Say hi

Theme color

Display

Density
Motion
Font
Color-vision-safe

Press ? for shortcuts · ⌘K for command palette

Keyboard shortcuts

Open to staff / senior SRE roles · remote-first

OPERATING THE PLATFORM BEHIND 165+ FORTUNE-500 SAAS TENANTS

Anish Saji Kumar

anish@sre ~ $

I keep the platform running for 165+ Fortune-500 customer environments. When something breaks at 3 a.m., I'm the one writing the RCA.

Bengaluru, India · Open to relocation

It's --:-- for me right now

Uptime since last incident --d --h --m --s
Personal availability target 99.90%
99.94%

Last RCA shipped 3d ago · Last deploy reviewed today · Bytecode mood calm

01 — Impact

0
+
Customer environments
Multi-tenant Alfresco + Nuxeo SaaS, on-call 24×7
80m → 1m 34s
Fleet diagnostic time
Parallel Python + xargs -P across 14 envs at once
0
Duplicate documents RCA'd
JVM bytecode forensics with javap · 13-section RCA

02 — About

About

I'm an SRE / DevOps engineer at Hyland, where I run multi-tenant SaaS on AWS for 165+ Fortune-500 customer environments alongside 32 Nuxeo Cloud tenants. The work spans multiple AWS accounts and regions: 24×7 incident response on Datadog + PagerDuty, blue-green PTM upgrades on EKS, Terraform-driven infrastructure, JVM-level RCAs, and platform automation in production.

5+ years in SRE / DevOps (6+ in tech with earlier software-engineering internships), supporting customers in financial services, automotive, consumer goods, and insurance. I've also operated workloads on Azure (AKS) and GCP (GKE) across customer accounts.

api ingest solr hzl audit repo adf api
cluster · idle · 7/7 ready

03 — Skills

What I'm best at

Four capabilities I'm hired for. The full tool list lives below, collapsed by default.

01

Multi-tenant reliability

Running Alfresco + Nuxeo SaaS for Fortune-500 customers across 165+ AWS environments and 32 Nuxeo tenants. Blue-green PTM upgrades on Kubernetes, Solr shard-lag gating, ASG topology and ALB session stickiness, Hazelcast cluster-split recovery.

Stack: AWS · EKS · Terraform · Aurora · Solr · Hazelcast · ActiveMQ · Kafka (MSK)

02

JVM & DB forensics

Bytecode-level RCAs with javap through Spring transaction internals. Aurora PostgreSQL / MySQL EXPLAIN tuning, parameter-group hardening, blue-green engine upgrades, plus a parallel diagnostic that cut fleet triage from ~80 m to 1 m 34 s.

Stack: Java · javap · Spring · Aurora · pgBadger · pg_stat_statements · Python

03

Observability & incident response

Owner of the 24×7 PagerDuty rotation. Datadog monitors, dashboards, and SLOs for Tomcat threads, DB ACUs, Solr remaining-TX, customer exception tracking, and ALB IP rotation. Word-format RCAs with reproducible evidence, runbook authoring, blast-radius control.

Stack: Datadog · PagerDuty · OpenTelemetry · Grafana · Splunk · CloudWatch

04

Platform automation

Investigation pipelines that classify the entry path and correlate evidence across PagerDuty, Datadog, Jira, AWS, EKS, DB, and Solr. Three-tier guardrails (auto-allow / ask / deny) with secret redaction, PII exfil detection, and audit logging, built on 9 cooperating Python and Bash hooks.

Stack: Terraform · Python · Bash · GitHub Actions · Jenkins · MCP · Claude Code

Show full stack inventory Hide full stack inventory

Cloud (AWS)

EC2, EKS, ECS, Fargate, Lambda, RDS / Aurora (PostgreSQL, MySQL), Aurora Serverless v2, Aurora DSQL, DynamoDB, ElastiCache, S3, EBS, ECR, IAM, KMS, SSM, VPC, ALB / NLB, Route 53, API Gateway, Auto Scaling, Step Functions, EventBridge, SNS, SQS, MSK, AWS MQ, Athena, Glue, Kinesis, Firehose, CloudWatch, CloudTrail, AWS Backup, AWS Config, AWS Organizations, Control Tower, Inspector, Secrets Manager, WAF, GuardDuty, Security Hub, Cross-Account IAM, Cost Explorer, Compute Optimizer, Trusted Advisor.

AI-Augmented Operations / LLMOps

Claude Code, ChatGPT (Codex), GitHub Copilot, Google Gemini, DeepSeek, Perplexity, AWS Bedrock, MCP (Model Context Protocol), Hugging Face — AI-driven RCA generation, hook-based agent guardrails, MCP integrations with Datadog / PagerDuty / Atlassian / PaaS, prompt-engineered investigation pipelines.

