Senior Site Reliability Engineer with 7+ years of experience designing, automating, and securing large‑scale cloud and hybrid infrastructures across AWS, Azure, and on‑premises. Proven track record in cost optimization, service reliability and DevOps enablement, delivering up to 60% cost savings and reducing deployment times by 80%. Skilled in Kubernetes, IaC, observability, and implementing compliance for regulated environments.
Sangi Naveen Kumar
Senior Software Engineer | Site Reliability & Platform Engineering
Skills
Programming
- Go
- Python
- Java
- Bash
Cloud Platforms
- Amazon Web Services (AWS)
- Microsoft Azure
- Google Cloud Platform (GCP)
Containers & Orchestration
- Docker
- Kubernetes
- OpenShift Container Platform (OCP)
- Helm
- EKS Karpenter
- Rook/Ceph
- Longhorn
- Kubespray
Infrastructure as Code (IaC) & Automation
- Terraform
- Packer
- Ansible
- Chef
CI/CD
- GitHub Actions
- Azure DevOps Pipelines
- GitLab CI
- Jenkins
Observability
- Prometheus
- Grafana
- Loki
- CloudWatch
- Fluentd
Data Stores
- PostgreSQL
- TimescaleDB
- MongoDB
- Redis
- SQS
Networking & Security
- nginx
- Kong
- Istio
- Cilium
- Hashicorp Vault
Work Experience (6)
Oct 2025 - Current
Senior Software Engineer
Guidewire Software, Inc.
Guidewire's Cloud Common Services (CCS) is a specialized team and set of infrastructure services within the Guidewire Cloud Platform (GWCP) that builds and manages the core cloud environment and shared components, such as Kubernetes, Docker, and authentication/observability libraries, to provide a seamless, scalable, and cost-effective foundation for Guidewire's insurance applications. The CCS team focuses on developing the underlying cloud technologies and native services that make the GWCP robust, secure, and easy to manage for P&C insurance clients.
Dec 2024 - Sep 2025
Member of Technical Staff 4
Pure Storage
Portworx by Pure Storage is a fully-integrated solution to automate, protect, and unify container data for Kubernetes applications, anywhere. It provides kubernetes storage with full support for backups, disaster recovery, and data security.
- Reduced AWS development cloud expenditure by 60% in 5 months through EKS Karpenter migration, workload optimization, and infrastructure rightsizing.
- Led migration from Kuma to Istio Ambient Mesh, improving performance, observability, and reducing resource utilization.
- Migrated self‑hosted PostgreSQL databases to AWS Aurora, enhancing maintainability, security, and observability.
- Designed reusable Terraform modules, Helm charts, and GitOps pipelines (FluxCD) for 50+ microservices, ensuring consistent, automated multi‑cluster deployments.
- Managed AWS infrastructure (EKS, RDS, S3, VPC, IAM) and developed custom Kubernetes controllers and CRDs to implement OAM specifications.
- Implemented Kubernetes network policies to isolate workloads and enforce least‑privilege access.
- Built Grafana dashboards, CloudWatch alarms, and automated Terrascan policy checks; remediated vulnerabilities in Docker images/EC2 and performed blue‑green RDS upgrades.
- Authored and maintained runbooks/SOPs for production changes and introduced a Change Approval Board (CAB) process to improve governance.
Jul 2022 - Dec 2024
Member of Technical Staff 4
ColorTokens Inc.
ColorTokens Xshield is an enterprise microsegmentation platform that provides zero trust security for applications, workloads, and data across hybrid and multi-cloud environments. It enables organizations to enforce granular security policies, detect threats, and ensure compliance.
- Engineered an in‑house Kubernetes operator for tenancy‑aware routing via Istio, streamlining testing workflows.
- Developed Ansible playbooks for Xshield EMP deployment on VMware and hybrid clouds (Azure, AWS), reducing air‑gapped site deployment time by 75%.
- Migrated a monolithic application from EC2 and AWS Lambda to Azure Kubernetes Service, reducing infrastructure costs by up to 40%.
- Architected a cost‑optimized hybrid CI runner fleet for Azure DevOps using KEDA and Sysbox, reducing VM costs by 30%+.
- Automated VMware OVA and AWS AMI image creation with HashiCorp Packer, cutting on‑prem deployment times by 80%.
- Implemented a DC/DR architecture for multi‑datacenter resiliency, enabling PostgreSQL and Ceph storage replication.
- Managed Ceph clusters to deliver Kubernetes‑native block storage and S3‑compatible object storage.
- Enhanced developer productivity by enabling local provisioning of all microservices on Minikube using Docker and Skaffold.
- Provisioned a single‑node Kubernetes cluster based on DoD‑certified RKE2 for simplified Xshield deployments.
- Hardened Docker images using IronBank and RapidFort base images, achieving Zero CVEs for FedRAMP compliance.
- Built a customizable observability stack with Prometheus, Loki, and Grafana for logging, alerting, and pod autoscaling.
- Applied Infrastructure‑as‑Code best practices across production sites using in‑house Terraform modules.
- Integrated secure secrets and PII management into Kubernetes clusters using HashiCorp Vault and Azure Key Vault.
- Created custom Kong Ingress Controller plugins for authentication, sidecar proxying, and rate limiting.
