Pavan Paruchuri | DevOps Cloud Automation Engineer

Operating Model

Automation-first engineering with production discipline.

My work sits across platform engineering, cloud infrastructure, release automation, security, and operational reliability. I focus on building systems that teams can reuse, understand, monitor, and recover without relying on one-off manual steps.

I bring hands-on depth across Terraform modules, Kubernetes workloads, Red Hat OpenShift, Ansible Automation Platform, CI/CD pipelines, observability tooling, Linux operations, and production support practices.

Engineering Operating System

A portfolio structured around platform outcomes, not tool lists.

01 Foundation to Runtime

Cloud architecture, provisioned through code, promoted through controlled pipelines.

Terraform modules define repeatable foundations, GitOps and CI/CD move change through environments, Kubernetes and OpenShift host workloads, and observability closes the feedback loop.

Reusable by default

Modules, templates, execution environments, and runbooks are designed so teams can adopt patterns without rebuilding the platform from scratch.

Production-aware

Every workflow considers rollback, alerts, ownership, secrets, RBAC, incident response, and the operational path after deployment.

Enterprise automation

AAP work is modeled from execution environments and collections into modules, roles, inventories, playbooks, workflows, and controller configuration.

Platform governance

Policy-as-code, reusable pipeline templates, security checks, exception workflows, and standard platform images keep delivery consistent across teams.

Selected Work Patterns

Realistic engineering outcomes instead of generic portfolio claims.

Platform Foundation AWS · Terraform · EKS

Reusable cloud foundation for application teams

Standardized network, compute, storage, IAM, EKS, and observability building blocks so environments can be provisioned consistently and reviewed through code.

Problem: Manual environment setup, inconsistent module usage, and limited visibility into operational defaults.
Approach: Terraform modules, live environment compositions, backend bootstrap, naming standards, and reusable README patterns.
Result: Cleaner onboarding path for infrastructure work and a portfolio that demonstrates how modules become deployable environments.

Automation Platform AAP · AWX · EE

AAP configuration as code

Controller assets modeled as code: organizations, projects, credentials, inventories, job templates, workflows, schedules, and execution environments.

Reliability Dashboards · Alerts · RCA

Operational readiness patterns

Monitoring, runbooks, release checks, service management, and incident follow-up practices aligned to production support expectations.

Governance Policies · Security · Pipelines

Platform governance and delivery controls

Policy catalogs, pipeline controls, required jobs/stages, security scan templates, Gitleaks configuration, and exception workflows modeled as reusable platform assets.

Capability Architecture

Practical platform capabilities organized by delivery responsibility.

01

Cloud Foundation

AWS infrastructure, VPC patterns, EC2, EKS, ECS, S3, RDS, CloudWatch, IAM, environment baselines, and multi-cloud deployment practices.

02

Infrastructure as Code

Terraform modules, CloudFormation, ARM templates, repeatable provisioning, versioned standards, and reusable delivery blueprints.

03

Container Platforms

Kubernetes, Amazon EKS, Red Hat OpenShift, Helm, scaling, debugging, RBAC, workload design, and cluster operations.

04

Red Hat Automation

Ansible Automation Platform architecture from execution environments and collections through modules, roles, inventories, playbooks, workflow templates, credentials, schedules, and controller config-as-code.

05

CI/CD Systems

GitLab CI/CD, Jenkins, GitHub Actions, Azure DevOps, Maven, JFrog Artifactory, release controls, and rollback-aware pipelines.

06

Reliability Operations

Prometheus, Grafana, ELK, AppDynamics, alerts, dashboards, runbooks, incident response, root cause analysis, and production troubleshooting.

07

Platform Governance

Enterprise policy catalogs, control mappings, required pipeline includes/jobs/stages, Terraform policy checks, security scan templates, Gitleaks rules, and exception processes.

08

Platform Images

Standardized automation and security images for Terraform AWS workflows, IaC security checks, and Ansible/AWX execution runtime consistency.

Delivery Architecture

How the engineering system fits together.

A mature platform is not a collection of scripts. It is a connected chain from source control, policy, build, infrastructure, runtime, observability, and support.

Source GitHub · GitLab · Templates

Build CI/CD · Artifacts · Security Checks

Provision Terraform · Helm · ArgoCD

Automate AAP · EE · Collections · Playbooks

Operate Prometheus · Grafana · ELK · RCA

Platform Lifecycle

From request to operation, every layer has a clear engineering responsibility.

Plan

Requirements, standards, risk review, environment boundaries, access model.

Build

Terraform modules, Ansible roles, execution environments, CI/CD templates.

Release

Pipeline gates, artifacts, approvals, rollout sequence, rollback path.

Operate

Monitoring, alerts, runbooks, incident triage, RCA, continuous improvement.

Experience

Enterprise delivery across cloud, automation, and infrastructure operations.

