Sangamesh Vakkar

• Improved code deployment efficiency by automating processes with CI/CD pipelines.
• Maintained version control systems like Git or SVN for seamless collaboration among developers and engineers during project lifecycles.
• Designed and implemented containerization strategies using Docker and Kubernetes, improving resource utilization and management.
• Monitored automated build and continuous software integration process to drive build/release failure resolution.
• Contributed to the creation of a DevOps culture within the organization, leading to increased agility and cross-functional collaboration.
• Developed conversion and system implementation plans.

Cloud Engineer — Birlasoft | Bengaluru | Dec 2022 – Present FinOps & Cloud Governance Cloud Architecture & Migration (AWS + Azure) Azure-Specific Implementations Infrastructure as Code (Terraform)

Led a cross-functional team of four SREs and three Infrastructure Engineers, delivering cloud, platform, and automation solutions across AWS, Azure, and GCP.

• Implemented and automated FinOps across 320+ AWS accounts, creating unified cost dashboards, rightsizing workflows, and tagging enforcement using Terraform and Cost Explorer APIs — saving $1.9M annually.
• Defined governance policies on AWS and Azure to enforce compliance, resource standards, and configuration baselines.
• Architected and executed 3 full-scale on-prem → cloud migrations using hybrid connectivity (Direct Connect, ExpressRoute), landing zones, and automated cutover runbooks.
• Migrated 20+ applications to AWS/Azure using containerization, refactoring, and platform modernization (EKS, AKS).
• Designed high-availability and disaster recovery architectures using multi-AZ and cross-region patterns achieving 99.99% uptime.
• Built Azure VNet architectures, subnets, NSGs, Application Gateways, and private endpoints for secure workloads.
• Provisioned and automated AKS clusters, node pools, autoscaling, Azure CNI networking, and ingress controllers.
• Designed and deployed Azure ExpressRoute for hybrid connectivity with redundancy and BFD monitoring.
• Automated provisioning of Azure Cognitive Speech Service, integrated with private access and event-driven pipelines.
• Implemented Azure governance using Azure Policies, RBAC, Managed Identities, Key Vault.
• Built reusable Terraform modules for:
  AWS: VPC, NAT, Route Tables, EKS, IAM roles, ASG
  Azure: VNet, AKS, Route Tables, Subnets, Azure Speech Services
• Implemented remote state, workspaces, locking, and environment standardization (dev/stage/prod).
• Reduced provisioning time by 60% and ensured complete configuration drift elimination.
• Migrated multiple legacy applications to EKS, AKS, and GKE with Helm-based deployments.
• Implemented blue/green releases, service mesh, autoscaling (HPA), and secure pod IAM roles.
• Integrated GitHub Actions & Jenkins pipelines for image builds, vulnerability scans, and automated rollouts.
• Centralized monitoring using Grafana + Prometheus + CloudWatch + ELK + Azure Monitor, reducing MTTD by 40%.
• Hardened cloud security via KMS encryption, IAM least privilege, Secrets Manager & Key Vault rotation, network segmentation.
• Automated data movement pipelines from S3/GCS to training endpoints.
• Used metrics to monitor application and infrastructure performance.