Latha Lasetti
Senior CLOUD/DevSecOps Engineer
Linthicum Heights,MD
Summary
Cloud DevOps Engineer with 9+ years of experience in designing, automating, and securing cloud infrastructures on AWS and Azure. Expert in IaC (Terraform, CloudFormation), containerization (Docker, Kubernetes), and CI/CD pipelines (Jenkins, GitHub Actions, Azure DevOps). Strong focus on DevSecOps, cloud security, and high-availability systems (ECS, EKS, AKS). Proven ability to drive automation, scalability, and compliance in enterprise cloud environments.
Overview
9
9
years of professional experience
1
1
year of post-secondary education
4
4
Certifications
Work History
Senior DevOps Engineer
Department of Human Services
Linthicum Heights, MD
10.2019 - Current
- Designed and implemented AWS cloud infrastructure for MDH, MHB, and DHS applications using Terraform to enable consistent and reusable Infrastructure as Code (IaC).
- Developed and maintained CI/CD pipelines using Jenkins, Spinnaker, SonarQube, Veracode, and AWS Inspector to automate code quality checks and vulnerability scanning.
- Managed containerized applications with Docker and deployed them to Amazon EKS via Helm charts, supporting seamless multi-environment orchestration.
- Automated server provisioning and configuration using Ansible, while scripting deployment logic in Python and Bash for increased deployment consistency and speed.
- Configured internal service routing in EKS using NGINX Ingress Controller and HashiCorp Consul, implementing DNS-based service mesh for scalable container workloads.
- Implemented a secure service mesh architecture with Kong Mesh, and integrated ForgeRock IAM (OpenAM, OpenDJ) and OpenID Connect for centralized authentication and authorization.
- Enforced IAM governance policies using Wiz, AWS Security Hub, and AWS IAM, improving identity and access compliance across multiple AWS accounts.
- Administered Kubernetes clusters using Rancher, enabling simplified governance and multi-cluster operations for Dev/Test/Prod environments.
- Enabled observability using Prometheus, Grafana, and CloudWatch Logs, establishing centralized monitoring and alerting across applications.
- Utilized GitHub and Bitbucket for source control and implemented GitOps workflows with webhooks and branch protection to ensure secure and compliant code deployments.
Senior DevOps Engineer
Siemens PLM Software
Cincinnati (Milford), OH
09.2018 - 10.2019
- Led migration of on-premises systems to AWS, using Terraform and Ansible to automate and standardize provisioning across environments.
- Designed and executed database migration from SQL Server and MySQL to AWS RDS, ensuring data integrity, security, and near-zero downtime.
- Developed scalable CI/CD pipelines using Jenkins and GitLab CI, integrating SonarQube and Nexus Lifecycle for vulnerability scanning and artifact validation.
- Managed containerized applications on Amazon EKS, authoring Kubernetes YAML manifests and administering multi-cluster environments with Rancher for efficient lifecycle management.
- Implemented fine-grained IAM policies in AWS, enforcing least privilege and role-based access control (RBAC) to secure cloud infrastructure.
- Monitored infrastructure and application performance using Amazon CloudWatch, New Relic, and Splunk, enhancing visibility and incident response.
- Integrated DevSecOps practices by embedding SAST, container scanning, and open-source dependency checks into CI/CD pipelines for end-to-end security automation.
- Built and secured network infrastructure in AWS, including VPCs, NAT/Internet Gateways, PrivateLink, Endpoints, Route 53, Load Balancers (ALB/NLB), NSGs, and VPN tunnels.
- Designed and implemented disaster recovery (DR) strategies, including automated backups, multi-AZ failover, and recovery testing to ensure business continuity for critical applications and databases.
AWS DevOps Engineer
Ingersoll-Rand
Davidson, NC
08.2017 - 08.2018
- Migrated on-perm applications to AWS Cloud, leveraging ECS, EC2, S3, and RDS to modernize infrastructure and improve scalability.
- Built and deployed microservices using Docker, orchestrated with Kubernetes (EKS/AKS), and managed Helm chart releases for seamless multi-environment rollouts.
- Developed and maintained robust CI/CD pipelines using Jenkins, along with Ansible playbooks to automate provisioning, deployment, and configuration management.
- Provisioned custom network architectures including VPCs, route tables, and subnets using Terraform and CloudFormation for reproducible infrastructure deployments.
- Implemented centralized monitoring by creating custom dashboards and alerting in Splunk, enhancing visibility into system performance and reliability.
- Performed database migrations from on-premises to AWS RDS using AWS DMS, ensuring minimal downtime and secure data transfer.
- Created and maintained detailed DevOps runbooks, SOPs, and architecture diagrams to support team onboarding and cross-functional knowledge sharing.
Cloud DevOps Engineer
Workday
Pleasanton, California
06.2016 - 07.2017
- Automated deployment of MuleSoft Anypoint Platform and Apache Karaf using Terraform and Ansible, standardizing configuration and improving environment consistency.
- Provisioned Azure infrastructure using Terraform and ARM templates, enabling repeatable and scalable cloud environment creation.
- Migrated legacy Jenkins jobs to Groovy-based scripted pipelines, enhancing maintainability, enabling modular CI/CD workflows, and introducing advanced automation features.
- Implemented federated identity integration using SAML-based authentication, establishing platform-wide RBAC (role-based access control) for secure user access management.
- Automated system maintenance tasks by writing Shell and Python scripts for log rotation, configuration updates, and service restarts, improving operational efficiency.
- Supported ESB services by managing SQL Server databases, validating queries, and deploying schema changes in collaboration with development teams.
- Developed and maintained Apache Airflow DAGs to orchestrate complex ETL workflows across AWS services including S3, Redshift, and RDS.
- Managed the full SSL/TLS certificate lifecycle, including CSR generation, wildcard certificates, and Java keystore management, following PKI best practices to ensure secure communications.
Education
Master - Information Technology
Lawrence Technological University
Michigan, MI 01.2015 - 05.2016
Skills
Cloud Platforms: AWS, Azure
Infrastructure as Code: Terraform, CloudFormation, ARM Templates
CI/CD & Automation: Jenkins, GitLab CI, Azure DevOps, Spinnaker, Ansible
DevSecOps Tools: SonarQube, Veracode, Wiz, Nexus Lifecycle, AWS Inspector, Security Hub, Azure Defender
Containers & Orchestration: Docker, Kubernetes (EKS, AKS), Helm
Scripting Languages: Python, Bash, Shell
Monitoring & Logging: CloudWatch, Splunk, Prometheus, Grafana, New Relic
Version Control: Git, GitHub, GitLab, Bitbucket
Certification
Certified DevOps Engineer – Professiona- AWS
Timeline
Senior DevOps Engineer
Department of Human Services
10.2019 - Current
Senior DevOps Engineer
Siemens PLM Software
09.2018 - 10.2019
AWS DevOps Engineer
Ingersoll-Rand
08.2017 - 08.2018
Cloud DevOps Engineer
Workday
06.2016 - 07.2017
Master - Information Technology
Lawrence Technological University
01.2015 - 05.2016