Hi, I'm Deepan Narayanamoorthy
DevOps & Cloud Engineer with Multi-Region Terraform & IaC|
Production-focused engineer with 3+ years architecting multi-region IaC (Terraform, CloudFormation, ARM), hardening zero-trust CI/CD via GitHub OIDC, orchestrating AWS & Azure microservices, and leading observability & incident triage with Datadog & Atlassian Statuspage.
Professional Experience
Hands-on technical contributions across high-growth SaaS and enterprise engineering organizations.
Scale & Coexisting Landscape: High-growth global B2B SaaS platform processing mission-critical commission and revenue data for global enterprises worldwide. Operates in the enterprise Sales Performance Management space alongside platforms like SAP Commissions, Salesforce Spiff, and CaptivateIQ.
- Enterprise Multi-Tenant Infrastructure: Architected multi-account, multi-region Terraform modules to provision isolated Customer Sandboxes (US & EU) for high-value enterprise accounts with tenant-isolated analytics clusters, deterministic DNS-safe hostnames, and cross-account AWS DataSync over VPC peering.
- Cross-Account Data Plane Migration: Migrated the enterprise data plane across RDS (AWS DMS), Supabase, Typesense, Auth0 (tenant/app replication), Snowflake (S3 integration), and EFS via VPC peering and cross-account AWS DataSync, keeping demo and release paths aligned with production.
- Org-Wide CI/CD Security Modernization: Led the company-wide migration of CI/CD workflows across 10+ core repositories from static AWS IAM access keys to GitHub Actions OIDC with role assumption, eliminating long-lived credentials and introducing private-key Snowflake authentication.
- Optimized CI/CD & Deploy Reruns: Reduced deployment rerun times by 80% (from 19.5 min to 3.9 min) by landing an idempotent ECR container image reuse strategy on retriggers; authored timeout guardrails and CI preflight checks to catch misconfigurations early.
- SRE, Incident Response & Observability: Replaced legacy ping monitors with an automated Atlassian Statuspage operating model integrated with Datadog Synthetics for Prod US/EU; created automated incident resolution, L1 runbooks, and monthly uptime reports; cut production release downtime by 2 hours.
-
Deployment Automation for AI & Streaming Platforms: Built repeatable, auditable deployment pipelines for AI-assisted Copilot services, Realtime ETL (Managed Apache Flink & ECS), and internal MCP servers with multi-platform container architecture validation (
linux/amd64). - Cloud Cost Optimization & Rightsizing: Led multi-environment EFS rightsizing across Staging, QA, and Sandbox environments, shrinking disk consumption from 1.44 TiB down to 73.48 GiB; parked idle customer sandbox EU clusters to save ~$1,800/month in AWS spend.
- Production Escalation Lead & RCA: Led diagnosis, live mitigation, and permanent root-cause remediation for critical production incidents (nginx 502 buffer overflows, WAF AdminProtection false-positives, Snowflake JWT private-key discrepancies, and cross-repo secret rotation).
Scale & Coexisting Landscape: World's leading manufacturer of heavy machinery, autonomous mining, and connected industrial telematics (Cat® MineStar™ Solutions, VisionLink Productivity). Operates globally alongside heavy equipment peers like Komatsu, John Deere, and Volvo Construction Equipment.
- Standardized Multi-Cloud Infrastructure: Provisioned and standardized infrastructure for 30+ microservices across AWS (ECS/Fargate, RDS, Lambda) and Azure (Functions, App Services, VMs) using AWS CloudFormation and Azure ARM templates, establishing multi-cloud IaC standards.
- Dynamic Autoscaling & Incident Reduction: Designed autoscaling templates and metrics-based scaling strategies for AWS Fargate and Azure WebApps, eliminating ThousandEye alert bottlenecks for Auth APIs and cutting system performance incidents by 20%.
- Global Edge UI Delivery Pattern: Delivered a repeatable S3 + CloudFront + Lambda@Edge pattern for static frontend delivery across multiple services (Cat® MineStar™ Solutions, VisionLink, and Operator Management System 2.0), enabling automated edge cache invalidation and high global throughput.
- Zero-Downtime Blue/Green Deployments: Owned release execution for downtime-sensitive systems using automated blue-green cutovers and validated rollback plans across 10+ major production releases, reducing release downtime by 3 hours per iteration.
- Security & Compliance Automation: Developed custom PowerShell and Python utilities for Azure Key Vault secret expiration alerts, SAS token epoch auto-renewal, and SQL/KV IP whitelisting verification—resolving 50+ vulnerabilities and saving 10–15 hours of manual engineering effort per sprint.
- Production Telematics Pipelines: Implemented automated data pull pipelines for production telematics pushed to JFrog Artifactory, eliminating network timeout drops and accelerating test validation cycles.
- Bulk Scaling & Telemetry Alerts: Created automation for bulk scaling of Azure App Service plans to mitigate reserved instance shortages; developed scheduled query rules using Log Analytics KQL for automated monitoring and alerting.
