Platform Engineering
Building Production-Ready GKE Platforms with Terraform
How to move from manually created Kubernetes infrastructure toward reusable, version-controlled platform infrastructure.
12 min read
Platform Engineerbuilding reliable cloud infrastructure for AI & regulated workloads.
Kubernetes · GCP · AWS · Terraform · SRE · AI/ML Platforms
3+ years designing, automating, and operating cloud-native platforms across GCP, AWS, and Snowflake, with a focus on Kubernetes, Terraform, CI/CD, SRE, security, and AI/ML infrastructure.
platform status
$ platform status --summary_
99.9%Platform uptime
70%Faster deployments
~3 minEnvironment setup
8+AI platforms supported
01 / ENGINEERING FOCUS
Core capabilities
// 01
Platform Engineering
Kubernetes platforms, infrastructure automation, multi-environment deployments.
// 02
Cloud Infrastructure
GCP, AWS, Azure, networking, IAM, private infrastructure.
// 03
SRE & Reliability
Observability, autoscaling, zero-downtime deployments, resilience and monitoring.
// 04
Regulated AI Platforms
GxP / 21 CFR Part 11, healthcare AI infrastructure, security and auditability.
06 / TECHNOLOGY
Systems & Tools
CLOUD
GCP·AWS·Snowflake
PLATFORM
Kubernetes·GKE·EKS·Docker·Helm·Kustomize·Skaffold·SPCS
INFRASTRUCTURE
Terraform·VPC Peering·Private DNS·Load Balancing
DELIVERY
GitHub Actions·GitLab CI/CD·Jenkins
SECURITY & RELIABILITY
IAM & RBAC·OIDC Workload Auth·Trivy / Wiz·Cloud Monitoring·Cloud Logging·HPA / PDBs
DATA & AI
PostgreSQL·BigQuery·Redis·Milvus / Qdrant·GCS
03 / FEATURED WORK
Platform engineering & architecture
General Agent Platform
Quantiphi2025 - Present
Enterprise AI platform running distributed services on GKE.
99.9% uptimeZero-downtime deploymentsFaster delivery
Primary Contributions:
- >Platform architecture
- >CI/CD automation
- >Kubernetes infrastructure
- >Security scanning & hardening
GKEGitLab CIQdrantPythonTrivyWiz
Calantic Cloud Platform
Bayer2024 - 2025
Enterprise healthcare AI platform on GCP, migrating legacy architectures to Kubernetes.
Managed distributed GKE infrastructureCloud Functions to K8s migrationStandardized multi-env IaC
Primary Contributions:
- >Multi-environment platform design
- >Legacy architecture migration
- >Centralized observability
- >IAM and RBAC controls
GCPGKETerraformHelmCloud MonitoringKeycloakNessus
Causation Analysis Platform
Quantiphi2026 - Present
Secure, large-scale data analytics and experimentation environments on GCP.
Automated provisioning by 80%Enterprise-grade securityMulti-tenant isolation
Primary Contributions:
- >Private GKE and VPC peering
- >Extensible Terraform modules
- >GPU-enabled sandbox environments
- >Private DNS and firewalls
GCPGKETerraformNetworkingJupyterLab
Financial Variance Platform
Quantiphi2026 - Present
End-to-end deployment solutions hosted entirely within Snowflake using SPCS.
Pioneered SPCS adoptionOptimized compute costsSeamless internal integrations
Primary Contributions:
- >Native app hosting on SPCS
- >Secure ingress and API gateways
- >Compute warehouse management
- >Container lifecycle optimization
SnowflakeSPCSDockerNetworking
Payer Submission & GVD Platform
Insmed2025 - 2025
Platform infrastructure for HEOR and GVD document platforms enabling large-scale data processing.
2x developer velocityLarge-scale data pipelinesStandardized CI/CD
Primary Contributions:
- >Kubernetes-native deployment infrastructure
- >Vector database integration
- >Local development workflows
- >Data platform administration
GCPGKESkaffoldHelmMilvusSnowflake
UFMEA Complaint Analysis
Quantiphi2025 - Present
GxP / 21 CFR Part 11 compliant infrastructure on AWS for regulated healthcare workloads.
Full audit traceabilityAutomated compliance reportingSecure healthcare boundaries
Primary Contributions:
- >Regulated EKS Fargate architecture
- >Part 11 compliant deployment pipelines
- >Change management controls
- >Compliance monitoring and alerting
AWSEKS FargateCloudWatchPostgreSQL
Audit Report Generation
Insmed2025 - 2025
Cloud-native audit report platform on GCP with streamlined developer workflows.
50% faster setupZero-drift deployments
Primary Contributions:
- >GKE workload infrastructure
- >Skaffold-driven developer environments
- >Multi-environment deployment strategies
GCPGKESkaffoldHelmMilvus
User Account Provisioning
Quantiphi2024 - 2024
AWS-based user account provisioning platform for secure enterprise access.
Zero downtimeSecure onboarding
Primary Contributions:
- >Serverless AWS architecture
- >Terraform IaC
- >Cognito RBAC integration
AWSTerraformGitLab CILambdaCognito
02 / ARCHITECTURE
How I Build Platforms
From infrastructure foundation to production AI/ML workloads.
04 / RELIABILITY
Reliability by Design
Building platforms that scale seamlessly and fail gracefully. I implement aggressive automation, rigorous testing, and proactive observability to ensure mission-critical systems stay online.
