Summary
Overview
Work History
Education
Skills
Timeline
Generic

Ananya Kurukundu

Warrenville,IL

Summary

AI Platform & MLOps Engineer with 7+ years of experience designing, building, and operating enterprise-scale AI/ML platforms, cloud-native infrastructure, and production environments across AWS, Azure, and Google Cloud Platform (GCP). Specialized in AI Platform Engineering, MLOps, Generative AI, Kubernetes, Infrastructure as Code (IaC), and platform automation. Proven expertise delivering secure, scalable, and production-grade environments that enable data scientists, ML engineers, and application teams to develop, train, deploy, monitor, and operationalize machine learning and GenAI solutions at scale.

AI Platform Engineering & MLOps: Built and operated end-to-end AI platforms supporting model development, training, deployment, inference, monitoring, and lifecycle management using Amazon SageMaker, Amazon Bedrock, Kubernetes, and cloud-native services. Developed reusable platform capabilities that accelerated AI adoption, standardized deployments, and improved operational efficiency across enterprise environments. Implemented Bedrock Knowledge Bases, OpenSearch Vector Search, and Retrieval-Augmented Generation (RAG) architectures to support scalable GenAI applications and enterprise knowledge discovery.

Cloud & Platform Architecture: Designed multi-account, multi-environment cloud platforms across AWS, Azure, and GCP, provisioning infrastructure through Terraform, Terragrunt, CloudFormation, Bicep, and Pulumi. Built reusable platform services including networking, compute, storage, data services, security controls, AI services, and Kubernetes platforms supporting enterprise, analytics, and AI/ML workloads.

Developer Platforms & Automation: Created self-service infrastructure and deployment capabilities using Infrastructure as Code, CI/CD automation, GitOps, and platform engineering best practices. Engineered automated software delivery pipelines using Azure DevOps, Jenkins, GitHub Actions, Spinnaker, CloudBees, Argo CD, and Flux, enabling rapid, consistent, and secure application and ML workload deployments.

Kubernetes & AI Infrastructure: Extensive experience deploying and managing AI, machine learning, and cloud-native workloads on Kubernetes platforms including EKS, AKS, and GKE. Skilled in Docker, Helm, Rancher, RBAC, ingress controllers, service mesh technologies, container orchestration, workload scaling, and platform reliability engineering. Supported migration of VMware and PKS workloads to Kubernetes-based cloud platforms and AI-ready environments.

GenAI, RAG & Intelligent Applications: Built infrastructure supporting Generative AI solutions using Amazon Bedrock, Knowledge Bases, OpenSearch, vector search technologies, semantic search pipelines, document ingestion frameworks, event-driven architectures, and Retrieval-Augmented Generation (RAG) frameworks. Enabled enterprise AI capabilities through secure model integration, platform governance, observability, and operational controls.

Data, Observability & Platform Reliability: Implemented comprehensive observability strategies using CloudWatch, Cloud Monitoring, Azure Monitor, Datadog, Dynatrace, Prometheus, Grafana, OpenTelemetry, Splunk, and ELK. Built monitoring, logging, tracing, alerting, and reliability frameworks for AI platforms, distributed applications, and Kubernetes environments while improving availability, performance, and operational excellence.

Security & Governance: Applied platform security and governance best practices using IAM, KMS, Secrets Manager, Azure Key Vault, Vault, OPA/Conftest, Snyk, Trivy, Qualys, network segmentation, RBAC, encryption, and least-privilege access controls to secure enterprise AI/ML platforms and cloud-native applications.

Platform Engineering & Cloud Transformation: Led initiatives involving cloud migration, platform modernization, infrastructure standardization, AI platform adoption, and enterprise application transformation. Collaborated with development, security, data engineering, and operations teams to deliver resilient, scalable, and production-ready AI-enabled cloud solutions. Supported AI research infrastructure on GCP by provisioning GKE clusters, Compute Engine instances, Cloud Storage, Cloud SQL, Jenkins CI/CD pipelines, and Kubernetes-based application deployments using Terraform and automation frameworks