- Lambda LogGroup Migration Pipeline: Automated the migration of standalone CloudWatch log groups into Lambda deployment stacks, parallelizing deployments and saving developers 1 hour per release.
- Multi-Cloud Cost Reduction: Spearheaded 3 internal Azure and Azure-to-AWS workload migrations, rightsizing overprovisioned app service plans and reducing monthly operational cloud spend by ~12% ($1,800+ annually).
Scale & Coexisting Landscape: The largest banking institution in the United States and a worldwide financial technology powerhouse, operating globally alongside peers like Goldman Sachs, Morgan Stanley, and Bank of America.
- Pitch Deck Automation Engine: Built and optimized automated workflow scripts using Python, VBA, and Selenium for investment bankers, reducing manual preparation time and saving 1,000+ hours per year across firm-wide deals.
- Geospatial Analytics Plugin: Developed a Python-based QGIS plugin for the Oil and Gas team to forecast and model potential bore wells across licensed acreage by leveraging multiple spatial coordinate transformation algorithms.
SirpiDataScience & Profit Plug
- Optimized wind mast time-series telemetry pipelines in R and maintained AWS S3 lake storage.
- Built ERP database schemas in SQL and interactive desktop management tools using Python & PyQt5.
Technical Skills & Tooling
Tools, technologies, and paradigms battle-tested across multi-cloud production environments.
Amazon Web Services (AWS)
Microsoft Azure
IaC & Containers
CI/CD & DevSecOps
Observability & SRE
Scripting & Data Systems
Architectural Case Studies
A closer look at key production systems, security overhauls, and infrastructure challenges I solved.
Route 53 Global Routing & Client DNS Hashing
Engineered deterministic DNS-safe hashing from enterprise client identifiers, directing multi-tenant traffic seamlessly across US and European isolated clusters without route collisions.
Multi-Tenant Customer Sandbox & Isolated Analytics
Architected isolated customer sandbox environments (US/EU) for enterprise clients. Resolved multi-tenant analytics data bleed by designing per-tenant ECS/RDS clusters with deterministic DNS-safe hashing from client IDs.
Organization-Wide CI/CD Security: Static Keys to GitHub OIDC
Spearheaded company-wide eradication of static AWS IAM access keys in CI secrets across core applications, APIs, analytics, and microservices. Replaced with short-lived STS tokens via GitHub OIDC, Snowflake key-pair authentication, and CI preflight guardrails.
Zero-Downtime Blue/Green Release & Global Edge Delivery
Engineered zero-downtime release pipelines for mission-critical industrial applications (Cat MineStar, OMS 2.0). Implemented automated blue/green cutovers with instant health verification and tested rollback triggers, paired with an S3 + CloudFront + Lambda@Edge static UI pattern.
Multi-Environment Storage Rightsizing & FinOps Teardown
Led multi-environment EFS rightsizing across Staging, QA, and Sandbox environments by copying only files microservices actually use instead of cloning full volumes. Automated parking of idle European customer sandbox clusters.
CI/CD Pipeline Acceleration & Idempotent Container Caching
Diagnosed deployment retry bottlenecks and implemented an idempotent ECR image reuse pattern on workflow retriggers. Enforced 1-hour unit test timeout cancel limits and hardened Testgrid error signals.
Enterprise Datadog SRE & Automated Statuspage Operations
Replaced legacy ping monitors with an automated Atlassian Statuspage operating model integrated with Datadog Synthetics for Prod US/EU. Built automated incident lifecycle workflows, on-call L1 runbooks, and monthly uptime reports.
Dynamic Autoscaling & Performance Bottleneck Elimination
Designed dynamic autoscaling templates and metrics-based scaling policies for AWS Fargate and Azure App Services. Resolved chronic latency bottlenecks and handled peak industrial telematics spikes with dynamic resource allocation.
Automated Cloud Compliance, IP Whitelisting & Secret Guardrails
Developed automated compliance utilities and scheduled pipelines to alert on Key Vault secrets near expiration, auto-update SAS token expiry from embedded epoch timestamps, and verify SQL/KV IP whitelisting before release windows.
Cross-System Production Escalation & Root Cause Analysis
Served as cross-system escalation lead diagnosing multi-service production incidents: traced Prod nginx 502s to oversized CSP headers; tuned AWS WAF AdminProtection false-positives; fixed fresh-connection Snowflake TLS failures; and coordinated credential rotation.
Multi-Cloud Microservice Standardization & IaC Modernization
Standardized infrastructure provisioning for 30+ distributed microservices across AWS (ECS, RDS, Lambda) and Azure (Functions, App Services, VMs). Migrated legacy classic deployment pipelines to maintainable declarative YAML standards.
Production Telematics Extraction & Lambda LogGroup Pipelines
Engineered data extraction pipelines to pull production telematics test data into JFrog Artifactory without network drops. Automated standalone CloudWatch log group ingestion into Lambda stacks with parallel trigger optimization.
Financial Deal Modeling Engine & Geospatial Python Plugin
Engineered an automated deal pitching workflow engine using Python, Selenium, and VBA that saved investment bankers 1,000+ hours annually. In parallel, built a custom Python QGIS geospatial plugin to model coordinates for oil-rig proximity forecasting.
