👋 Hi, I'm Faisal Ansari

Technical Lead • Senior DevOps & Cloud Architect

Deputy Manager (Systems) @ State Bank of India • 🟢 Open to Hands-on Engineering & Platform Leadership

Enterprise Banking & Tier-1 Multi-DC Platforms 4x Certified AWS & GitHub Hands-on Platform Engineering & Cloud Architecture

Architecting Resilient Multi-Cloud & Banking Platforms at Scale.

Hands-on Platform Architect & Technical Lead with 8+ years building, securing, and operating distributed systems. Proven track record managing mission-critical infrastructure across OpenShift / OCP, Amazon EKS with Karpenter, Apache Kafka, Tanzu GemFire, Istio Service Mesh, and automated GitOps/Terraform pipelines.

99.999% Banking SLA Target

<40s Karpenter Scale-Up

-38% AWS Compute Spend

8+ Yrs Enterprise DevOps

Explore Topology Download Resume Launch Terminal GitHub LinkedIn X

Core Ecosystem:

☸️ OpenShift / OCP ☁️ AWS (EKS, VPC, Transit) ⚡ Apache Kafka 💎 Tanzu GemFire 🛡️ Istio Mesh 🏗️ Terraform 📊 LGTM Observability ⚖️ GDPR • DPDPA • HIPAA • SAMA

☁️

Production Cloud Platform Node

AWS Multi-AZ EKS • Karpenter Autoscaling

OPERATIONAL

Karpenter JIT Scaling

34.2s spin-up

● Dynamic NodePool

LGTM Telemetry

24/7 active

● Prometheus + Loki

Infrastructure as Code

100% IaC

Terraform Modules

AWS Compute Spend

-38% cost

● Spot Consolidation

# Live cluster status:

$ kubectl get nodepools.karpenter.sh

NAME: default NODECLASS: default READY: True AGE: 180d

Production Observability

Telemetry & Operational Reliability

Continuous monitoring of mission-critical platform signals. Real-time edge latency diagnostic for this site combined with live telemetry feeds from GitHub Actions CI/CD and status.faisal.host.

CloudFront Edge (Anycast) • Live Ping

Edge Latency Ping Live Ping

-- ms ⚡ Measuring...

Protocol: HTTP/2 & HTTP/3 Real Roundtrip

Cache Hit Ratio CloudFront

98.6% ↑ Offloaded

Origin Shield: Active Offload: ~98.6%

S3 Origin Security OAC Locked

OAC Enforced ✔ Sealed

SSE-S3 (AES-256) Zero Public Access

Global Edge SLA 99.99% SLA

99.99% 0.00% 5xx

TLS 1.3 Strict HSTS ACM Validated

Live Uptime (24h) 🟢 Operational

100.00% ✔ 100% Operational

Response: ~790ms status.faisal.host ↗

GitOps CI/CD Deploy ✔ Succeeded

22s Commit 8ac869f

Zero-Downtime Deployed Recently

Host Mesh Health 3 Hosts Active

All Systems UP ✔ Verified

DNSSEC & ACM Validated Anycast Route

DORA Lead Time Elite Tier

< 1 min Automated

Deploy: Continuous Change Failure: 0%

⚡

Real-Time SRE Browser Network Probe W3C Timing API

Diagnose real browser-to-CloudFront DNS resolution, TLS 1.3 handshake, TTFB server latency, and network transfer speeds for your session.

Case Studies & Architectures

Production Battles & Architectural Solutions

Real enterprise challenges solved across banking platforms, AWS cloud migrations, zero-trust service meshes, and air-gapped appliances.

State Bank of India OpenShift / OCP

Enterprise OpenShift Banking Platform Operations

Production platform engineering across geographically distributed enterprise data centers supporting India’s tier-1 digital banking services.

99.999% SLA Target

RBI & DPDPA Compliance

OpenShift 4.14+ Multi-DC DR Platform Readiness

State Bank of India Apache Kafka

Kafka Consumer Lag Troubleshooting & Throughput Tuning

Detecting abnormal lag, correlating metrics and logs with application consumer health, and isolating platform vs service-specific bottlenecks.

-55% Incident MTTR

<30s Lag Detection

Kafka Broker Consumer Health Prometheus

State Bank of India Tanzu GemFire

GemFire In-Memory Data Platform Health Monitoring

Resource-utilization anomaly detection, JVM heap/off-heap memory tuning, and correlating cache spikes with transaction symptoms during troubleshooting.

<2ms P99 Latency

98.6% Cache Hit Ratio

In-Memory Cache JVM Tuning Resource Signals

State Bank of India Istio Mesh

Istio Service-Mesh Zero-Trust & Telemetry Operations

Supporting enterprise Istio mesh, validating inter-service mTLS behavior after deployments, and isolating service-to-service routing symptoms.

