أخيل Mishra

• Gathered and analysed stakeholder requirements to design scalable, secure, cloud-native architectures on Azure,
ensuring alignment with DevSecOps goals and compliance mandates.
• Designed and operated Azure Kubernetes Service (AKS) clusters for high availability with multi-zone resilience, RBAC,
pod security policies, and namespace-level isolation.
• Built and maintained CI/CD pipelines using Azure DevOps, GitHub Actions, and Jenkins; integrated Fastlane for
automated mobile delivery (Android/iOS/Huawei) including app signing, provisioning, and submissions to all three
app stores.
• Implemented Istio and Linkerd service mesh solutions enabling mTLS security, canary/blue-green traffic management,
observability sidecars, and fault injection for microservices resilience.
• Configured Azure API Management (APIM) with rate limiting, OAuth2 policies, and TLS 1.3 termination; documented
TCP/UDP, HTTP/HTTPS, and IPSec networking flows across AKS and on-premise systems.
• Set up distributed tracing with Jaeger across microservices; built Prometheus + Grafana dashboards and Azure
Monitor alerts targeting MTTR < 15 minutes.
• Enforced cryptographic standards: AES-256 at rest, RSA-2048 for certificate management, Diffie-Hellman key
exchange for secure sessions, and TLS/mTLS for data in transit.
• Led incident analysis, blameless post-mortems, and root-cause remediation, improving platform stability through
systematic problem management.

▸ Architected multi-environment AWS platform (Dev/QA/UAT/ITG/Prod/DR) across us-east-1 & us-east-2 using
30+ reusable Terraform modules — cutting provisioning time from days to under 2 hours.
▸ Delivered 4-stack serverless pipeline (Foundation → Data → Compute → Monitoring) via AWS
SAM/CloudFormation for HPs Dispute Warranty & Sierra AI bot, achieving zero-maintenance auto-scaling.
▸ Managed Amazon EKS clusters hosting 20+ microservices with Helm, HPA, and Jenkins promotion gates —
enabling zero-downtime rolling deployments across all environments.
▸ Enforced zero public API exposure via Private API Gateway (VPC Endpoint) + Lambda JWT/JWKS Authorizer
with CloudFormation-level security guardrails blocking insecure Prod/UAT configs.
▸ Reduced Nginx EC2 costs by 35% via ASG spot/on-demand mixed capacity strategy; deployed full
observability stack (Prometheus, Grafana, ELK, APM) via Ansible — achieving 100% infrastructure coverage.
▸ Established fully automated DR across two regions: Aurora Global DB (RPO < 1 second), ElastiCache Global
Datastore replication, and Jenkins-orchestrated Route 53 failover runbooks.

• Led end-to-end GCP-to-Azure infrastructure migration across 5 environments (Dev, QA, Performance, Production,
DR), achieving near-zero downtime and 100% data integrity.
• Managed Kubernetes deployments with Helm charts; executed controlled upgrades, rollbacks, and environment
specific configurations through GitOps-based approval workflows.
• Implemented GitHub Actions and Azure DevOps CI/CD pipelines with app signing, compliance atestations, and code
signing to meet enterprise release governance requirements.
• Performed blue/green traffic cutover from GCP to Azure using weighted routing via Azure Traffic Manager; validated
performance baselines post-migration.
• Deployed Azure Data Factory and custom Python scripts for reliable data synchronisation between cloud
environments; conducted full API endpoint validation post-migration.

▸ Led end-to-end GCP-to-Azure migration across 5 environments (Dev/QA/Perf/Prod/DR) — near-zero
downtime, 100% data integrity, blue/green cutover via Azure Traffic Manager.
▸ Designed Azure Landing Zones (VNets, NSGs, IAM, Key Vaults) and produced full HLD/LLD, BoM, and
environment architecture documentation aligned to enterprise governance.
▸ Deployed Azure Data Factory + Python data-sync scripts for cross-cloud replication; validated API integrity,
security headers, and performance baselines post-migration.

• Designed automated Terraform workflows to provision AKS clusters, node pools, VNets, Key Vaults, and PostgreSQL
instances using parameterised, input-driven modules.
• Managed Terraform backend (Azure Blob Storage) with remote state locking, encryption, and access control aligned
to DevSecOps best practices.
• Integrated Fortify SAST, SonarQube, Trivy, and Mend SCA into CI/CD pipelines for automated vulnerability detection,
licence compliance, and code quality enforcement.
• Standardised infrastructure deployment across dev, staging, and production environments using Terraform module
registries, improving reliability and repeatability.

▸ Designed parameterised Terraform modules provisioning AKS clusters, VNets, Key Vaults, and PostgreSQL
on Azure with remote state in Blob Storage (locking + encryption).
▸ Embedded Fortify SAST, SonarQube DAST, Trivy, and Mend SCA into CI/CD pipelines — automated
vulnerability detection and quality gate enforcement across all environments.

• Automated Dev, Staging, and Production CI/CD pipelines with Azure DevOps YAML, cuting release cycles from 3
months to 7 days — an 85% improvement in deployment frequency.
• Designed mobile DevOps pipelines using Fastlane for Android (APK/AAB signing, Google Play Console) and iOS
(provisioning profile management, App Store Connect); managed Huawei AppGallery releases end-to-end.
• Configured keystore and certificate lifecycle management for Android/iOS signing; stored and rotated signing keys in
Azure Key Vault with automated rotation policies.
• Integrated Fortify SAST, SonarQube, and Mend into pipelines; trained development teams on interpreting quality gate
reports and remediation workflows.
• Deployed Azure Monitor, Log Analytics, and Application Insights for end-to-end observability; implemented Jaeger
distributed tracing, reducing MTTR by 40% during production incidents.

Banking Client — Azure DevOps Platform Modernisation
▸ Designed multi-environment Azure infrastructure (Dev/Staging/Prod) with Terraform + Azure DevOps YAML
pipelines — reduced release cycle from 3 months to 7 days (85% improvement).
▸ Implemented Azure Monitor, Prometheus/Grafana, Jaeger distributed tracing; reduced MTTR by 40%.
Enforced TLS/mTLS, AES-256, RSA-2048, and PKI lifecycle via Azure Key Vault.
▸ Integrated Fortify SAST, SonarQube, and Mend; upskilled 20+ developers on security quality gates.
Automated Linux/Windows patching via Ansible and PowerShell DSC (CIS compliant).
AWS Cloud Modernisation & SaaS Data Integration
▸ Migrated on-premises workloads to AWS (EC2, RDS Aurora, S3, VPC, CloudWatch) via CloudFormation;
implemented least-privilege IAM, encryption at rest, and CloudTrail audit logging.
▸ Configured Amazon AppFlow for Salesforce-to-S3 integration; optimised S3 lifecycle policies — reducing
storage costs by 25% over 6 months.

▸ Led 17-member team across 24/7 operations maintaining sub-4-hour SLA for P1 incidents across 10, 000+
user IAM environment; automated provisioning workflows via Python/PowerShell — 60% effort reduction.
▸ Managed PAM (CyberArk), RBAC, PKI/certificate lifecycle, and user onboarding/offboarding aligned with ISO
27001 and SOC2; generated SLA/SDC reports via ServiceNow dashboards.