Open to opportunities

Manish Khadka

@manishkhadka

Message

AWS-certified DevOps engineer optimizing Kubernetes cloud infrastructure for cost, compliance, and reliability.

Nepal

Message

What I'm looking for

I’m looking to keep building cloud-native platforms with Kubernetes, Terraform IaC, and GitOps—while driving FinOps, reliable observability, and DevSecOps/compliance. I want ownership of production systems where “non-standard” problems are welcome.

I’m an AWS Certified DevOps Engineer (Professional) with 7+ years designing, automating, and optimising cloud-native infrastructure across AWS, GCP, and Azure. I specialize in Kubernetes at scale, Terraform-based IaC, CI/CD architecture, and DevSecOps—especially when the problem is non-standard.

I’m known for delivering measurable cost reductions and building compliance-ready infrastructure that actually passes audits. I reduced AWS monthly spend from $24K to $12K (50%) through right-sizing, spot instances, and OpenStack consolidation, and I’ve led SOC2 and ISO 27001 certification initiatives at two companies. I was also promoted from DevOps Engineer to Team Lead, mentoring a 6-person team on IaC, GitOps, and cloud-native practices.

At Zenledger (Feb 2025 – Present), I’ve cut monthly infrastructure costs by migrating edge security from Cloudflare to AWS WAF and built Terraform-provisioned Python/Bash automation to shut down QA/Dev environments outside business hours. I designed and deployed a High Availability TimescaleDB cluster and orchestrated zero-downtime major-version migration of Amazon RDS from PostgreSQL 14 to 15. I also led SOC2 and ISO 27001 to completion, implemented Cloudflare Zero Trust + Tailscale for least-privilege access, and delivered production observability (Prometheus, Grafana, Grafana Alloy, PagerDuty) covering 100% of services.

Previously at 1/3CloudHero (Nov 2023 – Feb 2025), I supported near-zero-downtime service migrations across AWS, GCP, Azure, and DigitalOcean, including self-hosted Kubernetes on GCP with Ansible and auto-scaling across 20+ clusters. I’ve also built policy enforcement with Kyverno, migrated ingress to Kong API Gateway, and implemented Istio canary deployments. Earlier, at Innovatetech Pvt. Ltd., I led IaC/GitOps practices, reduced cloud spend by 50% across multi-account AWS, and helped establish compliance and DR with automated AWS Backups—building on early experience shipping GPU-optimized ML inference and air-gapped deployments.

Experience

Work history, roles, and key accomplishments

Current

Senior DevOps Engineer

Current

ZenLedger

Feb 2025 - Present (1 year 5 months)

Reduced monthly infrastructure costs by migrating edge security from Cloudflare to AWS WAF and automating shutdown of idle QA/Dev environments. Built HA TimescaleDB on AWS, performed zero-downtime RDS major-version migration, and led SOC2/ISO 27001 initiatives while implementing production-grade observability.

AWS WAF Terraform Python BASH TimeScaleDB Amazon RDS PostgreSQL Tailscale SOC2 ISO 27001 Amazon EKS Amazon EC2 Rolling Upgrades Prometheus Grafana PagerDuty

Current

Remote Freelance DevOps Consultant

Current

Multiple Clients

Jun 2021 - Present (5 years 1 month)

Delivered DevOps infrastructure for blockchain, data/marketplace, and platform use cases, including HA EVM node/validator setups and automated smart contract pipelines. Designed multi-account AWS architectures and built scalable ML inference hosting and observability/telemetry integrations for client environments.

Amazon EKS Blockchain Infrastructure Sub Second RPC Optimization Hardhat Foundry AWS CloudFormation Azure AWS Glue Terragrunt AWS Account Factory For Terraform (AFT)Milvus LitmusChaos Cilium EBPF Networking

Senior DevOps Engineer

CloudHero

Nov 2023 - Feb 2025 (1 year 3 months)

Migrated client services from on-premises to AWS, GCP, Azure, and DigitalOcean with near-zero downtime, including self-hosted Kubernetes on GCP. Implemented Kubernetes security and ingress/service-mesh changes (Kyverno, Kong, Istio) and built end-to-end monitoring and vulnerability scanning across CI/CD pipelines.

AWS GCP Azure DigitalOcean Amazon ECS Amazon EKS Ansible Helm Kyverno Kong API Gateway Istio IAM Key Rotation Trivy Snyk Minio NextCloud Prometheus Grafana Loki ELK Stack

DevOps Engineer → Team Lead

Innovatetech Pvt. Ltd.

Jul 2021 - Feb 2024 (2 years 7 months)

Led and mentored a team of 6 DevOps engineers on IaC, GitOps, and cloud-native practices while reducing cloud spend by 50% across multi-account AWS. Built CI/CD and security workflows (GitLab CI, Helm, shift-left scanning), managed EKS with autoscaling and security components, and delivered compliance and observability including distributed tracing.

DevOps Engineer

IDenTV

Feb 2020 - Jul 2021 (1 year 5 months)

Deployed ML models on Kubernetes and bare metal for real-time video analytics by engineering GPU sharing across pods. Reduced AWS spend by 50% using Terraform-backed provisioning and built air-gapped deployment capabilities using Packer and Ansible while establishing DevOps practices for CI/CD, secrets, and vector storage.

Kubernetes GPU Sharing NVIDIA Device Plugin AWS OpenStack Terraform Amazon EKS Amazon ECS Amazon RDS Amazon ElastiCache Packer Ansible CI CD CircleCi Travis CI Helm Flussonic Milvus

Linux System Support Engineer

NepalLink Network

Apr 2019 - Apr 2020 (1 year)

Managed VMware VPS environments running LEMP/LAMP stacks and hardened server security. Deployed and maintained Icinga monitoring while providing SLA-driven client support.

VMWare LEMP LAMP Maldet ClamAV Icinga client support SLA

Junior Network Monitoring Engineer

Vianet Communications Pvt. Ltd.

Apr 2018 - Apr 2019 (1 year)

Automated OLT reboots using Bash and deployed network monitoring tooling for proactive fault detection. Implemented Nagios, Zabbix, Cacti, and CheckMK workflows.

BASH OLT Reboot Automation Nagios Zabbix Cacti CheckMK Network Monitoring Fault Detection

Technical Researcher

Datalytics Pvt. Ltd.

Dec 2016 - Feb 2018 (1 year 2 months)

Performed technical research work including shell scripting for access auditing and troubleshooting Cisco networks. Contributed to voice recognition system projects.

Shell Scripting Voice Recognition