Skip to main content
MK
Mohan Kumar BN Platform Engineer · Kubestronaut
CNCF CERTIFIED KUBESTRONAUT · 13+ YEARS EXPERIENCE

Engineering Platforms. Automating Infrastructure. Building Reliability.

Senior Platform Engineer | SRE | Kubernetes & OpenShift | Cloud Infrastructure | GitOps | Platform Automation

Hi, I’m Mohan Kumar BN. I architect and operate enterprise multi-cluster Red Hat OpenShift and Kubernetes platforms, self-service Internal Developer Platforms (Port), declarative GitOps pipelines, and autonomous AI SRE systems across 60+ clusters and 200+ cloud projects.

Explore My Work Download Resume
Verified Profiles: LinkedIn GitHub YouTube (MKBN-Tech) Credly Credentials Direct Email
IDENTITY // MOHAN_KUMAR_BN STATUS: ACTIVE
Mohan Kumar BN — Senior Platform Engineer and CNCF Certified Kubestronaut

Mohan Kumar BN

Senior Platform Engineer @ Henkel · Ex-OpsRamp / HPE

Kubestronaut

5x CNCF K8s

GCP Architect

& Security Eng

AZ-400 / 104

DevOps Expert

LIVE ARCHITECTURE // PLATFORM CONTROL PLANE
SLA 99.9%
60+ CLUSTERS ONLINE// Kubernetes & OpenShift

Converged container and KubeVirt VM workloads hardened with restricted SCCs, OPA Gatekeeper, and dynamic HashiCorp Vault secrets.

Red Hat OpenShift 4OpenShift VirtGKE / AKS / EKSVault + ESO
CONTROL_PLANE_CLI // zsh
$ oc get clusterversion,mcp && kubectl get externalsecrets -A
Scroll to Explore Platform Architecture ↓

13+ Yrs

Engineering Experience

Enterprise Infrastructure, SRE & Platform Engineering

60+

Kubernetes Clusters

Operated across OpenShift, GKE, AKS & EKS

200+

Cloud Projects

Standardized with reusable Terraform & GitOps

99.9%

Production SLA

24/7 high-availability SaaS & enterprise platforms

Kubestronaut

CNCF Accredited

All 5 CNCF K8s Certs + GCP Architect & Security + AZ-400

45K+ Views

MKBN-Tech Community

700+ Subscribers · Hands-on OpenShift & K8s Masterclasses

01 // CAPABILITY ECOSYSTEM

Enterprise Platform Engineering Domains

Production-validated expertise across container platforms, Internal Developer Platforms, declarative GitOps, zero-trust security, and autonomous AI SRE operations.

Interactive Capability Map →
4 Core Technologies Explore →

Container Platforms & Orchestration

Full lifecycle architecture, day-2 operations, zero-downtime upgrades, and multi-tenant governance across 60+ production and non-production Kubernetes and OpenShift clusters.

Red Hat OpenShift Kubernetes (Upstream, RKE2, Kubeadm) OpenShift Virtualization (KubeVirt) Managed Kubernetes (GKE, AKS, EKS) & Rancher
4 Core Technologies Explore →

CI/CD & GitOps Delivery

End-to-end automated software delivery from commit to multi-cluster production using OpenShift GitOps (Argo CD), Tekton, GitLab CI/CD, Helm, and Kustomize.

Argo CD & OpenShift GitOps Tekton (OpenShift Pipelines) GitLab CI/CD, GitHub Actions & Jenkins Helm, Kustomize & Knative Serverless
3 Core Technologies Explore →

Platform Engineering & Autonomous AI Ops

Transforming complex infrastructure into self-service developer experiences via Port IDP and pioneering autonomous in-cluster AI SRE workflows with CrewAI, Ollama, and K8sGPT.

Port Internal Developer Platform (IDP) Autonomous AI SRE Agents (CrewAI, Ollama, K8sGPT) Developer Golden Paths & API Automation
3 Core Technologies Explore →

Security, Secrets & Supply Chain

Defense-in-depth platform security across the 4Cs of Cloud Native—from signed OCI artifacts and admission control to runtime secret injection and CNAPP posture management.

