Gurugram, IN · open to senior SRE / platform roles · UK & remote, sponsorship
Prateek Rajvats
Platform & Reliability Engineer
I run the observability and reliability platform for 30+ engineering teams across a multi-account AWS org — turning compliance-critical infrastructure into paved roads that are safe by default.
About
Platforms as code, reliability as a habit
Platform engineer with 6+ years across DevOps and platform work, now leading observability and reliability at Safeguard Global for 30+ internal teams on a multi-account AWS organisation that runs payroll and workforce systems under SOC2 and CIS compliance. My work is the boring-in-a-good-way kind: self-service access without long-lived keys, monitors defined as code, supply-chain provenance checked before anything ships, and incidents that page the right team instead of everyone. I care about giving other engineers paved roads — and about the day the auditors show up going quietly.
Experience
Where I've worked
- Lead platform engineering for a multi-account AWS organization (20+ accounts) running globally distributed payroll and workforce systems under strict data-residency and compliance requirements.
- Delivered Safeguard's first compliance-as-code program — SOC2 / CIS hardening as Terraform and IAM policy, enforced via SCPs and permission boundaries; reached SOC2 review with no exceptions in scope.
- Built a centralized, versioned Terraform module ecosystem and a Bitbucket Dynamic Pipelines governance system, cutting release time ~75% and scanning across 30+ teams.
- Migrated 300+ users to AWS Identity Center; built Datadog → OpsGenie incident routing (MTTD ~45%) and a FinOps platform surfacing $150K+ annual savings.
- Promoted to lead container-orchestration on ECS Fargate running 50+ microservices with horizontal autoscaling and cross-AZ fault tolerance.
- Provisioned Terraform-managed AWS environments for 20+ services and immutable deployment pipelines — 95% deployment success, release-cycle time cut ~75%, infrastructure cost down ~30%.
Highlights
Selected work
Self-service role vending
A PR-driven system for cross-account CI credentials: engineers describe the access they need in YAML, Terraform provisions short-lived OIDC roles, and no static keys ever leave the account. Turned a ticket queue into a merge.
Observability & incident flow
Datadog monitors for payroll Lambdas and SQS DLQs defined as code, plus a roadmap to consolidate paging into Datadog Incident Management — signals that page the right team instead of dashboards nobody reads.
SBOM governance programme
Software bill-of-materials generation and policy enforcement across build pipelines with JFrog Xray and CycloneDX, wired in as a custom pipeline step so provenance is checked before anything reaches production.
Compliance-as-code scanning
Checkov-based IaC scanning with findings mapped directly to SOC2 and CIS controls, so security posture is enforced at merge time instead of audited after the fact.
Cross-account event replication
An EventBridge architecture replicating events across AWS accounts with tested bidirectional loop-prevention — the connective tissue for a distributed, multi-account platform.
This page, as infrastructure
One self-contained static file — no build step, no framework. Designed to ship on S3 + CloudFront + ACM + Route 53, Terraform-provisioned, deployed by GitHub Actions via OIDC with no long-lived AWS keys. Practising what the day job preaches.
Skills
Tools of the trade
Cloud & compute
AWS, ECS Fargate, Lambda, Step Functions, EventBridge, SQS, EC2
Infrastructure as code
Terraform, GitOps, Docker, Kubernetes (CKA in progress)
Observability
Datadog, OpenTelemetry, monitor-as-code, incident management
CI/CD
Bitbucket Pipelines, GitHub Actions, OIDC-based delivery
Languages & scripting
Python, Bash, SQL
Security & compliance
SOC2, CIS, SBOM (JFrog Xray / CycloneDX), cross-account IAM, Lake Formation
Contact
Get in touch
Open to senior SRE, platform, and observability roles — UK relocation with sponsorship, or remote. Happy to walk through any of the work above.