Chaman Pandey

• Designed secure, multi-account and multi-region AWS infrastructure Landing Zone using hub-spoke networking model (Transit Gateway, Direct Connect Gateway, VPN failover, DNS resolver endpoints) for existing FinTech workload.
• Up to 85% cost reduction by using a Direct Connect Gateway Instead of provisioning 30 private VIFs (1/account).
• >99.9% availability via automated failover from Direct Connect to Site-to-Site VPN using BGP health checks and Transit Gateway route propagation.
• >70% reduction in route table management complexity.
• Automated tagging enforcement and budget alerts across 6,000+ AWS resources using Lambda and Config, SCP.
• Led CSPM initiative using Cloudtrail, Security Hub, Config Custom Rules, Macie and integrated alerting workflows (lambda and event bridge) which resulted in 50% reduction in MTTR of security incidents and 95% compliance of security controls.
• Architected private API access using AWS PrivateLink and Central Network firewall deployment for compliance-grade applications resulting approximately 3100 USD per month saving.
• Piloted GenAI-powered usecases of Cloud Cost Analysis, Natural Language to PromQL Translation Engine and EKS monitoring & troubleshooting using Amazon Bedrock (Sonnet 3.7) + MCP Server.
• Conducted AWS ORR audits for 10+ mission critical workloads (UPI, PG, CDL), improving disaster recovery readiness by 30% by achieving the RPO in near realtime (few ms) and RTO in 10s of minutes.
• Led the initiative for graviton migration for better price performance upto 20%.
• Achieved 24% saving over On-demand prices by RI and Savings Plan purchase at 80% coverage.

• Migrated 120+ applications from on-premises data center to AWS across 2 BFSI clients, ensuring zero unplanned downtime and meeting strict compliance (PCI-DSS, RBI guidelines)
• Reduced average infra provisioning time by ~65% (from 15 days to 5 days) using automated CloudFormation templates.
• Migrated 35 TB of unstructured HR and Finance data to S3 buckets with zero data loss, leveraging DataSync with continuous scheduled replication.
• Improved workload availability to 99.98% by architecting multi-AZ failover using Amazon RDS Multi-AZ, Elastic Load Balancer, and Route 53 health checks.

• Reduced deployment time by ~70% by implementing CI/CD pipelines using Jenkins, GitHub Actions, Docker, and SonarQube across multiple environments through fully automated build-test-deploy workflows, improving release frequency from bi-weekly to daily in selected services.
• Achieved 100% consistency in deployments across 5+ Product Lines by standardizing automation using Terraform and Ansible.
• Enabled early defect detection by integrating SonarQube code quality checks, reducing production bugs by ~35% over 3 release cycles.
• Implemented Trivy-based vulnerability scanning in CI pipelines, leading to 100% compliance with container security benchmarks in regulated BFSI workloads.

• Built 20+ observability dashboards using CloudWatch, Prometheus, and Grafana, reducing MTTR by ~40% through faster root cause identification.
• Collaborated with InfoSec to close 100+ cloud security findings, achieving >95% compliance with CIS benchmarks and improving audit readiness scores.
• Authored and maintained 30+ operational runbooks and playbooks covering backup, failover, patching, and incident response, reducing escalations by 60% during after-hours support.

Middleware Admin – HCL & MPhasis (2010–2012)
- Performed L3 support and automation of IBM WebSphere infra for energy sector clients.
- Delivered performance tuning and patch management across PROD/DR environments.

Build & Release Engineer – IBM (2009–2010)
- Automated Java build pipelines using ANT and IBM Rational Build Forge.
- Managed release coordination and deployment processes & documentations.

Java Developer – IBM (2007–2009)
- Developed IBM internal apps and participated in unit/system testing cycles.
- Worked on code review with release teams for stable deployments.