40%
Lower access risk
Least-privilege IAM across multi-account AWS & multi-compartment OCI
Open to Cloud Engineer & DevOps roles
Cloud Engineer
MunagalaKarthik
I design and run secure production infrastructure on AWS and OCI — IAM, Kubernetes, containers, and automation with measurable outcomes.
AWS · OCI · Kubernetes · IAM · IaC · DevOps
AWS
OCI
EKS
Docker
Terraform
Ansible
Python
CI/CD
01 · Impact
Outcomes from production work
Numbers hiring managers can verify against the resume.
60%
Less ops overhead
Python / boto3 automation for admin & security posture audits
30%
Faster MTTR
CloudWatch, CloudTrail & service-log RCA with targeted remediations
0
Data loss on cutovers
Migrations & DNS switches with sequencing, validation, and rollback playbooks
02 · About
Who I am
Hands-on Cloud Engineer at NovaGuard Tech LLP with production experience on AWS and OCI. I build cloud foundations, enforce least-privilege access, run containers on EKS/ECS, automate with Python/boto3, and close CIS findings while owning incidents end-to-end.
Focused on secure, reliable infrastructure that shipping teams can trust — and tooling that reduces manual toil.
- Role
- Cloud Engineer @ NovaGuard Tech LLP
- Location
- Andhra Pradesh, India
- Focus
- IAM · Kubernetes · IaC · CSPM
- Open to
- Cloud / DevOps / Platform roles
03 · Skills
Cloud & DevOps tooling
Tools I use in day-to-day cloud engineering — aligned to the resume.
Cloud platforms
AWSOCIMulti-cloudEC2VPCS3RDSDynamoDB
Containers & orchestration
KubernetesAmazon EKSDockerAmazon ECSkubectlDeploymentsServices
Security & IAM
AWS IAMLeast privilegeCSPMCIS BenchmarksKMSSecrets ManagerWAFCognito
IaC & DevOps
TerraformAnsibleCI/CDPythonboto3GitBashCloudWatchCloudTrailSteampipe
04 · Experience
Work history
- Designed and enforced least-privilege IAM across multi-account AWS and multi-compartment OCI — 40% reduction in unauthorized access risk.
- Built Python / boto3 automation for cloud admin and security posture audits — 60% less manual operational overhead.
- Owned production incidents with CloudWatch, CloudTrail, and service-log RCA — 30% faster MTTR.
- Drove CSPM via CIS benchmark assessments across 3 environments, tracking misconfigurations from find to fix.
- Executed cloud migrations and production cutovers with zero data loss and zero service disruption.
- Maintained IAM access-review records and authored infrastructure design docs / runbooks used as team standards.
What I own day-to-day
- VPC / networking baselines and EC2 lifecycle
- Container workloads on ECS and EKS
- IAM reviews, secrets, and least-privilege changes
- Incident response, RCA, and remediation
- CIS posture findings → tracked closure
- IaC changes with Terraform / Ansible for infra updates
- CloudWatch logs, alarms, and CloudTrail monitoring
- Rolling infra updates, patching, and config drift fixes
05 · Projects
Production work
Selected cloud foundations, IAM, migrations, and platform engineering.
AWS · OCI · KubernetesProduction
eTaxVault
Full production cloud foundation for a commercial launch — EC2/ECS/EKS, Docker workloads with rolling updates, S3/RDS/DynamoDB, VPC, Cognito, KMS, WAF, and least-privilege IAM.
Problem
Needed a secure, launch-ready multi-cloud foundation with containers and zero-downtime releases.
Approach
Dockerized apps on EKS/ECS; IAM + Secrets Manager; dependency maps and ops runbooks.
Outcome
Commercial launch on hardened AWS/OCI with rolling updates and clear handoff docs.
Arch Users → CloudFront/ALB → EKS/ECS → RDS/DynamoDB · IAM/KMS/WAF edge
Multi-region AWSRemediation
Securden
Diagnosed and fixed multi-region production defects outstanding for years — hardened redeployments, validation checks, and maintainability improvements.
Problem
Legacy multi-region defects had blocked stability for 3–4 years.
Approach
Root-cause infra configs, redeploy hardened stacks, add validation to stop recurrence.
Outcome
Restored operational stability and improved long-term maintainability.
Arch Multi-region AWS → config RCA → hardened redeploy → validation gates
OCI tenancyGovernance
OCI Access Governance
Multi-layer OCI access-control model across the full tenancy — IAM, compartments, and quota policies enforcing team separation and reducing standing privilege.
Arch Tenancy → compartments → OCI IAM policies → quotas / least privilege
Cutover playbookMigration
Dollarmed → Symptomax
End-to-end domain cutover and data migration with sequencing, checklists, DNS switches, and rollback strategies — zero data loss.
Arch Pre-checks → data sync → DNS cutover → verify → rollback ready
AWS serverlessPlatform
Gather & Glow
Secure serverless platform — Lambda, API Gateway, DynamoDB, Cognito (Google SSO + OTP), Stripe, S3, CloudFront. Documented as the team serverless security reference.
Arch User → CloudFront/S3 · API Gateway → Lambda → DynamoDB · Cognito/SES
ML · AcademicAcademic
CKD Prediction — 96% Accuracy
Random Forest model for Chronic Kidney Disease on a Kaggle dataset with Scikit-learn and Flask — foundation path into cloud engineering.
06 · Certifications
Learning path
AWS Certified Developer Associate
Amazon Web Services · DVA-C02
Udemy · Stephane Maarek · Jan 2026 coursework
Credly badge will replace this status when earned.
Machine Learning and AI with Python
HarvardX / edX · Jun 2024
Machine Learning with Python
IBM / edX · Jun 2024
07 · Education
Education
B.Tech — CSE (AI & ML)
Siddartha Institute of Science and Technology, Puttur
2021 – 2025 · Affiliated to JNTUA
Intermediate — MPC
Narayana Jr. College, Brahmadevam, Nellore
2019 – 2021 · BIEAP
SSC
Sri Chaitanya High School, Buchireddypalem, Nellore
2019 · BSEAP
08 · Terminal
Quick lookup
Optional playground — try whoami, ls skills/, or cat experience.txt.
karthik@cloud — bash
$ cat welcome.txt
Cloud Engineer · AWS · OCI · Kubernetes
Type help for commands.
Type help for commands.
$
09 · Contact
Get in touch
Hiring for Cloud, DevOps, or Platform? Reach out.