Scaling infrastructure across private subnets, achieving 99.99% uptime for core application services.
  
  • Hardened administrative and outbound connectivity using NAT Gateways, bastion-controlled SSH access, and restricted private-origin access.

• Implemented non-production server start/stop automation, Reserved Instance planning, and monthly utilization-based right-sizing to optimize cloud costs.

• Built centralized Grafana SLA dashboards covering ~10 P1, 50 P2, and 150+ P3 incidents/month, with real-time P1 alerting.

Project: AWS & Azure Managed Services | Multi-Cloud Windows/Linux | Enterprise Claude AI Gateway & Governance Platform

• Managed AWS cloud infrastructure including EC2, VPC, and CloudWatch monitoring for production workloads.
• Administered Linux servers and Active Directory environments, supporting high availability and security.
• Deployed and maintained Zabbix for infrastructure and network monitoring.

• Provided technical support for Outlook, hardware, operating systems, and general IT issues raised by end users.
• Resolved incidents within SLA targets and contributed to consistent end-user service levels.