Sumanth Ram

Sumanth Ram Senior Cloud & DevOps Engineer-| - | Floral Park NY SUMMARY Result-driven Senior DevOps & Cloud Engineer with 11+ years of experience in building and securing large-scale, real-time, and transaction-heavy platforms in regulated industries, including online gambling, payment processing, and financial services. Adept in designing AWS and Azure based infrastructures, securing platforms with advanced security controls, and optimizing messaging systems such as Apache Pulsar and RabbitMQ. Skilled in regulatory compliance (GDPR, PCI-DSS), fraud prevention, and infrastructure automation using Terraform, Kubernetes (EKS, AKS), Helm, and Ansible. Expertise in monitoring and observability using Prometheus, Grafana, ELK Stack. Proven ability to lead cross-functional teams, ensure platform resilience, and support high-traffic, mission-critical services. Core Competencies and Key Attributes AWS (EC2, S3, VPC, Lambda, IAM) | Kubernetes (EKS, AKS, Helm) | Apache Pulsar | RabbitMQ | Kafka | Terraform | Ansible | Helm | Jenkins | GitHub Actions | Python | Bash | PowerShell | New Relic | Prometheus | Grafana | ELK Stack | Security Compliance (GDPR, PCI-DSS) | Fraud Prevention | Network Security (Firewalls, VPN, DDoS Mitigation) | CI/CD | Infrastructure as Code (IaC) | Secure API Development | On-Call Support | Persuasive Communication | Honest and Integrity | Critical Thinker | Problem Solving | Teamwork and collaboration PROFESSIONAL EXPERIENCE Senior Cloud Engineer, Transre, New YorkAug 2022 – Present Architected, built, and maintained AWS-based infrastructure, emphasizing scalability, high availability, resilience, and regulatory compliance for real-time transaction-heavy platforms. Led migration from monolithic to microservices architecture on Kubernetes (AKS/EKS), utilizing namespace isolation to support multi-tenant enterprise applications. Designed and implemented Infrastructure as Code (IaC) using Terraform, Bicep, and AWS CloudFormation for reproducible and scalable cloud environments across Azure and AWS platforms. Built secure, reusable CI/CD pipelines with GitHub Actions integrating SAST, DAST, dependency scanning, and automated testing for over 30 microservices. Managed full-stack observability using Azure Monitor, AWS CloudWatch, and Application Insights with distributed tracing for performance and error analysis. Enforced SDL (Secure Development Lifecycle) by integrating secret management solutions, PR approval policies, and vulnerability patch pipelines in compliance-heavy environments. Optimized cloud resource utilization, achieving a 25% reduction in infrastructure costs by consolidating redundant services and applying right-sizing strategies. DevOps Automation Engineer, Credit Suisse, New YorkJune 2019- Aug 2022 Deployed and scaled high-performance Kubernetes (EKS) clusters on AWS to support real-time processing applications in a secure and compliant manner. Automated infrastructure provisioning with Terraform, CloudFormation, and Ansible, ensuring environment consistency and reducing deployment time. Orchestrated the migration of critical backend services to containerized AKS and EKS platforms, including Azure Functions transitioned to AKS jobs and frontend delivery via Azure Front Door and AWS CloudFront. Developed and maintained multi-tenant deployment stamps leveraging Azure Well-Architected Framework and AWS architecture best practices. Automated SQL Server database deployments using DACPAC and implemented IaC-driven schema versioning processes across multiple environments. Applied Kubernetes autoscaling strategies with KEDA and managed container lifecycle processes for over 100 production workloads. Established and maintained secure CI/CD pipelines using GitHub Actions, integrating vulnerability scans and OpenAI-driven static analysis tools. Standardized architecture documentation using the C4 Model and maintained ADRs for system-wide design decisions. Cloud Operations Engineer, Broadridge, New YorkMarch 2017– June 2019 Automated configuration management using Ansible and Puppet, reducing manual system provisioning time by 60% and improving system consistency across environments. Delivered secure, scalable cloud platforms within highly regulated (government) environments, ensuring strict compliance with cloud security standards. Architected and implemented multi-repo strategies for infrastructure and application separation during the transition from mono-repo structures. Applied event-driven system designs using Azure Event Grid and AWS EventBridge to replace legacy polling-based services. Deployed caching, rate-limiting, and WAF rulesets to harden application security and optimize API gateway performance. Executed cost-control initiatives by auditing cloud consumption, identifying underutilized services, and recommending consolidation or decommissioning. Collaborated with security teams to implement SDL policies, enforce secret rotation, and automate vulnerability remediation pipelines. Release Engineer, RSG Systems Inc, New YorkJuly 2015 – March 2017 Played a key role in architecting, designing, deploying, and automating cloud environments for scalability and efficiency. Designed and maintained highly scalable, fault-tolerant multi-tier AWS and Azure environments across multiple availability zones using Terraform and CloudFormation. Developed Terraform scripts from scratch to provision Dev, Staging, Production, and Disaster Recovery (DR) environments. Architected and deployed various AWS services, including EC2, Route 53, S3, RDS, DynamoDB, SNS, SQS, and IAM, ensuring high availability, fault tolerance, and auto-scaling. Led the migration of Dev, Test, and Production environments from VMware to AWS IaaS, enhancing flexibility and reducing costs. Automated routine AWS tasks using Python scripts, improving operational efficiency and reducing manual effort. AWS Solutions Architect, Symphony Secure Comm LLC, New YorkFeb 2014 – July 2015 Led the implementation of cloud security and compliance policies, ensuring secure, scalable, and resilient cloud environments. Designed highly scalable, flexible, and resilient cloud architectures that seamlessly integrate with on-premises components. Developed repeatable and reusable architecture solutions for Software-Defined Networking (Virtual Networks), security, and identity management. Architected a High Availability Encryption Proxy deployment in AWS, leveraging EC2, VPC, S3, AWS CLI, CloudWatch, IAM, Lambda, and AWS CodeDeploy. Automated build and deployment processes, optimizing system performance and enhancing user experience, while driving the adoption of continuous integration across all products.