Skip to content
View kpstack's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report kpstack

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kpstack/README.md
Karan Parmar β€” Cloud, Platform and DevSecOps Engineering

Cloud Infrastructure Β· Kubernetes Β· Platform Engineering Β· DevSecOps

Designing reliable platforms. Automating the complex. Securing delivery.

GitHub LinkedIn Email


πŸ‘‹ About Me

I'm Karan Parmar, a Cloud and DevSecOps Engineer with 5.5+ years of experience building, automating, securing, and operating cloud infrastructure and delivery platforms.

My work focuses on cloud engineering, Kubernetes, infrastructure automation, CI/CD, GitOps, DevSecOps, observability, and production reliability. I enjoy transforming repetitive operational tasks into dependable automation, improving software delivery workflows, and making infrastructure easier to manage, secure, and maintain.

I have hands-on experience across Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), and Google Cloud Platform (GCP). My engineering approach emphasizes infrastructure as code, secure delivery pipelines, actionable monitoring, systematic troubleshooting, and continuous improvement.

I believe good platform engineering should make the secure and reliable path the easiest path for developers.

🧭 Engineering Focus

Domain Expertise
☁️ Cloud Infrastructure OCI, AWS, GCP, compute, storage, IAM, cloud networking, routing, and security controls
☸️ Kubernetes & Containers Oracle Kubernetes Engine (OKE), Google Kubernetes Engine (GKE), Docker, Helm, deployments, and troubleshooting
πŸ—οΈ Infrastructure as Code Terraform, version-controlled infrastructure, repeatable provisioning, and configuration management
πŸ”„ CI/CD & GitOps GitHub Actions, Jenkins, GitLab CI/CD, Argo CD, Helm, and automated release workflows
πŸ” DevSecOps SonarQube, OWASP ZAP, Checkov, tfsec, Trivy, and security testing integrated into delivery pipelines
πŸ“Š Observability & Reliability Prometheus, Grafana, Alertmanager, Nagios, ELK, metrics, dashboards, and alerting
🐍 Automation & Scripting Python, Bash, PowerShell, and Groovy
πŸ—„οΈ Database & Enterprise Systems PostgreSQL high availability and disaster recovery, database release automation, and Oracle E-Business Suite operations

πŸ› οΈ Technology Stack

Cloud Platforms

Oracle Cloud Infrastructure AWS Google Cloud

Kubernetes & Infrastructure

Kubernetes Docker Terraform Helm Ansible

CI/CD & GitOps

GitHub Actions Jenkins GitLab CI/CD Argo CD

DevSecOps & Security

SonarQube OWASP ZAP Trivy

  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Infrastructure-as-Code security scanning
  • Container image vulnerability scanning
  • IAM, access controls, and secure CI/CD practices

Monitoring & Observability

Prometheus Grafana Elastic Stack

  • Prometheus metrics collection and Pushgateway
  • Grafana dashboards and infrastructure visibility
  • Alertmanager alerting workflows
  • Nagios monitoring
  • ELK-based logging and troubleshooting
  • Production health monitoring and operational diagnostics

Programming & Systems

Python Bash PowerShell Linux Git PostgreSQL

Languages and scripting: Python, Bash, PowerShell, Groovy

Systems and tools: Linux, Git, PostgreSQL, Oracle Database


βš™οΈ Selected Engineering Work

πŸš€ Ephemeral CI/CD Runner Automation

Built dynamic, ephemeral GitHub Actions self-hosted runners using Docker and Python. Runners are provisioned on demand and removed after jobs, reducing dependence on persistent runner capacity.

☁️ Cloud Infrastructure & Kubernetes

Designed and managed OCI infrastructure components, including compute, networking, storage, IAM, subnets, routing, and workload security controls. Worked with Kubernetes, Terraform, Docker, and Helm-based delivery.

πŸ”„ Deployment & Release Automation

Automated application deployments using Ansible and moved database release activities into version-controlled GitHub Actions workflows. Worked across GitHub Actions, Jenkins, and GitLab CI/CD tooling.

πŸ“Š Monitoring & Operational Visibility

Worked with Prometheus, Grafana, Alertmanager, Nagios, and Prometheus Pushgateway to improve infrastructure visibility, alerting, and production troubleshooting.

⏱️ Enterprise Automation

Automated Oracle E-Business Suite cloning workflows using Python and Bash, reducing execution time from approximately 15 hours to 5.5 hours.

πŸ—„οΈ Database Reliability

Contributed to PostgreSQL high-availability and disaster-recovery architecture, alongside database operations and release automation.


πŸ” My Engineering Principles

  • Automation first: Reduce repetitive manual tasks and improve operational consistency.
  • Infrastructure as code: Make infrastructure changes reviewable, repeatable, and maintainable.
  • Security by design: Integrate security checks into the software delivery lifecycle.
  • Reliability through observability: Use meaningful metrics, dashboards, and actionable alerts.
  • Least privilege: Apply appropriate access controls and minimize credential exposure.
  • Continuous improvement: Learn from operational issues and improve processes, tooling, and documentation.

πŸ“œ Certifications

  • AWS Certified Solutions Architect – Associate
  • Oracle Cloud Infrastructure certifications

🌱 Areas of Interest

  • Platform engineering and internal developer platforms
  • Kubernetes automation and cloud-native infrastructure
  • Advanced Terraform and GitOps workflows
  • DevSecOps and software supply-chain security
  • Site Reliability Engineering (SRE) and observability
  • Developer productivity and self-service automation
  • Practical open-source infrastructure tools

🀝 Let's Connect

I'm interested in connecting with cloud engineers, DevOps professionals, platform engineers, SREs, and open-source contributors who enjoy solving real engineering problems.

Build thoughtfully. Automate relentlessly. Operate reliably.

Popular repositories Loading

  1. Container-Image-Vulnerability---DataDog-Dashboard Container-Image-Vulnerability---DataDog-Dashboard Public

    Dashboard for Container image Vulnerability

  2. Myself Myself Public

  3. kpstack kpstack Public