Containers & Orchestration

Kubernetes, EKS, Docker, Helm, Kustomize, ArgoCD, Argo Workflows, OpenShift, Rancher, Istio, NGINX Ingress, Traefik, Cert-Manager, External-DNS, External Secrets, Sealed Secrets, Lens, k9s, RBAC, HPA — blue-green and canary deploys, GitOps. Familiar with AKS, GKE.

Infrastructure as Code

Terraform, Terragrunt, Terraform Cloud / Enterprise, Atlantis, Spacelift, Pulumi, AWS CDK, CloudFormation, Ansible, Puppet, Chef — policy-driven change workflows.

CI / CD & Release

Jenkins, GitLab CI / CD, GitHub Actions, AWS CodePipeline, Azure DevOps, Harness, Argo Workflows, JFrog Artifactory, Nexus, Maven, Gradle, Git, Bitbucket — artifact promotion, deployment gates, rollback readiness.

Observability

Datadog, PagerDuty, Prometheus, Grafana, Loki, CloudWatch, ELK, Splunk, Dynatrace, New Relic, OpenTelemetry, Fluentd, Fluent Bit, Vector, Logstash, Beats, Statuspage — APM, traces, RUM, synthetics, SLI / SLO, MTTR, post-mortems.

Databases & Data

Aurora PostgreSQL, Aurora Serverless v2, Aurora DSQL, PostgreSQL, MySQL, MariaDB, DynamoDB, MongoDB, Cassandra, Redis, ElastiCache, etcd, Memcached, OpenSearch, Solr, Hazelcast, ActiveMQ, Kafka, MSK, RabbitMQ, Athena, Glue, Kinesis, Firehose — query tuning, EXPLAIN plans, index audits, parameter-group hardening, blue-green engine upgrades.

Security & DevSecOps

IAM least-privilege, KMS, HashiCorp Vault, Azure Key Vault, SonarQube, Fortify, SAST, DAST — secrets management, audit logging, log4j2 hardening, OpenSSF Scorecard.

Networking & Edge

VPC, ALB / NLB, Route 53, CloudFront, CloudFront Functions, Lambda@Edge, Cloudflare, Akamai, OpenVPN, Site-to-Site VPN, AWS Direct Connect, Transit Gateway, PrivateLink — security groups, NACLs, ALB session stickiness, ALB IP rotation.

Service Mgmt & Collaboration

PagerDuty, ServiceNow, Jira, Confluence, Salesforce, Slack workflows, Microsoft Teams — incident response, change management, customer escalation, runbook authoring.

Programming & Scripting

Python (boto3, python-docx), Bash / Zsh, SQL, YAML, JSON, HCL, Groovy, jq, yq, Java (read-level, bytecode / javap forensics).

Multi-Cloud

Azure (AKS, Azure DevOps, Key Vault, Container Instances) and GCP (GKE, Compute Engine, Cloud Storage, Cloud IAM) for cross-cloud operations.

Practices

Cost Optimization (FinOps), Performance Engineering (JMeter, k6), Postgres / MySQL tuning, JVM bytecode forensics, capacity planning, disaster recovery, change management, customer escalation communication.

04 — Experience

Experience

Deploys this week +9
Before MTTR · 47 min After MTTR · 12 min

Drag — same incident class, before vs. after the parallel diagnostic harness shipped (Q3 2024).

Site Reliability Engineer / DevOps Engineer

Hyland · Remote / Bengaluru, India

Jan 2024 – Present
  • 50× faster fleet diagnostics. Wrote a parallel DB-diagnostic harness in Python with xargs -P 8 that fans 9 health queries across 14 environments at once. Triage time: ~80 minutes → 1 minute 34 seconds. Same-day root-cause work on platform-wide performance issues became possible.
  • Blue-green PTM upgrades. Author and execute the 4-hour blue-green runbook for sharded production: AMI promotion, ASG re-scale (ingestion 7→1→7, repo 5→3→5), Solr shard-lag gating below 5k pending TX, JMeter cache warm-up, post-swap validation against Digital Workspace, Repo, and Share APIs.
  • Pre-upgrade verification. Built a one-shot pre-flight gate that validates RDS snapshot freshness (< 24h), Solr shard health, DB locks, active PagerDuty incidents, monitor state, and ASG scale-in protection. Returns a GO / WAIT / STOP verdict before any production swap.
  • Stateful middleware tuning. Diagnosed Hazelcast cluster-splits and ActiveMQ backlogs by aligning ASG topology, scaling profiles, and IMap sync patterns. Prevented token-replication failures (401 storms) and ALB session-stickiness regressions that broke customer logins.
  • Defense-in-depth guardrails. Built a three-tier command policy (auto-allow / ask / deny) on top of 9 cooperating Python and Bash hooks. Adds secret-pattern redaction, PII exfil detection, AWS profile separation, and audit logging across the engineer toolchain.
  • 24×7 on-call ownership. Own the SRE rotation on PagerDuty for Alfresco + Nuxeo SaaS: alert triage, customer escalation, RCA writing, post-mortems, runbook authoring, blast-radius control, change-management gating.

DevOps Engineer

Pirimid Fintech (regulated banking technology) · Bengaluru, India / Remote

Jan 2022 – Dec 2023
  • Fintech Platform Operations — Operated digital-lending, open-banking, capital-markets, loan-origination, data-pipeline, and API platforms in production across regulated banking and pension-fund workloads.
  • CI / CD & Release — Designed and maintained Jenkins and GitLab CI / CD pipelines for 20+ microservices across dev, staging, UAT, and production — with artifact promotion gates, environment-aware deploys, and rollback playbooks.
  • Cloud Infrastructure — Operated AWS infrastructure for ~10 customer environments using Kubernetes, Docker, Terraform, and Ansible — parameterized modules cut typical environment-creation effort from days to hours.
  • AWS Service Footprint — Deployed and operated EC2, VPC, ALB, RDS, S3, ECR, ECS, CloudFront, Route 53, and IAM in production across multiple customer AWS accounts — Terraform / Ansible-driven, with reusable modules shared across 5+ engagements.
  • Production Reliability — Triaged deploy failures and infrastructure incidents across 15+ services in 4 envs (dev / staging / UAT / prod); cut release-related rollbacks by tightening pipeline gates and adding pre-deploy health checks.

DevOps Engineer

TivonaGlobal Technologies (managed cloud services) · Chennai, India

Jan 2021 – Dec 2021
  • Multi-Cloud Operations — Operated managed-cloud and DevOps engagements for SaaS, EdTech, and financial-research customers across AWS, Azure, and GCP in production.
  • CI / CD & Automation — Built CI / CD pipelines (Jenkins + GitLab + GitHub Actions) for containerized workloads on EKS / GKE — automated provisioning via Terraform, image scanning, and zero-downtime rolling updates.
  • Cost Optimization (FinOps) — Led cloud-cost optimization (FinOps) reviews on AWS and GCP — right-sizing, reserved capacity, idle-resource cleanup — supporting customers with multi-million-dollar annual cloud spend.

Early experience: Software Engineering internships at XtroviX Technologies (Pune, Nov 2019 – May 2020) and SmartDigital WebNMobile (Nagpur, May – Jun 2018) — Java, Python, C++, Git, Linux, APIs, SDLC workflows.

On-call calendar · last 52 weeks customer-impacting incidents owned

05 — Projects

Selected projects

AWS · On-Premises HA

Banking Loan Platform

Designed AWS and offline banking infrastructure using ECS, ECR, CloudFront, EC2, VPC, ALB, RDS, Redis, S3, IAM, Route 53, Terraform / Ansible automation, Nginx, HAProxy, Patroni, PostgreSQL, Prometheus, Grafana, Loki, and ETCD.

Azure & AWS

Account Aggregation Platform

Built containerized Java deployment using Azure Container Instances, Application Gateway, PostgreSQL, GitLab CI / CD, and equivalent AWS ECS / VPC / ALB / ECR / RDS patterns.

AWS Migration

Mentza Migration

Migrated a live chat-room application from on-premises infrastructure to AWS using EC2, Lambda, ALB, Auto Scaling, VPC networking, RDS PostgreSQL read replicas, Nginx, disaster recovery, and GitHub Actions CI / CD.

CI / CD

Java Loan Application — AWS CI / CD

Implemented GitLab CI / CD and Terraform-driven deployment for Java services using Maven builds, Selenium tests, Docker image publishing to ECR, ECS task definitions, CloudFront delivery, S3 static hosting, Redis, RDS, and ALB routing.

06 — Education

Education

  • Bachelor of Engineering in Computer Science G. H. Raisoni College of Engineering (GHRCE), Nagpur · 2020
  • 12th Science (PCMB) and 10th Kendriya Vidyalaya Bhandara · 2013 / 2015

Languages

Malayalamnative Englishfluent Hindifluent Marathiunderstand

06 — Certifications

Certifications

  • HashiCorp Certified: Terraform AssociateJul 2022
  • Associate Cloud Engineer — Google CloudAug 2021
  • Python for Data Science — NPTELOct 2019
  • Fundamentals of Digital Marketing — Google Digital GarageApr 2020

07 — Contact

Get in touch

Open to senior SRE, DevOps, or Platform Engineering roles. Happy to relocate. LinkedIn is the fastest way to reach me; my email is in the resume PDF.