100% Strict mTLS

Zero-Touch Cert Rotation

Envoy Sidecars mTLS Encryption Traffic Routing

Binmile Technologies AWS EKS + Karpenter

Dynamic EKS Node Autoscaling with Karpenter

Workload-driven just-in-time node provisioning, heterogeneous instance lifecycle management, and intelligent spot/on-demand orchestration.

-38% Compute Spend

<40s Node Spin-up

AWS EKS Karpenter Terraform

Binmile Technologies LGTM Stack

LGTM Full-Stack Observability Pipeline

Personally implemented Prometheus (metrics), Grafana (dashboards), Loki (logs), and Tempo (distributed tracing) to slash time-to-isolate.

-64% MTTI Reduction

2TB+/day Log Capacity

Prometheus Grafana Loki Tempo Tracing

Incedo On-Prem K8s

Air-Gapped On-Premises Kubernetes Appliance (VMDK)

Pre-packaged portable application appliance delivered as VMDK for VMware & Nutanix, complete with MicroK8s, S3 syncing, and Helm monitoring under strict HIPAA/GDPR data readiness.

<30m Deployment

100% Air-Gapped

MicroK8s VMware VMDK Nutanix AHV

Incedo Sealed Secrets

Kubernetes Sealed Secrets CI/CD Automation

Personally built end-to-end asymmetric encryption pipeline using kubeseal to eliminate plain Kubernetes Secret manifests from release artifacts.

100% Encrypted

Zero Plaintext Leaks

kubeseal GitOps Python CLI

Binmile / Sightview DevSecOps

Automated Multi-Stage DevSecOps Pipeline

Integrated SAST (SonarQube), DAST (OWASP ZAP), container scanning (Trivy & Black Duck), and SAML SSO into automated CI/CD release gates.

0 High CVEs Gate Policy

Multi-Reg GDPR/HIPAA/SAMA

SonarQube OWASP ZAP Trivy & Black Duck GDPR • HIPAA • SAMA • DPDPA

Eye Care Leaders vCenter & AWS

Automated VMware Cloud VM Migration & pyVmomi Integration

Automated hypervisor VM migration pipelines using Python pyVmomi API, Jenkins Declarative, Chef, and Terraform under HIPAA and GDPR compliance.

-70% Migration Window

HIPAA/GDPR Compliant

Python pyVmomi VMware vCenter Jenkins & Chef

Career Milestones

Enterprise Leadership & Progression

From Python/Odoo software engineering to leading cloud infrastructure, OpenShift banking platforms, and Kubernetes appliances across India and global enterprises.

●

Deputy Manager (Systems)

🏛️ State Bank of India (SBI) Current Enterprise Role

Sep 2025 – Present

Enterprise platform engineering and production operations for a large-scale banking digital platform, covering OpenShift/OCP, GemFire, Kafka, Istio, Liferay, AWS CloudFront/CDN, Prometheus/Grafana, centralized logging, deployment validation, and infrastructure onboarding.

Build and configure production OpenShift environments across geographically distributed data centers with cluster-level validation and troubleshooting.
Monitor Kafka consumer lag as a production health indicator, isolate service-specific vs platform-wide anomalies, and support delayed message incident investigations.
Monitor Tanzu GemFire in-memory data platform health, correlate CPU/memory spikes with service symptoms during active troubleshooting.
Support and monitor Istio service mesh, validate service behavior and routing policies post-deployment.
Apply strict security and operational controls aligned with DPDPA and applicable Reserve Bank of India (RBI) regulatory requirements.

OpenShift OCP Apache Kafka VMware GemFire Istio Mesh Prometheus / Grafana RBI / DPDPA Compliance

Technical Lead (DevOps)

🏢 Incedo

Jan 2025 – Sep 2025

Workstreams spanning AWS/Terraform/GitHub Actions/Python automation and an on-premises Kubernetes appliance workflow, for enterprise clients across financial services and industrial sectors.

Engineered a portable, pre-packaged application appliance delivered as a VMDK that customers import into VMware and Nutanix on-premise infrastructure.
Integrated MicroK8s, sync of container images from AWS S3, and Helm-based Prometheus/Kafka/Zookeeper stacks into the automated release package.
Personally built Kubernetes Sealed Secrets Automation: automated data extraction, kubeseal manifest generation, and deployment injection to eradicate plaintext Secret manifests from release artifacts.
Enhanced operational automation for Kubernetes readiness checks, workload management, backup/restore (MongoDB, InfluxDB), and platform diagnostics; applied HIPAA and GDPR compliance requirements across deployment workflows.

