EXPERIENCE

Platform & Infrastructure Engineer

Core42 (12/2025 - Present)

• Deployed and operated OpenShift Container Platform (OCP) clusters in fully air-gapped, bare-metal environments; managed day-2 operations including cluster upgrades, operator lifecycle management via OLM, and compliance hardening using the Compliance Operator.
• Provisioned and maintained Azure Kubernetes Service (AKS) clusters for cloud workloads, implementing node pool management, cluster autoscaling, Azure Key Vault CSI integration, and managed identity-based secret rotation.
• Configured NVIDIA GPU infrastructure for H100 and H200 nodes including driver installation, NVIDIA GPU Operator deployment with CDI mode, precompiled drivers, and DCGM Exporter integration for GPU telemetry and observability via Prometheus and Grafana.
• Deployed and managed AI/ML model serving infrastructure on GPU-enabled Kubernetes clusters; onboarded LLM inference workloads (vLLM, Gemma, BGE embeddings, TTS/STT models) and vector search services (Qdrant), ensuring GPU resource allocation, isolation, and scheduling via device plugins and resource quotas.
• Deployed and managed Rancher v2 for centralised multi-cluster Kubernetes management in air-gapped environments; configured GitOps workflows using ArgoCD for application lifecycle management across RKE2 clusters.
• Built and maintained full-stack observability using Prometheus, Grafana, Alertmanager, Loki, and DCGM Exporter; configured ODF/Ceph and MinIO S3-compatible storage backends for stateful workloads, model artifact storage, and message broker infrastructure (RabbitMQ).
• Managed Red Hat ecosystem tooling including Red Hat Satellite for disconnected content management and patching, and Red Hat IdM for identity and LDAP integration across cluster services.

SRE & DevOps Consultant

Huco (08/2023 - 11/2025)

• Designed, deployed, and operated secure, air-gapped and public cloud OpenShift and RKE2 clusters, adhering to CIS benchmarks and enterprise hardening best practices.
• Built and maintained end-to-end CI/CD pipelines for containerized applications using GitOps tools and integrated artifact scanning via JFrog Xray.
• Configured and managed enterprise-grade ingress and L7 traffic management solutions including F5 CIS, NGINX Ingress Controller, standalone NGINX, and App Protect.
• Implemented and managed Istio service mesh, Kubernetes network policies, and Prisma Cloud for container runtime security and threat prevention.
• Deployed and operated observability stacks with Prometheus, Grafana, Thanos, Alertmanager, Fluentd, and ELK, ensuring high availability, scalability, and SLO compliance.
• Provisioned dynamic and static storage with G42, vSphere, Portworx CSI drivers; developed backup and DR strategies for production-grade Kubernetes clusters.
• Established RBAC policies, namespace segregation, and cluster-level governance; assisted development teams with app onboarding and operational support.
• Delivered high availability Rancher setups for central management of RKE2 clusters and led DevOps adoption initiatives for clients embracing cloud-native platforms.

SRE - Kubernetes Ecosystem

InfraCloud Technologies (07/2021 - 08/2023)

• Worked as SRE in the Kubernetes ecosystem, helping Rancher integrate monthly Kubernetes patches and minor versions.
• Maintained and upgraded multiple Helm charts including Istio, Kiali, Jaeger-tracing, OPA-Gatekeeper and CIS benchmark.
• Helped end users and open-source community members using Rancher and RKE with provisioning issues and tools like Istio, Gatekeeper, and CIS-benchmark.
• Added support for new Docker versions (23.0) to RKE, enabling Rancher, RKE, RKE2 and K3s users to provision clusters.
• Integrated monthly Kubernetes patches with RKE and Rancher, analyzing changelogs and implementing changes.
• Added support for newer versions of nginx-ingress-controller and calico/canal CNIs to RKE.
• Resolved issues related to CNIs and Kubernetes conformance tests.
• Implemented comprehensive testing frameworks for Helm charts using hull framework.

Open Source Contributions

Kiali Project

• Kiali is a management console for Istio service mesh. Fixed URL rewriting issue when using Kiali with kubectl proxy.
• Modified the router to pick up the URL used to access the service, solving accessibility issues on refresh.
• Issue: https://github.com/kiali/kiali/issues/4459
• PR: https://github.com/kiali/kiali/pull/4914