Summary
Overview
Work history
Education
Skills
Timeline
Generic

Ashoni Kumar Amudala

Leeds,Leeds

Summary

Cloud & DevOps engineer with 5 years’ experience building and running AWS-based infrastructure, automating deployments, and improving security and monitoring. I work a lot with Terraform, Kubernetes, Python scripts for automation, and CI/CD pipelines. I enjoy making systems reliable, easier to work with, and more cost-efficient.

Overview

7
7
years of professional experience

Work history

DevOps & Platform Engineer

HSBC UK
London
06.2023 - Current
  • Built and maintained Terraform modules for ECS, RDS, CloudFront, S3, and Route53 across dev, staging, and prod environments
  • Created CI/CD pipelines in GitHub Actions with dynamic tagging, conditional approvals, and cost estimates using Infracost
  • Set up EKS with ArgoCD for GitOps-based deployments helped t team move away from manual helm upgrades
  • Migrated SFTP from EC2 to AWS Transfer Family with SSH key auth stred in Secrets Manager and IAM role restrictions
  • Automated CloudWatch log group retention policies with Lambda written in Python and deployed via Terraform
  • Helped reduce monthly AWS costs by 30% through scheduling, spot instances, and better log management
  • Deployed and maintained ECS services using Fargate, backed by ALB and secured via custom IAM roles
  • Python automations:
    CloudWatch retention enforcer (Lambda) to set defaults (7/14/30d) → ~25% log cost reduction.
    Unused-resource sweeper (report + optional delete) for idle EBS, snapshots, and unattached ENIs.
    IAM access analyzer: flags wildcards/over-privileged roles; opens PRs with least-privilege diffs.
    Cost anomaly pinger: pulls Cost Explorer anomalies and posts to Slack with owner tagging.
  • Security:
    Migrated SFTP from EC2 to AWS Transfer Family with IAM-based directory isolation; keys in Secrets Manager; WAF on public endpoints.
    Rolled out SSO, account-level SCPs, GuardDuty + Security Hub standards; weekly drift + findings triage.
    Enforced TLS everywhere (ACM), S3/Bucket Keys, and customer-managed KMS for RDS/ECS secrets.
  • Observability:
    Unified metrics: Prometheus + Grafana with service SLOs (availability & latency) and runbook links.
    Centralized logs in Loki/ELK; live tail for incidents; X-Ray tracing on critical APIs.
  • Set up GitLab CI pipelines for container builds and app deployments to ECS
  • Handled DNS, SSL, and WAF setup for client-facing web apps using Route53 and CloudFront
  • Used Ansible to automate EC2 provisioning and SSH access for a small legacy system
  • Wrote shell scripts to simplify repetitive AWS CLI and Docker tasks for the team

DevOps engineer

Innominds India Pvt Ltd
Hyderabad
02.2019 - 06.2023
  • Deployed Amazon Web Services solutions for scalable cloud computing environment.
  • Developed continuous integration pipelines for enhanced code quality.
  • Enhanced project agility by adopting Agile and Scrum methodologies.
  • Coordinated cross-functional teams to deliver complex projects on schedule.
  • Collaborated with software developers to streamline DevOps processes.
  • Maintained high availability of services through robust disaster recovery plans.
  • Optimised infrastructure cost by implementing Terraform IAC tooling in AWS environments.
  • Managed Linux-based servers, ensuring reliable performance.
  • Implemented monitoring tools to proactively identify system issues.
  • Resolved technical issues swiftly, minimising disruption to operations.
  • Leveraged industry-leading tools to develop and implement robust CI/CD pipelines.
  • Analysed DevOps data and KPIs, reporting on actionable insights to assist senior decision-making.

Education

Master of Science - Advance Engineer Expert

Leeds Beckett University
Leeds

Skills

  • Cloud: AWS (ECS/EKS, EC2, S3, RDS, Route53, CloudFront, Lambda, Transfer Family)
  • IaC & CD: Terraform, Terragrunt, Helm, ArgoCD, GitHub Actions, Jenkins, GitLab CI
  • Containers: Docker, Kubernetes (EKS), Kustomize
  • Security: IAM least-privilege, KMS, Secrets Manager, WAF, SSO/SCPs, GuardDuty, Security Hub
  • Observability: CloudWatch, Prometheus, Grafana, Alertmanager, Loki/ELK, AWS X-Ray, OpenTelemetry (basics)
  • Scripting: Python, Bash, Git, jq, AWS CLI
  • OS/Net: Linux, Nginx, VPC, subnets, NACLs, SGs

Timeline

DevOps & Platform Engineer

HSBC UK
06.2023 - Current

DevOps engineer

Innominds India Pvt Ltd
02.2019 - 06.2023

Master of Science - Advance Engineer Expert

Leeds Beckett University
Ashoni Kumar Amudala