I’m a DevOps and SRE-focused engineer who loves building highly scalable and secure systems from the ground up.
My core strength lies in infrastructure automation, DevSecOps, container orchestration, and observability. I think in terms of reliability, security-first CI/CD, and scaling behavior — ensuring systems are deterministic and resilient.
- 🛠 DevOps & DevSecOps Engineer with strong backend foundations
- 🐧 Deeply interested in Linux internals & system-level behavior
- ⚙️ Obsessed with automation, security-first CI/CD, and clean infrastructure
- 📊 Strong believer in observability-first architecture
- 🔐 Integrating 'Shift-Left' security into every stage of the SDLC
- 🧠 First-principles thinker — break down → understand → rebuild
📍 Delhi, India
- ⚙️ Kubernetes internals & workload autoscaling (HPA)
- ☁️ Cloud-native infrastructure & GitOps workflows (ArgoCD)
- 🔐 Advanced DevSecOps automation & container security (Trivy, Snyk)
- 📡 Observability systems (Prometheus, Grafana, OpenTelemetry)
| Domain | Tools / Technologies |
|---|---|
| DevOps & Automation | Terraform, Ansible, GitHub Actions, CI/CD, GitOps, ArgoCD |
| DevSecOps & Security | Trivy, Snyk, Gitleaks, Hadolint, SAST, Image Hardening |
| Containers & Orchestration | Docker, Kubernetes, Docker Compose |
| Observability | Prometheus, Grafana, OpenTelemetry, Loki |
| Backend & Systems | Golang, C, Python, TypeScript, MySQL, Redis |
| Scripting & Infra Config | Bash, YAML |
| Cloud & Infrastructure | AWS (EC2, S3, IAM, Route53), Infrastructure as Code |
I approach engineering using first principles:
- Understand the kernel of the problem
- Identify resource boundaries (CPU, memory, I/O, network)
- Automate everything reproducibly
- Make systems observable before scaling them
- Prefer clarity over complexity
Infrastructure should be:
- Deterministic
- Observable
- Scalable
- Debuggable
- Stack: Golang, MySQL, HTML/CSS/JS, Kubernetes, GitHub Actions
- Highlights: Aggressively optimized Docker images via multi-stage builds (reducing frontend from 92MB→20MB, backend 34MB→12MB). Fully automated CI/CD with security gates (golangci-lint, Gitleaks, govulncheck, Hadolint, Trivy). Rolling deployments with HPA autoscaling.
- Stack: React, Node.js, Docker Compose, GitHub Actions, VPS
- Highlights: End-to-end automated pipeline incorporating DevSecOps principles. Remediated 19 High and 2 Critical vulnerabilities by hardening base images. Achieved zero-manual-step delivery flow: Code → CI Checks → Image Build → Scan → Deploy.
- ⚙️ Infrastructure-as-Code (Terraform, AWS)
- 🔐 DevSecOps CI/CD Pipelines (GitHub Actions)
- ☁️ Kubernetes & GitOps setups
- 📡 Observability stacks (Prometheus, Grafana)
- 🧪 Go and Python automation scripts
- Certified DevOps Engineer Associate — TrainWithShubham (Issued May 2026, Credential ID: CRD-8FFHEZGG)
- DevOps - Zero To Hero (Josh Batch 10) — TrainWithShubham (Issued May 2026, Credential ID: DIAAUXCX)
🐙 GitHub: https://github.com/shivang21007
🔗 LinkedIn: https://linkedin.com/in/shivang21007
📍 Delhi, India
To build highly reliable, deeply observable, and highly secure cloud-native systems —
where infrastructure, SRE principles, and automated security intersect.
"If you can't explain the system from the kernel up, you don't fully understand it."