2024 - Present

HealthPartners

Senior Platform DevOps Engineer

Support healthcare platform services where reliability affects member-facing access, provider-facing workflows, care operations, claims-adjacent processing, and internal business systems.
Design and improve AWS infrastructure patterns using EC2, ALB, NLB, EFS, ECS, EKS, S3, RDS, CloudWatch, VPCs, subnets, route tables, IGWs, NAT gateways, and standardized environment layouts.
Build Terraform modules, Helm-based deployment patterns, and GitOps workflows with ArgoCD to reduce one-off provisioning and improve environment consistency.
Develop Red Hat Ansible Automation Platform patterns covering AWX/AAP controller configuration, execution environments, collections, roles, inventories, credentials, workflow/job templates, schedules, and playbook delivery.
Contribute to platform governance assets such as reusable pipeline templates, required CI jobs/stages, security scan configuration, policy catalogs, control mappings, and exception workflows for enterprise delivery consistency.
Standardize platform images for Terraform, IaC security, and Ansible/AWX execution use cases so automation runs with predictable tooling and dependency versions.
Operate Kubernetes and EKS workloads through deployment debugging, scaling analysis, service connectivity checks, RBAC validation, and cluster-level troubleshooting.
Improve CI/CD release paths using GitLab CI/CD, Jenkins, GitHub Actions, Maven, JFrog Artifactory, rollback planning, artifact promotion, and pipeline optimization.
Strengthen observability for patient and business-facing systems with Prometheus, Grafana, ELK, AppDynamics, CloudWatch, dashboards, alerts, log review, metrics analysis, incident response, and RCA follow-up.
Support PHI-aware platform operations with HashiCorp Vault, CyberArk, API security considerations, least-privilege RBAC, runbooks, onboarding guides, JIRA/Rally tracking, and ServiceNow change/incident workflows.

2018 - 2022

LTI - Larsen & Toubro Infotech

DevOps Engineer III - Cloud Automation

Supported banking and payments technology programs that required controlled release windows, audit-friendly deployment evidence, environment readiness, and coordinated handoffs.
Worked on AWS-centric automation across EC2, S3, RDS, VPC networking, subnets, route tables, security groups, load balancing patterns, IAM coordination, and CloudWatch monitoring.
Built and maintained CI/CD workflows using Jenkins, GitLab CI/CD, Maven, Git repositories, JFrog Artifactory, YAML, Bash, and Python for build, deploy, rollback, and artifact promotion activities.
Used shared pipeline patterns and security checks to support banking release governance, including required validation jobs, controlled promotion steps, and evidence needed for change approvals.
Supported Docker and Kubernetes workloads by reviewing manifests, deployment failures, logs, service behavior, resource usage, and environment-specific configuration issues.
Used Terraform and CloudFormation patterns to provision repeatable infrastructure components and reduce manual configuration drift between lower and production-like environments.
Participated in incident response, production troubleshooting, RCA discussions, release coordination, JIRA tracking, and operational documentation for payment-adjacent application platforms with audit trail and rollback expectations.
Worked with AWS and GCP exposure in multi-team delivery contexts where cloud networking, application connectivity, access segregation, and deployment sequencing needed cross-functional validation.

AWS Cloud Engineer II

Supported early cloud migration and AWS infrastructure operations for banking workloads, focusing on server readiness, access, networking, monitoring, and deployment support.
Worked with EC2, S3, RDS, VPC constructs, subnets, route tables, internet/NAT routing concepts, security groups, IAM requests, and CloudWatch checks.
Created and maintained Bash/Python scripts for operational checks, log review, package/service validation, deployment preparation, and repeatable environment tasks.
Supported Linux administration, Windows Server coordination, application hosting checks, scheduled releases, and post-deployment validation for controlled banking delivery windows.
Assisted with CloudFormation templates, infrastructure documentation, monitoring validation, support handoffs, and issue tracking through JIRA and service management processes to keep environments ready for release activity.

2016 - 2018

ICICI Bank

Infrastructure Automation Engineer (RHEL/Win)

Supported core banking infrastructure operations where uptime, traceability, batch windows, access control, and controlled change execution were daily operational concerns.
Administered and troubleshot Linux RHEL and Windows Server environments common to the 2016-2018 enterprise estate, including services, disk usage, logs, scheduled jobs, connectivity checks, and application hosting support.
Used Bash and Linux shell scripting to automate recurring checks, collect diagnostics, validate service state, and reduce repeated manual administration work.
Supported deployment readiness for banking applications through pre-checks, access coordination, configuration validation, post-release checks, and handoff documentation.
Participated in incident triage, ServiceNow ticket handling, RCA evidence gathering, escalation coordination, operational runbooks, and knowledge-base documentation for production support teams.
Collaborated with application, database, network, security, and Windows/Linux infrastructure teams to resolve production issues and improve operational stability.

Technology Command Center

Tools mapped to the work they support.

Cloud

AWSAzureGCPEC2EKSECSS3RDSCloudWatch

IaC & GitOps

TerraformCloudFormationARM TemplatesHelmArgoCDYAML

Containers

KubernetesOpenShiftDockerAmazon EKSRBACWorkload Scaling

AAP Architecture

AAPAWXExecution EnvironmentsCollectionsModulesRolesInventoriesPlaybooks

Delivery

GitLab CI/CDJenkinsGitHub ActionsAzure DevOpsMavenJFrog

Reliability & Security

PrometheusGrafanaELKAppDynamicsVaultCyberArkServiceNow

GitHub Repository Portfolio

Repositories grouped by platform capability and operating purpose.

12

Curated repositories

2

Engineering organizations

6

Portfolio domains

Education

Computer science foundation with cloud architecture certification.

Rivier University · M.S. Computer Science AWS Certified Solutions Architect

Cloud automation and platform engineering for production teams.