I build infrastructure that makes shipping software feel easy.
Five years automating releases, cloud migrations, and disaster recovery across AWS and Azure. At Thomson Reuters I own release, upgrade and disaster-recovery automation for a multitenant Azure platform of 15+ microservices, built on GitHub Actions, Ansible and Datadog. I design resilient systems so engineering teams can focus on building products, not fighting deployments.
I also maintain repo2graph, an open-source MCP server that gives AI coding agents cited, token-bounded answers about any codebase.
- Role
- DevOps Engineer
- Employer
- Thomson Reuters
Madras Institute of Technology, Anna University
The record, in figures.
Keeping production running at scale
Microservices architected & maintained
Verified industry credentials earned
Deep production experience (AWS & Azure)
Data integrity held across same-region & cross-region Azure DR migrations
Parsed by repo2graph, his open-source MCP server for AI coding agents
How I Keep Releases Calm, Fast & Predictable
- Stage 01Commit
Automated PR linting & test suite
- Stage 02Build
Lean immutable container image tagged
- Stage 03Backup
T-SQL-verified backup, safe-skip on live SQL jobs
- Stage 04Gate
Synthetic health & latency verified
- Stage 05Promote
Gradual zero-downtime traffic shift
- Stage 06Verify
Error rate nominal & Datadog OK
Rollback executes the exact same pipeline in reverse — RESTORE-based database rollback, service resets, checkpoint cleanup & external system resync, all automated
What I love working with.
Five years of hands-on enterprise infrastructure across Azure and AWS — release, upgrade and disaster-recovery automation, reliability engineering, and security inside the pipeline — plus the AI, LLM and MCP tooling built on top of it. Select any discipline to inspect real-world production use cases, architectures, and capabilities.
AI, LLM & MCP
Model Context Protocol servers, graph-backed retrieval, and the context engineering that keeps an agent's token bill bounded.
- In domain
- 7
- Proof of work
- 7
Authored and published an MCP server exposing five read-only, annotated tools over both stdio and JSON-RPC HTTP, with bearer-token and OIDC authentication, stdlib-only JWT verification, and a refusal to bind past loopback unauthenticated.
Listed on the MCP Registry and added to Claude Code, Claude Desktop or Cursor with a single command.
Built enforced token ceilings into retrieval — budgets re-measured after rendering rather than trusted, capped neighbour rows, bounded fan-out — and a skill set plus PreToolUse hook that strips noisy tool output before it ever enters a model's context.
Attacks the re-sent context pile rather than reply length, which is where the overwhelming majority of tokens actually live.
Designed a retrieval layer combining BM25 lexical scoring, optional dense MiniLM fusion, and a one-hop walk across a tree-sitter code graph, chunked so every block arrives with its callers and callees in the header.
Every retrieved block is stamped with its file and line range and the edge that pulled it in, so a model's claim can be checked rather than trusted.
Built a seven-phase build loop — plan, test, implement, review, verify, remember, improve — where each phase is its own bounded subagent with a written contract, communicating only through a single shared state file.
Hard gates between phases: a run cannot skip its own tests, and four iterations without a clean verify hands back to the operator.
Routed subtasks across Groq, Gemini, Mistral, Cerebras and OpenRouter by task type from a single config file, executing in parallel with automatic failover, while a frontier model handled only planning and synthesis.
A rate-limited provider hands its subtask on rather than killing the run, and swapping the crew is a config edit, not a code change.
Runs a homelab chatbot over offline Wikipedia and Arch Wiki snapshots using FastAPI, Ollama with Llama 3.2, and Streamlit — retrieval and generation both local, with the internet unplugged.
No API key, no per-token bill and no data leaving the box: the whole retrieval and inference path is self-hosted.
Works daily across Claude Code, the Claude API, Cursor, GitHub Copilot, ChatGPT / OpenAI API, Google Gemini, Ollama, Llama, DeepSeek, Groq, OpenRouter and Hugging Face — and builds the tooling those agents consume rather than only consuming it.
Prompt engineering and LLM API integration treated as an engineering surface with budgets and gates, not a chat window.
Systems I’ve built and scaled.
20 initiatives across Thomson Reuters (3 yrs 3 mos · Bangalore, India) and Granite River Labs (1 yr 9 mos · Bangalore, India) — from high-throughput Azure storage migrations and backup-gated releases to signed Windows installers and automated smart-home test harnesses.
