Gangesh Baskaran

Cloud Architecture & Infrastructure Engineering CI/CD, Automation & DevOps Maturity Observability, Monitoring & Reliability Engineering Security Engineering & Compliance Performance Optimization & Global Scalability Backup, Disaster Recovery & Governance

• Architected and deployed enterprise-grade AWS infrastructure from scratch, designing secure VPCs, multi-AZ deployments, ALB, ECS, ECR, RDS, S3, IAM, CloudFront, Global Accelerator, CloudWatch, and CloudTrail to support highly available production workloads.
• Designed and implemented containerized microservices architecture on Amazon ECS, integrated with ECR and Application Load Balancer, enabling horizontal auto-scaling based on CPU/memory thresholds and improving system elasticity by 60%.
• Implemented Blue-Green deployment strategy across production environments, achieving zero-downtime releases and reducing deployment-related incidents by 90%.
• Led domain migration from buildingworld.com to buildingworld.ai, including DNS cutover, ACM SSL provisioning, CloudFront configuration, and infrastructure updates with zero service interruption.
• Engineered end-to-end CI/CD pipelines using Git, GitHub, Jenkins, Docker, and SonarQube to automate build, test, code scan, and deployment workflows, reducing release cycle time by 45%.
• Defined and enforced structured Git branching strategy (Development → Staging → Production) to improve code stability and reduce merge conflicts by 30%.
• Automated infrastructure provisioning, environment setup, and deployment processes, eliminating manual intervention and reducing operational overhead by 50%.
• Configured and maintained Datadog production monitoring, enabling real-time alerts via email and mobile notifications, reducing MTTR by 40%.
• Built centralized observability stack using Prometheus, Node Exporter, Loki, and Promtail, improving visibility into system metrics and logs while reducing monitoring tool licensing costs by 40%.
• Implemented CloudWatch metrics, alarms, and CloudTrail auditing to strengthen operational governance and compliance readiness.
• Implemented AWS WAF and Cloudflare security controls to mitigate DDoS, bot attacks, injection threats, and OWASP Top 10 vulnerabilities, significantly strengthening application security posture.
• Hardened NGINX reverse proxy by configuring:
  Content-Security-Policy (CSP)
  X-Frame-Options
  X-Content-Type-Options
  Strict-Transport-Security (HSTS)
  Referrer-Policy→ Reduced XSS, clickjacking, and content-sniffing vulnerabilities by 80%.
• Integrated Google reCAPTCHA, Google authentication tokens, and secure API integrations to strengthen identity and bot protection mechanisms.
• Optimized global content delivery using CloudFront CDN and AWS Global Accelerator, reducing worldwide application latency by 35%.
• Designed cost-efficient architecture leveraging open-source monitoring and scanning tools, achieving 40% infrastructure cost savings without impacting performance or reliability.
• Designed automated backup strategy with scheduled replication to NAS storage, ensuring high availability and disaster recovery readiness with 99.9% data durability.
• Configured Auto Scaling policies, health checks, and failover mechanisms to maintain high system availability and production stability.

• Familiar with Dockerfile to create images within GitLab YAML files, as well as defining how Docker images are built and deployed through GitLab YAML configurations.
• Proficiently to create and manage GitLab CI/CD pipelines, utilizing GitLab YAML files to define the stages and jobs within the pipeline.
• Implemented RMR and DMR concepts to facilitate the execution of two or more repository changes via merge request, and utilized a whitelist mechanism to prevent unauthorized access to a GitLab repository.
• Experience in writing Dockerfile to create Docker images, also using labels to organize and manage Docker images.
• Experience in Dockerfile commands to install and configure software, set environment variables, and expose ports.
• Contributed to various automation using Python and Shell scripting.
• Responsible for troubleshooting, any issues in CI/CD job failures and third-party tool integrations.
• Familiar with source code version controlling tool (GIT), Binary code repository including JFROG Artifactory and CI/CD mechanism of GitLab.
• Responsible for automating and integrating software components related to deployment and delivery.
• Responsible for troubleshooting, any issues in the runner.
• Well known for giving presentations to customers, maintaining proper documentation for all the work and development done.
• Mentoring the team members, training new joiners to align with the project and reviewing the merge requests.
• Renault Nissan Technology & Business Centre India (RNTBCI) is a captive automotive technology and business centre supporting Renault & Nissan globally. RNTBCI was bestowed with ISO 9001:2015 certification in 2019 and ISO/IEC 27001:2013 certification in 2020.