Overview

12
12
years of professional experience

Work History

MLOps AI Platform ENGINEER

Pacific Life
01.2026 - Current
  • Designed and delivered a multi-environment AWS AI/ML platform (Dev, QA, UAT, Prod) for the FIN GenAI application, reducing environment drift by 90% and enabling consistent, audit-ready deployments.
  • Integrated Amazon SageMaker for model development, training, deployment, inference, monitoring, and lifecycle management, reducing manual ML deployment effort by 70% and accelerating model iteration cycles.
  • Built reusable Terraform modules for Bedrock, SageMaker, OpenSearch, Lambda, Step Functions, API Gateway, DynamoDB, IAM, KMS, Secrets Manager, EventBridge, SQS, and CloudWatch, cutting provisioning time by 60% and standardizing IaC across teams.
  • Implemented AI/ML observability using CloudWatch dashboards, metrics, logs, alarms, SNS, and EventBridge; achieved a 35% reduction in MTTR and enhanced platform reliability.
  • Applied MLops security practices using least-privilege IAM, KMS encryption, Secrets Manager, TLS, VPC endpoints, security groups, and network segmentation, strengthening platform security posture and meeting enterprise compliance requirements.
  • Developed event-driven ingestion and enrichment pipelines using Lambda, Step Functions, SQS, EventBridge, and S3, automating document processing at scale and reducing manual operations by 95%.
  • Standardized eight Lambda-based processing functions for document conversion, metadata enrichment, acronym mapping, semantic search, and Bedrock usage reporting, improving reliability and reducing duplicate code by 80%.
  • Designed Azure DevOps CI/CD pipelines with approvals, validation gates, security scanning, and deployment verification, cutting deployment lead time by 50% and increasing release confidence.
  • Established governance controls for Bedrock usage and model consumption, ensuring operational health and improving cost visibility.
  • Led a POC for an Amazon Bedrock AgentCore Gateway enabling GitHub Copilot to securely access Sigma analytics via MCP, unlocking AI-driven analytics workflows without exposing backend systems.
  • Integrated AgentCore Gateway, MCP, OAuth, PKCE, API Gateway, and Lambda to enable secure communication between AI assistants and enterprise analytics platforms, enhancing interoperability and simplifying integration.
  • Designed an OAuth proxy using Lambda, API Gateway, DynamoDB, SSM Parameter Store, and Secrets Manager to bridge AgentCore authentication with Sigma's PKCE OAuth and dynamic client registration and enable seamless authentication flows.
  • Implemented Bedrock Knowledge Bases and OpenSearch vector search to support RAG over enterprise documents, improving search relevance and response accuracy by 30-40%.

SRE/ CLOUD DEVOPS ENGINEER

Byte Dance
06.2023 - 01.2026
  • Provisioned AWS infrastructure using Terraform, Terragrunt, and CloudFormation (YAML/JSON); deployed applications across EC2, Route53, S3, RDS, DynamoDB, SNS/SQS, IAM, ELB, and multi-region routing to support autoscaling and high-traffic workloads.
  • Built and deployed microservices from Bytecycle into SCM registries and Kubernetes clusters; implemented CI/CD using CloudBees, Spinnaker, GitHub Actions, integrating Maven, SonarQube, Artifactory, Docker pipelines for EKS, ECS, and Mesos, which improved deployment reliability and reduced release cycle time.
  • Developed Azure DevOps pipelines for microservice builds, artifact management, and automated deployments; integrated quality gates (SonarQube), security gates (Snyk/Trivy), branching strategies, and multi-environment promotion workflows to eliminate manual deployment errors.
  • Implemented observability with CloudWatch dashboards, Splunk dashboards, New Relic APM, and Datadog; managed Kafka and Mesos pipelines with SNS/SQS messaging; enforced IAM/KMS, Vault, and PCI DSS security controls, reducing mean time to recovery (MTTR) and mean time to failure avoidance (MTFA).
  • Automated cluster operations on the TCE platform (scaling, cronjobs, alarms, ticketing) using Python, Bash/Shell, AWS Lambda (EC2 auto-tagging), Nagios, and custom operational scripts, reducing repetitive ops tasks and improving response time.
  • Integrated Amazon Textract into DevOps pipelines, managed S3 data assets for SageMaker ML workflows, provisioned ML endpoints, secured Rekognition with IAM/KMS, and applied Bedrock prompt engineering for real-time content/Q&A, accelerating ML feature delivery.
  • Built and maintained Terragrunt multi-environment IaC architectures with reusable modules, remote state backends, and automated dependency orchestration; integrated Terragrunt with Terraform Cloud, ArgoCD, and Azure DevOps, ensuring governance with OPA/Sentinel and promoting safe plan/apply workflows.

