Platform engineering, end to end
Senior CaaS/PaaS Platform Engineer specializing in Kubernetes infrastructure, GitOps workflows, and cloud-native tooling for large-scale telecom environments — designing multi-cluster platforms on VMware/vSphere with Juju orchestration, establishing OIDC authentication across distributed clusters, and shipping tools in Go, Python, and Node.js/React that solve real operational pain.
The stack I work in daily
From cluster networking and storage down to the CI pipelines and the code itself.
Orchestration & Kubernetes
Infrastructure & Cloud
CI/CD & GitOps
Identity & Security
Programming
Observability, AI & Tooling
Tools I've built & operate in production
Internal platform products — designed, built, shipped, and run by me.
kubectl why-pending open source
Author & MaintainerA Go kubectl plugin that re-runs the scheduler's filtering logic locally to diagnose unschedulable pods. It calls out the causes bare-metal clusters hit that cloud autoscalers hide: resource fragmentation (capacity exists, but not on any single node), control-plane taints, GPU/extended resource gaps (naming the broken device-plugin link), DRA claims, topology spread skew, anti-affinity exhaustion, nodeSelector mismatches, and unbound PVCs. Read-only, streams the pod list for large clusters, ships prebuilt binaries for macOS/Linux with a Krew manifest.
KubeMomentum
Creator & Lead DeveloperFull-stack Node.js/React application orchestrating namespace migrations between Juju-managed Kubernetes clusters. Integrates Kasten K10 for backup/restore with automatic location profiles and cross-cluster restore, verifies image availability in Harbor before migrating, streams real-time progress over Socket.IO, and onboards migrated apps into ArgoCD afterward. Includes an AI migration advisor (self-hosted Ollama — Mistral/Qwen2) that learns from historical outcomes, plus LDAP auth, AES-256-GCM kubeconfig encryption, audit logging, and pre-flight validation. Shipped as a Helm chart.
RBAC Viewer
Creator & Lead DeveloperGo application built on client-go informers with a WebSocket-driven real-time UI for viewing and managing RBAC resources across 8 Juju clusters. Uses OIDC token passthrough for secure create operations and queries multiple Juju controllers via API to dynamically discover cluster topology and machine IPs.
K8sLogin
Developer & OperatorPython CLI (PyInstaller-compiled) that generates OIDC-based kubeconfigs for every Juju-managed cluster. Discovers available clusters dynamically via python-libjuju and runs across INT and PROD with proxy-aware configuration.
ArgoCD Platform & GitOps Pipeline
Architect & ImplementerStood up ArgoCD on production clusters with LDAP via Dex connector. Built the CI/CD pipeline — Trivy scan → manual approval gate → bootstrap → deploy — with branch protection and scan-on-branch policies. Deployed Harbor via ArgoCD with secret drift management, and designed GitLab Agent integration for in-cluster CI without external network access.
Where I've worked
Five+ years across cloud operations and platform engineering.
DISH Wireless
Mar 2022 — Present · Denver, CO- Manage multi-cluster Kubernetes infrastructure across 10+ Juju-managed clusters spanning multiple controllers and INT/PROD environments.
- Design Gateway API networking with Traefik — TLS termination via AWS Private CA, cross-namespace ReferenceGrants, multi-listener gateways.
- Implemented OIDC authentication (Dex + LDAP) across all platform clusters, enabling self-service kubeconfig generation for development teams — supporting operations spanning 20,000+ clusters.
- Created reproducible OIDC onboarding for Canonical k8s charm clusters (6+ onboarded) with a GitLab CI pipeline applying RBAC via Juju exec — no direct cluster API access needed.
- Automated Kubernetes workflows and monitoring agents with Python and Shell — saving 2,500 vCPUs, 0.88 TB memory, and 16 TB storage in private data centers.
- Operate Harbor registries serving all platform clusters with TLS and cross-cluster image pull auth; run backup/recovery with Kasten K10 and Velero.
- Troubleshoot vSphere CSI storage, CNS volume deregistration, and PVC lifecycle across production; diagnosed kube-proxy CIDR misconfiguration breaking SNAT/NetworkPolicy for the ZTP application suite.
- Maintain 99.9% uptime for highly available platform applications in Linux environments.
State Farm Insurance
Jan 2021 — Mar 2022 · Remote- Managed AWS operations for highly available Linux workloads with S3, Auto Scaling, and Elastic Load Balancing.
- Automated provisioning of DynamoDB tables and Lambda functions integrated with API Gateway and Kinesis using Terraform and CloudFormation.
- Contributed to secure GitLab/Jenkins CI/CD pipelines in Agile/SCRUM with bi-weekly sprints.
- Built CloudWatch and Datadog dashboards for real-time monitoring, log analysis, and cost optimization.
University of Missouri–Kansas City
Aug 2019 — Mar 2021 · Kansas City, MO- Graduate coursework in distributed systems, machine learning, and computer security.
Certifications & Patent
Independently verifiable credentials.
Patent Pending — Primary Inventor
Automated identity & access management orchestration for large-scale Kubernetes fleets · DISH Wireless
Certified Kubernetes Administrator (CKA)
The Linux Foundation · ID LF-j8b19pxjzj
AWS Certified Solutions Architect — Associate
Amazon Web Services · NEL825VLBJQQQ9GK
AWS Certified AI Practitioner
Amazon Web Services
Let's build something reliable
Whether it's Kubernetes platforms, GitOps, identity at scale, or internal developer tooling — I'm always happy to talk shop.
✉️ guntupallysairohith@gmail.com