Automation first
Optimizing CI/CD pipelines across Jenkins, GitLab CI, GitHub Actions, and Azure DevOps — eliminating manual overhead by 70%.
CLOUD · AUTOMATION · DEVSECOPS
HELLO, WORLD. I'M
Anis Ahmed
Senior DevOps Engineer.
Senior DevOps Engineer with 5.5 years of experience specializing in Google Cloud Platform (GCP) and AWS. Experienced in Kubernetes, Terraform, GenAI & RAG-driven operations, and shifting security left (SAST, DAST, SCA) to reduce manual deployment efforts by 70%.
ANIS AHMED • DEVOPS
$ whoami
anis-ahmed — senior devops engineer (5.5 yrs)
$ cat mission.txt
Automate everything. Break nothing.
Enforce DevSecOps · Scale with resilience.
$
01 / ABOUT
Bridging code, security, and cloud.
Designing infrastructure that survives failure, scales with demand, and accelerates developer throughput.
GCP & AWS engineering
Architecting scalable cloud infrastructure across Google Cloud Platform (Compute Engine, GKE, VPC, Cloud SQL) and AWS using modular Terraform.
GenAI, AIOps & DevSecOps
Integrating Generative AI & RAG solutions for DevOps knowledge & troubleshooting alongside SAST, DAST, and SCA security scanning.
02 / CI/CD AUTOMATION
Interactive delivery engine.
Click on any stage below to inspect real security audits, container builds, and deployment verification logs, or simulate the full automated delivery cycle.
01
Gitleaks
Secret Scan
PASSED
02
Sonar & Snyk
SAST & SCA
GRADE A
03
Docker Build
Trivy Image Scan
0 CVEs
04
Checkov & OPA
Policy as Code
COMPLIANT
05
Approval Gate
Production Sign-off
APPROVED
06
ArgoCD
GitOps Canary
SYNCED
Stage 1: Gitleaks Pre-Commit Secret Scanner
[EXIT CODE: 0]
[INFO] gitleaks protect --verbose --redact --staged
[INFO] Scanning staged commits against 140+ credential entropy patterns...
[INFO] Checked 24 files & 3,210 lines of code.
[INFO] Private RSA Keys: 0 DETECTED | Cloud API Tokens: 0 DETECTED
[SUCCESS] Secret audit passed. Clean commit approved for CI pipeline.
03 / ZERO-TRUST SECURITY
Shift-left security matrix.
Integrating security into every stage of the pipeline to eliminate vulnerabilities before reaching production.
Gitleaks & Git-Secrets
Automated pre-commit hooks and CI scans blocking unencrypted cloud credentials, private SSH keys, and API tokens before entering version control.
SonarQube Code Quality
Static Application Security Testing enforcing custom quality gates. Blocks merge requests exhibiting security hotspots, code smells, or low test coverage.
Snyk Dependency Scanner
Software Composition Analysis (SCA) auditing application packages and open-source libraries for known CVEs with automated patch PRs.
Trivy Container Scanner
Scans multi-stage Docker images in CI before registry push. Fails pipeline builds on CRITICAL or HIGH severity CVEs in OS packages.
Checkov & Open Policy Agent
Evaluates Terraform and K8s manifests against CIS benchmarks and custom Rego policies (enforcing encryption, tags, and restricting public ingress).
Falco eBPF Threat Detection
Kernel-level eBPF behavioral monitoring inside Kubernetes clusters, detecting unexpected shell executions, privilege escalations, and namespace drifts.
04 / TOOLKIT
Tools of the trade.
Technologies and platforms I use daily to automate, build, secure, and monitor systems.
GCP & AWS Cloud Platforms
Google Cloud Platform (Compute Engine, GKE, Cloud Storage, Cloud SQL, IAM, VPC, Cloud Monitoring, Cloud Logging) · AWS (EC2, S3, IAM, VPC, RDS, CloudWatch, EKS)
Generative AI & AIOps
Retrieval-Augmented Generation (RAG) · LLM Integration · Prompt Engineering · AI-assisted Troubleshooting · GCP AIOps & Anomaly Detection
Containers & Kubernetes
Kubernetes (GKE, EKS, K3s) · Docker · Helm 3 Charts · Ingress-Nginx · Cert-Manager · Kustomize · Container-Optimized OS
CI/CD & Deployment Automation
Jenkins · GitLab CI/CD · GitHub Actions · Azure DevOps · ArgoCD GitOps · Release Automation (70% Manual Effort Reduction)
Infrastructure as Code & Scripting
Terraform (Modular Reusable Modules) · CloudFormation · Ansible · Python Automation · Bash & Shell Scripting · Go · OPA Rego
AppSec & Observability
SAST (SonarQube) · DAST · SCA (Snyk) · Trivy Container Audit · GCP Cloud Monitoring & Logging · Prometheus · Grafana · ELK Stack
05 / SELECTED WORK
Built with purpose.
