Headline

Senior Site Reliability Engineer @ Vymo | Cloud Security, Site Reliability Engineering

About

As a Senior Site Reliability Engineer at Vymo, I oversee cloud security initiatives across AWS and Azure, including IAM Access Analyzer rollout, VPC Flow Logs management, and certificate compliance efforts. I develop tools like pre-push security gates using Codacy CLI to enhance security practices and lead the generation of SBOM and SCA reports for BFSI security reviews. My role reflects a commitment to building resilient, scalable systems and optimizing cloud infrastructure for cost efficiency. A graduate of GITAM Deemed University with a BE in Electronics and Instrumentation, I leverage my expertise in cloud security, site reliability engineering, and tools like HashiCorp Vault. My work emphasizes collaboration to enhance system reliability, streamline operational workflows, and ensure compliance with industry standards. With certifications in AWS SysOps and Azure Fundamentals, I focus on delivering efficient, dependable, and secure infrastructures for customer success.

Location

Bangalore Urban district

AI stack

claude code

codex

claudecode

Work experience

Senior Site Reliability Engineer at Vymo, Mar 2026 - Present · 8 mos, On-site, • Own the cloud security backlog across AWS and Azure: VPC Flow Logs to S3 with a piloted cost model, AWS Config recorder coverage across regions, IAM Access Analyzer rollout, EBS default encryption with KMS cost assessment, and cleanup of expired ACM and IAM certificates. • Built a repo-owned pre-push security gate using Codacy CLI (Trivy, Semgrep, Bandit, Checkov) that blocks High and Critical findings on changed lines only, rolled out to staging branches across core service repositories. • Generated Syft and Grype SBOM and SCA reports for core application repositories in the client-mandated format for BFSI security reviews. • Rotated AWS IAM keys, Jenkins and Bitbucket API tokens and Sensu licenses; enforced MFA across vendor and NOC AWS accounts; drove removal of loggers printing auth tokens and scripted purging of decommissioned client keys from Vault. • Cut recurring cloud spend by validating CloudFront plan eligibility, tracing S3-to-Azure egress, adding S3 gateway and VPC endpoints to reduce NAT gateway charges, migrating EBS gp2 to gp3, and applying S3 lifecycle policies. • Resolve production incidents across Kubernetes workloads, distributed data stores and the observability pipeline, driving evidence-backed root cause analysis and preventive fixes. • Extended in-house platform tooling for access management, approvals and capacity optimization with RBAC-based workflows, time-bounded production access and telemetry improvements.

Site Reliability Engineer at Vymo, Mar 2023 - Mar 2026 · 3 yrs 1 mo, On-site, • Migrated container registry from AWS ECR to Azure ACR, achieving approximately 80% cost reduction. • Introduced Spot node pools across production and UAT Kubernetes clusters and moved non-production workloads fully to Spot, reducing monthly cloud spend by approximately 5%; migrated resources to more cost-effective SKUs. • Analyzed APIs using APM tools to identify bottlenecks; designed and provisioned new Kubernetes clusters, migrating APIs based on usage patterns and SLA requirements. • Owned the Kloudfuse observability stack: version upgrades, OpenTelemetry log collector rollout, tag and retention tuning, and disk right-sizing to control ingestion cost. • Enabled dynamic upscaling and downscaling of services during non-peak hours. • Set up a new data center in AWS and migrated services from VMs to Kubernetes. • Ran the POC and implemented Temporal infrastructure in UAT and production, using Cassandra and Elasticsearch. • Built internal release tooling covering release logs, queued deployments and Slack-based approval flows for production changes. • Collaborated with client teams for smooth onboarding and connectivity to internal systems. • Developed Python and Bash automation for routine tasks and integrations, reducing operational overhead.

NOC Engineer at Vymo, Mar 2021 - Mar 2023 · 2 yrs 1 mo, Bengaluru, • Monitored and responded to system events based on SOPs, handling critical incidents, escalations and deployment troubleshooting. • Diagnosed complex system issues by correlating monitoring signals with application status. • Performed ad-hoc database operations across MongoDB, MySQL and Elasticsearch. • Managed release and access control across environments and served as on-call primary for deployments and production incidents.

Education

Bachelor of Engineering - BE, Electronics and instrumentation, GITAM Deemed University

Gitam University