Pranshu Jain

Owned the design and implementation of infrastructure for CARS24s authentication management system, migrating from Okta and Descope to Ory/Hydra with ultra-low latency (2ms) across a hybrid cloud, enabling advanced user analytics and reducing overall operational costs by $120k. Developed a custom egress gateway that optimized cross-cloud communication using GZIP compression, reducing hybrid-cloud networking costs by 65% and improving scalability. Led the migration from ECS to EKS with a custom-built zero-downtime strategy using AWS Load Balancer Controller and CloudMap Controller, saving over 60% in infrastructure cost. Built a resilient, zero-downtime logging and observability platform using WarpStream Kafka, OpenTelemetry, and custom telemetry patterns, enabling enhanced log correlation and tracing across microservices while reducing Datadog ingestion costs by 80% and increasing logging capacity. Developed a CloudMap controller in Python using Boto3 and Kubernetes events with headless services to enable dynamic internal service discovery. Implemented GitHub Actions Runner Controller to use ephemeral runners, reducing compute cost and improving scalability and security of the CI platform. Contributed to internal platform engineering initiatives by standardizing Kubernetes infrastructure using Infrastructure as Code (IaC), improving microservices architecture, high availability, cloud security, observability, and enabling reliable zero-downtime deployments across clusters. Standardized CI/CD by migrating from TeamCity, Jenkins, and GitHub Actions to a centralized GitHub Actions-based pipeline, improving auditability and reducing maintenance overhead. Set up and fine-tuned Karpenter across clusters with cost-optimized provisioning strategies, reducing compute spend. Optimized AWS storage and networking costs by implementing S3 tiering and S3 endpoints to minimize data transfer, and configuring VPC peering and transit gateways, achieving significant bandwidth and storage savings.

Designed multi-cluster and multi-region Kubernetes deployments to enhance high availability and disaster recovery. Utilized Velero for backup and restore strategies, ensuring data resilience and disaster recovery readiness. Integrated Prometheus, Grafana, and CloudWatch for proactive monitoring, alerting, and troubleshooting, reducing incident resolution time by 30%. Strengthened Kubernetes resilience with Istio Service Mesh, implementing retries, circuit breakers, and traffic shifting for high availability. Conducted Chaos Engineering tests using Chaos Monkey to simulate failures, validate system resilience, and enhance Kubernetes fault tolerance. Achieved 99.99% uptime by optimizing scaling, resilience strategies, and automated recovery mechanisms. Developed Python scripts to automate infrastructure provisioning, configuration management, and CI/CD workflows, reducing manual effort and improving efficiency. Automated password rotation, daily backups, and log management using Python and Shell scripts, improving security and data reliability. Implemented ArgoCD for automated Kubernetes deployments using Helm charts, ensuring continuous deployment and maintaining consistency across environments. Created custom Helm charts to standardize Kubernetes resource management and enable scalable, repeatable deployments. Automated infrastructure provisioning, maintenance, and upgrades using Terraform and Ansible, enabling easy migration, seamless scaling, and efficient infrastructure management. Collaborated with cross-functional teams to gather requirements, plan project timelines, and deliver high-quality software solutions within budget constraints.

Integrated ELK stack for centralized logging, enhancing system observability and troubleshooting efficiency. Automated log rotation using Boto3, reducing storage overhead and improving system health. Developed and optimized CI/CD pipelines with Jenkins, GitLab, and GitHub Actions, reducing deployment time by 70% and improving delivery consistency. Deployed and maintained microservices on AWS EKS & ECS Fargate via Helm and Terraform, ensuring 99.9% uptime and seamless scaling. Secured containerized deployments with Cosign for image signing & verification, ensuring integrity and compliance. Developed Python and Shell scripts for automated security audits, compliance checks, and backup processes, improving system resilience and operational efficiency. Enhanced monitoring with Prometheus, Grafana, and CloudWatch, reducing incident response time by 30% and improving system reliability. Strengthened Kubernetes reliability using Istio Service Mesh, implementing advanced traffic control, failure recovery, and security policies. Implemented automated password & certificate rotation using AWS Secrets Manager & HashiCorp Vault, strengthening security and compliance.