•4 min read
Infrastructure as Code: Setting Up EKS and RDS with Terraform in Minutes
iacterraformeks
Hey, I am Saurav Karki
DevOps Engineer | Kubernetes • Docker • Cloud & On-Prem
I am a BIT graduate from the eastern hills of Nepal (Bhojpur) and currently working as a DevOps Engineer Trainee. I started my learning journey with cloud technologies and now work with both on-premise and cloud environments. I have hands-on experience with high-availability cloud-native systems, Kubernetes (RKE2, EKS, K3s, LKE, ECS), networking, CI/CD, automation, observability, and secure server hardening. I began my IT career as a Technical Assistant / QA and later moved into DevOps, where I focus on building scalable, secure infrastructure across cloud and on-prem systems.
Skills & Technologies
DevOpsDockerKubernetesLinuxAWSFluxCDArgoCDPrometheusGrafanaInfluxDBScylladbNginxPostgresqlTerraformJenkinsGithlabCICDNetworkingProxmoxVMwarePython
Featured Projects
View all →Expense Tracker Three Tier
FeaturedA full-stack expense tracking web application built with React, Node.js, and PostgreSQL. Features JWT authentication, expense CRUD operations, dashboard analytics with charts, and CSV export functionality.
reactjsnodejskuberneteseksingress
LifeLedger
FeaturedPersonal Finance & Food Tracking System
nextjstypescriptpostgresqldocker
Experience
DevOps Engineer Trainee
HamroPatro
Full-timeOnsite📍 Kathmandu, Nepal
Apr 2025 - Present
- Managed and secured Linux-based production servers, performing system hardening, patch management, firewall configuration, monitoring, and deep troubleshooting of OS, network, and application-level issues.
- Designed, deployed, and operated high-availability Kubernetes (RKE2) clusters, hosting multiple microservices with rolling updates, zero-downtime deployments, failovermechanisms, and production-grade reliability.
- Implemented service routing, ingress, and load balancing using Envoy Gateway, MetalLB, and Cloudflare, ensuring secure, scalable, and highly available access to services.
- Deployed and operated microservices-based architectures, applying system design and distributed systems principles such as loose coupling, fault tolerance, scalability, and resiliency.
- Built event-driven systems using NATS and Kafka, integrating message-based communication between microservices and enabling asynchronous processing and horizontal scaling.
- Configured NATS clusters and SuperClusters across data centers, supporting multi-DC communication, fault tolerance, and disaster recovery (DR) scenarios.
- Set up and maintained distributed data stores including ScyllaDB (multi-cluster, multi–data center) and PostgreSQL, performing replication experiments, failover testing, and DR drills to validate resilience.
- Worked with Redis and Elasticsearch to support caching, search, analytics, and high-performance data access for microservices-based applications.
- Implemented GitOps workflows using FluxCD, enabling declarative Kubernetes deployments, automated reconciliation, and environment consistency across clusters.
- Built CI/CD pipelines for Java applications (Micronaut, Spring Boot), automating builds, containerization, testing, and deployments to Kubernetes.
- Configured automated Docker image builds using Docker Hub runners, enabling CI-triggered builds, versioned images, and secure image delivery pipelines.
- Deployed comprehensive monitoring and observability stacks including ELK, Prometheus, Grafana, InfluxDB, Uptime Kuma, and Kubernetes Dashboard for metrics, logs, alerting, and real-time visibility.
- Conducted load testing, capacity planning, and fault-injection exercises to evaluate system performance, scalability limits, and failure behavior under stress.
- Implemented site-to-site IPsec VPN tunnels for secure connectivity between local environments and remote data centers.
- Managed virtualization platforms such as Proxmox and VMware, enabling automated VM provisioning, resource optimization, and infrastructure lifecycle management.
- Worked with AWS services, provisioning and managing EC2 instances and S3 buckets for compute and object storage use cases.
- Utilized DigitalOcean Spaces as an S3-compatible object storage solution, integrating it into application storage and backup workflows.
- Collaborated with ML engineering teams to containerize and deploy machine learning models on Kubernetes with autoscaling and production monitoring support.
Technical Assistant/QA
Ultrabyte International Pvt.Ltd
Full-timeOnsite📍 Kathmandu, Nepal
Apr 2023 - Aug 2024
- Managed and automated routine office tasks to make daily operations smoother.
- Tested websites and software to ensure they worked properly (CRM, MIS systems).
- worked closely with different teams to support their day-to-day tasks and improve teamwork.
- Organized and prioritized tasks to help the office run more efficiently
- Resolved technical issues in office systems to minimize disruptions.
- Helped coordinate projects and made sure tasks were completed on time.
- Maintained accurate records and documentation of technical and administrative activities.
