DevOps & Cloud Engineer
Asif Ahmad Khan
Turning Complexity into Simplicity.
I build and run cloud infrastructure on AWS: Kubernetes workloads, CI/CD pipelines, infrastructure as code, and the monitoring that tells you when something breaks. Most of my work is automating the repetitive parts so teams can ship without thinking about the plumbing.
- sourceGitHub · GitLab
- buildGitLab CI · Jenkins
- packageDocker → ECR
- provisionTerraform · Ansible
- deployKubernetes
- observePrometheus · Grafana · Loki
About
Cloud infrastructure, automation and the systems that keep production observable.
I currently work remotely at Trestle. Before that I was a DevOps engineer at MCSAM, a fintech solutions company in Gurugram, where I looked after AWS environments, kept deployment pipelines in GitLab CI and Jenkins healthy, and made sure we could see what our services were doing through Prometheus, Grafana and Loki.
Earlier, at Code Brew Labs, I ran Linux servers and LEMP stacks and built video pipelines on AWS and Azure. Since then my focus has shifted toward automation: provisioning with Terraform, Ansible and CloudFormation, and treating reliability and security as part of the build rather than an afterthought.
I keep notes on what I set up and troubleshoot, and publish them on my documentation site.
Experience
Where I've worked and what I was responsible for.
–
Remote
Current role
DevOps Engineer, TrestleIQ
Platform, CI/CD and security for identity and phone-data APIs running on AWS EKS.
- Maintained GitOps deployments for 25+ Java microservices on Amazon EKS using Helm, Argo CD (app-of-apps), Argo Rollouts and Istio. This included onboarding new services and setting up per-environment configuration for dev, staging and production.
- Built and extended Jenkins pipelines and the shared Groovy library behind them. Added Gitleaks secret scanning, SonarQube, Trivy image scanning, automated Helm image-tag updates, and Lambda/serverless deployments.
- Moved services to hardened Docker base images (DHI), rolled out a standard Java 21 build image with the OpenTelemetry agent built in, and patched critical CVEs in OpenSSL, libpng, gnutls and zlib.
- Hardened Kubernetes workloads by fixing Trivy misconfiguration findings with pod security contexts for node-exporter, metrics-server and trivy-operator.
- Managed AWS infrastructure with Terraform, including EC2 right-sizing, bastion hosts, and the monitoring stack: Prometheus, Thanos, OpenTelemetry and a ClickHouse exporter.
- Built Python tools for GitHub governance: a branch-protection compliance audit and a stale pull request notifier, both scheduled through Jenkins.
- Automated operations with Rundeck and Ansible: scaling OpenSearch and EC2 services up and down, scheduled vendor data downloads, and user access management.
- Connected Playwright and Postman API test suites to CI, with PagerDuty alerts when staging or production checks fail.
- Analyzed AWS networking costs (VPC, NAT gateway, Transit Gateway) and proposed consolidating VPCs to cut costs.
- AWS
- EKS
- Terraform
- Helm
- Argo CD
- Argo Rollouts
- Istio
- Jenkins
- Docker
- Trivy
- SonarQube
- Gitleaks
- Prometheus
- Thanos
- OpenTelemetry
- Rundeck
- Ansible
- Python
- Lambda
–
Gurugram, India
DevOps Engineer, MCSAM
Munjal Chakraborty Software and Media Pvt Ltd
Infrastructure, delivery pipelines and monitoring for fintech products.
- Designed centralized logging and monitoring with Prometheus, Grafana, Alertmanager and Loki, using S3 for long-term log retention.
- Built and maintained CI/CD pipelines in GitLab CI and Jenkins for application deployments.
- Managed AWS resources (EC2, RDS, IAM, VPC) with CloudFormation, and automated server setup with Terraform and Ansible.
- Handled UAT deployments on EC2 for PayU projects, including global payments, HDFC UPI AutoPay and Paytring.
- Put backup and recovery procedures in place for critical data.
- AWS
- CloudFormation
- Terraform
- Ansible
- GitLab CI
- Jenkins
- Prometheus
- Grafana
- Loki
–
Chandigarh, India
DevOps Engineer Trainee, Code Brew Labs
Cloud infrastructure and automation for client mobile and web apps.