MicroK8s VMware VMDK kubeseal Terraform GitHub Actions Python Automation HIPAA / GDPR Compliance

Sr. DevOps Engineer (AWS)

🚀 Binmile Technologies

Jun 2024 – Jan 2025

Multiple AWS and DevOps workstreams across enterprise client engagements with heavy focus on EKS, Karpenter, and Observability.

Designed and provisioned AWS infrastructure using Terraform (EKS, VPC, Transit Gateway, Route 53, WAF, CloudFront, RDS, Control Tower).
Implemented Karpenter-driven dynamic node provisioning, heterogeneous instance lifecycle management, and workload capacity planning on Amazon EKS.
Personally implemented full LGTM Observability Stack: Prometheus (metrics), Grafana (dashboards), Loki (logs), and Tempo (distributed tracing), drastically cutting time-to-isolate platform issues.
Architected multi-stage DevSecOps release gates with SonarQube (SAST), OWASP ZAP (DAST), and Trivy/Black Duck container security.
Applied security and compliance-driven controls across cloud and DevOps environments, adhering to GDPR, HIPAA, SAMA, and DPDPA regulatory requirements.

AWS EKS Karpenter Terraform Prometheus / Loki / Tempo SonarQube / Trivy GDPR / HIPAA / SAMA / DPDPA

DevOps Engineer (AWS)

🏥 Eye Care Leaders (Sightview)

Feb 2023 – May 2024

Automating cloud operations, CI/CD pipelines, and compliance across healthcare infrastructure under strict HIPAA and GDPR standards.

Automated build/deployment workflows using Jenkins Declarative Pipelines; wrote Groovy shared libraries.
Contributed to building AWS Control Tower Landing Zone environments and designed/managed AWS infrastructure using Terraform.
Automated VMware Cloud VM migration workflows using Python pyVmomi API and Jenkins pipelines.
Developed Python/Boto3 automation for AWS instance scheduling and S3-to-RDS backup/restore workflows.
Secured remote access workflows (AWS SSO, Apache Guacamole) and applied strict security & compliance requirements related to HIPAA and GDPR across infrastructure.

AWS Control Tower pyVmomi Terraform Jenkins & Chef HIPAA & GDPR Compliance

DevOps / Python & Application Development

💳 Viiking Paymaster & Indicsoft Technologies

Sep 2018 – Feb 2023

Foundational career progression bridging software engineering, Python application development, and AWS cloud/DevOps operations.

Managed and optimized AWS infrastructure for performance, reliability, and cost via CloudWatch and AWS Trusted Advisor.
Built and published Docker container images; configured Nginx reverse proxies and load balancing.
Developed and maintained Python and Odoo ERP/FinTech applications (CRM, sales, payroll, inventory) and real-time OTP authentication.
Contributed to a government House Tax project involving GIS and Python, establishing Linux sysadmin and production troubleshooting foundations.

Python Docker Nginx AWS Cost Optimization Linux Sysadmin

Competency & Credentials

Verified Skills & Certifications

Official industry certifications from Amazon Web Services and GitHub, paired with 8+ years of hands-on production expertise.

☸️

Containers & Platforms

Red Hat OpenShift (OCP) Kubernetes / EKS MicroK8s Karpenter Autoscaling Docker Helm 3 StatefulSets & DaemonSets

☁️

Cloud & Infrastructure

AWS Core (VPC, EC2, S3, RDS) AWS Control Tower CloudFront CDN Route 53 AWS WAF & Shield IPsec VPN Connectivity Transit Gateway

⚡

Streaming, Mesh & Cache

Apache Kafka Consumer Lag Tuning VMware Tanzu GemFire Istio Service Mesh Strict mTLS & Envoy Liferay CMS Portal Zookeeper

📊

Observability & SIEM

Prometheus & PromQL Grafana Dashboards Grafana Loki Grafana Tempo (Tracing) AWS CloudWatch SIEM Log Correlation Alertmanager

🏗️

IaC, CI/CD & GitOps

Terraform GitHub Actions Jenkins Declarative Pipelines AWS CodePipeline Ansible & Chef VMware VMDK Packaging Blue/Green & Canary

🔐

Security & Governance

GDPR • DPDPA • HIPAA • SAMA RBI Regulatory Controls Kubernetes Sealed Secrets SonarQube (SAST) OWASP ZAP & Burp Suite Trivy & Black Duck Python & Boto3 Bash Shell Scripting pyVmomi API

GitHub Foundations

GitHub • Git Collaboration, Security & CI/CD Pipelines

✓ Verified Credential

🎓 Academic Background

Master of Computer Science and Applications (MCA)

Aligarh Muslim University (AMU), Aligarh • 2016

B.Sc. (Hons.) Statistics

Aligarh Muslim University (AMU), Aligarh • 2012