Hi, I'm Saurav Karki
a DevSecOps & Cloud Engineer.

A DevOps Engineer with 1.5+ years of hands-on experience, consistently delivering high-availability Kubernetes clusters, zero-downtime CI/CD pipelines, and secure SOC infrastructure.

Talk with me Download my cv
Saurav Karki
Discover
About

A DevSecOps engineer dedicated to automated scalability, high-availability cluster resiliency, and zero-trust infrastructure.

With hands-on expertise operating both cloud (AWS, Azure, GCP) and enterprise on-premises Data Centers with hypervisors (Proxmox, VMware), I specialize in building Kubernetes clusters (EKS, RKE2, k3s, k0s) with advanced eBPF Cilium CNI networking and Envoy Gateway ingress controllers.

I have built complete SOC platforms from disaster recovery states, integrated security scanning (SonarQube, Trivy, Falco) directly into self-hosted CI/CD runners, and maintained 99.9% uptime for 30+ microservices.

1.5+ Years Hands-On DevOps Experience
30+ Production Microservices Managed
4+ Published DevOps Technical Articles
Skills & Tools

Core Technical Capabilities

AWS & Multi-Cloud

EC2, EKS, S3, RDS, VPC, IAM, ECS, Azure, GCP

Kubernetes & Cilium

EKS, RKE2, k3s, k0s, Cilium eBPF, Docker Stack, Docker

DevSecOps & Security

Trivy, SonarQube, Checkov, Falco, Linux Hardening, OpenSearch SIEM

IaC & GitOps Automation

Terraform, Ansible, FluxCD, GitHub Actions, GitLab CI Runners

Networking & Proxies

Envoy Gateway, Nginx, MetalLB, Libreswan IPsec VPN, Cloudflare

Observability & Messaging

Prometheus, Grafana, ELK, Loki, PostgreSQL, ScyllaDB, Kafka, NATS

Experience

Professional Work History

Apr 2026 – Present

Vairav Technology Security Pvt. Ltd

DevSecOps Associate
  • Disaster Recovery & Cluster Rebuild: Rebuilt UAT environment from a server failure state by provisioning Debian Linux, initializing a single-node k0s cluster with Cilium eBPF CNI, and restoring critical SOC microservices.
  • SOC Platform Architecture: Deployed and maintained SOC microservices (Correlation Engine, IR, UEBA, SOAR, Threat Intel) backed by Kafka, Centrifugo, Redis, PostgreSQL, Keycloak, and OpenSearch.
  • DevSecOps Pipelines: Integrated self-hosted GitLab Runners with SonarQube static code checks and Trivy container vulnerability auditing.
  • Observability & Exporters: Configured Prometheus, Grafana, Node Exporter, cAdvisor, and MSSQL audit logging for database activity tracking.
Apr 2025 – Apr 2026

Hamro Patro Inc

DevOps Engineer Trainee & Intern
  • 30+ K8s Microservices: Designed and operated HA Kubernetes (RKE2, k3s) supporting 30+ services with zero-downtime rolling updates.
  • Ingress & Messaging: Implemented Envoy Gateway, MetalLB, and NATS SuperClusters for multi-data-center fault tolerance.
  • GitOps & Cloud: Automated Java Micronaut/Spring Boot builds via FluxCD; managed AWS EC2, S3, Proxmox, and Libreswan IPsec VPNs.
Apr 2023 – Aug 2024

Ultrabyte International Pvt. Ltd

Office Assistant / QA
  • Performed functional and regression testing across web CRM and MIS systems, identifying defects and improving software release stability.
Projects & Articles

Published Technical Articles

Core Project

Production-Ready HA Kubernetes Cluster

Designed and deployed a multi-node RKE2 Kubernetes cluster with MetalLB, Envoy Gateway, and Cloudflare integration — enabling zero-downtime deployments, service-level load balancing, and secure, resilient traffic routing for critical applications.

Hashnode

Java Micronaut on K3s: Deployment, Domain & Observability

Containerizing Java Micronaut microservices on lightweight K3s clusters with Prometheus & Grafana telemetry.

Read Article Hashnode

DevOpsifying and Deploying 3-Tier Application into EKS

End-to-end guide on provisioning AWS EKS clusters with Terraform, Helm, RDS PostgreSQL, and Ingress routing.

Read Article Hashnode

Building End-to-End CI/CD Pipeline

Designing automated CI/CD workflows using GitLab CI, SonarQube code checks, and Trivy security scanning.

Read Article Medium

Deploying Serverless Applications with AWS Lambda & API Gateway

Configuring serverless routes, API Gateway endpoints, and IAM security policies for production workloads.

Read Article
Education & Certifications

Credentials & Academic Background

2021 – 2025

Bachelors in Information Technology (BIT)

Amrit Campus — Tribhuvan University (GPA: 3.57)

2024

DevOps Beginners to Advanced with Projects

Udemy Certification (Imran Teli)

Contact

Let's collaborate on your next DevOps project.

Available for DevSecOps, Kubernetes cluster setup, cloud architecture, and CI/CD automation roles.

Email: [email protected]
Phone: +977 9745876588 / 9824386075