Parallelized Azure Storage Migration Framework
48h migration reduced to 4h · 0% data loss
Engineered an automated data synchronization engine across Azure Storage using custom runners, chunked delta detection, and parallel AzCopy orchestration.
- Azure Storage
- AzCopy
- Custom Runners
- Delta Detection
- Python
Built custom delta-detection workers with automated checksum verification and throttling controls that stream terabytes of data concurrently without downtime.
ContingencyLarge enterprise asset migrations previously spanned full weekend maintenance windows, creating deployment bottlenecks and operational risk.
Self-Service Disaster Recovery & CI/CD Automation
RTO < 5 mins · Single-click self-service
Transformed manual multi-page recovery runbooks into automated, self-service GitHub Actions workflows for environment provisioning and regional failover.
- GitHub Actions
- Azure NLB
- DR Automation
- Self-Service
- Bash
Standardized configuration promotion and regional failover into parameterized GitHub Actions with pre-flight health validations and automated Azure NLB cutovers.
ContingencyDisaster recovery tests and environment provisioning required multiple engineers coordinating manual steps over several hours.
Fail-Fast Synthetic Deployment Validation Gate
100% pre-routing health gate · Zero regressions
Designed an automated pre-routing validation layer testing HTTP 200 responses, SSL certs, and latency budgets before routing live user traffic.
- Datadog
- Azure NLB
- Synthetic Probes
- Apache
- Tomcat
Automated multi-point synthetic probes and Datadog health checks that immediately halt releases and revert load balancers if response times exceed 15ms.
ContingencyUncaught downstream service dependencies and latency spikes could silently degrade user experience during active traffic cutovers.
Project MATTER — CSA Protocol Test Harness
CSA standard compliant · Multi-device CI/CD
Developed automated deployment pipelines and hardware-in-the-loop test harnesses for Project MATTER (Connectivity Standards Alliance) and Zigbee smart-home devices.
- Matter / CSA
- Zigbee
- GitLab CI
- Embedded Linux
- Python
Architected GitLab CI automation to compile, flash, and validate IoT firmware across physical test rigs with automated packet capture diagnostics.
ContingencyTesting smart home firmware compatibility across heterogeneous device fleets was manual and prone to environmental inconsistencies.
One-Click Multi-Registry Docker Release Pipeline
100% automated build-to-deploy · Solo architect
Architected end-to-end multi-architecture container pipelines, registry synchronization, and automated zero-downtime deployment for microservices backends.
- Docker
- Multi-Arch Buildx
- GitLab CI
- Registry Sync
- Microservices
Created an automated release pipeline with semantic versioning, vulnerability scanning, and multi-registry push orchestration.
ContingencyManual container builds caused version mismatches between development environments, test harnesses, and staging registries.
Wireshark THREAD Protocol Windows Installer
Contributed upstream & merged into Wireshark
Authored a custom Windows installer for THREAD protocol packet inspection, packaged through automated CI pipelines and merged upstream into the official Wireshark project.
- Wireshark
- THREAD Protocol
- WiX Toolset
- GitLab CI
- C/C++
Authored WiX toolset configuration and automated build scripts, packaging the drivers into a clean installer accepted by the Wireshark core team.
ContingencyEngineers lacked an integrated Windows distribution for analyzing THREAD low-power mesh networking packets alongside standard Wireshark disectors.
Authorized to work in the US and India.
United States
- Compliant with US tax, payroll, and background checks
- us-east-1 (N. Virginia)
- us-west-2 (Oregon)
- us-east-2 (Ohio)
- Full-Time W-2
- C2C / 1099 Contractor
- Direct Hire
India
- Based in Bangalore with immediate local availability
- ap-south-1 (Mumbai)
- ap-south-2 (Hyderabad)
- Bangalore HQ
- Direct Full-Time
- Independent Consultant
- Retainer
Global Distributed
- Daily real-time overlap with US Eastern & Pacific
- 5 years enterprise cross-border collaboration track record
- Zero-friction remote setup with self-service tooling
- Global Edge / AWS Multi-Region
- Azure Global WAN
- Global Distributed Teams
- Async First Architecture
- 🇺🇸 US Eastern (EST):
- --:--
- 🇮🇳 India (IST):
- --:--
- 🌐 UTC:
- --:--