Sachin KhamitkarPlatform Engineer (SRE)Riyadh, Saudi Arabia
Platform Engineer & SRE
Platform Engineer and Site Reliability Engineer with 10+ years of experience designing, deploying and operating cloud-native platforms across banking and enterprise environments. Hands-on with Kubernetes, GitOps, CI/CD, Infrastructure as Code, observability and DevSecOps on OCI, GCP and AWS, in highly regulated production systems that follow SAMA requirements.
$ whoami
platform-engineer-sre
$ cat focus.txt
kubernetes OKE, GKE
gitops GitLab CI/CD, Argo CD
iac Terraform
observability Dynatrace, Grafana
security Vault, Teleport, Harbor
$ echo $COMPLIANCE
SAMA
Platform and delivery
Kubernetes, Helm, Docker, Terraform, AWS CDK, Ansible, GitLab CI/CD, Argo CD, Git/GitHub, HashiCorp Vault
Observability
Dynatrace, Grafana (OSS and Cloud), Prometheus, Loki, OpenTelemetry, CloudWatch, ELK/EFK, Fluent Bit
Security
Teleport PAM, Harbor, Sysdig, Vault, RBAC, SSL/TLS, VPN
Languages and data
Python, Bash, YAML, JSON, Java; PostgreSQL, MySQL, MSSQL
Operations
ServiceNow, Jira, Confluence, PagerDuty, ITIL; Linux, Windows Server, macOS
Networking
DNS, HTTP/HTTPS, TCP/IP, FTP/SFTP
Platform Engineer (SRE), Vision Bank
OST project · Nov 2024 to present · Riyadh, KSA
Cloud and infrastructure as code
- Provision and manage multi-cloud infrastructure (OCI and GCP) with Terraform and GitLab CI/CD across DEV, UAT, PROD and DR, enabling scalable, secure and repeatable deployments.
- Act as the bank's infrastructure SME for banking vendors. I lead end-to-end onboarding and environment readiness, automating GitLab repositories, Kubernetes clusters, Argo CD applications, Harbor registries, Privileged Access Management and HashiCorp Vault policies across all environments.
Kubernetes and GitOps
- Implement and operate production-grade CI/CD and GitOps workflows with GitLab CI/CD, Argo CD and Helm, supporting microservices and Kubernetes-based platforms.
- Operate and support production Kubernetes clusters on OKE and GKE.
- Customize and maintain Helm charts for enterprise tooling (Dynatrace, Teleport, Prometheus, ELK Stack) to keep environments consistent.
Security and compliance (SAMA)
- Deliver platforms that meet SAMA regulatory requirements in KSA banking.
- Manage Privileged Access Management with Teleport, enforcing least-privilege access and RBAC policies aligned with SAMA.
- Apply DevSecOps controls across pipelines and platforms: Harbor for image registry security, HashiCorp Vault for secrets management and Sysdig for container security and runtime monitoring.
- Implement SIEM log ingestion with the ELK/EFK stack, forwarding security and system logs through Fluent Bit for centralized monitoring and analysis.
Observability and reliability
- Own enterprise observability, covering monitoring, logging and alerting with Dynatrace, Grafana, Loki, Prometheus and OpenTelemetry for end-to-end visibility and health checks.
- Onboard bank infrastructure, including applications, databases, Linux and Windows VMs, Kubernetes clusters (OKE and GKE) and synthetic monitors, by deploying agents on machines and DaemonSets on clusters.
- Ensure monitoring coverage across Production, DR and pre-production environments.
- Integrate alerting with ServiceNow, Mattermost, webhooks and email for real-time notifications and operational workflows.
- Design dashboards and alerts for uptime, availability and performance. Work with developers, QA and chapter leads on SOPs for alert handling and process automation that reduce MTTR and MTTD.
- Apply SRE principles by defining and tracking SLIs, SLOs and error budgets to improve reliability, availability and performance of critical banking platforms.
Operations and mentoring
- Take part in production support and on-call, run post-mortems, guide RCA and find performance bottlenecks through traces and monitoring.
- Mentor command center and operations teams on observability: custom dashboards, alerts, logs, traces, spans and event mechanisms, and how to interpret key insights.
TerraformArgo CDHelmOKEGKEDynatraceGrafanaLokiPrometheusOpenTelemetryTeleportVaultHarborSysdigELK/EFKServiceNow
Technical Consultant, DevOps, STC Bank (STC Pay)
Seedz Technology · Sep 2023 to Sep 2024 · Riyadh, KSA
- Supported mission-critical banking applications (Temenos T24 and non-T24) on VMware in high-availability production, enhancing STC's co-banking services (STC Bank and STC Pay).
- Operated and improved GitLab CI/CD pipelines for regular releases to pre-production and production.
- Provided L2 and L3 production support, handling incidents, problem management and change requests in line with ITIL.
- Resolved mobile and web application API issues raised through ServiceNow and email, identifying root causes and updating documentation and tickets.
- Monitored applications and infrastructure with Dynatrace, building dashboards and alerts for uptime and performance.
- Took part in incident response, RCA and post-incident reviews to improve operational stability.
- Supported Disaster Recovery drills, ensuring successful failover and stable operation after DR for both T24 and non-T24 applications.
- Handled on-call support, Linux server patching and routine production health checks.
- Worked with development, QA and business teams; performed API testing with Postman and backend analysis with PostgreSQL to speed up resolution.
- Maintained documentation, knowledge bases and ticket updates in ServiceNow.
GitLab CI/CDDynatraceServiceNowVMwareTemenos T24PostgreSQLPostman
DevOps Engineer, Tech9 (Cogitech Solutions)
Sep 2020 to Aug 2023 · Pune, India
- Orchestrated AWS infrastructure provisioning with CDK and automated CI/CD workflows with GitLab, cutting deployment time and improving reliability.
- Containerized Node.js applications with Docker and deployed them on ECS clusters for better scalability.
- Implemented real-time monitoring with AWS CloudWatch and automated security audits with PROWLER to meet compliance best practices.
- Provided L2 support for e-commerce applications on AWS, analyzing logs, resolving production issues and maintaining uptime.
- Automated deployments on Linux servers with shell scripts and managed AWS cost with CloudCheckr.
- Delivered root cause analysis with global teams across NA, EU, Middle East, AU and APAC to improve performance and scalability.
- Supported Tech9 enterprise applications (Stamp-in up, PaperPumpkin, OLO, Score web and Score win), and analyzed application logs and production DB reports with SQL.
- Documented infrastructure, automation scripts and DevOps workflows.
AWS CDKECSDockerGitLabCloudWatchPROWLERCloudCheckrLinuxSQL