DEVSECOPS & CLOUD ENGINEER

SHUBHAM K. SAWANT

Automating secure, scalable cloud infrastructure | AWS & Azure

DevSecOps & Cloud Engineer with 8+ years of experience in automating, scaling, and securing infrastructure across AWS and Azure. Specialized in Terraform, AWS CDK, Kubernetes, and CI/CD with Jenkins, GitHub Actions, and Azure DevOps. Passionate about AI-driven DevOps automation and infrastructure efficiency.

View Projects Contact LinkedIn

PROFESSIONAL SUMMARY

DevSecOps leader focused on automation, security, and resilient cloud platforms.

DevSecOps & Cloud Engineer with 8+ years of project-driven experience automating, scaling, and securing infrastructure across AWS and Azure. Expert in Infrastructure as Code (Terraform, AWS CDK, CloudFormation), CI/CD (GitHub Actions, Jenkins, Azure DevOps, CodePipeline), container orchestration (EKS), and AI-based automation using AWS Bedrock & SageMaker. Proven track record building DevOps strategies from scratch, standardizing IaC, implementing GitOps deployments, and improving operational efficiency through unified pipelines and automation.

PROJECTS

Selected project highlights — DevSecOps, Cloud Automation, AI & IaC

Fusion – Cybersecurity Threat Analysis Platform

Architected and deployed a multi-account AWS environment for a large-scale threat analysis platform using AWS CDK and CodePipeline. Built DevOps strategy from scratch, implemented IaC and DR (warm-standby) with RTO < 15 mins and RPO < 5 mins. Integrated GenAI chatbot and RAG workflows using AWS Bedrock and SageMaker.

AWS CDK CodePipeline Bedrock SageMaker

Identity Management System (SailPoint)

Automated three-tier SailPoint deployment using Terraform and GitHub Actions, cutting manual configuration effort by 50%. Designed custom auto-scaling for EC2 task servers (-35% compute cost) and implemented versioned Terraform modules with automated rollback and zero-downtime CI/CD workflows.

Terraform GitHub Actions Auto-scaling

Data Marketplace Platform

Designed the complete DevOps strategy and unified CI/CD pipeline using Azure DevOps + AWS Pipelines, consolidating 15 pipelines into a single workflow and reducing microservice deployment time by 60%. Automated provisioning via CloudFormation and integrated RAG chatbot automation using Bedrock, Step Functions, and SageMaker.

Azure DevOps CloudFormation Bedrock

NewsCorp – Media Compliance Automation

Remediated 4,600+ AWS resources to meet SCP compliance, and migrated 368 Bamboo pipelines to GitHub Actions, reducing pipeline maintenance complexity by 55% and standardizing CI/CD templates across teams.

GitHub Actions SCP AWS

TECH STACK

Cloud, IaC, CI/CD, Containers, Security and more

Cloud Platforms

AWS (EC2, Lambda, S3, RDS, VPC, CloudWatch)

Azure (Azure DevOps, Repos, Pipelines)

Infrastructure as Code

Terraform (modules & state management)

AWS CDK & CloudFormation

CI/CD & GitOps

GitHub Actions, Jenkins, CodePipeline, Azure DevOps

ArgoCD (GitOps) & Helm

Containers & Orchestration

Docker, ECR, ECS, Kubernetes (EKS), Karpenter

Security & Observability

IAM, KMS, Secrets Manager, Security Hub

Prometheus, Grafana, CloudWatch, OpenSearch

Scripting & Tools

Bash, Python, Ansible

SonarQube, Trivy, Checkov, tfsec

EXPERIENCE

Career history and roles

Senior Associate — DevSecOps (PwC India)

Dec 2022 – Present | Pune, Maharashtra, India

Lead DevSecOps initiatives for enterprise clients, architecting multi-account AWS environments and CI/CD automation.
Built IaC modules (Terraform, CDK), unified pipelines, and implemented DR and security automation.
Integrated AI-driven features (Bedrock & SageMaker) into production workflows for monitoring & analytics.

Technical Engineer — Pentagon Systems & Services

Feb 2020 – Nov 2022 | Mumbai Area, India

Worked on cloud automation, CI/CD pipelines and support for enterprise applications.
Deployed applications using Terraform, CloudFormation and CI tools; automated operational tasks via scripts.

Technical Support Engineer — Rahi Systems

2017 – 2019 | Bengaluru / Pune, India

Provided system and application support, troubleshooting infrastructure and networking issues.
Gained foundational system administration and scripting experience.