Work

History

1. DevSecOps Engineer · Nference Labs Pvt. Ltd.

   Current

   July 2026 — Present · India

   Enforcing Kubernetes security standards across multi-cluster environments, hardening multi-cloud infrastructure, and scaling automated vulnerability remediation.

   • Implemented Kyverno policies to enforce Kubernetes security standards and built centralized Grafana dashboards to monitor violations across 30+ clusters, improving compliance by 35% (from 60% to 95%).
   • Enforced multi-cloud security policies (AWS, GCP, Azure) across 12+ cloud projects, implementing IAM restrictions, key management, and public access controls to minimize misconfiguration risks.
   • Implemented GitHub secret scanning and remediated vulnerabilities across containers, VMs, and server configurations (e.g., TLS/cipher issues), improving overall security posture.

   • Kyverno
   • Kubernetes
   • Grafana
   • AWS
   • GCP
   • Azure
   • GitHub Actions

2. DevSecOps Engineer Intern · Nference Labs Pvt. Ltd.

   June 2025 — June 2026 · India

   Automated end-to-end container security pipelines, supply chain security, and zero-CVE image lifecycles.

   • Built GitHub Actions pipeline to generate zero-CVE images for 110+ containers with automated upstream version following, reducing critical / high vulnerabilities by 95%+, saving $50K–$70K/year, and ensuring compliance in sensitive environments.
   • Developed centralized container lifecycle pipeline (build, scan, release), enabling vulnerability gating (Grype), CVE whitelisting, SBOM generation (Syft), and keyless image signing (Cosign) with automated builds for 2000+ images/month with Slack-based alerting.

   • GitHub Actions
   • Grype
   • Syft
   • Cosign
   • Docker
   • Slack