Prateek Rajvats
Senior Platform Engineer · Cloud Infrastructure & SRE
Gurugram, India ·
parteekrajvats@gmail.com
· +91 99979 94367
prateek.co.uk
· linkedin.com/in/prateekrajvats
· github.com/Prateek-Tyagi
Professional Summary
Platform engineer with 6+ years building and operating secure, multi-account AWS infrastructure for globally distributed production systems. I turn manual, error-prone operations into self-service platforms — governance enforced as code, reliability measured against SLOs, and guardrails that let product teams ship safely without waiting on Platform. Comfortable across IaC, CI/CD, observability, container security, and FinOps.
Experience
Safeguard Global
- Lead platform engineering for a multi-account AWS organization (20+ accounts) running globally distributed payroll and workforce systems under strict data-residency and compliance requirements.
- Delivered Safeguard's first compliance-as-code program — SOC2 / CIS hardening as Terraform and IAM policy, enforced via SCPs, permission boundaries, and mandatory encryption; SOC2 review with no exceptions in scope.
- Built a centralized, versioned Terraform module ecosystem with CI-integrated policy validation, cutting release time ~75% across dev/stage/prod.
- Building a Bitbucket Dynamic Pipelines governance system (Forge app) that injects SonarQube and security controls at runtime — zero per-repo configuration.
- Centralized code-quality and artifact-security scanning across 30+ teams (SonarQube, SBOM, JFrog Xray/Artifactory), reducing vulnerability-triage effort ~60%.
- Built a container-security pipeline with JFrog Xray policy gates that block vulnerable images from production.
- Migrated 300+ users from per-account IAM to AWS Identity Center with custom permission sets.
- Built end-to-end incident routing (Datadog → OpsGenie), reducing MTTD ~45%; instrumented SLOs/SLIs to sustain ~99.7% availability.
- Stood up a FinOps cost-visibility platform with automated tagging and cross-account aggregation — ~30% AWS cost reduction and $150K+ annual savings.
Solytics Partners
- Promoted to lead container orchestration on ECS Fargate for 50+ microservices with horizontal autoscaling and cross-AZ fault tolerance.
- Provisioned Terraform-managed AWS environments for 20+ services with VPC isolation, security-group hardening, and least-privilege IAM.
- Implemented immutable deployment pipelines with canary releases and automated rollback — 95% deployment success, release-cycle time cut ~75%.
- Drove ~30% infrastructure cost reduction via compute rightsizing, reserved-instance procurement, and architectural optimization.
Technical Skills
- Cloud & Governance: AWS (Organizations, Control Tower, SCPs, IAM Identity Center, Lake Formation, VPC, Transit Gateway, EC2, ECS, Lambda, Step Functions, EventBridge, RDS, S3, Athena, Glue)
- IaC & Automation: Terraform (module registries, remote state), CloudFormation, AWS CDK, Ansible, Python (boto3), Bash
- CI/CD: Bitbucket Pipelines, AWS CodePipeline, GitHub Actions, OIDC-based auth
- Containers & Security: Docker, ECS Fargate (primary), Kubernetes / EKS (CKA in progress), JFrog Artifactory & Xray, ECR scanning
- SRE & Observability: SLO/SLI design, error budgets, Datadog (RUM, synthetics, monitors, logging), CloudWatch, OpsGenie
- Compliance & FinOps: SOC2 Type II, CIS Benchmarks, GDPR, KMS, compliance-as-code, cost attribution & tagging, rightsizing, RI planning
Selected Projects
- SarkariPing (active) — Government-job alerts PWA with LLM syllabus parsing, eligibility matching, and a built-in lightweight LMS study plan.
- Earlier engineering — File malware-scanning service; FortiGate VPN deployment on AWS.
Education & Certifications
- B.Tech, Computer Science|Lovely Professional University, Punjab, India · 2016 – 2020
- AWS Certified Solutions Architect – Associate|Amazon Web Services
- Certified Kubernetes Administrator (CKA)|in progress
Key Achievements
- Sustained ~99.7% availability via SLO instrumentation, error budgets, and proactive capacity planning.
- Achieved zero audit exceptions enforcing SOC2/CIS across 20+ AWS accounts through automated controls.
- Surfaced $150K+ in annual cost savings through FinOps practices and automated cost attribution.
- Reduced security-remediation cycles ~60% and MTTD ~45% through automated scanning and incident tooling.
Languages: English (fluent), Hindi (native) · 6+ years in remote-first distributed teams