Rohan J. Tiwari

Work History

Site Reliability Engineer

SONY India Software Centre Pvt Ltd

Bangalore, KA

01.2021 - 12.2021

Managed 28+ production-level services as part of Site Reliability Engineering in Service Platform Team.
Implemented service deployments on AWS EC2 instances and EKS clusters.
Created and managed monitors and dashboards for services using Datadog and Splunk to enhance visibility and operational monitoring.
Monitored alert notifications and incidents in production Slack channels to ensure timely response and resolution.
Worked on Deployment of Services and Game Release in production.
Facilitated onboarding process for new services to ensure smooth integration.
Tools: Jenkins, GitHub, Grafana, Splunk, Spinnaker.

DevOps engineer

Standard Chartered Research & Technology Pvt. Ltd

Bangalore

11.2019 - 12.2021

Architected scalable and cost-effective AWS infrastructure solutions for production environments.
Implemented fault-tolerant EKS with horizontal, vertical, and cluster autoscaling.
Delivered container orchestration using Docker, Kubernetes, and Helm charts.
Worked on AWS services, including IAM, VPC, EC2, ECS, and EBS.
Implemented secure VPC to enhance isolation between web application and database layers.
Configured monitoring with Grafana, Prometheus, and CloudWatch dashboards.
Used Velero to back up clusters and restore during failures.
Implemented Lambda-based automated backups for EC2, RDS, and DocumentDB.
Facilitated log streaming from application and API Gateway to Kibana for analysis.
Configured essential utilities across Jenkins, Confluent Kafka, Graphite, and Squid to streamline development workflows.
Configured S3 access logs, CloudWatch Events, CloudTrail, and VPC flow logs.
Owned cloud cost and security controls for ongoing compliance.
Continuously evaluated server utilisation and reconfigured servers for fit.
Deployed CloudFront with Lambda Edge to block insecure HTTP headers.
Enabled CIS security benchmark programmes to strengthen cloud security posture.

Network Security Engineer

Bajaj Finance

Pune, Maharashtra

02.2026 - Current

Hybrid Firewall Administration: Deployed and Managed Palo Alto (NGFW) and Fortinet firewalls across on-premises and cloud environments, utilising Panorama for centralised control.
Implemented automated processes to enhance efficiency in applying security rules to cloud environments.: Built scripts to automate ticket-based rule changes across AWS, Azure, and OCI by dynamically searching for target VMs and applying rules directly to their associated security groups.
Multi-Cloud Network Architecture: Managed and integrated scalable network infrastructure across AWS, Azure, OCI to support diverse application needs.
Incident Resolution: Led troubleshooting efforts for complex network connectivity issues to ensure stable enterprise operations.
Deployment & Operations: Executed multi-project network deployments and resolved daily operational and connectivity tickets to maintain seamless network functionality.
Centralized Network Inventory: Developed an automation tool to consolidate network data from AWS, Azure, OCI into a single Excel report for enhanced visibility of VNet/VPC names, CIDRs, and firewalls.
Automated the deployment of default rules across all AWS SGs, Azure NSGs, and OCI Security Lists.

DevOps Engineer

UPTIQ.AI

Pune, Maharashtra

12.2025 - 02.2026

Deployed applications on Kubernetes using Terraform and built Bitbucket pipelines for automated builds.
Engineered Bitbucket pipelines for automated builds and Amazon ECR image management.
Optimised cloud spend through automation of resource management with optimisation tools and inventory-tracking scripts.
Developed CloudFormation templates and start/stop scripts to schedule resources and cut non-production compute costs.
Automated GCP Cloud SQL (PostgreSQL) migrations and archival workflows, enhancing reliability of backups and transfers.
Aligned infrastructure design with business model, streamlining deployment lifecycle across AWS and GCP.
Provided application security hardening solutions and enforced best practices across cloud platforms.

Network Engineer

Pine-labs

Pune, Maharashtra

05.2025 - 12.2025

Managing multi-account and multi-region connectivity in AWS using Transit Gateway and proper NACL configurations.
Managed and supported infrastructure for Pine Labs, optimising performance of AWS servers, Palo Alto firewalls, and Microsoft Active Directory.
Monitoring infrastructure health, ensuring system availability, and applying necessary updates or patches as per schedule.
Handled user onboarding/offboarding by adding/removing users in Windows AD and configuring access for seamless connectivity on Palo Alto VPN.
Executed regular BAU tasks based on JIRA tickets, resolving incidents, managing user access, and provisioning resources effectively.

