kushagra.work

Projects / Professional experience

Engineering projects

Practical DevOps work across cloud infrastructure, delivery, and operations. These five overviews describe my contributions at a general level, with employer and system details kept confidential.

Cloud infrastructure

Cloud infrastructure & infrastructure as code

I design and manage AWS infrastructure using Terraform. The work focuses on reusable infrastructure components, secure networking, and repeatable environment provisioning.

AWSTerraformVPCIAMApplication Load BalancerRoute 53ACM

Key contributions

  • Provisioning and managing cloud resources through Infrastructure as Code.
  • Configuring networking, load balancing, DNS, TLS certificates, and access controls.
  • Managing infrastructure state and repeatable environment provisioning.
  • Maintaining reusable infrastructure components for consistent operations.
CI/CD

Container delivery with GitHub Actions & ECS

I build GitHub Actions delivery workflows for ECS workloads on EC2 capacity. Images move through ECR, a one-off migration task, and a health-checked rolling deployment, with the result reported to Teams.

GitHub ActionsDockerAmazon ECRECS on EC2OIDCSystems ManagerSecrets ManagerTeams

Key contributions

  • Building container images from Dockerfiles and publishing them to Amazon ECR.
  • Running a temporary ECS migration task and stopping deployment if it fails.
  • Deploying new task-definition revisions through rolling ECS updates with health checks.
  • Using OIDC roles, Systems Manager, runtime secrets, and Teams result notifications in the delivery workflow.
Containerization

Containerized application infrastructure

I work on ECS deployment infrastructure for multi-service business applications using an EC2 capacity provider. This includes application containers, temporary database migration tasks, and secrets supplied at task startup.

Amazon ECSEC2 capacity providerDockerSecrets ManagerApplication Load BalancerAmazon RDSTerraform

Key contributions

  • Preparing application containers for ECS deployment on EC2 capacity.
  • Separating short-lived database migration tasks from long-running application tasks.
  • Working with application connectivity, load balancing, and managed database connectivity.
  • Configuring runtime secret references and health-checked rolling service updates.
Reliability

Production reliability & operational automation

I develop operational automation and safeguards for application and infrastructure maintenance. The work covers health checks, recovery procedures, and scheduled operations for non-production environments.

AWS LambdaAmazon EventBridgeAWS Systems ManagerCloudWatchGitHub ActionsPython

Key contributions

  • Automating scheduled infrastructure operations for non-production environments.
  • Implementing health checks and maintenance workflows.
  • Improving recovery procedures and deployment runbooks.
  • Automating application recovery actions following configuration or infrastructure changes.
Security & cost

Cloud security & cost optimization

I evaluate cloud environments for security, operational efficiency, and cost effectiveness. The work balances reliability with practical infrastructure requirements and opportunities to reduce operational overhead.

AWS IAMVPCCloudTrailCloudWatchTerraformAWS Cost Management

Key contributions

  • Reviewing IAM permissions, network exposure, and infrastructure security controls.
  • Identifying optimization opportunities across compute, networking, and container workloads.
  • Evaluating managed services and alternative architectures to reduce operational overhead.
  • Improving monitoring, logging, and infrastructure documentation.

Professional work, shared with care. Source code, internal systems, and production architecture are not publicly available.

GOOD SYSTEMS START WITH A CONVERSATION

Let’s build
something reliable.