Mahesh Ikhe

AWS Cloud and SRE Architect

• Architect and manage global cloud infrastructure supporting IBM cybersecurity SaaS products across AWS
(ROSA) and IBM Cloud (ROKS).
• Manage 100+ OpenShift/Kubernetes clusters, ensuring high availability, performance, and security
compliance for enterprise-grade cybersecurity workloads.
• Lead Terraform-driven Infrastructure-as-Code automation across AWS, Azure, and IBM Cloud - enabling
consistent, repeatable, and auditable deployments.
• Design and implement GitOps workflows using Argo CD, ensuring continuous sync of Kubernetes
resources with Git repositories and zero-drift deployments.
• Build and maintain CI/CD pipelines via Jenkins, automating build, test, and deployment processes for both
application and infrastructure changes.
• Develop Ansible playbooks for infrastructure monitoring, configuration management, and operational
stability across cloud environments.
• Manage multi-account AWS governance using AWS Control Tower and AWS Organizations.

• Led end-to-end AWS solution design: gathered requirements, produced architecture blueprints, obtained
approval through architecture review boards.
• Designed and deployed enterprise-level cloud architectures on AWS following Well-Architected Framework
principles (scalability, reliability, security, cost optimisation).
• Implemented infrastructure using Terraform and CloudFormation, supporting both greenfield and migration
projects.
• Managed Kubernetes (EKS) clusters and deployed containerised microservices-based applications.
• Maintained AWS security posture, ensuring adherence to compliance standards and cloud governance
policies.
• Estimated AWS costs and optimised resource usage for clients across multiple regions.
Role - MS Azure DevOps Lead
• Led Azure DevOps team, driving CI/CD pipeline automation across development, staging, and production
environments.
• Managed Azure Repos, Azure Boards, and Azure Artifacts for version control, agile planning, and
dependency management.
• Deployed and managed containerised workloads on AKS; configured Azure VMs with high-availability
architectures.
• Utilised Azure Data Explorer with KQL for real-time telemetry, log analysis, and time-series data
visualisation.

• Led AWS admin and DevOps teams; managed and deployed multi-region AWS infrastructure.
• Designed AWS multi-account Landing Zone using AWS Control Tower for scalability, cost governance, and
security.
• Automated infrastructure provisioning via CloudFormation and Terraform; built CI/CD pipelines for large and
small-scale deployments.
• Managed AWS Organizations (multiple OUs and accounts), implemented cloud engineering best practices.

• Hands-on experience across a broad range of AWS services: EC2, IAM, VPC, RDS, S3, Athena,
QuickSight, FSx, EBS, S3 Glacier, CloudWatch, CloudTrail, Redshift, CloudFormation, ECS, CodeBuild,
CodePipeline.
• Designed and managed VPCs with public/private subnets, IGW, NAT Gateways, ALBs, and auto-scaling
groups for highly available, fault-tolerant architectures.
• Managed Route 53 DNS records with multiple routing policies; configured S3 lifecycle policies and static
hosting.
• Secured AWS environments: IAM policies and roles, VPC security controls, compliance with banking
regulations.