Krishna Neupane
Senior DevSecOps Engineer · Platform Engineering · Multi-Cloud Architecture · Cloud Security
Kathmandu, Nepal · Remote · flexible hourskrishnaneupane.comlinkedin.com/in/krishna-neupane-50082091github.com/krishna-commitskrishnaneupane.com/contact
Summary
Krishna Neupane is a Senior DevSecOps Engineer and Applied Security Researcher based in Kathmandu, Nepal. He designs, secures, and operates cloud-native platforms across AWS, Google Cloud, Azure, DigitalOcean, and Heroku, with more than nine years in production infrastructure.
Core expertise
Multi-Cloud Architecture · Platform Engineering · DevSecOps · Cloud Security · Kubernetes Administration · Infrastructure as Code · GitOps · Cloud Migration & Modernization · Disaster Recovery · Database Modernization · Observability Engineering · Site Reliability Engineering · Security Automation · Identity & Access Management · Zero Trust · Cloud Governance
Leadership
- Technical direction: Provide technical leadership for multi-cloud platform engineering and DevSecOps across AWS, GCP, DigitalOcean, and enterprise customer environments.
- Standards that scale: Established infrastructure-as-code standards and reusable Terraform and Terragrunt patterns, so environments are consistent across teams and customers.
- Leading adoption: Led GitOps adoption with ArgoCD: delivery model, repository structure, and governance, improving deployment reliability and change management.
- Operational excellence: Set operational standards for monitoring, disaster recovery, backup, security, resilience, and incident response.
- Team leadership: Lead and manage a team of 5–6 engineers: setting priorities, owning delivery from design to production, and building Platform Engineering, GitOps, and SRE practices into how the team works.
- Stakeholder partnership: Work with engineering leadership, security teams, and business stakeholders to turn requirements into secure, scalable platforms.
Experience
Senior DevSecOps Engineer, Parkcity Technologies
May 2024 – Present5–6 engineers led and managed · 10+ Kubernetes clusters · 300+ services in production · 10M+ end users on the platforms we run · 99.99% uptime · $84K+/yr cloud savings for one customer ($19K → $12K/mo) · v1.35 Kubernetes, upgraded from v1.33
- Lead and manage a team of 5–6 engineers, owning priorities, delivery, and quality from design to production.
- Operate 10+ production Kubernetes clusters running 300+ services at 99.99% uptime across AWS, GCP, and DigitalOcean, for customer products with more than 10 million users.
- Lead Kubernetes upgrades and cluster lifecycle management, most recently 1.33 → 1.35, along with database modernization.
- Reduced one customer's monthly cloud spend from $19K+ to $12K (~37%, about $84K a year) through infrastructure right-sizing and optimization.
- Lead GitOps adoption with ArgoCD, improving deployment reliability, change management, and platform governance.
- Drive cloud migrations, including DigitalOcean to Amazon EKS on Bottlerocket with a shared-storage redesign that required no application changes.
- Establish infrastructure-as-code standards and reusable patterns with Terraform, Terragrunt, and CloudFormation.
- Implement Zero Trust networking, secrets management, platform hardening, and security automation with Cloudflare, Vault, IAM, and WAF.
DevSecOps Engineer, BeyondID (Okta Apex Partner)
Dec 2021 – May 20245 environment tiers: dev, QA, UAT, MVP, prod · 4 clouds: AWS, GCP, DigitalOcean, Heroku
- Designed and automated infrastructure provisioning with Terraform and Terragrunt for secure, identity-focused services.
- Ran dev, QA, UAT, MVP, and production environments across AWS, GCP, DigitalOcean, and Heroku, plus Azure on one client project.
- Built and maintained Kubernetes deployment platforms for highly available production workloads.
- Implemented DevSecOps controls: vulnerability management, infrastructure hardening, secrets management, and security automation.
- Contributed to environments aligned with HIPAA, SOC 2, and enterprise governance requirements.
- Developed observability with Prometheus, Grafana, Elasticsearch, Fluentd, Kibana, and Loki.
Software Engineer, DevOps, Software services company
Sep 2020 – Sep 2021- Built and maintained Kubernetes-based application platforms and containerized deployment environments.
- Managed CI/CD pipelines with Jenkins, Docker, and Bitbucket, and integrated code-quality controls into delivery.
- Managed backup, restoration, and disaster recovery for Kubernetes environments.
- Administered VMware infrastructure and Linux production systems; monitoring with Nagios and Zabbix.
System Engineer, Nationwide internet service provider
Jul 2017 – Aug 2020- Administered AWS services (ECS, EKS, Route 53, Auto Scaling, load balancers), Linux systems, and production infrastructure.
- Implemented CI/CD automation and infrastructure deployment workflows.
- Configured VPNs, firewalls, routers, switches, and network security controls.
- Built automation in Python and Bash; ran monitoring with Nagios, Cacti, and Zabbix.
Technical skills
- Cloud platforms
- AWS, Microsoft Azure, Google Cloud, DigitalOcean, Heroku
- Containers & orchestration
- Kubernetes (EKS, AKS, GKE), Docker, Helm, ECS
- GitOps & platform
- ArgoCD, GitOps, Helm, Kubernetes platform operations
- Infrastructure as code
- Terraform, Terragrunt, AWS CloudFormation
- CI/CD & automation
- GitHub Actions, GitLab CI/CD, Jenkins, Bitbucket Pipelines, AWS CodeBuild, AWS CodePipeline
- Security & DevSecOps
- HashiCorp Vault, Cloudflare, 1Password, SonarQube, SonarCloud, OWASP ZAP, Nessus, Burp Suite, WAF, IAM
- Observability
- Prometheus, Grafana, Loki, Datadog, Signoz, Elasticsearch, Fluentd, Fluent Bit, Kibana, Alertmanager, CloudWatch
- Databases
- MySQL, PostgreSQL, MongoDB, DynamoDB, Amazon RDS
- Messaging & streaming
- Kafka, RabbitMQ, Redis, Valkey, AWS SQS
- Serverless
- AWS Lambda, EventBridge, Step Functions, SNS, DynamoDB Streams
- Programming & scripting
- Python, Bash
- Networking
- Load balancers, VPN, Firewalls, WAF, DNS, Routing & switching, SSL/TLS
- Collaboration & agile
- Jira, Confluence, Slack, Microsoft Teams, Scrum, Kanban
Education
- MSc Information Technology and Applied Security, London Metropolitan UniversitySep 2023
Delivered through Islington College · Research: Continuous Automation with DevOps Practices for Threat Detection
- BSc Computer Networking and IT Security, London Metropolitan UniversitySep 2018
Delivered through Islington College · Research: Wireless Hotspot: Current and Future Challenges
Courses & certifications
- Okta Certified Professional · Okta
- OCNA Wireless · Feb 2025
- AWS Security Incident Response: Cryptomining Use Cases · Amazon Web Services, Feb 2025
- AWS Knowledge: Architecting · AWS Training and Certification, Nov 2024
- Foundations of Cybersecurity · Jun 2024
- AWS Cloud Practitioner Essentials · Amazon Web Services, Jan 2024
- ISC2 Candidate · ISC2, Jan 2024
- Google Cloud Fundamentals: Core Infrastructure · Coursera
- AWS Fundamentals: Going Cloud-Native · Coursera
- Networking in Google Cloud: Defining and Implementing Networks · Coursera
Languages
English · Nepali · Hindi