Sunil Thapa

I’m an Infrastructure and DevOps Engineer with 3+ years of hands-on experience designing, deploying, and securing cloud-native systems on AWS. I build reliable, scalable production infrastructure from the ground up, with a strong focus on network security, automation, and operational resilience.

At Wow Finstack Nepal, I provisioned the entire production AWS infrastructure from scratch using Terraform, including a dual-VPC topology with VPC peering for a live digital banking platform serving international clients. I implemented multi-tier network segmentation, isolated workloads in private subnets, and used ALB/NLB routing with Target Groups for containerized EC2 traffic distribution.

I also enforced a zero-trust perimeter by restricting security groups to inbound port 53 from the bastion host, eliminating direct internet exposure across production services. To secure internal access, I integrated AWS Client VPN with Lambda-based corporate IP whitelisting, and I applied custom WAF ACLs across CloudFront, ALBs, and API Gateway to deliver consistent layer 7 protection.

Beyond infrastructure, I’ve built secure data exchange using AWS Transfer Family (SFTP) integrated with S3, and optimized reliability and cost through VPC Gateway Endpoints and near-zero downtime blue/green deployments on AWS CodeDeploy with automatic rollback. I also contributed to research—publishing IEEE SaTC 2025 work on TinyML-enabled intrusion detection—and previously engineered backend systems with OAuth/JWT, API development, and CI/CD automation.