Brijesh Behera

Project Name: Enforcing Kubernetes Cluster Security Policies & Governance Using Kyverno

• Objective: Implement Kubernetes-native security policies using Kyverno to enforce security, compliance, and governance across EKS clusters hosting microservices
• Designed and implemented Kubernetes policy-as-code framework using Kyverno across multi-environment EKS clusters.
• Enforced security controls for all microservices, ensuring all workloads complied with organizational security standards before deployment.
• Integrated Kyverno with GitOps workflows using Argo CD, enabling automated compliance validation and governance.
• Improved cluster security posture by enforcing non-root execution, least-privilege access, resource governance, and workload & label standardization.
• Project Name: Virtual Validation Platform
• Objective: Virtual Validation Platform (VVP) is a cloud-native platform used to perform virtual testing and validation of automotive software components before deployment to physical vehicles.
• Role & Responsibilities:
• Designed and maintained Kubernetes-based infrastructure for hosting automotive validation workloads.
• Automated infrastructure provisioning using Terraform and reusable modules.
• Built and managed CI/CD pipelines using Jenkins for automated build, testing, and deployment.
• Containerized applications and simulation services using Docker.
• Developed Helm charts for standardized application deployments across environments.
• Integrated SonarQube and JFrog Artifactory into CI/CD pipelines to improve code quality and artifact management.
• Implemented container image vulnerability scanning using Trivy before deployment.
• Managed Kubernetes deployments, services, ingress controllers, ConfigMaps, Secrets, and persistent storage.
• Implemented observability platform using Prometheus and Grafana, reducing incident detection time.
• Developed reusable Terraform modules reducing infrastructure provisioning time by 70%.
• Managed cloud resources and networking components to ensure scalability, security, and high availability.
• Tools and Technologies: Kubernetes (EKS), AWS Cloud, Kyverno, Python, shell, Prometheus, Grafana, ArgoCD, Hashicorp vaults, Terraform, Shell scripts, Istio, External DNS.

Project Name: Cloud Migration and DevOps Transformation

• Objective: Migration of enterprise applications from on-premises infrastructure to AWS cloud while driving a DevOps transformation initiative. The project focused on modernizing application deployment processes, automating infrastructure provisioning, improving scalability, and enhancing operational efficiency through cloud-native technologies and CI/CD automation.
• Roles & Responsibilities:
• Planned and executed migration of applications, databases, and services from on-premises environments to AWS.
• Designed and implemented cloud infrastructure using Infrastructure as Code (Terraform).
• Built and standardized CI/CD pipelines using Jenkins for automated build, test, and deployment workflows.
• Containerized applications and orchestrated workloads using Kubernetes and Docker.
• Designed highly available and scalable architectures using EC2, Auto Scaling Groups, ALB, and Multi-AZ deployments.
• Established security best practices including IAM role-based access control, secrets management, and vulnerability scanning.
• Containerized applications with Docker and vulnerability scanning using Trivy.

Project Name: Linux Server & CPU Validation & K8s Cluster Setup

• Objective: Manage an On-Prem K8s Cluster nodes, Labelling and running Workloads on K8s Cluster Environment. Server & CPU Validation, Analysis logs & triage on Workloads.
• Created and managed On-Prem Kubernetes cluster using kubeadm
• Created and managed Docker images and container
• Created and managed Jenkins jobs for automated builds
• Understanding of container orchestration concepts using Kubernetes
• Deployed and managed containerized workloads on Kubernetes clusters
• Familiar with core components: Pods, Services, Deployments, and Namespaces

Project Name: Intel Linux Server & Processor Validation

• Validating different Linux drivers with OS Responsible for Bug Reporting & Tracking through Bug Reporting Tool
• Validated Intel Apache Pass DIMMs on Intel platforms using Fedora Linux, BIOS, and BMC, adhering to Intel's Best-Known Configuration.
• Tested Apache Pass DIMM combinations with DDR4 DIMMs on a dual-host setup (Windows Host and Linux Target) via VNC and ITP.
• Executed power loads and cycle tests using the command center and custom Python cascade scripts.
• Managed BIOS, AEP FW, MGMTSW testing, kernel flashing, and OS installations (RHEL, SLES, VMware, Windows via PXE).
• Monitored DIMM and temperature sensors through BMC, tracked defects, and debugged boot and functional issues during daily sync meetings.