HashiCorp Vault & External Secrets Operator (ESO) OpenShift RBAC, SCCs & Corporate SSO Supply Chain Security (Cosign, OPA, Wiz CNAPP, Harbor)
3 Core Technologies Explore →

Observability, SRE & Disaster Recovery

Sustaining 99.9% production availability through full-stack telemetry, proactive capacity engineering, resilient distributed block/object storage, and verified disaster recovery.

Prometheus, Grafana, Alertmanager & Loki Kubernetes Disaster Recovery (Veeam Kasten) Cloud-Native Storage (Ceph & Longhorn)
3 Core Technologies Explore →

Cloud Infrastructure & Networking

Multi-cloud foundation engineering across 200+ GCP projects, Azure subscriptions, and AWS accounts with enterprise landing zones, IAM governance, and L4/L7 load balancing.

Google Cloud Platform (GCP) & GKE Microsoft Azure & AWS Cloud Architecture HA Load Balancing & Kubernetes Networking (HAProxy, Keepalived, Istio)
02 // ARCHITECTURAL CASE STUDIES

Systems Designed & Problems Solved

In-depth architectural breakdowns of enterprise OpenShift platforms, Port self-service IDPs, serverless GitOps pipelines, zero-trust secrets, and autonomous AI SRE agents.

View All 7 Case Studies →
Enterprise OpenShift Platform Senior Platform Engineer — Architecture & Day-2 Operations Owner

Enterprise Multi-Cluster Red Hat OpenShift & Virtualization Platform

Enterprise application teams were operating across fragmented legacy hypervisors and isolated container clusters, leading to inconsistent security postures, risky maintenance windows during cluster upgrades, and manual day-2 operational toil.

Zero Downtime

Executed production multi-node OpenShift HA control-plane and worker upgrades with zero unscheduled workload outages.

Unified Platform

Consolidated containerized microservices and virtualized legacy workloads onto a single GitOps-managed OpenShift control plane.

Verified DR

Automated backup and disaster recovery readiness across stateful Kubernetes applications and OpenShift Virtualization VMs via Veeam Kasten.

Red Hat OpenShift 4 OpenShift Virtualization (KubeVirt) RHCOS OpenShift GitOps (Argo CD) Veeam Kasten K10 Wiz CNAPP
Read Full Architecture Case Study → GitHub Repo ↗
Internal Developer Platform Senior Platform Engineer — IDP Architect & Automation Lead

Self-Service Internal Developer Platform (IDP) with Port & OpenShift GitOps

Application teams faced multi-day lead times waiting on manual platform-team tickets for namespace provisioning, quota adjustments, RBAC onboarding, and environment creation—creating friction for developers and repetitive toil for platform engineers.

Self-Service

Replaced manual ticket queues for namespace provisioning and application onboarding with automated Port IDP workflows.

100% Auditable

All tenant infrastructure and RBAC changes flow through version-controlled OpenShift GitOps repositories.

Zero Toil

Standardized golden paths eliminated repetitive day-2 platform provisioning tasks and configuration inconsistencies.

Port IDP Red Hat OpenShift OpenShift GitOps (Argo CD) GitLab CI/CD Helm Kustomize
Read Full Architecture Case Study → GitHub Repo ↗
GitOps & Serverless CI/CD Platform Architect & Lead Engineer

Serverless GitOps CI/CD & Ephemeral PR Environments on OpenShift

Shared staging environments suffer from configuration collisions, broken test states, and slow feedback loops when multiple developers test pull requests simultaneously.

Per-PR Previews

Instant isolated Kubernetes preview environments provisioned automatically on Pull Request creation and pruned on merge.

Zero Idle Cost

Serverless Tekton CI pipelines and Knative Serving workloads scale to zero when inactive.

100% Declarative

End-to-end promotion from git commit to SNO staging and HA production managed entirely via GitOps.

OpenShift 4 OpenShift GitOps (Argo CD) OpenShift Pipelines (Tekton) Knative Serverless Kustomize Helm
Read Full Architecture Case Study → GitHub Repo ↗
Security & Supply Chain Senior Platform & Security Engineer

Zero-Trust Secrets Management & Software Supply Chain Security

Hard-coded secrets in CI variables, unsigned container images entering clusters, and fragmented visibility into runtime security posture created critical compliance and supply chain risks.

