Sayan Das

Led a team of five DevOps engineers in delivering a Generative AI conversational banking solution, overseeing end-to-end infrastructure provisioning and deployment operations.

Infrastructure & Cloud Architecture:

• Architected and provisioned four AWS environments using CloudFormation infrastructure-as-code principles
• Re-engineered the logging infrastructure to leverage AWS-native services, implementing a scalable solution utilizing S3, Athena, Kinesis Data Stream, ALB, and EKS
• Spearheaded the migration of legacy on-premises applications to Barclays' OpenShift v4-powered private cloud platform

CI/CD & Deployment:

• Orchestrated the migration of 100+ code repositories from Bitbucket to GitLab, transitioning from Jenkins-based CI to GitLab workflows with Gitflow branching strategy
• Designed and implemented a centralized DevOps GitLab CI pipeline component library, simplifying configuration management and enabling developer self-service
• Designed and implemented robust CI/CD pipelines with specialized workflows for prompt deployment in AI applications
• Developed a reusable Helm library chart, enabling standardized deployments across multiple engineering teams
• Pioneered Helm chart adoption within the team for OpenShift application deployments

Documentation & Governance:

• Authored comprehensive production deployment build guides, and operational handover documentation for the SRE team.
• Developed critical security and recovery documentation, including Key Compromise Plans, System Recovery Plans, and Data Backup/Restore Strategies, Certificate Life Cycle Management Plan and Decommissioning Plan.
• Remediated AWS Config compliance violations to ensure adherence to security standards.

Team Leadership & Process Improvement:

• Conducted a gap analysis of existing CI/CD processes and implemented optimization strategies.
• Provided technical mentorship to team members on script optimization and DevOps best practices.

• Architected and implemented a HA monitoring setup using Prometheus and Thanos. This setup can be extended in future to support multi-tenancy. This setup also makes, the Prometheus on tenant side near stateless with minimal data loss. (https://github.com/dsayan154/thanos-receiver-demo)
• Implemented a Kubernetes custom controller in Golang, to automatically update a configmap's data(Prometheus' configuration) depending on the change in replica count of Prometheus statefulset (https://github.com/dsayan154/prometheus-remote-read-updater)
• Packaged the customized solution in a helm chart to be deployed in different environments
• Created custom modules in Terraform to create ALBs and other redundant resources on AWS repetitively.
• Wrote AWS Lambda function to snapshot EC2 attached EBS volumes in events of a Lifecycle Hook trigger of AWS Auto Scaling Groups
• Identifying areas of improvements from SRE point of view

• Developed CD roadmap and implemented it in project using Jenkins, Docker images and Helm charts
• Implemented strategies to do canary deployments on production kubernetes clusters
• Setup a secure cloud infrastructure on AWS through cloudformation templates
• Setup multiple kubernetes cluster on Amazon EKS to host micro-services
• Automated AWS AMI creation procedure with Hashicorp Packer
• Implemented a robust monitoring and alerting pipeline of the whole infrastructure along with integrations with multiple communication channels like MS Teams and emails
• Automated and enforced DevOps methodologies with various tools like, Nexus IQ server, Sonar, etc
• Researched and identified new technologies and tools helping to grow agile development environment
• Wrote and updated documentation to outline technical design of entire project

• Made configuration changes on existing Jenkins servers
• Automated repetitive tasks by creating scripts on Powershell
• Maintained and configured Apache Http Servers on production

• Automated build and continuous software integration process through Jenkins
• Maintained and configured Jenkins slave nodes through Chef recipes
• Created automation for manual tasks through shell and python scripts
• Maintained and configured 250+ Websphere Application Server clusters

• Maintained and configured clusters of application servers and web servers
• Created and installed SSL certificates of customer facing websites
• Researched complex technical issues and provided resolutions