const vikas = {
name : "Vikas Rao",
title : "Senior DevOps Engineer | DevSecOps Architect",
experience : "6 Years IT · 5 Years DevOps/DevSecOps",
location : "India 🇮🇳",
expertise : [
"Azure Enterprise Landing Zones (CAF)",
"DevSecOps — Shift-Left Security",
"Kubernetes Platform Engineering",
"FinOps & Cloud Cost Optimization",
"SRE & Observability at Scale"
],
superpower : "Building infra that doesn't wake you at 3AM",
currently : "Open to Senior DevOps / Platform Eng roles",
fun_fact : "I automate myself out of boring tasks... recursively"
}; |
|
 Zero downtime. All environments. |
 FinOps + rightsizing strategies |
 Shift-left DevSecOps at scale |
 KT sessions, reviews & growth |
 Enterprise CAF-aligned deployments |
 SRE disciplines & error budget mgmt |
 GitOps · Istio · OPA Gatekeeper |
 AZ-104 · AZ-400 · AZ-500 |
☁️ Cloud & IaC
🔄 CI/CD & GitOps
🐳 Containers & Orchestration
🛡️ Security & DevSecOps
📊 Observability & SRE
💻 Languages & Scripting
Real-world enterprise patterns — not toy examples. Built the way I build at work.
|
Production-grade Azure Landing Zone aligned with CAF. Hub-and-Spoke networking, Management Groups, RBAC with PIM, and Policy-as-Code across 5+ subscriptions. 
|
Reusable CI/CD templates with security gates at every stage — GitLeaks, Checkov, Trivy, SonarQube, OWASP, Infracost. Drop-in for Azure DevOps & GitHub Actions. 
|
|
Enterprise AKS with GitOps (ArgoCD), Istio mTLS service mesh, OPA Gatekeeper admission control, zero-trust network policies, and Key Vault CSI secrets. 
|
Delivered 28% cloud cost reduction — automated rightsizing advisor, RI coverage analysis, idle resource detection, mandatory tagging policies, and Grafana dashboards. 
|
|
Battle-tested toolkit for 100+ enterprise cloud migrations — wave planning, dependency mapping, pre-cutover checklists, automated validation, and rollback runbooks. 
|
Full-stack observability on Kubernetes — Prometheus + Thanos, Grafana, Loki, Tempo, OpenTelemetry. SLO/SLI dashboards, error budget tracking, PagerDuty alerting. 
|
┌───────────────────────────────────────────────────────────────┐
│ ENTERPRISE AZURE LANDING ZONE │
│ (Hub & Spoke — CAF Aligned) │
└──────────────────────────┬────────────────────────────────────┘
│
🏢 On-Premises Datacenter
│
ExpressRoute / Site-to-Site VPN Gateway
│
┌──────────────────────────▼────────────────────────────────────┐
│ ☁️ HUB VNet (Connectivity Subscription) │
│ ┌─────────────┐ ┌───────────────┐ ┌──────────────────┐ │
│ │Azure Firewall│ │ VPN / ER GW │ │ Private DNS Zones│ │
│ │ (Premium) │ │ │ │ (all PaaS) │ │
│ └──────┬──────┘ └───────────────┘ └──────────────────┘ │
└─────────┼──────────────────────────────────────────────────── ┘
│ VNet Peering + UDR (0.0.0.0/0 → Firewall)
┌────────┴────────┬──────────────────┐
│ │ │
┌───────▼───────┐ ┌───────▼──────────┐ ┌────▼─────────────┐
│ Spoke: Apps │ │ Spoke: Platform │ │ Spoke: Data │
│ ├─ AKS Cluster│ │ ├─ CI/CD Runners │ │ ├─ Azure SQL │
│ ├─ App Gateway│ │ ├─ Bastion Host │ │ ├─ Storage Accts │
│ └─ Pvt Endpts │ │ └─ Security Tools│ │ └─ Key Vault CMK │
└───────────────┘ └──────────────────┘ └──────────────────┘
Policy-as-Code │ Zero-Trust NSG │ PIM + RBAC │ Centralized Log Analytics
git push ──► ┌──────────────────────────────────────────────────────────────┐