- Configured an AWS video-on-demand setup in a client account using CloudFormation, with S3, MediaConvert, Lambda, CloudFront and SES.
- Built an Azure pipeline that converts MP4 uploads to HLS (M3U8) with FFmpeg, triggered by Blob Storage events through Azure Functions.
- Ran Linux servers for LEMP-stack applications (Nginx, MySQL, PHP).
- Set up Prometheus and Grafana on development and production servers, with Grafana alerts for domains.
- Configured SMTP through Mailgun and managed DNS across providers such as GoDaddy and Hostinger.
- AWS
- Azure
- CloudFormation
- FFmpeg
- Nginx
- Linux
- Prometheus
- Grafana
Skills
Grouped by the part of the system they belong to.
Cloud
Primary platform is AWS, with Azure project experience.
- AWS
- EC2
- S3
- RDS
- VPC
- IAM
- Route 53
- CloudFront
- Lambda
- ECS / ECR
- Azure
Containers
Packaging and running services.
- Docker
- Kubernetes
- Amazon EKS
- Helm
Infrastructure as code
Provisioning and configuration from version control.
- Terraform
- Ansible
- CloudFormation
Linux & web
Servers and the software on them.
- Linux
- Nginx
- MySQL
CI/CD
Build, test and deploy automation.
- GitLab CI
- Jenkins
- GitHub Actions
- ArgoCD
Observability
Metrics, logs and alerts.
- Prometheus
- Grafana
- Loki
- Alertmanager
- Grafana Alloy
- CloudWatch
- New Relic
- ELK
- Thanos
- OpenTelemetry
Security
Scanning and compliance tooling.
- SonarQube
- AWS WAF
- Trivy
- AWS Inspector
- Vanta
Version control
- Git
- GitHub
- GitLab
- Bitbucket
Selected engineering work
Work from my roles at MCSAM and Code Brew Labs. Most of it lives in company and client systems, so it's described here rather than linked.
MCSAM · fintech services
Centralized logging and monitoring
Set up Prometheus for metrics, Loki for logs and Alertmanager for routing alerts, all visualized in Grafana. Logs are shipped to S3 for retention beyond what Loki keeps locally.
Outcome
Logs and metrics for the applications in one place, with alerting and longer log history.
- Prometheus
- Grafana
- Loki
- Alertmanager
- S3
MCSAM · application delivery
CI/CD pipelines
Designed and maintained deployment pipelines in GitLab CI and Jenkins that build, test and deploy application releases.
Outcome
Repeatable deployments driven from version control instead of manual steps.
- GitLab CI
- Jenkins
- Docker
MCSAM · AWS environments
Infrastructure automation
Defined EC2, RDS, IAM and VPC resources with CloudFormation templates and automated server provisioning and configuration with Terraform and Ansible.
Outcome
Environments that can be recreated from code, with consistent server configuration.
- CloudFormation
- Terraform
- Ansible
- AWS
Code Brew Labs · client project
Event-driven video pipeline on Azure
Uploads to Blob Storage fire events that trigger Azure Functions, which run FFmpeg on an Azure VM to convert MP4 to HLS. Blob event subscriptions call a webhook so the app receives the final M3U8 URL automatically.
Outcome
Hands-off conversion from upload to a streamable playlist URL.
- Azure Functions
- Blob Storage
- Azure VM
- FFmpeg
Code Brew Labs · client AWS account
AWS video-on-demand deployment
Deployed a video-on-demand solution into a client's AWS environment with CloudFormation, wiring S3, MediaConvert, Lambda, CloudFront and SES together.
Outcome
Automated transcoding and CDN delivery, set up through infrastructure as code.
- CloudFormation
- S3
- MediaConvert
- Lambda
- CloudFront
MCSAM · critical data
Backup and recovery
Implemented backup strategies for critical application data so services can be restored after a failure.
Outcome
A defined way to recover data instead of relying on ad-hoc copies.
How a change reaches production
A generalized delivery workflow built from tools I use. It is a reference model, not a diagram of any one company's production system.
Hover, tap or tab through the stages
Builds the code, runs tests and quality checks such as SonarQube, then builds and tags a container image.
feedback: alerts and dashboards shape the next change
Let's build reliable systems.
If you're hiring for DevOps or cloud work, or want to talk through an infrastructure problem, email is the quickest way to reach me.