Skip to content
Open to DevOps & Cloud roles

Hi, I'mTarun Gupta

DevOps & Cloud Engineer — Azure · AWS · Kubernetes

>Azure landing zones in Bicep

Based in Delhi, I'm Nirjai's sole DevOps and cloud engineer, owning 9 engagements in healthcare, pharma, fintech and IoT. I build private Azure landing zones, CI/CD with no stored credentials (OIDC) and EKS platforms on AWS.

tarun@infra — zsh
$gh secret list | wc -l
0
$kubectl auth can-i delete pods -A
no
$systemctl is-active wg-quick@wg0
active

livecommit 645a8db

02about

What I do

I'm the sole DevOps and cloud engineer at Nirjai Technologies, owning architecture, security and delivery for 9 engagements. On Azure I built a landing zone in Bicep with no internet-reachable endpoints and shipped microservices to AKS with Helm. On AWS I took a regulated drug-safety platform to production on EKS, and I rebuilt logging and observability so it costs less to run.

Based in
Delhi, India
Currently
DevOps Engineer @ Nirjai
Engagements
9 engagements · 4 ongoing
Focus
Zero-Trust & DevSecOps
03skills

Core skills

Eight groups of skills orbit the DevSecOps loop. Choose a planet to see its skills.

04work

Experience

CurrentMar 2025 – Present

As Nirjai's sole DevOps and cloud engineer, I own architecture, security and delivery for 9 engagements (4 ongoing). They span regulated Azure and AWS environments in healthcare, pharma, fintech and IoT.

  • Codified an Azure landing zone in Bicep with no internet-reachable endpoints: deny-all NSGs and Private Endpoints.
  • Replaced standing credentials with an OIDC-federated GitHub Actions pipeline, promoting SHA-tagged containers 30+ times a month.
  • Cut a client ERP's release from 45 to 12 min; one Jenkins library now ships 6+ apps.
  • Took a regulated drug-safety platform live on AWS EKS, with migrations gating every release and no static AWS keys.
05projects

Infrastructure I've shipped

Nine engagements in healthcare, pharma, fintech and IoT. Open one to see the problem, what I built and the result.

  • Edge inference, private link home

    Symphonia & Graphicus

    Security

    Edge AI Surveillance Infrastructure

    DevOps LeadMay 2026 – Present

    Designed edge AI surveillance for a 6.4 km corridor, now live with 21 feeds. YOLOv8/TensorRT on an RTX PRO 4000; WireGuard and default-deny egress.

    • Docker Compose
    • WireGuard
    • YOLOv8
    • TensorRT
  • One guarded door

    GATX

    Azure · CI/CD · Security

    Private Azure Landing Zone & Migration

    Cloud & DevOps EngineerApr 2026 – Present

    Codified an Azure landing zone in Bicep with no internet-reachable endpoints and no standing credentials in code or CI. Moved 2.8 TB to M365 with 0 data loss.

    • Azure
    • Bicep
    • Container Apps
    • Private Endpoints
  • Default-deny office network

    Nirjai

    CI/CD · Security

    Internal IT Zero-Trust & Release Automation

    DevSecOps & Cloud EngineerMar 2025 – Present

    Resolved 26 security findings across 37 endpoints with default-deny WireGuard, Wazuh SIEM and Ansible. Cut a client ERP's release from 45 to 12 min.

    • WireGuard
    • Wazuh SIEM
    • Ansible
    • Jenkins
  • ELT in fresh containers

    NewsQuant

    Data

    Containerised 24.7M-Record ELT Pipeline

    DevOps EngineerJun 2026 – Aug 2026

    Moved a 24.7M-record ELT pipeline off a Windows workstation into Docker Compose on Linux. 11 sources, 7 in one PostgreSQL model.

    • PostgreSQL
    • Python
    • SQL
    • Docker Compose
  • Commit to production

    TradrLab

    Azure · Kubernetes · CI/CD

    AKS Microservices Platform

    DevOps EngineerApr 2026 – Jun 2026

    Cut commit-to-production lead time 80% for an AI trading platform running React, C# and Python microservices on AKS. Released with Helm and Azure Pipelines.

    • AKS
    • Helm
    • Azure Pipelines
    • HPA
  • Logs you can rebuild

    Quanted

    Observability · Data

    Logging Re-Architecture & Disaster Recovery

    Cloud & DevOps EngineerOct 2025 – Jan 2026

    Cut logging cost 80% by replacing an Elasticsearch cluster with SQLite FTS5 and FastAPI search. A nightly database copy targets a 24 h RPO, 2 h RTO.

    • SQLite FTS5
    • FastAPI
    • Python
    • PostgreSQL
  • Locked edge, isolated platform

    Aztute Corp

    Azure · Security · Observability

    Azure ASE v3 Re-Architecture & Security

    DevOps & Performance EngineerOct 2025 – Feb 2026

    Cut p99 API latency 86% (850 → 120 ms) for a healthcare platform on single-tenant Azure ASE v3. Closed 100% of VAPT findings on first re-test.

    • Azure ASE v3
    • Front Door
    • WAF
    • APIM
  • Migrate first, then roll out

    Ultragenic

    AWS · Kubernetes · Security

    Validated Document Platform on AWS EKS

    DevOps & Cloud Automation EngineerJul 2025 – Oct 2025

    Cut manual release steps 95% for a validated, multi-tenant drug-safety platform taken live on AWS EKS. Resolved 11 code-to-production gaps first.

    • EKS
    • RDS (PITR)
    • EFS
    • Secrets Manager
  • See it, then alert on it

    Mankind Pharma

    Azure · CI/CD · Observability

    Observability Pipeline & Release Automation

    DevOps EngineerMar 2025 – Present

    Cut observability spend 45% and MTTD to 2 min by replacing Application Insights with ELK, Prometheus and Grafana. BI releases now take under 10 min.

    • ELK
    • Prometheus
    • Grafana
    • Jenkins
07recognition

Academic & foundational work

Before cloud work, I trained as an electrical engineer: a published paper, two competition prizes and two power-sector internships.

  1. Pseudo-Static Electromagnetic Reactive Power Compensator

    Publication · IEEMA Journal

    My paper in the IEEMA Journal on a pseudo-static electromagnetic approach to reactive power compensation.

  2. 2nd Prize, GGSIPU Inter-College Major Project

    GGSIPU

    Second prize for my engineering major project, judged against teams from GGSIPU colleges.

  3. 1st Place (North Zone), Robo-Mania National Robotics Championship

    Delhi Technological University (DTU)

    First place in the North Zone round of Robo-Mania, the national robotics championship held at Delhi Technological University.

  4. Engineering Intern

    Central Electricity Authority (CEA)

    Engineering internship at the Central Electricity Authority, a statutory body under the Ministry of Power.

  5. Engineering Intern

    Northern Regional Load Despatch Centre (NRLDC)

    Engineering internship at the Northern Regional Load Despatch Centre, which runs grid operations for northern India.

08contact

Hiring a DevOps or cloud engineer?

I'm open to DevOps and cloud roles, based in Delhi, India. Email me directly, or download my résumé first.

tarun@techietarun.com