Utkarsh Kumar

Pivotal Cloud Foundry (PCF) Foundation Management

• Planned and executed PCF upgrades to align with vendor support, security patches, and new features.
• Applied stem cell and OS-level patches using BOSH for vulnerability remediation.
• Rotated both configurable (UAA, Gorouter) and non-configurable certificates to maintain SSL/TLS security.
• Collaborated on production issue resolution, diagnosing 4xx/5xx errors, latency issues, and platform anomalies.
• Led application onboarding, including org/space setup, user access, network policies, and custom service bindings.
• Managed platform lifecycle tasks with Ops Manager, BOSH, and Healthwatch.
• Automated platform operations with Concourse pipelines (e.g., backups, cert renewals, smoke tests).
• Integrated logging (Splunk/ELK) and monitoring (Prometheus, Grafana) for end-to-end observability.

Tanzu Kubernetes Grid Integrated Edition (TKGI) Management

• Delivered TKGI cluster upgrades for Kubernetes version updates, and CVE patches.
• Patched Kubernetes VM stemcells via BOSH/Ops Manager to ensure OS security compliance.
• Rotated certificates across TKGI, Ingress controllers, and internal services to maintain trust chains.
• Troubleshot pod failures, node unreachability, and LB misconfigurations in collaboration with app teams.
• Supported onboarding of containerized apps: namespace setup, RBAC, network policies, Helm deployments.
• Managed cluster provisioning, scaling, patching using kubectl, Helm, and automation scripts.
• Integrated with LDAP, Harbor, and GitOps tools (ArgoCD, Flux) for secure, automated deployments.
• Maintained multi-tenancy, observability, and security with Prometheus, Grafana, and K8s Dashboards.
• Migrated existing applications from legacy systems onto modern platforms like Kubernetes clusters or Cloud Foundry deployments.
• Provided technical support to development teams by resolving their platform related issues quickly.

• Diagnosed and resolved network issues across LAN/WAN, reducing incident resolution time by 20%.
• Conducted routine maintenance and updated network documentation, improving uptime and readiness.
• Worked with routers, switches, and firewalls to manage traffic routing and security enforcement.