DWG–00 PRAKHAR SRIVASTAVA / DevOps & INFRA ENGINEER
Prakhar Srivastava
Project

DevOps & Infra
Engineer

Kubernetes · GitOps · Terraform · Observability · DevSecOps

Building secure, cloud-native systems and infrastructure workflows. Went full-time into DevOps in March 2025 — no job lined up, just a clear plan. Since then: four production-grade infra systems, an IIT Roorkee certification, and an Automation Hero recognition.

↗ LinkedIn ⌥ GitHub ↓ Resume
OPEN
TO
WORK
🏆 Automation Hero — TrainWithShubham · Verify ↗
Revisions
RevDescriptionDate
0BPO Operations, Concentrix2022
1DevOps transition — self-taughtMar '25
2Open to work — current2026
01 — Drawing Set

Built in public. Every drawing below is a real operational decision made visible — architecture, security posture, and delivery workflow, not just code.

DWG-01 Sentinel AI Platform — Conversational Analytics with Full-Stack Observability
APPROVED
26.06.2026

Production-grade AI analytics platform serving conversational queries over structured data — Next.js frontend, FastAPI query engine, PostgreSQL backend, fully containerised. Multi-stage Docker builds gated by Trivy scans in CI; Prometheus + Grafana + Loki wired in from deployment day one, not bolted on after. Pipeline debugged to green through build, image push, and health checks — zero unscanned artefacts ever reached production.

Next.js FastAPI PostgreSQL Docker Trivy
⌥ View on GitHub →
Delivery process
git push→ build→ trivy gate→ deploy→ health check
Instrumentation
Prometheus Grafana Loki
Drawing notes

Observability wired from deployment day one — not retrofitted. Trivy gates block vulnerable images before they touch a registry. FastAPI query engine decoupled from frontend for independent scaling.

DWG-02Multi-AZ AWS Infrastructure
plan→ review→ apply

Production-grade 3-tier AWS stack across 2 AZs via modular Terraform. 70% faster provisioning vs manual. Private subnets, ALB ingress, IAM least-privilege, RDS with automated backups. Zero-downtime failover validated under live load.

Terraform AWS VPC ALB ASG RDS
⌥ View on GitHub →
DWG-03Secure DevSecOps Pipeline
commit→ bandit→ trivy→ deploy

6-stage shift-left CI/CD for a two-tier Flask app. 100% scan coverage per commit via GitHub Actions + Jenkins. Bandit, Trivy, Gitleaks, Hadolint, pip-audit consolidated into reusable templates — 40% less maintenance overhead. Vulnerable artefact promotion rate: zero.

GitHub Actions Jenkins Docker Bandit pip-audit
⌥ View on GitHub →
DWG-04AWS Auto Scaling Infrastructure
6 modules→ 28 resources→ single apply

VPC, ALB, ASG, RDS, Security Groups, CloudWatch across 6 Terraform modules. Least-privilege SG chaining (ALB → EC2 → RDS). CPU-based auto scaling with CloudWatch alarms. Zero-downtime, production-grade infra.

Terraform EC2 ASG CloudWatch RDS MySQL
⌥ View on GitHub →
02 — Field Notes

How I approach infrastructure decisions. Not preferences — principles arrived at by building systems that have to actually work.

