I work across AWS, bare metal, and autonomous spoke clusters — designing cluster lifecycle, workload identity, encrypted secrets, and recovery paths for production systems.
Hi, I'm Vamsi — Software Engineer · SRE · CNCF Kubestronaut
I build cloud-native platforms for AI workloads across Kubernetes, GitOps, and secure delivery.
What I work on
The platform work I keep coming back to: clusters, delivery, and trust paths that stay understandable in production.
Platform foundations
Multi-cluster Kubernetes platforms across AWS, bare metal, and non-AWS environments.
Autonomous GitOps
Hub/spoke delivery with automated bootstrap and independently recoverable clusters.
Identity & secure delivery
Workload identity, Private CA trust, and encrypted secret delivery from KMS to ESO.
Work Experience
See all work- Dec 2025 - PresentNava (CTM Labs Private Limited)Software Engineer
Provisioning production-grade bare-metal Kubernetes clusters with iLO, Netplan, SSH hardening, Ansible, Tekton, Kubespray, Helm, and ArgoCD. Designing platform patterns for AI infrastructure across bare metal, VMs, and Kubernetes, including MAAS, Ubuntu Pro, Landscape, Teleport, RKE2, Rancher, and GitOps-based lifecycle management.
- Oct 2023 - Dec 2025Jio Platforms LimitedSoftware Engineer
Built Kubernetes, OpenShift, OpenStack, and KubeVirt platform capabilities for containers, virtual machines, MLOps, storage, and observability. Automated image builds and deployments with Jenkins and ArgoCD, deployed Rook Ceph and NooBaa storage, and built a Golang telemetry API with Prometheus metrics for OpenStack VM dashboards.
Engineering activity
A public signal of ongoing work, experiments, and maintenance.
Latest posts
See all posts- What I Learned Contributing CIS Benchmark Updates to K3sA practical look at investigating a K3s security documentation issue, comparing CIS Kubernetes Benchmark 2.1, and learning the project's required assessment workflow.
- A Certificate Delivery Bridge Between Argo CD and Non-AWS ClustersHow a hub-issued Argo CD Agent certificate crosses an AWS Secrets Manager boundary through ESO PushSecret and ExternalSecret, without giving the non-AWS spoke ACM Private CA access.
- Making a Portfolio Discoverable: OG Images, JSON-LD, and the Canonical Domain TrapA practical writeup of the SEO and metadata work I did on this site — what Open Graph and JSON-LD actually are, how per-post OG images are generated at build time, and the www-vs-apex sitemap bug that quietly breaks indexing.
Recent projects
See all projects- Bare-Metal Kubernetes ProvisioningRepeatable cluster provisioning with iLO, Netplan, Ansible, Tekton, and Kubespray.
- Kubernetes and OpenStack PlatformA highly available Kubernetes platform supporting containers and VM-as-a-Service patterns.
- Cloud-Native Storage and ObservabilityRook Ceph, NooBaa, Prometheus, Grafana, and telemetry APIs for infrastructure visibility.
Spaces
Browse the work by the technical areas it belongs to.
Skills & Technologies
Tools I use to build, operate, and debug infrastructure.
Let's Connect
Reach out if you want to compare notes on Kubernetes platforms, SRE, infrastructure automation, or cloud-native operations.