- Zero-downtime Deployments via rolling updates and blue/green patterns.
- Automated Scaling using Horizontal Pod Autoscalers (HPA) and cluster autoscaling.
- Proactive Protection with Pod Disruption Budgets (PDBs) and resource quotas.
- Unified Observability via centralized logging, metrics, and targeted alert policies.
99.9%
Platform Uptime
70%
Deployment Speedup
~3 min
Environment Provisioning
Automated infrastructure-as-code deployment reduced setup from hours to minutes.
05 / COMPLIANCE
Building for Regulated Environments
Infrastructure patterns designed for strict security boundaries, auditability, and data sovereignty in enterprise organizations.
GxP & 21 CFR Part 11
Designed auditable, secure production systems on AWS EKS and GCP for healthcare workloads.
Controlled Releases
Automated deployment pipelines with integrated Part 11 documentation and strict change management.
Secure Networking
Private GKE clusters, VPC peering, Cloud NAT, and internal load balancing to isolate environments.
IAM & Governance
Enforced enterprise security postures using Workload Identity Federation, RBAC, and automated scanning.
10 / TECHNICAL WRITING
Engineering notes & observations
Cloud Infrastructure
Private GKE Networking: The Problems You Discover After Going Production
A deep dive into private GKE architecture, IP range exhaustion, Cloud NAT, and internal connectivity troubleshooting.
14 min read
Cloud Security
From Long-Lived Credentials to Workload Identity: Building Zero-Trust CI/CD
Why static service account keys are a massive security risk, and how to implement Workload Identity Federation for CI/CD pipelines.
10 min read
07 / EXPERIENCE
Career changelog
Platform Engineer
01/2023 - Present@ Quantiphi
- >Progressed from Platform Engineering Intern to Platform Engineer, designing, deploying, and operating cloud-native infrastructure supporting 6+ enterprise AI/ML platforms across Google Cloud Platform (GCP), AWS, and Snowflake.
- >Built and operated cloud-native platforms across GCP, AWS, and Snowflake supporting AI, healthcare, financial, and analytics workloads
- >Engineered Kubernetes platforms using GKE, EKS, Helm, and Terraform across multiple environments
- >Designed CI/CD automation using GitHub Actions and GitLab CI/CD with integrated security scanning
- >Implemented private cloud networking including VPC peering, private DNS, private clusters, and secure service communication
- >Developed GPU-enabled JupyterLab sandbox environments for experimentation and analytics workloads
- >Implemented observability using Prometheus, Grafana, Cloud Monitoring, Cloud Logging, and CloudWatch
- >Integrated Wiz, Trivy, SonarQube, IAM, and RBAC controls into platform security workflows
- >Developed applications on Snowpark Container Services (SPCS) with ingress, gateways, and internal service networking
- >Supported CI/CD workflow enhancements for cloud deployments and optimized container lifecycle management
Software Engineer Intern
03/2022 - 02/2023@ Advaa Health
- >Developed modern front-end web applications using Angular, TypeScript, and RESTful APIs
- >Integrated automated testing with Jasmine/Karma and CI/CD workflows for frontend releases
- >Improved code quality and reduced regression defects through comprehensive testing
Software Developer Intern
03/2022 - 02/2023@ Cancard Inc.
- >Deployed serverless architectures with AWS Lambda, API Gateway, and DynamoDB
- >Automated infrastructure scaling and monitoring with CloudWatch and Auto Scaling Groups
- >Configured VPC for production-grade reliability and security
UI/UX Designer & Front-End Developer
09/2021 - 03/2022@ Ambitech Healthcare
- >Developed front-end design using HTML, CSS, JavaScript, and Bootstrap for Admin Panel Dashboard
- >Designed user interfaces for Android applications using Figma
08 / CERTIFICATIONS
Verified knowledge
Snowflake SnowPro Core
Snowflake
2024VAL: 2026
AWS Certified Cloud Practitioner
Amazon Web Services
2024VAL: 2027
Google Cloud Certified Associate Cloud Engineer
Google Cloud
2023VAL: 2027
Oracle Cloud Infrastructure Certified Foundations Associate
Oracle
2023EXP: 2025
Oracle Cloud Infrastructure AI Certified Foundations Associate
Oracle
2023EXP: 2025
Microsoft Certified: Azure Fundamentals
Microsoft
2024
GitHub Foundations
GitHub
2024VAL: 2027
09 / RECOGNITIONS
Awards & Open Source
Unsung Hero - Consider It Done
Quantiphi
Recognized for consistently delivering high-impact platform engineering work, driving automation initiatives, and supporting mission-critical DevOps workflows.
Galactic - Consider It Done Award
Quantiphi
Awarded for exceptional ownership and delivery excellence in cloud platform initiatives across multiple enterprise projects.
Blockchain Research Grant
La Trobe University
Received a $100 research grant for work on blockchain-based food supply chain management.
IEEE Conference Publication
ICCCNT - IEEE
Published a research paper titled 'A Block-Chain Based Approach for Food Supply Chain Management'.
Open to Opportunities
I'm currently exploring Senior Platform Engineering and Site Reliability Engineering roles—building resilient, cost-efficient cloud platforms for regulated and AI-driven enterprises.
Platform EngineeringSite Reliability EngineeringKubernetes & IaCRegulated Cloud InfrastructureAI/ML Platforms