AZURE CLOUD DEVOPS ENGINEER

Morgan Stanley
Sunnyvale, California
06.2021 - 05.2023
  • Designed Azure cloud environments and modernized 20+ CI/CD pipelines for YAML-based multi-stage delivery in Azure DevOps, reducing lead time to production by 40%.
  • Engineered CI/CD pipelines with Azure DevOps, Jenkins, Git, Maven, Ant, Groovy, MSBuild, and Docker, and established GitOps practices with Helm, Rancher, Argo CD, and Gitflow/trunk-based branching.
  • Administered Kubernetes clusters via Rancher across AKS, EKS, and on-premises, implementing Helm charts, Kubernetes manifests, and GitOps-driven releases to enhance deployment consistency.
  • Embedded SAST, DAST, and Qualys scanning into CI/CD pipelines, and enforced IAM, Key Vault, KMS, and security guardrails for compliant cloud operations.
  • Directed Azure infrastructure management across Web Apps, Functions, Data Factory, Databricks, Data Lake, SQL, Azure Storage, Azure AD, Key Vault, private endpoints, networking, and security controls to maintain availability and performance.
  • Guided on-premises for Azure migrations spanning SQL Server, Azure SQL, MongoDB, Cosmos DB, Hadoop, and Azure Data Lake/Synapse, while building scalable ETL pipelines with ADF v1/v2 and Databricks.
  • Developed automated provisioning frameworks with Terraform, ARM templates, PowerShell, Docker, and service orchestration, including reusable Terraform modules for multi-environment delivery.
  • Established observability with Azure Monitor, Application Insights, Log Analytics, Splunk, ELK, and New Relic, implementing proactive alerting to improve reliability and reduce recovery time.
  • Implemented observability using Azure Monitor, Application Insights, Log Analytics, Splunk, ELK, and New Relic with proactive alerting to enhance system reliability and reduce mean time to recovery.
  • Built data processing workflows in Databricks for Blob Storage, Data Lake Storage, and Azure SQL Data Warehouse; managed Cosmos DB partitioning for scalable, low-latency workloads.

Graduate Research Assistant

Northern Illinois University
DeKalb, Illinois
01.2020 - 05.2021
  • Provisioned GCP projects, VPC networks, subnets, Compute Engine instances, and GKE clusters with Terraform for development, testing, and research workloads.
  • Deployed Dockerized research applications to Kubernetes and managed workloads with kubectl, Helm, RBAC, and ingress controllers.
  • Automated infrastructure and application deployments with Terraform, Jenkins, Chef, and Python or shell scripts, streamlining deployment processes.
  • Built Jenkins CI/CD pipeline to compile and test containerized applications, publish images to Google Container Registry, and deploy to GKE.
  • Configured GCP firewall rules and network access, enhancing security for Compute Engine instances and GKE workloads.
  • Used Cloud Storage to organize research datasets and Cloud SQL to support application data needs.
  • Configured cloud load balancing and Cloud CDN to route application traffic and serve cached content..
  • Monitored infrastructure and application health with Stackdriver, now Cloud Monitoring, facilitating efficient troubleshooting through centralized logging..
  • Supported migration of applications from VMware or PKS environments to GCP and Kubernetes.

CLOUD ENGINEER

Cognizant
Hyderabad, IN
01.2017 - 01.2019
  • Designed and configured Azure virtual networks (VNETs, private subnets, NSGs, route tables, UDRs, private endpoints) to host secure enterprise data platforms.
  • Worked across core Azure services including Azure VMs, Storage Accounts, Load Balancers, Autoscaling, NSGs, Application Gateway, ACR, Azure SQL, AKS, Azure Functions, and Azure DevOps Pipelines/Repos.
  • Administered Azure environments, enabling development teams to efficiently provision resources, manage RBAC, assign Azure AD roles, and control access to storage and Azure Repos.
  • Implemented TLS encryption and certificate management using Key Vault across Application Gateway, Front Door, API Management, Azure SQL, and Storage to secure service communication with enforced HTTPS.
  • Built CI/CD pipelines using Azure Pipelines, Maven, Bamboo, Bitbucket/Git; managed branching strategies, triggers, workflows, and repository security; deployed workloads to AKS using Docker and Helm.
  • Implemented monitoring and automation using Azure Monitor, Log Analytics, Application Insights, and SIEM tools; automated tasks with Ansible, Python, PowerShell, and Azure Functions to support hybrid infrastructure.

