I’m a DevOps and SRE-focused engineer who loves building highly scalable and secure systems from the ground up.
My core strength lies in infrastructure automation, DevSecOps, container orchestration, and observability. I think in terms of reliability, security-first CI/CD, and scaling behavior — ensuring systems are deterministic and resilient.
- 🛠 DevOps & DevSecOps Engineer with strong backend foundations
- 🐧 Deeply interested in Linux internals & system-level behavior
- ⚙️ Obsessed with automation, security-first CI/CD, and clean infrastructure
- 📊 Strong believer in observability-first architecture
- 🔐 Integrating 'Shift-Left' security into every stage of the SDLC
- 🧠 First-principles thinker — break down → understand → rebuild
📍 Noida, India
- ⚙️ Kubernetes internals & workload autoscaling (HPA)
- ☁️ Cloud-native infrastructure & GitOps workflows (ArgoCD)
- 🔐 Shift-left pipeline security & container scanning (Trivy, Gitleaks)
- 📡 Observability & alerting (Prometheus, Alertmanager, Grafana, Loki)
| Domain | Tools / Technologies |
|---|---|
| DevOps & Automation | Terraform, Ansible, GitLab CI, GitHub Actions, Jenkins, CI/CD, GitOps, Argo CD |
| Pipeline Security | SAST, Dependency/CVE Scanning, Trivy, Gitleaks, Hadolint, Image Hardening |
| Containers & Orchestration | Docker, Kubernetes (kubeadm), Helm, HPA, NGINX Ingress, Docker Compose |
| Observability & Reliability | Prometheus, Alertmanager, Grafana, Loki, Incident Response, RCA, Runbooks |
| Backend & Systems | Golang, C, Python, TypeScript, MySQL, Redis |
| Scripting & Infra Config | Bash, YAML |
| Cloud & Infrastructure | AWS (EC2, S3, IAM, Route53), Infrastructure as Code |
I approach engineering using first principles:
- Understand the kernel of the problem
- Identify resource boundaries (CPU, memory, I/O, network)
- Automate everything reproducibly
- Make systems observable before scaling them
- Prefer clarity over complexity
Infrastructure should be:
- Deterministic
- Observable
- Scalable
- Debuggable
- Stack: Python, AWS CLI, EC2, Cron
- Highlights: Schedules startup and shutdown of 15 LTS dev instances across 5 environments, taking each from 168 to 45 running hours a week (~73% fewer idle compute hours). Ordered startup and shutdown (infra before app instances, reversed on stop) with a configurable settle delay. Reads live instance state before acting, so repeated cron runs are idempotent and safe to retry.
- Stack: Golang, MySQL, HTML/CSS/JS, Kubernetes, GitHub Actions
- Highlights: Aggressively optimized Docker images via multi-stage builds (reducing frontend from 92MB→20MB, backend 34MB→12MB). Fully automated CI/CD with security gates (golangci-lint, Gitleaks, govulncheck, Hadolint, Trivy). Rolling deployments with HPA autoscaling.
- Stack: React, Node.js, Docker Compose, GitHub Actions, VPS
- Highlights: End-to-end automated pipeline incorporating DevSecOps principles. Remediated 19 High and 2 Critical vulnerabilities by hardening base images. Achieved zero-manual-step delivery flow: Code → CI Checks → Image Build → Scan → Deploy.
- ⚙️ Infrastructure-as-Code (Terraform, AWS)
- 🔐 DevSecOps CI/CD Pipelines (GitHub Actions)
- ☁️ Kubernetes & GitOps setups
- 📡 Observability stacks (Prometheus, Grafana)
- 🧪 Go and Python automation scripts
- Certified DevOps Engineer Associate — TrainWithShubham (Issued May 2026, Credential ID: CRD-8FFHEZGG)
- DevOps - Zero To Hero (Josh Batch 10) — TrainWithShubham (Issued May 2026, Credential ID: DIAAUXCX)
🐙 GitHub: https://github.com/shivang21007
🔗 LinkedIn: https://linkedin.com/in/shivang21007
📍 Noida, India
To build highly reliable, deeply observable, and highly secure cloud-native systems —
where infrastructure, SRE principles, and automated security intersect.
"If you can't explain the system from the kernel up, you don't fully understand it."