Amritpal Singh

Amritpal Singh

Senior DevOps Engineer & SRE

Dublin, Ireland · Irish / EU citizen

Summary

DevOps and platform engineer with 17+ years in software, the last decade focused on cloud infrastructure and delivery automation. I build the paved road — CI/CD platforms, Kubernetes foundations, infrastructure as code and observability — for teams shipping regulated software in payments, banking, healthcare and telecom.

Day to day that means Azure and AKS, Terraform, Helm and ArgoCD, GitLab CI and Azure DevOps, and the security plumbing around them: workload identity federation, mutual TLS, secret management and supply-chain scanning. HashiCorp Certified Terraform Associate and a Certified ScrumMaster, so I tend to end up bridging the platform and the delivery process.

Experience

career/main 9 stages total 17y 4m
DevOps Engineer · Fexcorunning gitlab-ci · terraform · aks · argocd · mtls 9m

– Present · Killorglin, Ireland

  • Built reusable GitLab CI/CD templates spanning Node.js, Gradle, Maven and Clojure, adopted by ten services across four language stacks, standardising build, test and release automation from a single source of truth.
  • Shipped a GitLab CI Component for SAST, secret, dependency and container scanning, giving every project security coverage by default rather than per-team opt-in.
  • Rolled out mutual TLS across seven payment microservices on AKS, provisioning an internal CA and per-service leaf certificates through Terraform, with key material delivered from Azure Key Vault via the Secrets Store CSI driver.
  • Replaced long-lived registry credentials with Entra Workload Identity federation, giving CI keyless, short-lived authentication to Azure Container Registry, scoped per project and per branch or tag.
  • Moved image promotion to build-once-promote-many with semantic-release, so a single immutable, digest-locked artefact is versioned once and promoted through environments rather than rebuilt at each stage.
  • Built the Terraform and GitOps foundation for a multi-tenant AKS platform, covering landing-zone networking, per-tenant onboarding, Key Vault and workload identities, with all deployments delivered through ArgoCD ApplicationSets.
  • Authored production Helm charts from scratch, pinning non-root UIDs, fsGroup and StatefulSet security contexts for PostgreSQL and Keycloak, and wiring JaCoCo, Cobertura and JUnit into merge request coverage diffs.
  • Led observability rollout on AKS with Grafana Cloud, Prometheus, Loki, Tempo and Alloy, defining PromQL alerts for pod health and API server reliability.
Engineer IV, Senior DevOps · ING azure-devops · terraform · ansible · openshift · slo 1y 6m

· Dublin, Ireland

  • Led DevOps initiatives, managing end-to-end CI/CD pipelines in Azure DevOps and automating infrastructure provisioning with Terraform and Ansible across Azure environments.
  • Mentored junior DevOps engineers, defined Infrastructure as Code and CI/CD best practice, and promoted reusable pipeline templates for consistency and scale.
  • Automated build, test and security scans within Azure DevOps pipelines, integrating quality gates and early detection.
  • Developed Ansible-based delivery pipelines for repeatable on-premises deployments.
  • Containerised legacy applications and migrated them to OpenShift.
  • Defined and implemented SLIs/SLOs, and instrumented custom metrics into Grafana dashboards for real-time monitoring.
  • Partnered with SRE leads on observability strategy and deployment practice, contributing to improved uptime and operational efficiency.
DevOps Engineer · Merative (formerly IBM Watson Health) azure · pulumi · jenkins · aks · helm 1y 1m

· Dublin, Ireland

  • Designed and provisioned scalable Azure infrastructure with Terraform and Pulumi for data-centric applications.
  • Built and maintained Jenkins CI/CD pipelines automating application deployments and infrastructure changes across environments.
  • Containerised applications with Docker and orchestrated deployments on AKS using Helm charts.
  • Led data migration from IBM Cloud to Azure, ensuring secure, reliable transfer of large-scale datasets.
  • Ran PoCs on data pipeline and cloud operations tooling to guide architectural decisions.
  • Supported production rollouts hands-on, resolving deployment issues and tuning pipeline performance with development teams.
DevOps Engineer · IBM ibm-cloud · argocd · airflow · artifactory · scanning 1y 1m

· Dublin, Ireland

  • Created and maintained CI/CD pipelines on IBM Cloud and internal frameworks.
  • Ran technical spikes and PoCs on ArgoCD, Apache Airflow and JFrog Artifactory to improve deployment and data pipeline orchestration.
  • Performed container image vulnerability scanning with SecOps-approved tooling, enforcing compliance across the SDLC.
  • Deployed and managed cloud infrastructure with Terraform, standardising and version-controlling environments.
  • Supported production rollouts via Jenkins, ensuring stability, traceability and timely delivery.
Scrum Master & DevOps Engineer · Fiserv scrum · bash · ci-setup · clover-pos 9m

