Shivank
Kumar

Problem: Frontend build container contained critical vulnerabilities (high-severity CVEs) in base image, failing enterprise compliance standards.

Approach: Migrated base configuration to hardened multi-stage Distroless/Alpine images, configured automated Trivy/SonarQube scans in GitHub Actions, and implemented image signing.

Outcome: Eliminated 100% of critical container vulnerabilities and reduced image size by 45%.

Problem: Production servers encountered database lockouts and connection timeout failures during peak traffic events.

Approach: Configured Prisma connection pooling, optimized indexing on high-frequency tables, and set up Datadog monitoring for lock detection.

Outcome: Reduced query latency by 35% and completely eliminated connection timeouts.

Problem: Staging and production NGINX reverse-proxy nodes were exposed to an active remote code execution zero-day vulnerability (CVE-2026-42945).

Approach: Wrote an Ansible playbook to compile and distribute emergency security patches across all VPC nodes, and configured threat mitigation rules.

Outcome: Successfully patched all 15 nodes in under 2 hours with zero application downtime.

Problem: High release complexity and lack of staging environments slowed down development feedback cycles.

Approach: Deployed 3 microservices on Amazon EKS under a single domain using Ingress, and built branch-based AWS CodeBuild pipelines synced with ArgoCD GitOps.

Outcome: Reduced environment setup time by 65% and cut deployment cycles by 60%.

Problem: Lack of secure host segregation exposed backend services to direct public internet access.

Approach: Architected a custom AWS VPC with isolated subnets, and deployed full-stack containerized applications on ECS Fargate with container delivery via GitHub Actions.

Outcome: Achieved 99.9% container uptime and reduced misconfiguration risks by 60%.