Jul 2018 - Jun 2022
Senior Software Developer
FounderBlocks (formerly Viper Development GmbH)
FounderBlocks is an accelerator program for digital business models. It provides startups with the necessary tools, development resources, and mentorship to build and scale their businesses effectively.
- Developed CI/CD workflows using GitLab CI to build nix based docker images.
- Actively participated in data recovery, production release monitoring, rollback and debugging services on Kubernetes.
- Designed a reusable filtering architecture in Django to be used across multiple apps.
- Led the wireframing, development, and deployment of cross‑platform mobile applications for iOS and Android, delivering multiple apps to the Apple App Store and Google Play Store in Germany within an average of 5 weeks.
- Developed a real‑time low latency web dashboard to visualize telematics information from IOT sensors. Later, extended the platform to include historical ride quality information, providing users with valuable insights on road conditions based on past data.
- Implemented automated push notifications and in‑app payments support for monthly subscriptions.
Nov 2017 - Jul 2018
Software Developer (Part‑time)
GitMate UG
GitMate is a platform for continuous integration and code review.
- Built integrations with GitHub, GitLab, and Bitbucket for a multilingual static code analysis tool (coala), enabling automated PR checks.
- Developed an extensible Django‑based plugin architecture and an open‑source library for interacting with cloud‑based Git hosting services, supporting easy extension.
- Created a duplicate issue detection plugin using TF‑IDF and similarity scoring.
May 2017 - Jun 2017
Software Engineering Intern
Wipro Business Solutions
Wipro is a leading global information technology, consulting, and business process services company.
- Designed and extended a native Android app to control ONVIF security cameras and rear‑view parking cameras for Android Auto.
Projects (1)
Extending GitMatev2.0 to support GitLab and BitBucket
Mar 2017 - Aug 2017
- GitMate
- IGitt
- BitBucket
- GitLab
A unified web integration to run static code analysis with coala
- Successful completion of all planned goals
- Extending support for GitLab and BitBucket through IGitt APIs with a focus on principle of least privilege
Volunteer
11/1/2017 - 7/31/2018
Maintainer
GitMateIO
Lead Maintainer of the GitMate project, a platform for continuous integration and code review.
1/1/2017 - 7/31/2018
OSS Developer & Maintainer
coala.io
Implemented several plugins for the coala project, a code analysis tool that provides a unified interface for static code analysis tools.
11/1/2016 - Current
Maintainer & Co-Founder
NITDgpOS
Mentored students in open-source development and best practices.
Education (2)
2019 - 2021
M. S.
Computer Science
University of Illinois at Chicago
2014 - 2018
B. Tech.
Computer Science Engineering
National Institute of Technology, Durgapur
Awards
2024
Bravo Award, ColorKudos Spot Awards
Colortokens Inc.
For finding a critical vulnerability in our stack and fixing it immediately. This is an excellent finding that even our external VAPT vendor couldn't identify! You have always gone above & beyond in your role and we are grateful for all your efforts.
2024
Bravo Award, ColorKudos Spot Awards
Colortokens Inc.
For your exceptional effort and commitment towards on-premise solution. You have took full ownership of on-premise solution and have significantly improved it end-to-end. Kudos and keep it up!
2024
The Budding Star, ColorKudos Quarterly Award - Engineering
Colortokens Inc.
Excellent Performance
Certificates
2023-12-01
Certified Kubernetes Application Developer (CKAD)
The Linux Foundation
2024-04-01
Hashicorp Certified: Terraform Associate (003)
Hashicorp
2024-08-01
Cilium Host Firewall
Isovalent
Publications
mEnergy: Development of a Novel mHealth Multi-device Platform for Near Real-time Remote Assessment of Energy Disorders in IEEE Engineering in Medicine and Biology Society (EMBC)
mEnergy is a multi-device mobile health (mHealth) software platform developed to enable near real-time remote monitoring of metabolic health in cancer patients—particularly to facilitate timely interventions during treatment and survivorship.
Languages
English
Fluent
Telugu
Fluent
Hindi
Beginner
Interests
Gaming
- Shooting
- Soulslike
- Racing
Badminton
- Casual
References
“Naveen was one of the top performers at Colortokens. His deep understanding of Kubernetes, Golang, Linux (to name a few) is exceptional, and he consistently demonstrates an ability to solve complex problems with creative and efficient solutions. What sets Naveen apart is not just his technical prowess but his persistence to get to the bottom of very tricky issues has helped our team quite a few times. His commitment to delivering high-quality results and his eagerness to stay ahead of emerging technologies makes him a standout in his field. I highly recommend Naveen for any one looking for technical expertise and leadership.”Subbarao Kesiraju
“Naveen helped us create GitMate.io from scratch and has been developing huge parts of its backend and open source libraries in Python. We especially valued his vision and intrinsic motivation.”Lasse Schuirmann
“I remain constantly impressed by Naveen's ability to quickly grapple with, and command, new technologies and roles with the open source community. He uses what he learns to build tools and systems that empower others, and can collaborate, mentor and communicate effectively.”John Vandenberg
“Naveen is an exceptionally talented developer whose ability to take a project and run with it is incredible. He renders management almost obselete. I have thoroughly enjoyed working with him.”Whitney Tennant