Mohan Kumar BN

Architecting, operating, and scaling enterprise-grade on-premises Red Hat OpenShift platforms hosting business-critical containerized microservices and virtualized workloads across multiple production and non-production clusters.

• Own full day-2 operations and lifecycle management of multiple Red Hat OpenShift production and non-production clusters—driving capacity planning, zero-downtime HA upgrades, performance tuning, patching, and platform reliability.
• Architected a unified application platform supporting both cloud-native microservices and virtual machine workloads via OpenShift Virtualization, enabling seamless modernization of legacy workloads.
• Built and enhanced an Internal Developer Platform (IDP) using Port, empowering application teams with self-service workflows and golden paths for namespace provisioning, onboarding, and resource governance.
• Engineered Kubernetes-native CI/CD pipelines using GitLab CI/CD and Tekton (OpenShift Pipelines), coupled with declarative continuous delivery via OpenShift GitOps (Argo CD), Helm, and Kustomize to eliminate configuration drift.
• Designed enterprise secrets management and runtime workload identity patterns using HashiCorp Vault and External Secrets Operator (ESO), eliminating hard-coded credentials across all clusters.
• Implemented full-stack observability using Prometheus, Grafana, Alertmanager, and Loki, alongside SRE practices for service health monitoring, post-incident reviews, and proactive bottleneck detection.
• Implemented enterprise backup, restore, and disaster recovery using Veeam Kasten for Kubernetes applications, persistent volumes, and virtualized workloads with regular recovery validation.
• Partnered with security teams to integrate Wiz CNAPP posture management and enforced strict multi-tenant OpenShift security controls including RBAC, Security Context Constraints (SCCs), NetworkPolicies, and resource quotas.

Ensured 24/7 high availability (99.9% SLA) for the OpsRamp SaaS monitoring platform across hybrid cloud and on-premises Kubernetes infrastructure spanning microservices and stateful data clusters.

• Maintained 24/7 high availability of the OpsRamp SaaS observability platform adhering to a strict 99.9% production SLA across a hybrid architecture (70% microservices, 30% monoliths).
• Established a secure software supply chain by signing container images with Cosign, gating cluster deployments via OPA Policy Agent, and scanning images for CVEs using Snyk and Trivy.
• Provisioned managed Kubernetes clusters on Google Kubernetes Engine (GKE) via Terraform and orchestrated multi-environment Helm releases across INT, QA, Dev, UAT, and Production.
• Implemented on-premises cloud-native distributed block storage for Kubernetes stateful workloads using Longhorn.
• Managed mission-critical stateful data infrastructure spanning MySQL databases, Apache Kafka streaming clusters, Apache Cassandra, and ZooKeeper.
• Automated hybrid configuration management using SaltStack and engineered self-healing operational workflows, load testing, and Prometheus/Grafana observability.

Led Cloud and DevOps engineering initiatives across multi-cloud environments (Azure and AWS), driving reusable Terraform Infrastructure as Code, Ansible configuration management, and enterprise observability.

• Provided technical leadership and mentorship to the Cloud and DevOps engineering team, establishing architectural standards for cloud-native delivery and automation.
• Led multi-cloud Infrastructure as Code (IaC) implementation using modular, reusable Terraform blueprints across Microsoft Azure and AWS.
• Automated configuration management and orchestration across Red Hat Enterprise Linux and VMware infrastructure using Ansible.
• Engineered automated CI/CD deployment pipelines with Jenkins integrated with IaC validation frameworks, artifact repositories, and security gates.
• Optimized multi-cloud resource utilization and FinOps efficiency through workload rightsizing, autoscaling, and automated resource scheduling.
• Designed disaster recovery, business continuity, and Prometheus/Grafana observability solutions integrated with incident management workflows.

Managed Linux and Windows Server infrastructure on VMware ESXi, OS hardening, container/build tooling, and enterprise backup/disaster recovery procedures.

• Provisioned, hardened, and maintained Linux distributions and Windows Server instances across VMware ESXi virtualization clusters.
• Configured developer build and container runtime environments including Docker, Docker Compose, Maven, Ant, Gradle, and Java Runtime Environments across Dev, Test, and Prod.
• Implemented and periodically validated virtual machine backup and disaster recovery restoration runbooks.

Delivered server and systems troubleshooting for enterprise and commercial clients across the US and Canada, focusing on RAID storage, migrations, and root-cause log diagnostics.

• Resolved critical server and infrastructure issues including RAID array configuration, storage expansion, OS migrations, and networking diagnostics.
• Performed deep system log analysis to isolate hardware and software root causes under strict response SLAs.

Provided global TAC engineering support for enterprise LAN/WAN, wireless, and routing & switching infrastructure.

• Delivered end-to-end TAC resolution for global enterprise customers across LAN, WAN, Wireless, and Routing & Switching topologies.
• Coordinated with L3/ERT engineering teams to isolate software/hardware defects and authored technical knowledge base documentation.

Managed IT infrastructure incidents, Active Directory administration, VPN connectivity, and Oracle database tooling.

• Managed IT infrastructure incidents within customer SLA targets and supported Oracle 10gR2, TOAD, Active Directory, and VPN client operations.