Production systems engineered for zero downtime, multi-cloud resilience, and automated delivery.
01
Zero-Trust Multi-Cloud CI/CD with 7-Stage Automated Security Gates
Architected enterprise-grade CI/CD pipelines across Jenkins, GitHub Actions, and Azure DevOps integrating 7 layers of automated scanning: Gitleaks for secret detection, SonarQube for static analysis, Snyk for vulnerable packages, Checkov & OPA for IaC compliance, and Trivy for container images. Configured manual approval gates and automated rollbacks on any security violation.
02
Multi-Cluster Kubernetes GitOps Synchronization via ArgoCD & Helm
Constructed high-availability Kubernetes deployments across AWS EKS and Azure AKS using ArgoCD ApplicationSets. Managed declarative Helm chart releases, automated TLS certificate lifecycles via cert-manager, configured Ingress-Nginx controllers, and enabled zero-downtime canary rollouts based on real-time Prometheus error rates.
03
AI-Driven Automated Incident Root-Cause Triaging & Harness Verification
Pioneered AI-augmented operations by integrating Harness AI and Amazon Bedrock LLMs into the platform observability pipeline. Automated log anomaly detection across Prometheus and CloudWatch alerts, generating automated incident summaries, remediation runbooks, and self-healing deployment rollbacks.
04
Modular Multi-Cloud Terraform Framework with OPA Policy as Code
Engineered DRY, modular Terraform infrastructure provisioning VPCs, IAM roles, EKS/AKS clusters, and CloudWatch log groups across AWS and GCP. Implemented remote encrypted state handling using AWS S3 and DynamoDB distributed locks, with Checkov and Open Policy Agent (OPA) validating every plan before apply.
05
Enterprise Observability & Centralized Logging Stack
Constructed a unified telemetry stack using Prometheus, Grafana, ELK Stack (Elasticsearch), and AWS CloudWatch. Configured automated Alertmanager routing to Slack, custom PromQL SLO error budget tracking, and real-time distributed tracing.
06 / CAREER
5+ years of engineering excellence.
Demonstrated history of designing, automating, and maintaining high-availability multi-cloud systems.
Senior DevOps Engineer
Senior DevOps Engineer • Gurugram, India • linkedin.com/in/webanis- GCP & AWS Cloud Infrastructure: Architected, managed, and optimized enterprise cloud infrastructure across Google Cloud Platform (GCP) and AWS, ensuring 99.99% availability and high performance.
- Generative AI & RAG Solutions: Explored and deployed Generative AI and Retrieval-Augmented Generation (RAG) solutions for DevOps knowledge management, troubleshooting, and operational support.
- CI/CD Pipeline Optimization (70% Effort Reduction): Designed, optimized, and automated high-throughput CI/CD pipelines across Jenkins, GitLab CI, GitHub Actions, and Azure DevOps — reducing manual deployment efforts by 70%.
- Security Automation (SAST, DAST, SCA): Integrated Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) with SonarQube, Snyk, and Trivy directly into build gates.
- Kubernetes & Docker Orchestration: Managed and scaled containerized microservices across Google Kubernetes Engine (GKE) and Amazon EKS using Docker, Kubernetes, and Helm.
- Infrastructure as Code (IaC): Provisioned and maintained resilient multi-cloud environments using modular, reusable Terraform configurations and Ansible.
- GCP Monitoring & AIOps: Implemented proactive monitoring, logging, alerting, anomaly detection, and AI-driven incident analysis with GCP Cloud Monitoring, Cloud Logging, Prometheus, and Grafana.
- Scripting, SRE & Incident Management: Developed robust automation scripts in Python, Bash, and Shell to streamline DevOps operations, resolve production incidents, and maintain peak platform reliability.
07 / WHAT'S NEXT?
Let's build something
reliable.
Interested in scaling cloud platforms, automating zero-trust delivery workflows, or discussing senior DevOps engineering roles?
PLATFORM TELEMETRY
NODE: ap-south-1 • SSL SECURED
1,420
Total Profile Views
#1
Your Visit Count
99.99%
Platform Uptime