Iris Lali

Sr AWS Cloud Engineer

Tata Consultancy Services • Full time

Sep 2021 - Aug 2024 • 2 yrs 11 mos

• Led $2.8 M migration of 400+ VMs to AWS using reusable Terraform modules and Ansible playbooks; achieved <4 hr RTO with multi-AZ ALB/NLB • Supported secure platform operations in compliance-driven environments by implementing automated security controls and vulnerability management practices. • Engineered GitOps pipeline (Jenkins → GitHub Actions → ArgoCD) for EKS clusters, cutting deployment time 62% from 3 days to <1 hour • Implemented GitOps practices using ArgoCD to automate Kubernetes application delivery and configuration synchronization. • Automated rotation of 1,200 IAM access keys via Lambda + Python boto3, eliminating 100 % manual ticketing • Assisted with maintaining secure deployment practices aligned with DoD-style operational and compliance requirements. • Implemented Cosign keyless signing in GitHub Actions CI/CD pipeline to sign all production container images, reducing supply chain risk. • Collaborated with cross-functional engineering and security teams within Agile/DevSecOps environments to deliver secure and reliable platform solutions. • Integrated Amazon Web Services AWS Secrets Manager into CI/CD pipelines to securely store, rotate, and retrieve application secrets, reducing hardcoded credentials exposure and improving DevSecOps compliance across Kubernetes and cloud-native workloads. • Communicated technical findings, deployment strategies, and infrastructure improvements to developers and stakeholders. • Implemented FinOps guardrails (SCPs + Budget alerts) delivering 28 % monthly savings ($42 k/mo) • Built multi-region patch orchestration with SSM Automation; patched 3,000 EC2s in <45-min windows.

DevOps Engineer

Rubicon Talent • Full time

Aug 2021 - Aug 2022 • 1 yr

• Utilized code repositories (GitHub), CI/CD tools (Jenkins) and configuration management tools (Ansible) to automate build and deployment. • Performed system upgrades, patches, and preventive maintenance during approved maintenance windows • Created patch management using Systems Manager automation for multi-region executions. • Monitored Network, CPU, disk, and connectivity with CloudWatch and setup trigger alarm and notify system administrators. • Participated in disaster recovery planning and emergency response exercises • Created and resized partitions, including logical volumes, and swap, formatted with ext4, and ext3. • Create ansible playbook to install Dynatrace, Oracle DB on REHL Servers • Created ansible playbooks to mount EBS file systems and EFS to amazon Linux and SUSE servers. • Created ansible playbooks to configure applications on RHEL servers. • Created ansible playbooks to install binaries • Managed provisioning of AWS infrastructures using Terraform. • Identify and deploy workload security solutions (EC2, Containers, Functions)