01
Instrument before you ship.If you can't measure it, you can't operate it. Metrics, logs, and traces belong in the design phase — not bolted on after the first 3am incident.
02
Git is the source of truth.Every production change traces to a commit. Drift is a silent failure mode. ArgoCD removes the ambiguity between deployed and intended.
03
Shift security left, not later.Gates at commit time cost milliseconds. Gates at production cost customers. Bandit, Trivy, Gitleaks — all run before any artefact touches a registry.
04
Infrastructure is code, not clicks.The console is for exploration. Production infra lives in Terraform — versioned, reviewed, reproducible.
05
If you do it twice, automate it.Manual steps are incidents waiting to happen. Pipeline templates turn tribal knowledge into reproducible systems.
06
Deny by default, grant explicitly.IAM roles, SG chaining, namespace isolation — every system assumes breach. Blast-radius minimisation is architecture, not a checkbox.
03 — Bill of Materials
ItemCategoryComponents
01Cloud
EC2VPCRDSALBASGIAMS3ECRECSSNS
02Infrastructure as Code
TerraformModulesRemote StateWorkspacesCloudFormation
03Containers & Orchestration
DockerKubernetesHelmkindkubectlDocker ComposeNginx
04CI/CD & GitOps
GitHub ActionsJenkinsArgoCDGit
05Observability
PrometheusGrafanaLokiPromtailCloudWatch
06Security & Scanning
TrivyBanditGitleaksHadolintpip-audit
07Networking
VPC DesignSubnettingNAT GatewaySecurity GroupsRoute Tables
08OS & Scripting
Linux / UbuntuBashAnsiblePython (basic)
04 — R&D Log
01
AI infrastructure workflows
Inference serving, model registries, GPU scheduling on Kubernetes
02
Kubernetes networking internals
CNI plugins, eBPF, network policies, service mesh fundamentals
03
OPA / Gatekeeper policy enforcement
Admission control, Rego policies, cluster-wide guardrails
04
Observability-first backend systems
OpenTelemetry, distributed tracing, SLO-based alerting
05
Platform engineering practices
Internal developer platforms, golden paths, self-service infra
05 — Reference Documents

Not tutorials. Real problems encountered while building, written down while they were still fresh.

01
The app ran. The data didn't survive.
What Kubernetes PVCs actually do — learned the hard way when 5 healthy pods silently ate all my data on restart.
12 min · K8s 02
Variables, Outputs, Remote State — Terraform features that matter in production
Why hardcoding everything works until it doesn't — and how remote state changed how I think about infra.
11 min · Terraform 03
Providers, State, and Building Real AWS Infrastructure with Terraform
The moment I stopped clicking through the AWS console. What state files actually are and why they matter.
11 min · AWS 04
Infrastructure as Code with Terraform: From Concept to First Infrastructure
From clicking dashboards to declarative infrastructure you can version, review, and destroy safely.
4 min · Terraform 05
From Servers to Cloud: How I Finally Understood the Basics of AWS
What "deploy to the cloud" actually means — without the buzzwords that confused me at the start.
4 min · AWS
→ All posts on Hashnode
06 — Certified
✓
Advanced Cloud & DevOps Program
IIT Roorkee × Intellipaat — iHUB DivyaSampark

Covers AWS, Kubernetes, Terraform, CI/CD pipelines, and DevSecOps workflows. Issued by IIT Roorkee's Technology Innovation Hub — an engineering program, not a vendor certificate.

ID: IPTIH26030271 · Completed 2026 Verify →
✓
GitHub Actions & Kubernetes Masterclass
TrainWithShubham — CertDirectory

Hands-on masterclass covering GitHub Actions CI/CD pipelines, Kubernetes orchestration, and GitOps delivery workflows — completed under real project constraints as part of the #90DaysOfDevOps cohort.

ID: CRD-DEMEF6VC · TrainWithShubham Verify →
07 — Request for Information

Let's talk
infrastructure.

Looking for a DevOps or Infrastructure Engineer role where I can contribute from day one. Give me a take-home task. Startups, cloud-native teams, companies that take shift-left security seriously — that's exactly where I want to be.

@
Emailsrivprak0106@gmail.com
 in
LinkedInlinkedin.com/in/heyyprakhar1
 ⌥
GitHubgithub.com/Heyyprakhar1
 #
Blogheyyprakhar01.hashnode.dev
 IG
Instagram@theinfrajourney_
✓ Message sent. I'll get back to you shortly.
✗ Something went wrong. Try emailing directly.