Summary
Overview
Work History
Education
Skills
Websites
Certification
Timeline
Generic

Ranjith Pathepuram

Irving,TX

Summary

Senior DevOps, Cloud & Platforms Engineer with 5+ years of experience delivering reliable, audit-ready enterprise platforms across multi-cloud retail POS and regulated healthcare systems at Prudential and Virtusa, modernising CI/CD at scale while strengthening availability, governance, and production stability. Broad technical stack spanning CI/CD and platforms (GitHub Enterprise, GitHub Actions, Jenkins, Azure DevOps, Harness), cloud and IaC (Azure, AWS, GCP, Terraform), containers/orchestration (Docker, Kubernetes, AKS, EKS), MLOps (MLflow, AWS SageMaker, Azure ML), observability (Azure Monitor, App Insights, Grafana, CloudWatch, Datadog, ELK), and automation (.NET Core, C#, PowerShell, Python, ServiceNow, Power BI). Deep expertise in CI/CD governance, Policy-as-Code, reliability engineering, and identity-centric controls, combining Infrastructure as Code, SRE practices, L3/L4 production ownership, and observability with formal SOX ITGC guardrails and secure MLOps delivery patterns. Pragmatic collaborator who partners daily with IAM, DevSecOps, Security, and Audit/Compliance teams in Agile environments to align standards, run blameless RCAs, and resolve high-impact incidents through shared tooling, automated evidence, and transparent change workflows. Hands-on leader who improves quality through reusable pipeline templates, automated governance checks, and real-time dashboards while coaching peers, leading cross-team reviews, and building ad-hoc platform utilities that reduce operational toil. Expert in Terraform-based platform delivery, using modular IaC, remote state (S3 and Azure Storage), state locking, and automated plan/apply workflows with quality gates (tflint, tfsec, Checkov), while governing multi-environment rollouts across AWS, Azure, and Kubernetes with reusable modules and drift detection.

Professional in field, bringing extensive experience in automating and streamlining operations, contributing to improved efficiency and reliability. Known for collaborative approach and consistent focus on achieving results. Expertise in cloud infrastructure, continuous integration, and deployment practices. Valued for adaptability and dependability in dynamic environments.

Experienced with automating deployment and system configurations, ensuring seamless integration and delivery processes. Utilizes advanced knowledge of cloud platforms and scripting to enhance operational efficiency. Track record of collaborating with teams to maintain high standards and achieve successful project outcomes.

Bilingual DevOps Engineer with background designing, testing, and implementing infrastructure and applications. Talented performer with over four years of experience using source control tools to identify and fix bugs in code. Consistent team player with exemplary multitasking skills.

Overview

7
7
years of professional experience
1
1
Certification

Work History

Cloud DevOps Engineer

Prudential
Dallas, TX
05.2025 - Current
  • Led an enterprise DevOps transformation for a global retail POS platform by unifying cloud infrastructure, CI/CD, and identity across AWS, Azure, and GCP to improve reliability and release consistency.
  • Modernised Emerald 2.0 by decomposing legacy services into Java and Python microservices designed around DDD bounded contexts and OpenAPI contracts, while administering GitHub Enterprise orgs, repos, and workflows with CODEOWNERS and branch protection.
  • Engineered hybrid delivery pipelines across GitHub Actions, Jenkins, and Azure DevOps using staged dev–test–prod promotions and cross-tool stage gates, while hardening runners in private VNet/VPC networks and adopting OIDC federation to Azure IAM and AWS IAM.
  • Implemented enterprise SSO by configuring Entra ID app registrations and Conditional Access policies, enabling SCIM provisioning with delta sync, and enforcing least privilege through RBAC and fine-grained GitHub role assignment.
  • Built reusable CI/CD governance templates using GitHub repo templates and reusable YAML workflows, enforcing guardrails with Open Policy Agent (OPA) and required status checks to standardise pipeline configuration at scale.
  • Developed REST integration APIs to synchronise GitHub Enterprise administration data into Azure DevOps using webhooks, reconciliation logic, and incremental polling, while centralising runner health and workflow execution signals into Azure Monitor and GCP log-based alerts.
  • Operated Kubernetes-based GitHub runners using dedicated node pools, HPA, and isolated namespaces, managing runner lifecycle via image versioning, automated registration, and controlled recycling to sustain multi-region delivery.
  • Standardised platform analytics by building a Power BI semantic model on GitHub Actions telemetry, ingesting data via scheduled GitHub API extraction with deduplication and retry handling, and publishing role-scoped insights with DAX measures and controlled refresh.

