SaravanaKumar Natarajan

Senior Consultant (DevOps / Platform Engineer)

* **Led the design and implementation of end-to-end Azure infrastructure solutions**, aligning with Microsoft CAF and Well-Architected Framework. Leveraged VMs, VNets, Application Gateways, Load Balancers, and Firewalls to meet critical business requirements and improve scalability. * **Engineered and deployed highly available and resilient disaster recovery architectures**, utilizing Azure Availability Sets, Zones, Azure Site Recovery (ASR), and Backup Vaults, ensuring business continuity and minimizing potential downtime. * **Established and enforced comprehensive governance policies** using Azure Policy, Management Groups, and RBAC based on least-privilege principles, guaranteeing consistent security, compliance, and optimized resource utilization across the Azure environment. * **Optimized Azure Kubernetes Service (AKS) resource utilization** by strategically right-sizing node pools, VM instances, and utilizing spot instances, achieving a **15% reduction in compute costs**. * **Designed and implemented secure, segmented network topologies** utilizing Azure VNets, Subnets, NSGs, UDRs, Azure Firewall, and Application Gateway WAF to protect sensitive data and critical applications. * **Championed infrastructure-as-code (IaC) adoption using Terraform**, automating provisioning, configuration management, and version control via GitHub/Azure Repos, accelerating deployment speed by **20%** and enhancing consistency. * **Developed and maintained reusable Terraform modules** for key Azure resources (VNets, App Services, AKS, Key Vault, SQL, and Storage Accounts), standardizing infrastructure deployments and accelerating delivery. * **Streamlined environment provisioning** by automating the dynamic creation of sandbox, dev, UAT, and prod environments using CI/CD pipelines, significantly enhancing developer productivity and reducing lead times. * **Implemented centralized observability for AKS, VM, and PaaS workloads** through Azure Monitor, Log Analytics, and Application Insights, proactively detecting and resolving issues and optimizing performance. * **Developed custom Kusto Query Language (KQL) dashboards** for performance, health, and cost governance, enabling data-driven decision-making and providing actionable insights. * **Fortified security posture** by implementing Zero-Trust and Conditional Access models with Entra ID and Microsoft Defender for Cloud, effectively mitigating potential threats and vulnerabilities. * **Enhanced scalability and security of production-grade AKS clusters** through HPA, Rolling Updates, and robust secrets management (Azure Key Vault, Kubernetes secrets). * **Developed and implemented persistent storage strategies in AKS** using Azure Disks and Azure Files, managing StatefulSets, PVC lifecycle, and backup considerations to ensure data durability and availability. * **Enhanced image security** by integrating Azure Container Registry (ACR) with private link for secure image pulls and configuring ImagePullSecrets for non-public registries. * **Reduced downtime by troubleshooting and resolving complex AKS cluster issues** (e.g., CrashLoopBackOff, image pull errors, CoreDNS latency, PVC binding issues) using kubectl, az aks browse, and kubectl logs diagnostics. * **Served as a technical lead for Azure DevOps and AKS transformation projects**, providing technical guidance, conducting architecture reviews, and delivering sprint demos. * **Facilitated knowledge transfer** by authoring high-level and low-level design (HLD/LLD) documentation, Terraform design blueprints, and runbooks for managed services teams. * **Managed Azure DevOps Organizations, Projects, Repos, Pipelines, Artifacts, and Boards** for multiple delivery teams under enterprise governance, ensuring efficient collaboration and project delivery. * **Standardized CI/CD across application teams** by designing template-based reusable YAML pipelines, promoting consistency and reducing configuration overhead. * **Administered agent pools** (Microsoft-hosted and self-hosted), including scaling, capacity management, and network hardening, ensuring optimal build performance. * **Enhanced deployment control** by automating multi-stage release pipelines for dev → test → staging → prod environments with manual approval gates and environment-based RBAC. * **Improved security** by utilizing Azure Key Vault variable groups to inject secure secrets into CI/CD runtime with managed identity access. * **Defined Azure DevOps governance model** across multiple projects, ensuring alignment with enterprise policies, naming standards, and compliance controls. * **Enhanced code quality and security** by integrating SonarQube, Checkmarx, Trivy, and OWASP dependency scans for DevSecOps compliance in CI pipelines. * **Strengthened security** by integrating Microsoft Defender for DevOps to scan IaC, containers, and secrets within pipelines. * **Established a comprehensive Azure DevOps enterprise governance model** across 20+ teams, promoting consistency and standardization. * **Established a robust backup and disaster recovery strategy** for DevOps configuration, including pipelines, variable groups, and repo mirroring, ensuring business continuity. * **Designed and administered Microsoft Entra ID (Azure Active Directory) tenants** across multiple environments (Dev, Test, Prod) ensuring secure identity boundaries and hybrid integration with on-prem AD via Azure AD Connect and Seamless SSO. * **Managed custom domains, tenants, and directory synchronization**, configured identity federation, password hash sync, and conditional access to streamline identity management. * **Enhanced security and compliance** by creating and maintaining user accounts, service principals, managed identities, and groups following least-privilege and role-based principles. * **Reduced risk of unauthorized access** by implementing Access Reviews and Privileged Identity Management (PIM) for high-privilege roles. * **Ensured compliance with organizational security baselines** by regularly auditing sign-in logs, risky users, and failed authentication attempts. * **Leveraged Azure AD Sign-in logs, Audit logs, and Workbooks** to proactively monitor risky sign-ins, MFA failures, and token refresh anomalies. * **Accelerated incident response** by integrating Log Analytics and Sentinel (SIEM) to correlate Entra ID authentication logs with security events. * **Reduced privileged role assignments by 70%** through the rollout of PIM + Access Reviews for 500+ users. * **Achieved 100% compliance with corporate security baseline** through the implementation of risk-based Conditional Access policies and MFA enforcement. * **Designed and standardized Docker containerization strategies** for microservices, implementing multi-stage Dockerfiles to optimize image size, security, and build performance. * **Ensured enterprise-grade Docker image security** by building and maintaining images with hardened base images, non-root containers, vulnerability scanning, and image versioning aligned with Azure security standards. * **Streamlined container deployment** by integrating Docker image build and push workflows into Azure DevOps CI pipelines, publishing images to Azure Container Registry (ACR) with tag-based promotion strategies. * **Administered and supported enterprise Linux environments** (RHEL, CentOS, Ubuntu) across on-premises and Azure cloud infrastructure, ensuring stability and security. * **Ensured application stability** by installing, configuring, hardening, and maintaining Linux servers hosting application, database, middleware, and container workloads. * **Proactively identified bottlenecks and capacity risks** by monitoring system health including CPU, memory, disk, I/O, and network performance. * **Maintained system services** (systemd), startup scripts, cron jobs, and log rotation policies, ensuring system reliability. * **Collaborated with DevOps, security, and application teams** to ensure OS-level stability, security, and performance, facilitating seamless integration.

