Deployment Record · Rev. 2026.08
Naveen Kumar
Velanati
DevSecOps & Cloud Infrastructure Engineer — CI/CD automation, Kubernetes, and Infrastructure-as-Code across AWS & Azure.
4+ years turning manual, error-prone releases into governed, self-service pipelines — and building the platforms that host them. Currently architecting the CI/CD, GitOps, and Kubernetes rollout for an enterprise document-conversion platform at Metapercept.
Profile
Summary & Contact ManifestResults-driven DevSecOps Engineer with 4+ years of hands-on experience in cloud infrastructure automation, CI/CD pipeline optimization, and container orchestration across AWS and Azure. Track record of cutting deployment time by 40%, reducing infrastructure spend by 15%, and eliminating 85% of manual deployment effort through Infrastructure-as-Code and GitOps. Embeds security across the SDLC using SAST, DAST, Trivy, and SonarQube, and architects event-driven, serverless, and microservices platforms built to run in production, not just in a demo.
- Location
- Hyderabad, India
- Phone
- +91 98485 45101
- linkedin.com/in/naveenvelanati
Systems
Tooling & Technical StackCloud & Architecture
CI/CD & GitOps
Infrastructure as Code
Containers & Orchestration
Security & DevSecOps
Monitoring & Observability
Data & Storage
Scripting
Collaboration
Deployment Log
Professional Experience- Standardized reusable CI/CD pipelines across API Gateway, Frontend, Converter Services, and Server Admin, cutting operational overhead platform-wide.
- Built deployment automation with integrated security scanning, emergency rollback, JIRA-linked workflows, and controlled manual gates for production safety.
- Expanded Terraform IaC for multi-client, multi-environment infrastructure and AWS Bedrock integrations, reducing provisioning effort by 70%.
- Governed the metR-Phase2 GitHub Organization — branch protection, CODEOWNERS, access management, and security controls across all engineering teams.
- Engineered a per-customer EC2 deployment model with isolated converter engines behind a JWT-secured API Gateway.
More responsibilities
- Containerized and onboarded services across the platform, improving deployment reliability and environment parity.
- Owned production readiness, monitoring, troubleshooting, and RCA to reduce mean time to resolution.
- Drove Kubernetes adoption — deployment manifests, security baselines, and the EKS rollout strategy.
- Ran AWS cost-optimization reviews, removing unused resources and enforcing spend governance.
- Designed QA/UAT/Production infrastructure architecture for the long-term automation roadmap.
- Implemented CloudWatch-based monitoring and alerting for real-time conversion performance tracking.
- Built CI/CD pipelines with GitHub Actions across dev/staging/prod, cutting deployment time by 40% and manual effort by 85%.
- Ran GitOps deployments via ArgoCD across 4+ environments, improving release accuracy by 60%.
- Optimized S3 multipart uploads (10GB+) in Python for fault-tolerant, high-throughput file transfer.
- Built cloud-native AWS architecture — EC2, Auto Scaling, ALB, Lambda, CloudFront, RDS — for a highly available low-code workload.
- Standardized IaC with Terraform + Ansible and enforced IAM least-privilege via automated policy management.
More responsibilities
- Consolidated Shell, Bash, Terraform, and Ansible assets into governed Git repositories.
- Hardened the platform with MFA, access-log monitoring, and VPC/Security Group/NACL controls.
- Led post-incident RCA that cut recurring infrastructure issues by 50%.
- Built observability with Prometheus, Grafana, and ELK for faster incident resolution.
- Documented architectures, CI/CD workflows, and runbooks in Confluence for team onboarding.
Systems Delivered
End-to-End Project Case StudiesA multi-tenant platform that converts client documents into DITA at scale — one shared control plane (frontend, admin, API gateway) serving every client, and independent converter engines (DOCX, HTML, Markdown, FrameMaker, PDF) deployed per client and per purchased format, in either the client's own AWS/VPC or ours.
- Split the platform into two Helm charts — a control plane installed once, and per-client/per-format converter releases — so hosting location is a decision made per converter, not once for the whole platform.
- Secured job routing with GitHub OAuth + JWT at the API Gateway, which proxies each conversion job to whichever converter host is registered for that org + format.
- Streamed live conversion progress via Redis pub/sub → Server-Sent Events, so clients watch DITA packages build in real time instead of polling.
- Shipped GitHub Actions CI/CD pulling versioned images from ECR, with Docker Compose maintained as a local-parity environment for every service.
- Wrote the CODEOWNERS, branch-protection, and access-governance rules for the whole GitHub organization this platform lives in.
Cloud-native infrastructure for a low-code/no-code automation platform — rapid app development, workflow automation, and third-party integrations, running on AWS behind a fully GitOps-managed Kubernetes rollout.
- Multi-stage GitHub Actions pipelines (dev → staging → production) replacing manual releases.
- ArgoCD GitOps across 4+ environments for consistent, version-controlled, auditable deployments.
- Event-driven workflow automation on Lambda, S3, API Gateway for real-time job processing.
- Terraform + Ansible for repeatable, auditable provisioning and configuration management.
- IAM least-privilege enforced as code, with MFA and VPC/NACL controls across the estate.
Manifest
Key AchievementsCloud Modernization
Modernized legacy infrastructure into a fully automated, scalable environment using Terraform and AWS.
Deployment Efficiency
Eliminated manual deployment effort and cut deployment time 40% via standardized CI/CD with GitHub Actions and ArgoCD.
Security Excellence
Zero critical vulnerabilities in production by embedding SAST, DAST, Trivy, and SonarQube into every pipeline.
Cost Optimization
Cut NAT Gateway and infrastructure costs via S3 lifecycle policies, EC2 right-sizing, and VPC endpoint routing.
Customer Onboarding
Reduced provisioning time from hours to under one hour via fully automated Terraform + GitHub Actions workflows.
Incident Reduction
Cut recurring infrastructure incidents through post-incident RCA and proactive Prometheus/Grafana monitoring.
Credentials
Certifications & EducationCertifications
- AWS Certified Solutions Architect
- AWS Cloud Practitioner Essentials
- Generative AI For Executives
Education
Let's Ship Something
Open to Sr. DevOps / DevSecOps / Cloud Infrastructure roles — and to conversations about hard infrastructure problems in general.