Open to opportunities

Ayush Srivastava

@ayushsrivastava3

I’m a DevOps & DevSecOps engineer modernizing multi-cloud infrastructure with automation, security, and cost optimization.

Zimbabwe

Message

What I'm looking for

I’m looking for a DevOps/DevSecOps role where I can modernize multi-cloud platforms, automate CI/CD with security gates, build scalable observability, and drive cost + compliance improvements using IaC and threat detection.

I modernize multi-cloud infrastructure across AWS and Azure, managing 110+ VMs and 10+ enterprise applications. I’ve delivered measurable cost reductions through rightsizing, consolidation, archival, and migrations to open-source alternatives.

I strengthen delivery pipelines by migrating CI/CD and source control workflows to self-hosted GitLab with security and quality gates (Trivy, SonarQube, Snyk). I replace legacy monitoring with centralized observability (Grafana/Prometheus/Wazuh) and build automated alerting across multiple channels.

I also lead security and compliance execution—implementing Zero Trust controls, deploying Sentinel SIEM/XDR, authoring hardening playbooks with Ansible, and completing RBI Data Localization and leading PCI DSS/ISO 27001/SOC 2 audits. My focus is simple: secure, observable systems that ship reliably and efficiently.

Experience

Work history, roles, and key accomplishments

Current

DevOps Engineer

Current

NIIT Limited

Feb 2026 - Present (4 months)

Modernized multi-cloud infrastructure across AWS and Azure for 110+ VMs and 10+ enterprise apps, reducing Azure spend by ~60% (₹20L → ₹8L/month) and AWS costs by ~25% (₹6L → ₹4.5L/month). Migrated CI/CD and source control to self-hosted GitLab, replaced legacy monitoring with an open-source observability stack, and built containerized browser bastion infrastructure that streamlined access for 50+

AWS Azure Docker Gitlab CI Pulumi (Infrastructure As Code)Observability (Loki Fluent Bit)Apache Guacamole Trivy Snyk Security Scanning

Associate DevSecOps Engineer

Castler

Jul 2024 - Jan 2026 (1 year 6 months)

Implemented Microsoft Intune with 30+ Zero Trust policies and integrated SSO with conditional access across 10+ apps, while deploying Defender EDR and Sentinel SIEM/XDR to reduce incident detection and response time by 60%. Built Wazuh SIEM with 100+ alert rules and dashboards, automated vulnerability scanning and CI/CD pipeline improvements, and led RBI data localization completion plus PCI DSS 4

Microsoft Intune Microsoft Defender Wazuh Infrastructure Governance (AWS Multi Account Tagging IAM Identity Center)