I run AWS at scale, and make it cheaper to run.

Cloud and platform engineer in Toronto. Seven years across Amazon, Nokia and Assent, keeping dozens of AWS accounts consistent, secure and codified in Terraform.

$60K
annual savings
8 accounts scheduled
PilotRolled outAlways-on
One Terraform scheduler for EC2, ECS and RDS, scaled from 8 to 50+ of 65 AWS accounts with Lambda and GitHub Actions.
7+ yearsin cloud, DevOps and networking
65+AWS accounts managed
$400K+annual infrastructure savings
20+production Terraform modules

Selected work

$60K → $400Kannual savings

Scaling a cost scheduler across the AWS organization

Non-production EC2, ECS and RDS ran around the clock across dozens of accounts. I took a scheduler that covered 8 accounts and rebuilt it as a reusable Terraform module, with Lambda doing the start/stop work and GitHub Actions rolling it out account by account. It now covers 50+ accounts.

I've rebuilt the pattern from scratch as an open-source module: terraform-aws-resource-scheduler.

Terraform, AWS Lambda, GitHub Actions, EC2, ECS, RDS
Up to 70%lower compute cost

Hybrid Fargate Spot service for Tableau Bridge

Designed an ECS module that mixes Fargate Spot and On-Demand capacity, with memory-based auto-scaling and custom Docker images for PostgreSQL compatibility, so the service stays available while most of it runs on Spot pricing.

Amazon ECS, Fargate Spot, Docker, Terraform
Hundredsof resources brought under IaC

Importing legacy infrastructure into Terraform

Wrote Python automation to import hand-built AWS resources across 30+ accounts into Terraform state, recovered a lost Azure state file, and moved PagerDuty alerting and on-call configuration into Terraform so monitoring follows the same review process as infrastructure.

Terraform, Python, AWS, Azure, PagerDuty
50% fasterclient onboarding

Multi-account provisioning at Amazon

Automated account provisioning for enterprise customers with Control Tower and Account Factory for Terraform, so governance guardrails apply the same way every time. Handled 2–4 SEV-1/SEV-2 escalations a week on Control Tower, landing zones and Service Control Policies for organizations of 100+ accounts.

AWS Control Tower, AFT, CloudFormation, CDK, Service Catalog
$140Krenewal unblocked

Enterprise SSO when the owner left

Took over client SSO integrations after a key departure and resolved AD FS and SAML failures for enterprise customers including Amazon, Boston Scientific and Cardinal Health.

SAML, AD FS, Okta, IAM Identity Center
Agenticinfrastructure workflows

A CloudOps AI framework

Building an internal framework of agent definitions, prompts and per-repository configuration, so engineers can start a coding agent that already knows each infrastructure repo's structure and rules. Connected to AWS, GitHub and Atlassian through MCP for resource imports, PR review and Jira triage.

GitHub Copilot agent mode, MCP, Claude, Terraform

Experience

  1. May 2024 – present, Toronto

    Cloud Operations Specialist at Assent

    • Own Terraform modules, network architecture and IAM permission sets across 65+ AWS accounts.
    • Built GitHub Actions pipelines for plan/apply, drift detection with Slack alerts, linting and releases.
    • Rolled out Trend Micro Vision One file security across 20+ AWS environments.
    • Run quarterly patching for NA and EU production and automate weekly releases with Jenkins.
    • Mentor new engineers on Terraform, Ansible, GitHub Actions and SSO.
  2. Sep 2022 – May 2024, Toronto

    Cloud DevOps Engineer at Amazon

    • Enterprise DevOps support on CloudFormation, Control Tower, Service Catalog and CDK, with 97% CSAT.
    • Delivered 5+ technical workshops on running large AWS environments.
    • Quality Champion: reviewed support cases and contributed to AWS documentation.
  3. Aug 2020 – Sep 2022, Ottawa

    Cloud Network Engineer, SD-WAN at Nokia

    • 24/7 support for SD-WAN across AWS, Azure and on-premises, with 95% CSAT and 99% SLA compliance.
    • Led outage calls with 5–6 vendors and ISPs; recognized for keeping the Philippines' national elections connected.
    • Cut lab setup time by 75% with Ansible and Bash.
  4. Dec 2017 – Aug 2018, India

    Programmer Analyst at Cognizant

    • Led 5 developers building an Alexa skill on Node.js, Lambda, S3 and DynamoDB.

The homelab

At home I run the same kind of infrastructure I run at work, on a smaller budget. It's where I try things before I'd suggest them to a team.

Traffic comes in over a fibre PPPoE link to an OPNsense firewall, which also issues a wildcard TLS certificate through ACME DNS-01 using a CNAME alias. A managed switch trunks separate VLANs for wired and wireless devices. Services run as LXC containers on Proxmox behind Nginx Proxy Manager, with Authelia adding two-factor sign-in and Pi-hole providing split-horizon DNS. Remote access is over WireGuard.

Most of what I've learned came from breaking it: a corrupted ACME token, an ISP migration from DHCP to PPPoE, a failed boot SSD. Each fix ends up written down.

Toolkit

AWS

EC2, ECS, RDS, Lambda, S3, VPC, IAM, Control Tower, CloudFormation, CloudWatch, SNS, Secrets Manager. Some Azure.

Infrastructure as code

Terraform, CloudFormation, AWS CDK, Ansible.

CI/CD

GitHub Actions, Jenkins, CodePipeline, CodeBuild.

Containers

Docker, ECS on Fargate and EC2, Kubernetes (CKA in progress).

Observability and security

CloudWatch, Elasticsearch, Kibana, New Relic, PagerDuty, Wiz, Trend Micro.

Identity

SAML, SSO, AD FS, Okta, IAM Identity Center.

Code

Python, Bash, PowerShell, TypeScript, Node.js.

AI-assisted engineering

Copilot agent mode and CLI, MCP servers, Claude for architecture and implementation.

Networking

SD-WAN, VPC design, VLANs, firewalls, DNS, TLS, WireGuard.

Certifications

  • AWS Solutions Architect – AssociateSAA-C03
  • AWS Cloud PractitionerCLF-C02
  • Certified Kubernetes AdministratorIn progress

Education

  • Master of Engineering, Electrical and Computer EngineeringUniversity of Ottawa, 2018–2020
  • Bachelor of Engineering, Electronics and CommunicationRajiv Gandhi Technical University, 2013–2017

Hiring for senior cloud, platform or SRE roles?

I'm open to senior positions in Toronto, the GTA or remote in Canada. Email is the fastest way to reach me.

Code: github.com/Yatharth121