• Designed and implemented end-to-end Azure infrastructure solutions including VMs, VNets, Application Gateways, Load Balancers, and Firewalls aligned to the Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework.
• Developed high-availability and disaster recovery architectures using Azure Availability Sets, Zones, ASR, and Backup Vaults.
• Enforced governance using Azure Policy, Management Groups, and Role-Based Access Control (RBAC) aligned with least-privilege principles
• Right-sized AKS node pools and VM instances, adopted spot instances for non-critical workloads.
• Designed secure, segmented network topologies using Azure VNets, Subnets, NSGs, UDRs, Azure Firewall, and Application Gateway WAF.

Supported Azure infrastructure and DevOps pipelines for regulated healthcare workloads. Automated infrastructure using Terraform and Azure DevOps. Assisted with AKS operations, monitoring, and security hardening.

• Supported Azure infrastructure and DevOps pipelines for regulated healthcare workloads.
• Automated infrastructure using Terraform and Azure DevOps.
• Assisted with AKS operations, monitoring, and security hardening.

Managed and maintained Azure infrastructure, CI/CD pipelines, and containerized workloads, ensuring high availability and performance. Automated Docker image builds and publishing to Azure Container Registry (ACR), streamlining deployment processes. Administered Linux systems, providing critical support for application and middleware platforms, resulting in improved stability and reduced downtime.

• Supported Azure infrastructure, CI/CD pipelines, and containerized workloads.
• Assisted with Docker image builds, ACR publishing, and pipeline automation.
• Worked with Linux systems supporting application and middleware platforms.

Managed and secured Linux servers across on-premise and cloud infrastructures, resulting in 15% improved system uptime. Implemented OS hardening, proactive monitoring, and automated patching strategies, mitigating security vulnerabilities and optimizing performance. Collaborated with DevOps and application teams to ensure stable production operations, leading to a 10% reduction in application deployment errors.

• Administered Linux servers across on-prem and cloud environments.
• Performed OS hardening, monitoring, patching, and performance tuning.
• Supported DevOps and application teams for stable production operations.