Deployment Record · Rev. 2026.08

Naveen Kumar
Velanati

DevSecOps & Cloud Infrastructure Engineer — CI/CD automation, Kubernetes, and Infrastructure-as-Code across AWS & Azure.

4+ years turning manual, error-prone releases into governed, self-service pipelines — and building the platforms that host them. Currently architecting the CI/CD, GitOps, and Kubernetes rollout for an enterprise document-conversion platform at Metapercept.

Sr. DevOps Engineer · Est. 2022
Portrait of Naveen Kumar Velanati
FIG. 01 — SUBJECTHYDERABAD, IN
deploy.log
$ terraform apply --auto-approve
provisioning_time: 1h00m → <5m
$ kubectl rollout status deploy/api-gateway
deployment_time: -40% · manual_effort: -85%
$ trivy scan --severity CRITICAL
critical_vulnerabilities: 0
PLATE 01

Profile

Summary & Contact Manifest

Results-driven DevSecOps Engineer with 4+ years of hands-on experience in cloud infrastructure automation, CI/CD pipeline optimization, and container orchestration across AWS and Azure. Track record of cutting deployment time by 40%, reducing infrastructure spend by 15%, and eliminating 85% of manual deployment effort through Infrastructure-as-Code and GitOps. Embeds security across the SDLC using SAST, DAST, Trivy, and SonarQube, and architects event-driven, serverless, and microservices platforms built to run in production, not just in a demo.

Location
Hyderabad, India
Email
naveenkumarvelanati@gmail.com
Phone
+91 98485 45101
LinkedIn
linkedin.com/in/naveenvelanati
GitHub
github.com/devopswihnaveen
PLATE 02

Systems

Tooling & Technical Stack

Cloud & Architecture

EC2EKSECSLambdaAPI GatewayCloudFrontVPCIAMSQS/SNSStep FunctionsRoute53Multi-Account

CI/CD & GitOps

JenkinsGitHub ActionsGitLab CIArgoCDBlue-GreenCanaryRelease Mgmt

Infrastructure as Code

TerraformCloudFormationAnsiblePulumiRemote StateWorkspaces

Containers & Orchestration

DockerKubernetesHelmKustomizeIstioRBACNetwork Policies

Security & DevSecOps

SAST/DASTTrivySonarQubeCheckovOWASP ZAPKMSSecrets ManagerWAFMFA

Monitoring & Observability

PrometheusGrafanaELK StackCloudWatchDatadogPagerDuty

Data & Storage

MySQLMongoDBRedisRDSS3 Lifecycle

Scripting

PythonBashYAMLJSON

Collaboration

GitGitHubGitLabBitbucketJiraConfluenceAgile/Scrum
PLATE 03

Deployment Log

Professional Experience
Sr. DevOps EngineerMAR 2026 — PRESENT
Metapercept Technology Services LLP · Pune, India  — met-R, Enterprise Document Conversion Platform
  • Standardized reusable CI/CD pipelines across API Gateway, Frontend, Converter Services, and Server Admin, cutting operational overhead platform-wide.
  • Built deployment automation with integrated security scanning, emergency rollback, JIRA-linked workflows, and controlled manual gates for production safety.
  • Expanded Terraform IaC for multi-client, multi-environment infrastructure and AWS Bedrock integrations, reducing provisioning effort by 70%.
  • Governed the metR-Phase2 GitHub Organization — branch protection, CODEOWNERS, access management, and security controls across all engineering teams.
  • Engineered a per-customer EC2 deployment model with isolated converter engines behind a JWT-secured API Gateway.
More responsibilities
  • Containerized and onboarded services across the platform, improving deployment reliability and environment parity.
  • Owned production readiness, monitoring, troubleshooting, and RCA to reduce mean time to resolution.
  • Drove Kubernetes adoption — deployment manifests, security baselines, and the EKS rollout strategy.
  • Ran AWS cost-optimization reviews, removing unused resources and enforcing spend governance.
  • Designed QA/UAT/Production infrastructure architecture for the long-term automation roadmap.
  • Implemented CloudWatch-based monitoring and alerting for real-time conversion performance tracking.
Cloud EngineerJUN 2022 — NOV 2025
Zerocode Innovations Private Limited · Hyderabad, India  — Zerocode, Low-Code Automation Platform
  • Built CI/CD pipelines with GitHub Actions across dev/staging/prod, cutting deployment time by 40% and manual effort by 85%.
  • Ran GitOps deployments via ArgoCD across 4+ environments, improving release accuracy by 60%.
  • Optimized S3 multipart uploads (10GB+) in Python for fault-tolerant, high-throughput file transfer.
  • Built cloud-native AWS architecture — EC2, Auto Scaling, ALB, Lambda, CloudFront, RDS — for a highly available low-code workload.
  • Standardized IaC with Terraform + Ansible and enforced IAM least-privilege via automated policy management.
More responsibilities
  • Consolidated Shell, Bash, Terraform, and Ansible assets into governed Git repositories.
  • Hardened the platform with MFA, access-log monitoring, and VPC/Security Group/NACL controls.
  • Led post-incident RCA that cut recurring infrastructure issues by 50%.
  • Built observability with Prometheus, Grafana, and ELK for faster incident resolution.
  • Documented architectures, CI/CD workflows, and runbooks in Confluence for team onboarding.
PLATE 04–05