DevOps Engineer

Prudential
Dallas, TX
02.2024 - 05.2025
  • Developed enterprise healthcare applications using Java, Python, Spring Boot, and Django, enforcing GitHub safeguards such as branch protection, CODEOWNERS, and required status checks across multi-team repositories.
  • Administered GitHub Enterprise at scale by automating repository provisioning, access controls, and self-hosted runner lifecycle management, driving changes programmatically through GitHub REST APIs and GraphQL.
  • Engineered CI/CD pipelines using GitHub Actions, Jenkins, and AWS CodePipeline, standardising reusable delivery patterns with composite actions, shared pipeline libraries, and templated workflows to reduce pipeline variance across teams.
  • Standardised reusable GitHub Actions workflows via a central template repository with versioned releases, enforcing adoption through required workflows, pre-merge checks, and rulesets to prevent configuration drift.
  • Embedded automated guardrails into pipelines using Open Policy Agent (OPA) with Rego and GitHub Ru in Iesets, blocking unsafe changes while keeping approvals and checks consistent across release stages.
  • Automated software supply-chain integrity by generating SBOMs and signed build outputs using Syft, Cosign, and SLSA provenance, ensuring every release remained traceable from commit through deployment.
  • Provisioned highly available AWS infrastructure with Terraform by building reusable modules, separating environments with workspaces, and deploying core services such as VPC, EC2, Auto Scaling Groups, ALB/NLB, Lambda, API Gateway, EKS, S3, and RDS.
  • Improved Terraform delivery reliability by implementing remote state in Amazon S3 with DynamoDB state locking, adding automated plan/apply workflows, and enforcing quality gates with tflint, tfsec, and Checkov.
  • Instrumented production services with Amazon CloudWatch, CloudWatch Logs, AWS X-Ray, and Amazon Managed Grafana, centralising observability with structured logs and correlation identifiers for faster issue isolation.
  • Added alerting and incident routing through PagerDuty, combining CloudWatch alarms, rule-based notifications, and runbook-driven triage flows to improve response consistency during outages.
  • Implemented automated blue/green and rollback workflows using AWS CodeDeploy, ALB target groups, and deployment health checks, triggering safe traffic shifts and auto-revert on failed releases.
  • Linked ServiceNow change workflows to delivery pipelines by integrating ServiceNow REST APIs with OAuth2 token rotation, maintaining commit-to-PR-to-build traceability via correlation IDs and release metadata.
  • Deployed enterprise identity integrations using Microsoft Entra ID and Okta, implementing SSO, MFA, and SCIM with OIDC flows and scoped access tokens for secure, automated user lifecycle management.
  • Established secure access operations by implementing just-in-time access patterns and automated recertification workflows across GitHub and AWS IAM, reducing standing privileges while improving access hygiene.
  • Established CI/CD operational standards by codifying runbooks and decision trees, applying a tiered approver model for pipeline changes, and governing deployment sequencing across numerous pipelines.
  • Produced operational dashboards in Power BI by ingesting GitHub audit logs into Amazon S3 and querying with Amazon Athena, modelling datasets with a star schema and DAX measures to track delivery throughput and access signals.

Associate DevOps Engineer

Virtusa
Hyderabad, IN
07.2020 - 07.2022
  • Responsible for the design and implementation of DevOps strategies leveraging AWS and Azure cloud services, optimizing infrastructure, reducing downtime, and increasing deployment velocity by 30%.
  • Implemented CI/CD pipelines using Azure DevOps and GitHub Actions for Infrastructure and application deployments.
  • Possess a strong proficiency in crafting reusable CI/CD templates and workflows within Azure DevOps and GitHub Actions.
  • Extensively worked with Terraform and CloudFormation for building, changing and versioning infrastructure safely and efficiently.
  • Possess good knowledge of cloud security tool WIZ for cloud posture management, vulnerability detection and compliance monitoring. Worked on integration of WIZ with AWS cloud as well.
  • Worked on creation of WIZ custom cloud configuration rules using REGO for AWS, Azure and Terraform.
  • Collaborated for discovering and remediating cloud security issues for 3rd party audits as per Banking industry standards.
  • Worked with other security and compliance tools such as AWS Security Hub, AWS Config, AWS CloudTrail, Qualys, Microsoft Defender for cloud.
  • Collaborated with the Dynatrace monitoring tool to perform comprehensive full-stack monitoring, encompassing servers, databases, and applications.
  • Worked with ITSM software platform ServiceNow for full lifecycle from incident tracking to release management.
  • Worked towards creation of custom, security compliant, standard VM Images to be used by different application and infrastructure team.
  • Good knowledge on integrating and working with cloud management and cost optimization tool i.e Flexera and Cloud Health.
  • Good Knowledge on patching tools like AWS SSM for centralized patch management.
  • Worked in collaborating and documentation of knowledge base over confluence for any technical/non-technical documents.
  • Worked as 24x7 on-call production support for Applications with critical SLAs by following proper RCA’s.

