Sachin Vettiyattil

Platform Engineering | Azure Government Cloud | FedRAMP-Aligned Infrastructure

• Designed and enhanced KubePilot, a Kubernetes-based infrastructure automation framework using Terraform and GitOps principles for Azure Government Cloud, reducing infrastructure provisioning time by 50%.
• Built modular Infra Deployer framework using Terraform and GitHub Actions, standardizing service onboarding and enhancing deployment consistency.
• Architected secure AKS private cluster environments aligned with FedRAMP Moderate controls, implementing hardened networking, RBAC, Azure Policy, private endpoints, and Key Vault integrations.
• Implemented OIDC-based federated identity authentication in CI/CD pipelines, eliminating static credentials and improving security posture.
• Established secure Terraform backend state management with encryption and role-based access controls, safeguarding sensitive infrastructure data.
• Implemented Prometheus and Grafana-based observability frameworks aligned to SLI/SLO metrics, reducing MTTR by 35%.
• Automated AES-GCM-based secret encryption workflows with Azure Key Vault, ensuring secure multi-environment deployments.
• Contributed to scalable platform architecture decisions supporting compliant federal cloud workloads.

• Developed a one-click deployment solution using Terraform, GitLab CI, Azure Bicep, and PowerShell, reducing environment provisioning time by 40%.
• Implemented ArgoCD App-of-Apps GitOps architecture across microservices, improving deployment consistency and reducing release failures.
• Automated certificate rotation in Kubernetes, eliminating certificate-related outages and improving uptime to 99.99%.
• Implemented proactive monitoring with Prometheus and Grafana, achieving 45% reduction in MTTR.
• Led migration of MySQL Single Server to Flexible Server in Azure, ensuring near-zero downtime.
• Migrated Vertica databases across Linux distributions, enhancing system stability and security posture.
• Contributed to Azure Landing Zone migration during Pay-As-You-Go to Enterprise Agreement transition.
• Owned availability, reliability, performance, and capacity planning of production systems.
• Conducted detailed root cause analyses for critical incidents, significantly reducing recurring issues.

• Directed infrastructure setup for UAT and Production environments, improving deployment reliability.
• Implemented Blue-Green deployment strategies, reducing release-related outages by 35%.
• Managed L3/L4 production support in 24/7 environments, achieving SLA compliance of 98%.
• Executed security patching, password rotations, and application builds to strengthen operational security.
• Led incident troubleshooting and root cause analysis, reducing repeat incidents by 30%.
• Partnered with development teams to implement bug fixes and enhancements, maintaining operational continuity.

Career Progression Impact:
This role marked the transition from reactive production support to automation-driven DevOps engineering, forming the foundation for modern SRE and platform reliability practices.

• Built virtual networks, cloud services, and SQL Server environments in Microsoft Azure.
• Facilitated workload migration to Azure CSP subscriptions, enhancing operational efficiency.
• Optimized Azure Pay-As-You-Go subscriptions, improving cost management and performance.
• Provided hands-on troubleshooting and support for client cloud environments.
• Conducted server backups and database restorations to ensure business continuity.

Foundation Built:
Developed strong troubleshooting, customer-impact awareness, and root cause analysis skills — forming the backbone of later SRE and reliability engineering capabilities.