Rohan

Devops Engineer

Genese Solution • Temps plein

Feb 2026 - Present • 9 mos

Designed and deployed a production SMTP email relay service on Amazon ECS Fargate using Haraka SMTP, spanning 2 Availability Zones with a Network Load Balancer handling TCP traffic distribution, achieving high availability across the infrastructure. •​ Engineered an automated TLS certificate lifecycle system using EventBridge Scheduled Rules and a custom TLS Renewal Lambda, reducing manual certificate management overhead to zero and eliminating certificate expiry risks. •​ Built a complete CI/CD pipeline for the SMTP service integrating CodePipeline, CodeBuild, and CodeDeploy automating Docker image builds, ECR pushes, and ECS rolling deployments, cutting deployment time by ~70%. •​ Implemented a secure configuration management pattern using S3 buckets to store environment variables and TLS certificates, with VPC-scoped access policies ensuring secrets never traverse the public internet. •​ Developed a product-level Infrastructure-as-Code (IaC) solution using AWS CloudFormation Nested Stacks covering 15+ services: EC2, API Gateway, Lambda, DynamoDB, RDS, CloudWatch, Auto Scaling Groups, Load Balancers, SNS, SQS, SES, IAM, VPC/networking, and S3 enabling one-command environment provisioning. •​ Designed nested stack architecture with CloudFormation templates stored and versioned in S3, enabling modular, reusable infrastructure components across dev, staging, and production environments. •​ Integrated CloudWatch Logs and dashboards across the ECS Fargate cluster, NLB, and Lambda functions providing end-to-end observability with automated alerts for latency, error rates, and task health. •​ Resolved critical and high-severity Amazon Inspector findings on live ECS Fargate tasks with zero service interruption by leveraging ECS rolling update deployment strategies, ensuring at least one healthy task remained in service throughout each remediation cycle.