Pruthvi S

About Me

I'm a Senior Cloud Architect and DevOps Lead with 9+ years of experience in enterprise cloud infrastructure. I specialize in designing and implementing scalable, secure cloud solutions using GCP, AWS, and Kubernetes.

My expertise spans across cloud platform engineering, multi-cloud migrations, DevOps practices, and security compliance. I've successfully led critical initiatives for Fortune 500 clients, achieving significant cost reductions and performance improvements.

9+

Years Experience

6

GCP Certs

50+

Applications

Download Resume

Professional Experience

Senior Cloud Platform Engineer

March 2025 - Present

Calix Inc.

Leading cloud infrastructure modernization and platform engineering initiatives
Architecting next-generation cloud platform solutions
Implementing advanced DevOps practices and GitOps workflows
Establishing cloud-native monitoring and observability frameworks

Senior Associate Infrastructure L1 | GCP DevOps Lead

December 2023 - March 2025

Publicis Sapient

Cloud Security: Designed Cloud Armor protection, achieving 99.9% uptime and SOC2 compliance
Security Implementation: Led NGF and EDR/XDR solutions, reducing incidents by 85%
Landing Zone: Architected enterprise GCP Landing Zone enabling 50+ applications
Network Optimization: VPP+IPSec stack achieving 40% bandwidth optimization
Multi-Cloud Migration: AWS-to-GCP migration reducing costs by 35%
GitOps & CI/CD: Established pipelines reducing deployment time by 60%

Cloud Lead | GCP DevOps Architect

January 2022 - December 2023

Codincity Digital Technologies

Container Orchestration: Architected GKE supporting 10M+ daily transactions
DevSecOps: Integrated SonarQube, Snyk, OWASP ZAP achieving 99% vulnerability detection
Cost Optimization: Reduced cloud spend by 45% using workload analysis
Service Mesh: Implemented Istio for microservices communication
Network Automation: Developed NetDevOps solutions using Python and Terraform

Network Enterprise Team Member | GCP Implementation Specialist

August 2015 - January 2021

Toyota Motor Corporation

Enterprise Networks: Managed infrastructure with 99.95% availability
Incident Response: Led 24/7 operations, reducing MTTR by 50%
Network Automation: Python/Ansible automation reducing config errors by 75%
Hybrid Architecture: Established hybrid cloud with on-premises infrastructure
Cost Optimization: Reduced operational costs by 25%

Key Projects & Achievements

Enterprise Security Transformation

Engineered multi-layered security for BFSI and Telco clients, achieving zero breaches and SOC2 compliance.

Zero Trust Security SOC2

Multi-Cloud Migration

Successfully migrated enterprise workloads from AWS to GCP, reducing costs by 35% and improving performance.

AWS GCP Migration

Network Performance Optimization

Implemented VPP+IPSec stack achieving 40% bandwidth optimization and 30% latency reduction.

Networking Performance Infrastructure

DevOps Transformation

Established GitOps workflows reducing deployment time by 60% and improving reliability to 95%.

GitOps CI/CD DevOps

Kubernetes Platform Engineering

Architected scalable GKE platform supporting 100+ microservices with auto-scaling capabilities.

Kubernetes GKE Platform

Cost Optimization Initiative

Implemented cost optimization strategies reducing cloud spend by 45% through workload analysis.

Cost Optimization FinOps

Tools & Technology

Comprehensive tech stack and tools I work with

Identity & Auth

Workload Identity Federation Keycloak HashiCorp Vault JIT Access

Monitoring

Cloud Monitoring Prometheus Grafana ELK Stack New Relic

Logging

Cloud Logging ELK Stack Elasticsearch Logstash Kibana

Cloud Security

Cloud SCC Cloud Armor IAM KMS NGFW Cert Manager

Network Security

Wireshark Snort Nmap Cisco Thousand Eyes Strongswan

Code Scanning

Terrascan Tflint SonarQube OWASP ZAP OpenSCAP Qualys

Testing

Postman Inspec Terraform Kitchen Locust

Container Tech

Docker Kubernetes Istio Helm GKE Anthos

Secrets & Certs

Secret Manager HCP Vault Let's Encrypt CertBot

Load Balancing

Cloud LB Internal LB Apigee Nginx Ingress

CI/CD

Jenkins GitHub Actions Cloud Build ArgoCD

VPN & Networking

Cloud VPN WireGuard Tailscale OpenVPN IPSec BGP

Linux & OS

Ubuntu Debian RedHat SELinux

GCP Networking

VPC VPC Peering PSC Cloud DNS Interconnect NCC VPCSC

SDN & NFV

OpenDaylight SD-WAN NFV Python Automation

Infrastructure Learnings & Solved Problems

Real-world GCP infrastructure challenges and their solutions

DNS Resolution APG to GKE

Enabled DNS resolution from APG to GKE internal services using google_service_networking_peered_dns_domain Terraform resource with VPC peering.

GCP Data Streams VPC Connectivity

Connected GCP Data Streams from internal VPC using google_compute_global_address and private service access configuration.

AWS-GCP VPN Bandwidth Testing

Configured 8 VPN tunnels and tested with iperf: ~9 Gbps UDP, ~8.8 Gbps TCP, ~850K pps UDP, ~840K pps ingress TCP.

AlloyDB PSC Connectivity

Used Private Service Connect (PSC) to securely expose AlloyDB instances with DNS mapping to PSC service attachment IPs via Cloud DNS.

UDP Transit over VPN with MTU

Transited UDP traffic from AWS to GCP with MTU over 1410 using Strongswan VPN and custom local subnet advertisement.

NAT Gateway Packet Drop Issue

Fixed packet drop issue by creating separate NAT for specific VMs, enabling dynamic port allocation, and setting min_port to 2048.

BYOIP in GKE Service Project

Obtained exception from Google to create BYOIP static addresses in GKE service project for Load Balancer integration.

IPv4-IPv6 Dual Stack in GKE

Implemented dual-stack in GKE workloads by enabling dual-stack on cluster and associating IPv6 space for LB allocation.

Kubernetes Memory Pressure Issue

Resolved memory pressure by optimizing sysctl network buffer settings, reducing reserved memory from 2GB to appropriate defaults.

Cloud NAT Out-of-Resource

Reduced packet drop from 1k/sec to 1/sec by switching to static IPs, creating separate NAT per subnet, and increasing port allocation to 8192.

504 Upstream Connection Error

Resolved 504 errors by increasing backend service resource capacity and adjusting timeout from 30 to 60 seconds.