DevOps Engineer

Jio Finance

Mumbai, Maharashtra

05.2025 - 06.2025

Deployed 3 applications with configuration variables and secrets, ensuring secure and consistent environments.
Configured and deployed ingress load balancer controller to optimise traffic routing and enhance application accessibility.
Enabled secure connectivity between applications and the on-premises database.
Established a site-to-site VPN tunnel for AWS and on-premises communication.
Attached persistent volumes to each application for lasting stored data.
Completed POC for Jio Finance project, validating core approach and potential for implementation.

DevOps Engineer

Tata Power

Mumbai, Maharashtra

04.2025 - 05.2025

Developed GitLab CI/CD pipelines to deploy infrastructure across multiple AWS accounts.
Designed and deployed reusable Terraform modules across AWS environments to streamline service provisioning.
Designed a strategic plan to automate infrastructure provisioning using Terraform integrated with GitLab CI/CD pipelines.
Onboarded existing infrastructure into Terraform state using Terraform import method to ensure consistent management.

DevOps Engineer

Airtel Payment Bank Pvt Ltd

Gurugram

05.2024 - 04.2025

Utilised AWS services, including EMR, MSK, Airflow, OpenSearch, and EC2.
Developed CloudFormation templates for both Single-AZ and Multi-AZ configurations of EMR, MSK, Airflow, and OpenSearch.
Automated the deployment of CloudFormation templates through Jenkins.
Collaborated with APB team on data migration from on-premises to AWS, facilitating seamless transition.
Created and restored snapshots in OpenSearch service to ensure data availability and reliability.
Contributed to the GenAI project by setting up AWS Bedrock services for application support.
Worked with AWS services such as EC2, CloudWatch, SQS, Lambda functions, and S3 for the Digilocker application.
Designed the network architecture for a Data Science project.
Designed the network architecture and application workflow for the Digi-Locker Application in Airtel Payment Bank.

Associate Architect

Yes Securities Pvt Ltd

Mumbai

04.2024 - 05.2024

Reviewed security architecture and network, ensuring alignment with established best practices to enhance overall security posture.
Specified design solutions that met client requirements and adhered to agreed specifications, facilitating smooth project execution.

Migration and Network Engineer

Religare Broking Pvt. Ltd

Noida, UP

01.2022 - 03.2024

Designed the AWS Landing Zone and overall network architecture.
Set up connectivity between Religare’s on-premises environment and AWS using Direct Connect.
Configured Direct Connect between DR sites.
Established Transit Gateway peering between two regions for inter-region connectivity.
Established connectivity across environment VPCs using Transit Gateway.
Deployed a Palo Alto firewall within the network account.
Configured Control Tower to enforce AWS security best practices across all enrolled accounts.
Migrated application servers from on-premises to the AWS cloud using the Application Migration Service.
Migrated Oracle databases to RDS using Database Migration Service with CDC.
Migrated on-premises Oracle databases using Data Pump with S3 integration to RDS.
Configured Storage Gateway with Amazon S3 File Gateway and Volume Gateway.
Configured failover clusters on Windows Server using Storage Gateway.
Set up Amazon FSx for Windows File Server.
Created a Windows failover cluster with SQL Server Always On High Availability Group, utilising two Windows servers.
Configured the CloudWatch Agent and custom metrics on private servers.
Designed network architecture for disaster recovery (DR) to ensure service continuity and data protection.
Installed Device42 on on-premises servers to extract dependencies, infrastructure details, compute, network, communication ports, service communication, and topology.
Created affinity groups and business applications in Device42 to provide insights, including TCO, device, communication, AWS recommendation cost, and utilization reports.
Led the migration of applications from the Mumbai (Primary) region to the Hyderabad (DR) region.
Set up multicast within Religare's environment using Transit Gateway.
Deployed the Discovery Agent in vCenter to gather details and information on on-premises servers.

Summary

Overview

Work History

Site Reliability Engineer

DevOps engineer

Network Security Engineer

DevOps Engineer

Network Engineer

DevOps Engineer

DevOps Engineer

DevOps Engineer

Associate Architect

Migration and Network Engineer

Education

Electronics & Telecommunication Engineering -

Higher And Secondary Studies -

SSC -

Skills

Certification

Timeline