Ajmal Bangash

Openshift Engineer (Contract)

• Job Details:Microservices application has been deployed to OpenShift cluster (K8s cluster) while following the DevSecOps practices for secure CI/CD pipeline with zero trust policy enforcement aligned with ISO 27001, 27017 controls for secure delivery. Implemented Jenkins as the central integration hub for orchestrating multiple tools and technologies within the secure pipeline. Integrated SonarQube, Trivy, and Snyk into the Jenkins pipeline for static code analysis, dependency scanning, and container image security scanning with OPA for policy and compliance as code enforcement in CI/CD. Adopted a canary deployment strategy leveraging Kubernetes next-generation gateway API for controlled and progressive releases. Enforced multi-tenant and multi-team traffic policies with RBAC access controls, using service accounts and role bindings to ensure team-level isolation and security within the cluster. Documented the entire project from architecture design to implementation, including subnet CIDRs, static IP allocations, and networking configurations.

DevSecOps Engineer

• Job Details:Designed and deployed a production-grade Kubernetes cluster using AWS EKS, Containerd as the run-time with worker nodes across regions for fault tolerance and redundancy for Python (DRF) REST APIs backend application. Prior to deployment and infrastructure provisioning, backend application for REST APIs has been developed and containerized for the orchestration tools and the Kubernetes (K8s) cluster was created using AWS EKS, Containerd as the container runtime, and Kubelet as the service. Implemented DevSecOps practices by integrating Trivy, Checkov, Gitleaks, and OWASP ZAP into CI/CD pipelines (Jenkins). Secured K8s components with self-signed and CA-signed certificates, and established secure SSH for cluster management. Automated CI/CD pipelines using Jenkins to extract application code from GitHub for backend application using containerized microservice for authentication, payments, scheduling, etc. with Docker, to ensure high availability. Provisioned infrastructure using Terraform (IaC) and deployed the multi-tier Django application on AWS EKS, ensuring zero downtime and seamless integration.