Systems Delivered

End-to-End Project Case Studies
met-R — Document Conversion Platform
Platform & DevSecOps Ownership · Metapercept
CASE 01 / EN-TO-END

A multi-tenant platform that converts client documents into DITA at scale — one shared control plane (frontend, admin, API gateway) serving every client, and independent converter engines (DOCX, HTML, Markdown, FrameMaker, PDF) deployed per client and per purchased format, in either the client's own AWS/VPC or ours.

  • Split the platform into two Helm charts — a control plane installed once, and per-client/per-format converter releases — so hosting location is a decision made per converter, not once for the whole platform.
  • Secured job routing with GitHub OAuth + JWT at the API Gateway, which proxies each conversion job to whichever converter host is registered for that org + format.
  • Streamed live conversion progress via Redis pub/sub → Server-Sent Events, so clients watch DITA packages build in real time instead of polling.
  • Shipped GitHub Actions CI/CD pulling versioned images from ECR, with Docker Compose maintained as a local-parity environment for every service.
  • Wrote the CODEOWNERS, branch-protection, and access-governance rules for the whole GitHub organization this platform lives in.
Kubernetes / EKSHelmTerraformDockerGitHub ActionsECRRedisPostgreSQLTrivySonarQubenginx + Certbot
Browser / Users — GitHub OAuth
Frontend
Server Admin
API Gateway — Auth · Job Routing · SSE
↓ per org + format ↓
DOCX
HTML
MD
FrameMaker
PDF
Control plane (shared, installed once) routes each job to independently-hosted converter releases — client VPC or ours, per format.
70%
Less Provisioning Effort
0
Critical Vulnerabilities
5
Converter Engines Onboarded
Zerocode — Low-Code Automation Platform
Cloud Infrastructure & GitOps · Zerocode Innovations
CASE 02 / GITOPS

Cloud-native infrastructure for a low-code/no-code automation platform — rapid app development, workflow automation, and third-party integrations, running on AWS behind a fully GitOps-managed Kubernetes rollout.

  • Multi-stage GitHub Actions pipelines (dev → staging → production) replacing manual releases.
  • ArgoCD GitOps across 4+ environments for consistent, version-controlled, auditable deployments.
  • Event-driven workflow automation on Lambda, S3, API Gateway for real-time job processing.
  • Terraform + Ansible for repeatable, auditable provisioning and configuration management.
  • IAM least-privilege enforced as code, with MFA and VPC/NACL controls across the estate.
Git Repository — Terraform · Ansible · App Code
↓ push
GitHub Actions — Build · Scan · Push to ECR
↓ sync
ArgoCD
Dev
Staging
Prod
Every environment reconciled from Git — no manual kubectl apply in production.
ArgoCDEC2 / ALBLambdaCloudFrontRDSPrometheusGrafanaELK
40%
Faster Deployments
60%
Better Release Accuracy
50%
Fewer Recurring Incidents
PLATE 06

Manifest

Key Achievements
15%

Cloud Modernization

Modernized legacy infrastructure into a fully automated, scalable environment using Terraform and AWS.

85%

Deployment Efficiency

Eliminated manual deployment effort and cut deployment time 40% via standardized CI/CD with GitHub Actions and ArgoCD.

0

Security Excellence

Zero critical vulnerabilities in production by embedding SAST, DAST, Trivy, and SonarQube into every pipeline.

Cost Optimization

Cut NAT Gateway and infrastructure costs via S3 lifecycle policies, EC2 right-sizing, and VPC endpoint routing.

<1H

Customer Onboarding

Reduced provisioning time from hours to under one hour via fully automated Terraform + GitHub Actions workflows.

50%

Incident Reduction

Cut recurring infrastructure incidents through post-incident RCA and proactive Prometheus/Grafana monitoring.

PLATE 07

Credentials

Certifications & Education

Certifications

  • AWS Certified Solutions Architect
  • AWS Cloud Practitioner Essentials
  • Generative AI For Executives

Education

Bachelor of Technology
Prakasam Engineering College, Kandukur — JNTU-Kakinada · 2016–2020
★ Stellar Performance Award — Cloud & DevOps Ownership

Let's Ship Something

Open to Sr. DevOps / DevSecOps / Cloud Infrastructure roles — and to conversations about hard infrastructure problems in general.