· Nenagh, Ireland

  • Scrum Master for the EMEA product scope of Clover Networks, a cloud-based smart POS platform built in Java and Kotlin.
  • Ran Scrum ceremonies, coached the team and removed impediments while meeting product milestones.
  • Hands-on DevOps work automating developer environments in Bash and setting up the CI environment.
Technical Lead · Wipro (on-site with Ericsson, Ireland) openstack · kubernetes · java · grafana · prometheus 5y 3m

· Bangalore & Ireland

  • DevOps, test and automation engineer on-site with Ericsson, deploying containerised applications on OpenStack and Kubernetes.
  • Built automation tooling in Java and shell scripting for functional, integration, stability, load and performance testing; automated performance KPI measurement, cutting average turnaround time by roughly half.
  • Used Grafana and Prometheus for performance monitoring, and profiled memory in Java applications.
  • Acted as Scrum Master for two teams alongside the individual-contributor work.
Freelance Developer · Upwork php · wordpress · joomla 7m

· Remote

Top Rated freelancer delivering PHP, WordPress and Joomla projects end to end, from client interaction through technical delivery.

Technical Lead, then Senior Software Engineer · Aricent java · osgi · c · etsi-m2m · oma-dm 2y 10m

· India

Feature ownership and team management for M2M and device management modules against ETSI M2M and OMA DM specifications — design through delivery, coding in Java and OSGi, plus C-language work on a proxy module routing WCDMA/LTE traffic.

Senior Project Engineer · Wipro Technologies gsm · atca · solaris · performance-management 4y 10m

· Bangalore, India

Led a team developing and maintaining GSM performance management modules for the Alcatel BSC on an ATCA platform, providing offshore and online support to networks deployed in China, Germany, France and Romania. Solaris and Linux, with functional and regression testing across the PM stack.

Every stage expands — click one for the detail.

Skills

Cloud
Microsoft Azure · Azure Kubernetes Service · Azure Key Vault · Entra Workload Identity · Azure Container Registry · OpenStack · IBM Cloud
Containers & orchestration
Kubernetes · Docker · Helm · OpenShift · ArgoCD · GitOps
Infrastructure as Code
Terraform · Pulumi · Ansible
CI/CD
GitLab CI · Azure DevOps · Jenkins · semantic-release · JFrog Artifactory · Git
Observability
Prometheus · Grafana Cloud · Loki · Tempo · Alloy · Kibana · SLI/SLO design · alerting · incident response
Security
Mutual TLS · internal PKI · Secrets Store CSI driver · SAST · dependency & container scanning · supply-chain hardening
Languages & scripting
Bash · Python · Java · Groovy · YAML
Ways of working
Scrum · SRE practice · error budgets · postmortems · mentoring

Selected work

Multi-tenant AKS platform on Terraform + GitOps

Landing-zone networking, per-tenant onboarding, Key Vault and workload identities, with every deployment delivered through ArgoCD ApplicationSets.

Mutual TLS across seven payment microservices

Internal CA and per-service leaf certificates provisioned via Terraform, with key material delivered from Azure Key Vault through the Secrets Store CSI driver.

Keyless CI with Entra Workload Identity

Retired long-lived registry credentials in favour of short-lived federated tokens for Azure Container Registry, scoped per project and per branch or tag.

Build once, promote many

Image promotion rebuilt around semantic-release, so one immutable, digest-locked artefact is versioned once and promoted through environments instead of rebuilt per stage.

Security scanning by default

A GitLab CI Component covering SAST, secret, dependency and container scanning — every project gets coverage by default rather than per-team opt-in.

Observability on AKS with Grafana Cloud

Prometheus, Loki, Tempo and Alloy rolled out across the estate, with PromQL alerting for pod health and API server reliability.

Certifications & education

Certifications

  • HashiCorp Certified: Terraform Associate (003)
  • Certified ScrumMaster — Scrum Alliance

Education

  • MS, Software Engineering
    Birla Institute of Technology and Science, Pilani · 2008–2011
  • BCA, Computer Applications
    Guru Nanak Dev University · 2004–2007

Get in touch

Open to conversations about platform engineering, SRE and DevOps roles in Ireland and the EU.

Prefer email? amritpal01@gmail.com