AboutSkillsProjects ArchitectureExperienceContact
AZURE · KUBERNETES · DEVOPS · INFRASTRUCTURE

I build cloud infrastructure that ships, scales and stays reliable.

Azure Cloud Infrastructure & DevOps Engineer focused on Kubernetes, secure networking, CI/CD and production automation — I understand infrastructure from the application layer down.

3+
YRS HANDS-ON
Azure
CLOUD
AKS
KUBERNETES
Jenkins
CI/CD
Python
AUTOMATION
AKSVPN GatewayPrivate Endpoint DockerACRNginxADF
PRODUCTION PLATFORM Healthy
Internet DNS · TLS NGINX / INGRESS AKS CLUSTER api web worker Azure SQL Storage
portfolio architecture simulationregion: sea · env: demo
Engineering Status
Azure
Kubernetes
CI/CD
Infrastructure
Automation
kubectl get pods -A
NAMESTATUS
api-service● Running
web-service● Running
worker-service● Running
PORTFOLIO ARCHITECTURE SIMULATION
Measured impact

Real numbers from shipped work.

Verified outcomes from infrastructure and automation delivered at DSK Tech Wings.

0%
Infrastructure cost reduction
Designed an SFTP solution on a VM that removed a recurring cost line.
0%
VM cost reduction
A data-extraction solution that cut associated compute spend in half.
0
Sites with SSL
Rolled out TLS across 20 sites and standardised certificate handling.
₹0
SSL certificate cost
Eliminated per-certificate spend while keeping every site secured.
About

Infrastructure engineer with an application mindset.

I started with combined software and infrastructure responsibilities and moved steadily toward cloud infrastructure, Kubernetes and DevOps. I like owning a system end to end — building it, wiring the networking, deploying it, and being the person who figures out why it broke at 2am.

Most of my work sits at the boundary between applications and the platform they run on: containerising .NET and Python services, deploying them to AKS with Kubernetes manifests, designing secure Azure networking around them, and automating the path from a Git commit to a running pod.

I'm a Mechanical Engineering graduate who moved into software infrastructure and cloud engineering through hands-on implementation — which means I learn systems by building them, not just reading about them. That habit is why I keep a homelab and treat production troubleshooting as a core skill rather than an afterthought.

RoleCloud Infra & App Engineer
CompanyDSK Tech Wings
Experience3+ years
BaseChennai, India
Open toBlr / Chn / Hybrid / Remote
EducationB.E. Mechanical, Anna Univ.
CertSystem & Network Admin
Engineering journey

From web servers to platform engineering.

2023

Software & Infrastructure Intern

UbuntuApacheMagentoMySQLElasticsearch
2024

Cloud Infrastructure & Application Engineer

AzureWindows ServerIISNginxVPNADF
2025

Kubernetes & DevOps

AKSKubernetesJenkinsDockerCI/CD
2026

Platform / Infrastructure Engineering

CloudKubernetesAutomationNetworkingPrivate AI
Technical map

Tools I reach for, grouped by the job they do.

No progress bars — just the stack I actually work in. Filter by area.

Cloud

AzureAKSAzure VMAzure StorageAzure SQLAzure Data Factory

Networking

VNetVPN GatewayPrivate EndpointDNSNSGTCP/IPSSL/TLS

Kubernetes

KubernetesAKSIngressServicesConfigMapsSecretsPersistent VolumesRolling Updates

CI/CD

JenkinsGitGitHubDockerACRCI/CDRelease Mgmt

Infrastructure

Windows ServerUbuntuIISNginxApacheReverse Proxy

Automation

PythonTask SchedulerADFSFTP

Application

C#ASP.NET MVCPythonJavaScriptSQL ServerMySQLMagentoElasticsearch
Featured work

Systems I've built — not a list of logos.

Each card opens into an engineering case study: the problem, the architecture, and the result.

01

Azure Kubernetes Platform

Built AKS infrastructure from scratch and deployed a multi-service enterprise application on it.

AZUREAKSKUBERNETESDEVOPS
+
Problem

An enterprise application needed a home that could scale its services independently and update without downtime.

Implementation
  • Provisioned the AKS cluster, node pools and namespaces from the ground up.
  • Wrote Kubernetes manifests: Deployments, Services, Ingress, ConfigMaps, Secrets and Persistent Volumes.
  • Deployed containerised .NET and Python services and used rolling updates for zero-downtime releases.
  • Fronted everything with ingress-nginx and TLS for clean external routing.
Result

A cluster where each service scales and ships on its own, with a repeatable manifest-driven deployment model.

Architecture
Internet
   │
  DNS ─ TLS
   │
 Ingress (nginx)
   │
 ┌───────── AKS ─────────┐
 │  Service A            │
 │  Service B            │
 │  Service C            │
 └───────────────────────┘
   │
 Azure SQL / Storage
02

Secure Azure Networking

Designed private, hybrid connectivity so users and services reach Azure data resources safely.

AZURENETWORKINGVPNSECURITY
+
Problem

Data resources shouldn't sit on the public internet, but users and environments still need reliable access to them.

Implementation
  • Designed Point-to-Site and Site-to-Site VPN connectivity into the Azure VNet.
  • Locked data services behind Private Endpoints with private DNS resolution.
  • Segmented subnets and controlled traffic with NSG rules.
  • Validated the full path down to TCP — e.g. app → private endpoint → SQL on 1433.
Result

Private-only data access with a verified route for every consumer, no public exposure.

Architecture
On-Prem / User
     │
 P2S / S2S VPN
     │
 ┌──── Azure VNet ────┐
 │ Application Subnet │
 │ Private Endpoint   │
 │ Data Resources     │
 └────────────────────┘
03

Jenkins → Docker → ACR → AKS CI/CD

An automated pipeline from a GitHub push to a rolling deployment on AKS.