Zero Hard-Coded Secrets

Eliminated static application credentials across multi-cluster OpenShift and Kubernetes workloads via Vault + ESO.

100% Signed Images

Enforced cryptographic image provenance and CVE gating using Cosign, Trivy, Snyk, and OPA Policy Agent.

Continuous Posture

Integrated Wiz CNAPP and enterprise OAuth/RBAC to close posture gaps proactively.

HashiCorp Vault External Secrets Operator (ESO) Sigstore Cosign OPA Policy Agent Wiz CNAPP Harbor Registry
Read Full Architecture Case Study → GitHub Repo ↗
03 // MKBN-TECH VIDEO KNOWLEDGE HUB

Production Masterclasses on YouTube

Hands-on architecture walkthroughs covering zero-downtime OpenShift HA upgrades, ephemeral Argo CD environments, corporate SSO/RBAC, and AI-driven Kubernetes troubleshooting.

Explore All 28 Videos →
04 // TECHNICAL ENGINEERING JOURNAL

Selected Engineering Guides & Articles

Step-by-step blueprints on bare-metal HA Kubernetes, RKE2 with Ansible, Prometheus/Grafana/Loki observability, and AI-assisted Kubernetes operations.

Read All 13 Articles →
05 // VERIFIED ACCREDITATIONS

CNCF Kubestronaut & Multi-Cloud Certifications

Every credential is independently verifiable on Credly—spanning CNCF Kubernetes (CKA, CKS, CKAD, KCNA, KCSA, PCA), Google Cloud Architect & Security, Microsoft Azure DevOps Expert, and HashiCorp Terraform.

View All 20 Verified Badges →
CNCF Certified Kubestronaut
CNCF · 2025

CNCF Certified Kubestronaut

✓ Verify on Credly ↗
Google Cloud Certified — Professional Cloud Architect
Google Cloud · 2026

Google Cloud Certified — Professional Cloud Architect

✓ Verify on Credly ↗
Google Cloud Certified — Professional Cloud Security Engineer
Google Cloud · 2024

Google Cloud Certified — Professional Cloud Security Engineer

✓ Verify on Credly ↗
CKS: Certified Kubernetes Security Specialist
CNCF · 2024

CKS: Certified Kubernetes Security Specialist

✓ Verify on Credly ↗
CKA: Certified Kubernetes Administrator
CNCF · 2022

CKA: Certified Kubernetes Administrator

✓ Verify on Credly ↗
PCA: Prometheus Certified Associate
CNCF · 2024

PCA: Prometheus Certified Associate

✓ Verify on Credly ↗
06 // ARCHITECTURAL PRINCIPLES

Platform Engineering Philosophy

PRINCIPLE 01

Treat the Platform as a Product

Golden Paths Over Ticket Queues

An Internal Developer Platform succeeds when the most secure, observable, and compliant way to ship software is also the path of least resistance for application engineers.

PRINCIPLE 02

Declarative Convergence & Zero Drift

Git Is the Single Source of Truth

Every cluster configuration, RBAC policy, network boundary, and workload manifest must be versioned, peer-reviewed, and continuously reconciled via GitOps.

PRINCIPLE 03

Shift-Left & Runtime Zero Trust

Identity-Driven Guardrails

Security cannot be a manual gate at the end of a release. Dynamic secrets via Vault/ESO, signed OCI artifacts, SCCs, and OPA admission policies enforce compliance automatically.

PRINCIPLE 04

Design for Graceful Failure

Verified Recovery Over Assumed Uptime

High availability requires proactive soak windows, MachineConfigPool drain safeguards, high-signal SLO alerting, and regularly rehearsed disaster recovery with Kasten and Ceph/Longhorn.

READY FOR ENTERPRISE SCALE

Let’s Architect Resilient Cloud-Native Platforms

Available for Senior / Staff / Principal Platform Engineering, Kubernetes & Red Hat OpenShift Architecture, SRE Leadership, and technical advisory conversations.

Get in Touch → pea.mohan@gmail.com Connect on LinkedIn ↗