██████╗ ██╗ ██╗██╗██╗ ██╗ █████╗ ██████╗ █████╗ ██████╗
██╔══██╗██║ ██║██║██║ ██║██╔══██╗██╔════╝ ██╔══██╗██╔══██╗
██║ ██║███████║██║██║ ██║███████║██║ ███╗███████║██████╔╝
██║ ██║██╔══██║██║╚██╗ ██╔╝██╔══██║██║ ██║██╔══██║██╔══██╗
██████╔╝██║ ██║██║ ╚████╔╝ ██║ ██║╚██████╔╝██║ ██║██║ ██║
╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═══╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝
$ ssh visitor@github.com/dhivagar29
> negotiating cipher suite .......... TLS 1.3 ✔
> verifying host identity ........... signature valid ✔
> scanning session for anomalies .... clean ✔
> ACCESS GRANTED — entering the secure pipeline.identity:
name: "Dhivagar Kamaraj"
role: "Infrastructure Specialist — DevSecOps"
org: "IBM"
location: "📍 Bengaluru, Karnataka, India"
experience: "10+ years across regulated cloud environments"
domain: "Financial Services | Cloud Security | Platform Engineering"
operating_principles:
- "Shift security left — every commit is a control point"
- "If it isn't codified, it isn't compliant: IaC + policy-as-code"
- "Least privilege by default — IAM is the real perimeter"
- "Pipelines should fail fast on vulnerabilities, not in production"
- "Observability is a security control, not just an SRE tool"
current_focus:
- "Hardened CI/CD: SAST, SCA, secrets scanning, image signing"
- "Zero-trust AWS architectures for customer-facing FinServ workloads"
- "Automated compliance & drift detection in regulated environments"
contact:
linkedin: "linkedin.com/in/dhivagar-kamaraj"
github: "github.com/dhivagar29"
education: "B.E. Computer Science — SRM Valliammai Engineering College, 2013"
philosophy: "Automate everything. Secure by default. Trust nothing, verify all."2014 ─────────────────────────────────────────────────────────────► Present
[M-Square] [Sanmina SCI] [Cognizant] [Infosys] [IBM]
Network Admin Programmer Associate Consultant Infra Spec.
May'14-Apr'16 May'16-Aug'18 Aug'18-Jun'20 Dec'20-Mar'22 Mar'22-Now
│ │ │ │ │
Hardened OS & Multi-cloud Containerized Automated Zero-trust
network admin AWS/GCP/OnPrem CI/CD on K8s secure AWS for UK
foundations + monitoring for healthcare releases for banking at
(HIPAA-bound) Citi (FinServ) Nationwide
◄──────────────────────── SHIFT LEFT ────────────────────────
┌──────────┐ ┌──────────┐ ┌──────────┐ ┌──────────┐ ┌──────────┐
│ CODE │──►│ COMMIT │──►│ BUILD │──►│ DEPLOY │──►│ RUN │
└────┬─────┘ └────┬─────┘ └────┬─────┘ └────┬─────┘ └────┬─────┘
│ │ │ │ │
🔍 IDE lint 🔑 secrets 🧪 SAST + 📜 policy- 📡 runtime
+ threat scanning, SCA, image as-code monitoring,
modeling signed scan & gates, IaC CloudWatch /
commits SBOM drift checks CloudTrail
│ │ │ │ │
└──────────────┴──────► FAIL FAST ◄─────────┴──────────────┘
vulnerabilities stop here, not in prod
|
🔐 Security & Compliance
|
🧪 Pipeline Security Toolchain
|
☁️ Cloud Platforms
|
|
⚙️ CI/CD & DevOps
|
🏗️ Infrastructure as Code
|
🐳 Containers & Orchestration
|
|
💻 Languages & Scripting
|
📡 Detection & Observability
|
🗄️ Databases & SCM
|
Zero-trust AWS infrastructure for one of the UK's largest financial institutions
- 🔐 Enforced least-privilege IAM roles & policies meeting FCA-grade regulatory compliance and protecting sensitive customer data
- 🏗️ Architected scalable, security-hardened AWS solutions for customer-facing workloads
- 🛡️ Embedded security gates into CI/CD — vulnerabilities caught at commit, not in production
- 📊 Real-time threat-aware monitoring with CloudWatch, CloudTrail & Lambda auto-remediation
Securing and accelerating releases for a critical global banking platform
- ⚡ Cut deployment cycle from ~5 days → 2 days without bypassing a single security control
- 🤖 Replaced error-prone manual ops with auditable open-source automation
- 📋 Authored SOPs & runbooks around failure and incident-response scenarios
- 🖥️ Maintained hardened high-availability clustered environments in a regulated FinServ landscape
Compliant CI/CD automation for healthcare cloud infrastructure
- 🔄 Built fully automated Jenkins / GitLab pipelines for HIPAA-sensitive workloads
- 🏗️ Delivered Infrastructure as Code with Terraform, CloudFormation & Ansible — reviewable, auditable, repeatable
- 🐳 Containerized workloads with Docker & Kubernetes on AWS/GCP, managing the full image lifecycle
- 📦 Governed Docker Hub & private registry hygiene — no stale, unscanned images in production
| 🏅 Certification | 🏢 Issuer | 📅 Year |
|---|---|---|
| ☁️ AWS Certified Solutions Architect – Associate | Amazon Web Services | 2019 |
| ☁️ AWS Certified Developer – Associate | Amazon Web Services | 2020 |
| ☁️ AWS Certified Cloud Practitioner | Amazon Web Services | 2019 |
| 🔷 Microsoft Certified: Azure Fundamentals | Microsoft | 2020 |
| 🧠 Microsoft Certified: Azure AI Engineer Associate | Microsoft | 2024 |
| 🤖 Microsoft Certified: Azure AI Fundamentals | Microsoft | 2024 |
| 📊 Microsoft Certified: Azure Data Fundamentals | Microsoft | 2024 |
| 💼 IBM Consulting Way | IBM | 2023 |
| 🏦 IBM Banking Industry Jumpstart | IBM | 2023 |
- ❌ Closed PR #6 in dhivagar29/beagle
🟢 This repo's own pipeline — secured & monitored
|
|
|
┌───────────────────────────────────────────────────────────────────────┐
│ │
│ PLAN ──► CODE ──► BUILD ──► TEST ──► RELEASE ──► DEPLOY ──► RUN │
│ │ │ │ │ │ │ │ │
│ threat secrets SAST DAST signed policy runtime │
│ model scan + SCA + pen artifacts gates defense │
│ │ │ │ │ │ │ │ │
│ └────────┴────────┴────► SEC ◄────────┴───────────┴────────┘ │
│ │ │
│ feedback loops ◄─┘ every stage reports back │
│ │
└───────────────────────────────────────────────────────────────────────┘
$ echo "10+ years of secure cloud infrastructure, one signed commit at a time."
# IBM Infrastructure Specialist | DevSecOps | AWS Certified
# Nationwide · Citi Group · Cigna · Sanmina — regulated, audited, automated 🤝
$ exit 0 # zero vulnerabilities, zero excuses"Shift left. Automate the toil. Sign everything. Trust nothing."
— Dhivagar Kamaraj, DevSecOps · Infrastructure Specialist @ IBM