AWS IAM (OIDC Federation, STS)
AWS (Lambda, API Gateway, DynamoDB, S3)
Terraform
Terraform Remote State & State Locking
checkov (IaC SAST)
Modular IaC Design
CloudFront CDN, OAC & ACM (TLS/SSL)
Cloudflare DNS
Vikram Babariya
DevOps Engineer | Cloud Engineering
contact.vikram.babariya@gmail.com | +91 70482 63900 | Rajkot, IN
Executive Summary
DevOps Engineer transitioning from a Python backend foundation to high-availability infrastructure. Specializes in architecting zero-trust AWS serverless ecosystems, managing infrastructure declaratively via Terraform (IaC), enforcing immutable CI/CD delivery pipelines, and applying Shift-Left SRE quality gates to reduce TCO and MTTR.
Core Technical Competencies
Kubernetes
k3d / k3s
Kubernetes Manifest Validation
Multi-Stage Docker Builds
Container Security
GitHub Actions (CI/CD Automation)
Shift-Left Validation
Secret Management
Linux System Administration
Shell Scripting & Automation
Git Version Control
Nginx
AWS CloudWatch & Budgets (FinOps)
Python, JavaScript (Node.js)
Django, FastAPI, PostgreSQL, Redis
Professional Experience
DevOps Engineer
Jun 2025 — Aug 2026Designed and delivered a production-grade zero-trust AWS serverless platform (live at https://vikram-sre.dev/) — 100% declarative Terraform IaC across five modules, zero static credentials, shift-left security gates at every layer.
- Eliminated long-lived IAM credentials across 100% of deployments via GitHub Actions OIDC federation — short-lived STS tokens scoped to least-privilege, with cross-repo and cross-branch token reuse mathematically prevented by trust policy sub claim binding.
- Replaced all ClickOps with a declarative Terraform codebase across five focused modules (state-backend, cdn, compute, dns, iam) — every AWS and Cloudflare resource version-controlled and peer-reviewed, DR recovery reduced to a single terraform apply.
- Architected a five-gate Terraform CI/CD pipeline (fmt → validate → checkov SAST → plan → apply) — HIGH/CRITICAL findings block merge, intentional waivers documented inline per ADR, and terraform plan output posted as an idempotent PR comment for peer review before any resource change.
- Enforced Shift-Left quality gates across the full pipeline — ajv-cli/yamllint "Fail Fast" contracts block invalid artifacts pre-build; post-apply smoke tests verify seven live infrastructure invariants including IAM Policy Simulator assertions confirming PoLP boundaries hold.
- Hard-capped the full AWS stack at ₹500 INR/month via dual-threshold budget alerts (35% actual / 100% forecasted) wired to SNS — API Gateway rate limiting guards against Layer 7 Denial-of-Wallet attacks.
Software Engineer (Backend & Automation)
Jun 2024 — Jun 2025- Architected a Django-based Unit Resolution module for an enterprise Register Map Platform, automating analog-to-digital data translations while integrating strict API quality gates and comprehensive server-side logging to guarantee data integrity.
- Engineered a Node.js orchestration engine to dynamically parse and execute Python test vectors within managed, ephemeral virtual environments, implementing runtime call-stack inspection to enforce "Fail Fast" validation on I2C/UART hardware operations.
Software Engineering Intern
Dec 2023 — Jun 2024- Architected a scalable Wafer Visualization Platform by integrating Snowflake with Django, implementing multi-threaded data ingestion to process 100+ massive datasets concurrently and reducing defect analysis time from hours to minutes.
Architectural Projects
Inventory System
Feb 2026 — Present- Built a 4-service inventory management system (FastAPI, React, PostgreSQL, Redis) and migrated it to Kubernetes — 11 manifests with init-container ordering, zero plaintext credentials via secretKeyRef, and 6 property-based tests enforcing manifest correctness without a live cluster.
- Reduced production Docker artifacts by 90% (3.5 GB → 364 MB) via multi-stage builds, running all containers as non-root; configured dual-environment Compose with healthchecks and immutable production images to eliminate environment drift.
- Designed multi-tier Docker bridge network architecture enforcing zero-route database isolation, restricting PostgreSQL access to the backend tier via network topology rather than configuration.
Education
Bachelor of Technology (BTech) in Computer Science and Engineering
Oct 2020 – May 2024
Dharmsinh Desai University
Certifications
AWS Certified Cloud Practitioner
Dec 2025
Amazon Web Services