System Administrator

Path Technologies
Hyderabad, IN
06.2019 - 06.2020
  • Administered enterprise Linux and Windows Server environments, automating configuration and patch workflows with Ansible and PowerShell, enforcing baseline hardening and access controls through GitHub Enterprise (branch protection, CODEOWNERS) mapped to HIPAA, NIST 800-53, and HITRUST requirements.
  • Automated GitHub Enterprise operations by managing self-hosted runners, repository permissions, and workflow health checks via GitHub APIs (REST, GraphQL), while generating audit-ready evidence artefacts (SBOMs, signed build records, CSV, structured JSON) sourced from GitHub and Microsoft Entra ID.
  • Standardized deployment workflows across GitHub Actions, Jenkins, and Azure DevOps using reusable pipeline templates (composite actions, shared libraries) and approval gates (manual reviewers, automated policy checks), integrating Terraform modules with remote state in Azure Blob Storage to deliver consistent multi-cloud releases.
  • Implemented enterprise identity and change controls by configuring SSO, MFA, and SCIM with Microsoft Entra ID and Okta using OIDC and scoped tokens, linking ServiceNow change records to .NET Core releases via REST APIs and OAuth token rotation with commit-to-build traceability and correlation IDs.
  • Improved operational visibility and response by instrumenting services with Azure Monitor and Application Insights, routing alerts through PagerDuty, and publishing compliance and pipeline governance dashboards in Power BI (star schema, DAX) backed by GitHub Audit Log ingestion into Azure Data Lake.

Education

MS - Computer and Information Science

Southern Arkansas University
Magnolia, AR
05-2024

Skills

  • Programming & Scripting: C#, PowerShell, Python, Java, JavaScript, TypeScript, JSON, YAML, Harness/GitHub API Automation, Compliance Reporting Automation, Configuration Drift Detection Scripts, OpenAPI
  • DevOps & CI/CD: Harness CI/CD Governance, GitHub Actions, Jenkins, Azure DevOps (ADO), AWS DevOps, GitHub Enterprise Administration, Pipeline Governance Controls, Deployment Governance Policies, Workflow Templates, YAML Pipelines, Self-Hosted Runners, Pipeline RCA & Preventive Actions, GitHub REST API, GitHub GraphQL API, Webhooks, GitHub Rulesets, Composite Actions, Reusable Workflows, GitHub Releases, AWS CodePipeline, AWS CodeDeploy
  • Governance & Compliance: SOX ITGC Controls, SOX Evidence Gathering, Configuration Change Approvals, Access Reviews, Audit Documentation, Governance SCP Enforcement, SSO (SAML/OAuth), SCIM User Provisioning, Compliance Impact Analysis, Control Owner Support, Policy-as-Code Governance, Open Policy Agent (OPA), Rego, SBOM, Syft, Cosign, SLSA Provenance
  • Cloud & Infra: Infrastructure as Code (Terraform), Kubernetes, AWS VPC, ALB, S3, Multi-AZ High Availability, Disaster Recovery Planning, Azure Web Apps, AWS EC2, GCP Compute, AKS, Docker, Multi-Cloud Deployment Governance, CI/CD Environment Hardening, EKS, CloudWatch Logs, AWS X-Ray, Amazon Managed Grafana, Terraform Quality Gates (tflint, tfsec, Checkov), Readiness/Liveness Probes, Pod Disruption Budgets (PDB), HPA, Azure Key Vault, AWS Secrets Manager, Azure Automation Runbooks, Amazon Athena, DAX
  • Monitoring & Security: AWS IAM, IAM Role-based Access, Azure Monitor, GCP Logs, App Insights, Grafana, AWS CloudWatch, Datadog, ELK Stack, Infrastructure & Pipeline Observability, Reliability Monitoring, Alerting & Incident Metrics, OAuth 20, JWT, MFA, SOX-Aligned Incident Response, RCA Documentation, Configuration Baseline Validation, Security & Access Governance Integration, OIDC Federation, Conditional Access, PagerDuty
  • Collaboration & Tracking: JIRA, Confluence, MS Teams, ServiceNow, Postman, Power Automate, Cross-Team Coordination (IAM, DevSecOps, Security, Audit, Compliance), Evidence Collaboration Workflows
  • Linux operating system
  • Infrastructure automation
  • Monitoring and logging
  • Containerization technologies

Websites

Certification

  • AWS Certified Cloud Practitioner, Amazon Web Services (AWS) 2021
  • AWS Certified SysOps Administrator - Associate, Amazon Web Services (AWS) 2021
  • Microsoft Certified: Azure Administrator Associate, Microsoft 2020
  • Microsoft Certified: DevOps Engineer Expert, Microsoft 2020
  • Microsoft Certified: Security, Compliance, and Identity Fundamentals, Microsoft 2020

Timeline

Cloud DevOps Engineer

Prudential
05.2025 - Current

DevOps Engineer

Prudential
02.2024 - 05.2025

Associate DevOps Engineer

Virtusa
07.2020 - 07.2022

System Administrator

Path Technologies
06.2019 - 06.2020

MS - Computer and Information Science

Southern Arkansas University