Multi-tenant AKS platform on Terraform + GitOps
Landing-zone networking, per-tenant onboarding, Key Vault and workload identities, with every deployment delivered through ArgoCD ApplicationSets.
Senior DevOps Engineer & SRE
DevOps and platform engineer with 17+ years in software, the last decade focused on cloud infrastructure and delivery automation. I build the paved road — CI/CD platforms, Kubernetes foundations, infrastructure as code and observability — for teams shipping regulated software in payments, banking, healthcare and telecom.
Day to day that means Azure and AKS, Terraform, Helm and ArgoCD, GitLab CI and Azure DevOps, and the security plumbing around them: workload identity federation, mutual TLS, secret management and supply-chain scanning. HashiCorp Certified Terraform Associate and a Certified ScrumMaster, so I tend to end up bridging the platform and the delivery process.
– Present · Killorglin, Ireland
– · Dublin, Ireland
– · Dublin, Ireland
– · Dublin, Ireland
– · Nenagh, Ireland
– · Bangalore & Ireland
– · Remote
Top Rated freelancer delivering PHP, WordPress and Joomla projects end to end, from client interaction through technical delivery.
– · India
Feature ownership and team management for M2M and device management modules against ETSI M2M and OMA DM specifications — design through delivery, coding in Java and OSGi, plus C-language work on a proxy module routing WCDMA/LTE traffic.
– · Bangalore, India
Led a team developing and maintaining GSM performance management modules for the Alcatel BSC on an ATCA platform, providing offshore and online support to networks deployed in China, Germany, France and Romania. Solaris and Linux, with functional and regression testing across the PM stack.
Every stage expands — click one for the detail.
apiVersion: careers/v1 kind: Engineer metadata: name: amritpal-singh namespace: dublin-ie labels: role: devops-sre seniority: senior work-authorization: eu-citizen annotations: linkedin.com/profile: "s-amritpal" github.com/user: "amritpals" spec: replicas: 1 # not horizontally scalable, sorry nodeSelector: topology.kubernetes.io/region: europe-west workplace: hybrid containers: - name: platform-engineering image: fexco/devops-engineer:current startedAt: "2025-12" resources: requests: azure: high kubernetes: high terraform: high limits: meetings: "3/day" env: - name: CI_PLATFORM value: "gitlab" - name: DEPLOY_STRATEGY value: "build-once-promote-many" initContainers: # had to run before the current role could start - name: ing-engineer-iv image: ing/senior-devops:1.6y - name: merative-devops image: merative/devops:1.1y - name: ibm-watson-health image: ibm/devops:1.1y volumeMounts: - name: certifications mountPath: /etc/credentials readOnly: true readinessProbe: exec: command: ["terraform", "plan", "-detailed-exitcode"] initialDelaySeconds: 0 periodSeconds: 10 livenessProbe: httpGet: path: /masala-chai port: 8080 failureThreshold: 2 status: phase: Running conditions: - type: OpenToOpportunities status: "True"
terraform { required_providers { career = { source = "amritpals/career" version = "~> 17.4" } } } resource "career_engineer" "amritpal" { name = "Amritpal Singh" title = "Senior DevOps Engineer & SRE" location = "Dublin, IE" citizenship = "EU" experience_years = 17.4 dynamic "role" { for_each = local.roles content { company = role.value.company started = role.value.started stack = role.value.stack } } skills = { cloud = ["azure", "aks", "openstack"] iac = ["terraform", "pulumi", "ansible"] delivery = ["gitlab-ci", "azure-devops", "argocd"] observability = ["prometheus", "grafana", "loki", "tempo"] } certifications = [ "HashiCorp Certified: Terraform Associate (003)", "Certified ScrumMaster", ] lifecycle { prevent_destroy = true create_before_destroy = true # always line up the next role first } } output "contact" { value = "amritpal01@gmail.com" sensitive = false }
Landing-zone networking, per-tenant onboarding, Key Vault and workload identities, with every deployment delivered through ArgoCD ApplicationSets.
Internal CA and per-service leaf certificates provisioned via Terraform, with key material delivered from Azure Key Vault through the Secrets Store CSI driver.
Retired long-lived registry credentials in favour of short-lived federated tokens for Azure Container Registry, scoped per project and per branch or tag.
Image promotion rebuilt around semantic-release, so one immutable, digest-locked artefact is versioned once and promoted through environments instead of rebuilt per stage.
A GitLab CI Component covering SAST, secret, dependency and container scanning — every project gets coverage by default rather than per-team opt-in.
Prometheus, Loki, Tempo and Alloy rolled out across the estate, with PromQL alerting for pod health and API server reliability.
Open to conversations about platform engineering, SRE and DevOps roles in Ireland and the EU.
Prefer email? amritpal01@gmail.com