Vikram Babariya

DevOps Engineer | Cloud Engineering

contact.vikram.babariya@gmail.com | +91 70482 63900 | Rajkot, IN

Executive Summary

DevOps Engineer transitioning from a Python backend foundation to high-availability infrastructure. Specializes in architecting zero-trust AWS serverless ecosystems, managing infrastructure declaratively via Terraform (IaC), enforcing immutable CI/CD delivery pipelines, and applying Shift-Left SRE quality gates to reduce TCO and MTTR.

Core Technical Competencies

Cloud & Infrastructure:
AWS IAM (OIDC Federation, STS) AWS (Lambda, API Gateway, DynamoDB, S3) Terraform Terraform Remote State & State Locking checkov (IaC SAST) Modular IaC Design CloudFront CDN, OAC & ACM (TLS/SSL) Cloudflare DNS
DevSecOps & Automated Delivery:
Kubernetes k3d / k3s Kubernetes Manifest Validation Multi-Stage Docker Builds Container Security GitHub Actions (CI/CD Automation) Shift-Left Validation Secret Management Linux System Administration Shell Scripting & Automation Git Version Control Nginx
Reliability, FinOps & Backend Engineering:
AWS CloudWatch & Budgets (FinOps) Python, JavaScript (Node.js) Django, FastAPI, PostgreSQL, Redis

Professional Experience

DevOps Engineer

Jun 2025 — Aug 2026
Independent Technical Sprint / Strategic Sabbatical Rajkot, India

Designed and delivered a production-grade zero-trust AWS serverless platform (live at https://vikram-sre.dev/) — 100% declarative Terraform IaC across five modules, zero static credentials, shift-left security gates at every layer.

  • Eliminated long-lived IAM credentials across 100% of deployments via GitHub Actions OIDC federation — short-lived STS tokens scoped to least-privilege, with cross-repo and cross-branch token reuse mathematically prevented by trust policy sub claim binding.
  • Replaced all ClickOps with a declarative Terraform codebase across five focused modules (state-backend, cdn, compute, dns, iam) — every AWS and Cloudflare resource version-controlled and peer-reviewed, DR recovery reduced to a single terraform apply.
  • Architected a five-gate Terraform CI/CD pipeline (fmt → validate → checkov SAST → plan → apply) — HIGH/CRITICAL findings block merge, intentional waivers documented inline per ADR, and terraform plan output posted as an idempotent PR comment for peer review before any resource change.
  • Enforced Shift-Left quality gates across the full pipeline — ajv-cli/yamllint "Fail Fast" contracts block invalid artifacts pre-build; post-apply smoke tests verify seven live infrastructure invariants including IAM Policy Simulator assertions confirming PoLP boundaries hold.
  • Hard-capped the full AWS stack at ₹500 INR/month via dual-threshold budget alerts (35% actual / 100% forecasted) wired to SNS — API Gateway rate limiting guards against Layer 7 Denial-of-Wallet attacks.

Software Engineer (Backend & Automation)

Jun 2024 — Jun 2025
Infineon Technologies Vadodara, India
  • Architected a Django-based Unit Resolution module for an enterprise Register Map Platform, automating analog-to-digital data translations while integrating strict API quality gates and comprehensive server-side logging to guarantee data integrity.
  • Engineered a Node.js orchestration engine to dynamically parse and execute Python test vectors within managed, ephemeral virtual environments, implementing runtime call-stack inspection to enforce "Fail Fast" validation on I2C/UART hardware operations.

Software Engineering Intern

Dec 2023 — Jun 2024
Infineon Technologies Vadodara, India
  • Architected a scalable Wafer Visualization Platform by integrating Snowflake with Django, implementing multi-threaded data ingestion to process 100+ massive datasets concurrently and reducing defect analysis time from hours to minutes.

Architectural Projects

Inventory System

Feb 2026 — Present
Containerized Defense-in-Depth Architecture → Kubernetes Migration GitHub ↗
  • Built a 4-service inventory management system (FastAPI, React, PostgreSQL, Redis) and migrated it to Kubernetes — 11 manifests with init-container ordering, zero plaintext credentials via secretKeyRef, and 6 property-based tests enforcing manifest correctness without a live cluster.
  • Reduced production Docker artifacts by 90% (3.5 GB → 364 MB) via multi-stage builds, running all containers as non-root; configured dual-environment Compose with healthchecks and immutable production images to eliminate environment drift.
  • Designed multi-tier Docker bridge network architecture enforcing zero-route database isolation, restricting PostgreSQL access to the backend tier via network topology rather than configuration.

Education

Bachelor of Technology (BTech) in Computer Science and Engineering Oct 2020 – May 2024
Dharmsinh Desai University

Certifications

AWS Certified Cloud Practitioner Dec 2025
Amazon Web Services