│ 🔄 CI / LINT │
│ tflint ──► terraform fmt ──► terraform validate │
│ hadolint (Dockerfile) ──► yaml-lint ──► markdownlint │
└─────────────────────────────┬────────────────────────────────┘
│
┌───────────────▼──────────────────┐
│ 🔑 SECRET SCAN │
│ GitLeaks → truffleHog │
│ Block PR if ANY secret found │
└───────────────┬──────────────────┘
│
┌───────────────▼──────────────────┐
│ 🛡️ SAST / SCA / IaC │
│ Checkov → tfsec → Trivy config │
│ SonarQube → Semgrep → OWASP DC │
└───────────────┬──────────────────┘
│
┌───────────────▼──────────────────┐
│ 💰 FINOPS GATE │
│ Infracost estimate + diff │
│ Auto-comment on PR with delta │
└───────────────┬──────────────────┘
│
┌───────────────▼──────────────────┐
│ 👀 HUMAN APPROVAL GATE │
│ 2 Senior Reviewers + CODEOWNERS│
│ Environment protection rules │
└───────────────┬──────────────────┘
│
┌───────────────▼──────────────────┐
│ 🚀 DEPLOY STAGE │
│ terraform apply (state locked) │
│ Canary → Staging → Production │
└───────────────┬──────────────────┘
│
┌───────────────▼──────────────────┐
│ 🔁 POST-DEPLOY VALIDATION │
│ Smoke tests → SLO check │
│ Auto-rollback if SLO breached │
│ Alert → Slack / PagerDuty │
└──────────────────────────────────┘
| 🏅 Domain | 📌 Key Highlights | 🔧 Proficiency |
|---|---|---|
| ☁️ Microsoft Azure & CAF | Landing Zones, Management Groups, Entra ID, Defender for Cloud, Azure Policy | ⭐⭐⭐⭐⭐ Expert |
| 🏗️ Infrastructure as Code | Terraform modules + workspaces, Bicep, remote state, semantic versioning, Terratest | ⭐⭐⭐⭐⭐ Expert |
| 🛡️ DevSecOps Engineering | Shift-left security pipelines, SAST/DAST/SCA, secrets mgmt, compliance-as-code | ⭐⭐⭐⭐⭐ Expert |
| 🌍 Cloud Migration (100+ Apps) | Azure Migrate, discovery → assessment → wave planning → cutover → hypercare | ⭐⭐⭐⭐⭐ Expert |
| 💸 FinOps & Cost Optimization | Rightsizing, Reserved Instances, auto-shutdown, tagging governance, 28% savings | ⭐⭐⭐⭐⭐ Expert |
| 🐳 Kubernetes & Platform Eng. | AKS, Helm, Istio mTLS, ArgoCD GitOps, OPA Gatekeeper, network policies | ⭐⭐⭐⭐⭐ Expert |
| 📊 SRE & Observability | Azure Monitor AMA/DCR, Prometheus, Grafana, Loki, SLO/SLI, error budgets | ⭐⭐⭐⭐⭐ Expert |
| 🤝 Leadership & Governance | SOW, RACI, Vendor Management, KT sessions, Pre-Sales, team mentoring (20+) | ⭐⭐⭐⭐☆ Advanced |
| 🔬 Area | 📖 What I'm Doing | 🎯 Goal |
|---|---|---|
| 🤖 Platform Engineering | Building Internal Developer Platforms with Backstage | Reduce developer cognitive load |
| 🧠 AI/MLOps on Azure | Designing LLM inference infrastructure & MLOps pipelines | Production-ready AI workloads |
| 🌐 eBPF & Cilium | Next-gen Kubernetes network observability & security | Kernel-level visibility |
| 📜 Policy-at-Scale | OPA Gatekeeper + Azure Policy + Sentinel automation | Zero-drift compliance |
| 💡 Chaos Engineering | LitmusChaos + Azure Site Recovery + failover automation | Proven resilience |
🎯 Ideal Role: Senior DevOps / DevSecOps / Platform Engineering position where I can architect scalable, secure cloud-native systems and lead high-performing infrastructure teams.
📍 Location: India — Open to Remote / Hybrid / Relocation
💬 "Build it secure from day one — pipelines, infra, culture. Security is not a feature, it's a foundation."
— Vikas Rao · Senior DevOps & DevSecOps Engineer