Piyush Tyagi

Led cloud modernization for a regulated title insurance and real-estate transaction platform. Built reusable, secure AWS infrastructure modules with Terraform (VPC, IAM roles, EC2, RDS, ALB, Auto Scaling) to support standardized multi-environment deployments. Automated configuration and provisioning using Ansible playbooks/roles, reducing manual configuration effort by 50% and eliminating configuration drift. Deployed and operated containerized workloads on EKS with HA cluster setup, health checks, and autoscaling. Integrated infrastructure workflows with GitHub Actions for controlled, validated deployments. Strengthened security posture through least-privilege IAM, KMS encryption, secure VPC segmentation, secrets management, and enhanced logging aligned to financial regulatory expectations. Implemented monitoring with CloudWatch, Prometheus, and Grafana, improving MTTD by 35%. Managed incidents and performed RCA, reducing recurring high-severity incidents by 30%.

Performed AWS infrastructure modernization and DevOps transformation focused on automation, CI/CD, and cloud-native architecture. Migrated CI/CD pipelines from Jenkins to GitHub Actions, achieving full automation and faster, error-free deployments across multiple environments. Optimized AWS resources (EC2, S3, RDS, VPC, EKS) using modular and parameterized Terraform components to improve cost efficiency and uptime by 20%. Designed and deployed EKS infrastructure using Terraform and Helm to support scalable microservices. Collaborated in Agile sprints to remove bottlenecks and improve team velocity, including transitioning services from monoliths to microservices for better scalability and isolation.

Designed and built an end-to-end DevOps automation framework for an e-commerce platform on AWS, covering continuous integration, automated deployments, infrastructure provisioning, and security validation using IaC. Created CI/CD pipelines with GitHub Actions and Terraform deploying on EC2 and EKS. Integrated GitHub self-hosted runners into AWS infrastructure to improve workflow execution capacity by 35% for high-volume deployments. Added DevSecOps security testing with SAST (CodeQL) and DAST (OWASP ZAP), enabling detection of 200+ vulnerabilities and improving application security by 35%.