JENKINSGITHUBDOCKERACRAKS
+
Pipeline
GitHub Jenkins Build Test Docker Image ACR AKS Rolling Deploy
Implementation
  • GitHub-triggered Jenkins pipeline that builds and pushes images to Azure Container Registry.
  • Authenticates to Azure and generates kubeconfig dynamically for the target cluster.
  • Applies manifests to AKS with rolling deployments and supports environment promotion (dev → UAT → prod).
Config (redacted)
AZURE_CLIENT_ID=********
AZURE_CLIENT_SECRET=********
ACR_NAME=portfolio-acr
AKS_CLUSTER=portfolio-aks
IMAGE=app:$GIT_SHA
# kubeconfig generated at runtime
# rollout: kubectl rollout status

Credentials shown as placeholders — never committed.

04

Infrastructure Automation & Cost Optimization

Three focused pieces of automation that removed cost and manual work.

PYTHONSFTPADFSSL
+
SFTP Infrastructure

An SFTP solution built on a VM that replaced a costlier transfer path.

Data Extraction Solution

A data-extraction workflow that halved the associated VM compute cost.

SSL Infrastructure

Standardised SSL across 20 sites with zero certificate spend.

Impact
9%
infra cost ↓
50%
VM cost ↓
20
sites w/ SSL
₹0
cert cost
05

Personal AI Infrastructure

A private "AI brain" I run in my homelab to learn emerging tech by building it.

PROXMOXDOCKEROLLAMAQDRANTFASTAPI
+
What it is

A personal, local AI infrastructure project — not a commercial platform. It's how I understand LLM plumbing by running it end to end.

Stack
  • Proxmox host with LXC containers for isolation.
  • Ollama serving local LLMs; OpenWebUI as the client.
  • A FastAPI "Brain API" doing retrieval against a Qdrant vector database.
  • n8n for workflow automation between the pieces.
Memory collections
ProfileProjectTaskDocumentMeetingInfrastructure
Architecture
Laptop / Homelab
      │
   Proxmox
   ├── OpenWebUI
   ├── Ollama
   ├── FastAPI (Brain)
   ├── Qdrant
   └── n8n

User question
   → FastAPI
   → memory retrieval
   → Qdrant
   → LLM
   → response
Infrastructure lab

Click through the architectures I work with.

AKS platform

Traffic enters through DNS and TLS, hits nginx ingress, and fans out to independently scalable services inside the cluster, backed by Azure data services.

DNS · TLS Ingress api web worker Azure SQL Storage

Secure networking

P2S/S2S VPN into the VNet, data locked behind Private Endpoints with private DNS, and NSGs controlling every subnet boundary.

User / On-Prem P2S / S2S VPN Azure VNet Application Subnet · NSG Private Endpoint · DNS Data Resources

CI/CD pipeline

GitHub triggers Jenkins, which builds a Docker image, pushes to ACR, then deploys to AKS with a rolling update using runtime-generated kubeconfig.

GitHub push Jenkins build Docker → ACR AKS rolling deploy

Private AI (homelab)

A local retrieval stack: OpenWebUI talks to a FastAPI brain, which retrieves from Qdrant and calls a local Ollama model — all on Proxmox.

OpenWebUI FastAPI Brain Qdrant Ollama LLM Response

Web infrastructure

Windows and Linux hosting: IIS and Nginx/Apache with reverse proxy, TLS termination, and DNS — the layer where most production incidents actually happen.

DNS · TLS Reverse proxy IIS (Windows) Nginx (Linux) Application
Engineering thinking

How I think about infrastructure.

Tools are the easy part. These are the questions I actually ask.

Reliability

  • Health checks
  • Rolling updates
  • Monitoring
  • Failure troubleshooting

Security

  • Private Endpoints
  • VPN
  • RBAC
  • Secrets · SSL/TLS

Automation

  • Jenkins
  • Python
  • ADF
  • Scheduled workflows

Cost

  • Infra optimization
  • Right-sizing
  • SFTP architecture
  • Cert cost elimination
On call

Production doesn't always behave like the diagram.

Click a scenario to see how I actually work the problem.

K8S

Pod not starting

+
  1. describe pod
  2. check events
  3. read logs
  4. verify configuration
  5. check image / pull
  6. confirm secrets
  7. inspect resource limits
NET

App can't reach private database

+
  1. resolve DNS
  2. trace route
  3. check NSG rules
  4. verify private endpoint
  5. confirm VPN state
  6. test TCP/1433
WEB

502 / 403 from the site

+
  1. check DNS
  2. verify TLS
  3. inspect reverse proxy
  4. test upstream
  5. check IIS / Nginx
  6. read application logs
  7. review firewall
SFTP

Connection reset

+
  1. check network path
  2. verify SSH service
  3. review firewall
  4. read server logs
  5. confirm authentication
  6. check path permissions
Operating philosophy

Build → Automate → Secure → Operate → Optimize

BUILD AUTOMATE SECURE OPERATE OPTIMIZE
Let's talk

Let's build something reliable.

Open to Cloud Infrastructure, DevOps and Platform Engineering roles — happy to walk through any of the architectures above.

Email
dineshvaithesh@outlook.com
Location
Chennai, Tamil Nadu, India
Preferred
Bangalore / Chennai · Hybrid / Remote
LinkedIn
Connect ↗
Available for Cloud / DevOps / Platform Engineering opportunities

Building infrastructure. Automating operations. Solving production problems.

Open to Cloud Infrastructure, DevOps and Platform Engineering opportunities.