CLOUD ENGINEER

Cognizant
Chennai, IN
01.2015 - 01.2017
  • Migrated compute workloads to EC2 and containerized services to EKS; implemented autoscaling, load balancing, hardened AMIs, and improved reliability across migrated environments.
  • Led migration of on-prem applications and servers to AWS by designing secure landing zones (VPCs, private subnets, route tables, security groups) and re-architecting legacy workloads into cloud-native services.
  • Transitioned storage and databases from on-prem systems to S3, RDS, and DynamoDB; implemented encryption, lifecycle policies, replication, and backup strategies to ensure durability and compliance.
  • Secured migrated workloads by implementing TLS/ACM, IAM least-privilege, KMS encryption, Secrets Manager, and VPC endpoints, enforcing enterprise security standards.
  • Rebuilt CI/CD pipelines using Jenkins, Bamboo, CodeBuild, and CodeDeploy, automating build/test/release workflows to enhance deployment velocity.
  • Migrated monitoring from Nagios to CloudWatch dashboards, alarms, and metric filters, enhancing anomaly detection and decreasing MTTR/MTFA for cloud-based workloads.

Education

Masters - management information systems

Northern Illinois University
DeKalb, IL, USA
05-2021

Bachelor - Electronics and Communications Engineering

Jawaharlal Nehru Technological University (JNTU)
Anantapur, India
05-2014

Skills

  • Cloud: AWS (Bedrock, EKS, EC2, S3, RDS, IAM, CloudWatch, sagemaker, agenticore gateway), Azure (AKS, Functions, Azure Monitor), GCP, Salesforce, Lambda, Google Cloud Platform, Compute Engine, GKE, Cloud Storage, Cloud SQL, Cloud Load Balancing, Cloud CDN, Cloud Monitoring
  • Infrastructure as Code (IaC): Terraform, Terragrunt, Terraform Cloud, CloudFormation, ARM, Bicep, Pulumi
  • Containers and Orchestration: Docker, Kubernetes (EKS/AKS/GKE), Rancher, Docker Swarm, Mesos, Helm, KEDA
  • CI/CD & Build Automation Tool: Jenkins, GitHub Actions, Azure DevOps, Harness, ArgoCD, Flux, Maven, Gradle, Ant, Spinnaker, GitOps patterns
  • Monitoring Tools: OpenTelemetry, Prometheus, Grafana, Jaeger, ELK (Elasticsearch, Logstash, Kibana), Splunk, Datadog, Dynatrace, Application Insights, Nagios, CloudWatch, Control Tower
  • Security, Secrets & Compliance: HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, OPA/Confest, Snyk, Trivy, Qualys, Veracode, SonarQube
  • Data, Messaging & Databases: Kafka/Confluent, Kafka Connect, AKHQ, Redis, PostgreSQL, Cosmos DB, SQL, MySQL, Oracle
  • Scripting Languages: Python, Shell/ Bash, Powershell, Ruby
  • Programming Languages and Automation: Python, Java, NET/NET Core, Bash, PowerShell, Ruby, Groovy, Ansible, Chef, Terraform modules
  • Version Control Tools and Artifact Management: Git, Bitbucket, SVN, Artifactory, Nexus
  • Security, Secrets & Compliance: HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, OPA/Conftest, Snyk, Trivy, Qualys, Veracode, SonarQube
  • Platform Engineering & SRE: Istio, Linkerd, Service Mesh, Litmus, Gremlin, SLO/SLO monitoring, PagerDuty, Runbooks
  • Automation & container Tools: Chef, Ansible, Kubernetes, Docker, Docker Swarm, Mesos
  • Web Application Frameworks

Timeline

MLOps AI Platform ENGINEER

Pacific Life
01.2026 - Current

SRE/ CLOUD DEVOPS ENGINEER

Byte Dance
06.2023 - 01.2026

AZURE CLOUD DEVOPS ENGINEER

Morgan Stanley
06.2021 - 05.2023

Graduate Research Assistant

Northern Illinois University
01.2020 - 05.2021

CLOUD ENGINEER

Cognizant
01.2017 - 01.2019

CLOUD ENGINEER

Cognizant
01.2015 - 01.2017

Masters - management information systems

Northern Illinois University

Bachelor - Electronics and Communications Engineering

Jawaharlal Nehru Technological University (JNTU)
Ananya Kurukundu