How I Build & Operate Cloud Platforms
Reliability isn't an afterthought. It is architected into every Terraform module, CI/CD pipeline, and monitor.
Infrastructure as Code First
Every resource is defined declaratively using Terraform, AWS CloudFormation, or Azure ARM. Zero console drift, repeatable multi-account environments, and automated state synchronization across regions.
- Multi-account VPC peering & networking topologies
- Role-separated database & secrets isolation
- Preflight automated validation before apply
Zero Static Cloud Credentials
Pioneered the elimination of long-lived AWS IAM access keys in CI/CD. Leveraged GitHub OIDC federation with short-lived STS tokens, private-key Snowflake auth, and automated secret expiry alerts.
- Ephemeral token exchange via OpenID Connect
- Least-privilege scoped IAM & Azure RBAC roles
- Automated Key Vault & SAS token renewal bots
SLI/SLO Observability & SRE
Designed synthetic end-to-end user checks, alert routing to reduce noise, and deep integration between Datadog and Atlassian Statuspage for automated public incident transparency and L1 triage runbooks.
- Synthetic probes & customer impact monitors
- Automated incident lifecycle & root cause analysis
- Monthly availability & uptime reporting for finance
Multi-Tenant Cloud Isolation
Engineered isolated Customer Sandboxes across US & EU clusters for tier-1 enterprise clients, with deterministic DNS hashing, dedicated database instances, and cross-account DataSync.
- Tenant-isolated analytics & microservices
- Fail-fast guardrails preventing cross-tenant bleed
- Auto-parking idle environments saving cloud spend
Projects & Hackathon Wins
Selected engineering builds, competitive hackathons, and systems projects.
Ergonomics & Emotion Workplace Wellness App
Computer vision workplace wellness monitor that assesses seated posture using MediaPipe with industry-standard RULA & REBA ergonomic algorithms. Features drowsiness detection via transfer learning and cloud sync via AWS Cognito & DynamoDB.
ClimateWatch Insights Dashboard
Time-series predictive analytics dashboard forecasting socio-economic emission indicators across 140 nations. Implemented Recurrent Neural Networks (RNN), seasonal autocorrelation decomposition, and Kalman filter estimators for anomaly detection.
JournalBuddy Research Search Engine
High-throughput document retrieval system for research papers utilizing TF-IDF ranking. Engineered an inverted index engine powered by Java Callable & Future concurrency with parallel stream MapReduce pipelines and Levenshtein distance matching.
GamerHood Recommendation Engine
Distributed big data recommendation engine trained on millions of gamer ratings and preferences. Leveraged PySpark Alternating Least Squares (ALS) collaborative filtering and MongoDB Atlas for high-throughput trend speculation.
Icebox Cryptographic Vault
Multi-file binary stream encryption utility built in Python. Employs AES-256-CBC cipher blocks with salted PBKDF2 key derivation and a normalized SQL backend for tamper-evident data protection.
Geospatial Well Proximity Forecaster
Automated geospatial transformation plugin developed at JPMorgan Chase for acreage exploration. Leveraged QGIS Python bindings to model spatial coordinate bounds, proximity contours, and prospective drilling locations.
Certifications, Honors & Education
Winner: Best Healthcare Hack & First Runner-Up
View on DevpostWinner — HackBMU 5.0
First Runner-Up — MUJ Hacks
Specialized Technical Credentials
M.Sc. (Integrated) Theoretical Computer Science
Recruiter & Hiring Manager Cheat Sheet
Key qualifications, target roles, and core competencies at a glance.
Select Your Open Role to Evaluate Alignment:
Senior DevOps & CI/CD Engineer
- Zero Static CI Secrets: Eradicated IAM access keys across 10+ core repos via GitHub OIDC token federation.
- 80% CI Rerun Acceleration: Slashed build retries from 19.5 min to 3.9 min using AWS ECR layer reuse.
- Multi-Cloud Pipelines: Standardized declarative YAML CI/CD pipelines across AWS & Azure for 30+ services.
SRE Chaos Lab & Cloud FinOps Calculator
Experience first-hand how Deepan architects self-healing cloud platforms and drives tangible FinOps cost optimization.
SRE Incident & Auto-Heal Simulator
Test Deepan's multi-AZ high-availability architecture. Trigger a simulated AWS Zone failure and watch the automated self-healing pipeline restore 100% service availability.
Interactive Cloud FinOps Calculator
Estimate quantifiable cost savings and engineering velocity reclaimed by adding Deepan to your cloud platform team.
FinOps ROI: Deepan pays for his own compensation within the first 75 days through automated infrastructure rightsizing alone.
Looking to level up your cloud infra, CI/CD, or reliability?
Whether you want to discuss multi-tenant SaaS architecture, zero-trust OIDC CI/CD migrations, SRE best practices, or high-impact opportunities, I'd love to connect.
Send a Quick Message
Fires an email directly with your mail client or webmail: