I’m Aman Sahni, a cloud and DevOps engineer with 15 years of IT experience, focused on building secure, scalable platforms in Microsoft Azure. I’ve designed and implemented cloud landing zones and production-ready infrastructure using Infrastructure as Code, with strong emphasis on security-first patterns across networking, identity, and application delivery. Across my roles—from banking and advanced analytics platforms to site reliability and DevSecOps work—I’ve delivered end-to-end solutions including secure AKS environments, automated CI/CD pipelines, and modern observability and threat protection using Microsoft Defender and related tooling. I also enjoy working with data/analytics services and continuous improvement, turning complex requirements into reliable, measurable engineering outcomes.

Aman Sahni

I’m Aman Sahni, a cloud and DevOps engineer with 15 years of IT experience, focused on building secure, scalable platforms in Microsoft Azure. I’ve designed and implemented cloud landing zones and production-ready infrastructure using Infrastructure as Code, with strong emphasis on security-first patterns across networking, identity, and application delivery. Across my roles—from banking and advanced analytics platforms to site reliability and DevSecOps work—I’ve delivered end-to-end solutions including secure AKS environments, automated CI/CD pipelines, and modern observability and threat protection using Microsoft Defender and related tooling. I also enjoy working with data/analytics services and continuous improvement, turning complex requirements into reliable, measurable engineering outcomes.

Available to hire

I’m Aman Sahni, a cloud and DevOps engineer with 15 years of IT experience, focused on building secure, scalable platforms in Microsoft Azure. I’ve designed and implemented cloud landing zones and production-ready infrastructure using Infrastructure as Code, with strong emphasis on security-first patterns across networking, identity, and application delivery.

Across my roles—from banking and advanced analytics platforms to site reliability and DevSecOps work—I’ve delivered end-to-end solutions including secure AKS environments, automated CI/CD pipelines, and modern observability and threat protection using Microsoft Defender and related tooling. I also enjoy working with data/analytics services and continuous improvement, turning complex requirements into reliable, measurable engineering outcomes.

See more

Experience Level

Expert
Expert
Expert
Expert
Expert
Expert
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
See more

Language

Work Experience

Senior Cloud Engineer at AMP Limited
September 1, 2024 - Present
Designed and implemented a security-first Azure rearchitecture using hub-and-spoke networking with Azure Firewall, ExpressRoute, Application Gateway/WAF, and API Management. Built secure AKS infrastructure with Terraform, enabled end-to-end CI/CD for Java and .NET Core applications, and implemented TLS inspection and multilayer DDoS protection across the platform. Integrated Azure security architecture with Prisma for SIEM visibility and Cortex for advanced threat detection. Standardized Infrastructure-as-Code modules and GitHub Actions templates for consistent deployments, and built Copilot Studio environments and agents using Terraform and GitHub ALM.
Senior Cloud Engineer at Westpac
January 1, 2024 - August 31, 2025
Worked in Westpac’s public cloud services team to build secure infrastructure and patterns for Advanced Analytics. Developed proof-of-concepts and secure reference architectures for Azure Machine Learning (workspace, compute instances/clusters, feature store, inference endpoints) and supporting services like ADLS, Synapse, and Azure SQL. Hardened Terraform modules with least-privilege RBAC, Azure Policies, secure network configurations, and automated Terraform tests. Implemented least-trusted isolated private networking using private endpoints, UDRs, and Azure Firewall, and delivered CI/CD pipelines in Azure DevOps. Also contributed to Microsoft Fabric environment setup and tenant configuration via Terraform.
Senior Site Reliability Engineer at LAB3
October 1, 2021 - November 30, 2023
Implemented secure Azure platform network and application foundations in cost-effective ways, following Microsoft Cloud Adoption Framework best practices. Delivered cyber defence capabilities using the Defender suite (Defender for Cloud, Endpoint, Identity, and Application Security). Designed DevSecOps pipelines with SAST/DAST scanning (Trivy, SonarQube, Checkmarx) and implemented least-trusted isolated private networking with private endpoints and Azure Firewall. Produced reusable Infrastructure-as-Code using Terraform/Bicep/Packer and supported configuration management via Ansible/Chef, including policy-as-code and monitoring/alerting profiles.
Senior Cloud and DevOps Consultant at Coles
November 1, 2020 - October 31, 2021
Built a highly secured, scalable advanced analytics/AI enablement platform for data scientists and ML workloads. Designed and implemented secure AKS, VM patterns, Application Gateway/WAF, and APIM with strong identity and access management and network security. Implemented policy-driven Kubernetes operations using Open Policy Agent, plus service mesh and Kubernetes network controls (e.g., Linkerd, network policies, UDRs). Established alerting and observability using Azure Monitor/Log Analytics and Prometheus/Grafana, and managed CI/CD deployments with Azure DevOps and ArgoCD. Hardened Docker images and OS images using Packer and Ansible.
Senior Cloud and DevOps Consultant at AGL
February 1, 2020 - November 30, 2021
Supported the dataAGlow data warehouse platform by provisioning and maintaining Azure-based services including AKS, Azure ML Workspace, Azure Batch, Synapse, Data Factory, and Databricks. Implemented Kubernetes security and policy-driven operations using Open Policy Agent with network policies and UDRs, and delivered observability using Container Insights, Azure Monitor, and Prometheus/Grafana. Built infrastructure with Terraform, automated deployments using Bash/Python, templated Kubernetes resources using Helm charts, and hardened container and OS images using Packer and Ansible.
Senior Cloud and DevOps Engineer at Versent
October 1, 2019 - February 29, 2020
Worked on a greenfield Kubernetes microservices platform in AWS for an Australian loyalty programme. Provisioned and supported the EKS environment, implemented policy-driven Kubernetes controls (pod security, Istio ingress/egress, OPA Gatekeeper), and performed Kubernetes node hardening using Packer. Automated application builds and deployments for Spring Boot and Node services with GitLab pipelines and supported platform monitoring with Datadog.
Cloud and DevOps Engineer at UST Global
July 1, 2014 - June 30, 2019
Delivered a greenfield Azure Kubernetes microservices platform for a large UK retail and pharmacy customer. Implemented network and cloud policies using Terraform and supported Kubernetes and OS hardening using Packer. Automated builds and deployments for Java services, and monitored the platform using Dynatrace.
Software Developer at Tech Mahindra
April 1, 2011 - July 31, 2014
Developed middleware services involving SOAP/HTTP and REST web services. Worked on data transformation and integration using IBM WebSphere Message Broker, IBM MQ, and IBM WebSphere Transformation Extender for enterprise message flows and transformations.

Education

Bachelor of Technology (Electronics and Communication) at Punjab Technical University
January 11, 2030 - January 1, 2010
Bachelor of Technology (Electronics and Communication) at Punjab Technical University
January 11, 2030 - January 1, 2010
Bachelor of Technology (Electronics and Communication) at Punjab Technical University
January 1, 2006 - January 1, 2010

Qualifications

Microsoft Certified: Azure Solutions Architect Expert (Azure Solution Architect Expert)
January 11, 2030 - August 30, 2026
Microsoft Certified: Azure DevOps Expert (Azure DevOps expert)
January 11, 2030 - August 30, 2026
Baseline Security Clearance
January 11, 2030 - August 30, 2026
Microsoft Azure Solution Architect Expert
January 11, 2030 - August 30, 2026
Microsoft Azure DevOps Expert
January 11, 2030 - August 30, 2026
Baseline Security Clearance
January 11, 2030 - August 30, 2026

Industry Experience

Financial Services, Professional Services, Software & Internet