Skip to content
View harshit3355's full-sized avatar
🎯
Focusing
🎯
Focusing
2 followers · 5 following

Achievements

Achievement: YOLOAchievement: Pull SharkAchievement: Quickdraw

Achievements

Achievement: YOLOAchievement: Pull SharkAchievement: Quickdraw

Block or report harshit3355

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
harshit3355/README.md

Harshit Nagila

DevOps & Cloud Infrastructure Engineer — DevSecOps · Azure · AWS · Terraform

I build secure, production-grade cloud infrastructure. For the past two years I have owned the Terraform, DevSecOps and observability foundations behind ciATHENA, an agentic AI analytics platform serving life-sciences clients — three isolated Azure environments on Container Apps plus an independent AWS production stack on ECS Fargate.

Most of my day-to-day work lives in private repositories. What is here are the reference builds: complete, documented infrastructure I use to work out a pattern before it goes anywhere near production.

📍 Gurugram, India · 🔗 Portfolio · LinkedIn · ✉️ harshitnagila3355@gmail.com

What I work on

  • Multi-cloud infrastructure as code — reusable Terraform modules provisioning 85+ resources per environment with isolated state, making a new client environment reproducible instead of hand-built.
  • DevSecOps pipelines — GitHub Actions gating every pull request on Gitleaks, Bandit and Flake8 SAST, Safety CVE checks, SonarQube quality gates and Trivy image scans at zero-critical thresholds.
  • Supply chain hardening — GitHub OIDC role assumption replacing static cloud keys, per-environment scoped secrets, BuildKit-injected secrets that never persist in image layers, SHA-pinned actions.
  • Observability — centralised across Azure Managed Grafana, Log Analytics, CloudWatch and CloudTrail.

Selected work

Project What it is
aws-ecs-platform-blueprint Terraform + ECS Fargate platform: 3-tier VPC, RDS PostgreSQL, gated GitHub Actions delivery pipeline, Prometheus/Grafana and CloudWatch observability
aws-ecs-terraform Internet → ALB → ECS Fargate → RDS stack, plus a local Postgres environment with migrations, seed data, an indexed reporting query, and backup/restore scripts that verify their own work
ansible-linux-lab Disciplined Ansible: inventory as code, reusable role defaults, idempotent tasks, validated handlers, staged rollouts, post-deployment health checks
wisecow-kubernetes-tls Containerising a non-cloud-native Bash service and running it properly on Kubernetes behind NGINX Ingress with cert-manager TLS
flask-counter-ecr-pipeline The full path from source to a resource-capped, registry-hosted container — Docker, SonarQube, GitHub Actions to Amazon ECR
selfhosting-reference-library Deployable Compose stacks, Ansible playbooks and reverse-proxy configs for ~90 self-hosted services

Tech

Cloud — Azure (Container Apps, Front Door, VNets, Private Endpoints, Azure OpenAI, Cosmos DB) · AWS (ECS Fargate, ECR, EC2, VPC, CloudFront, PrivateLink, DynamoDB, Aurora, Bedrock)

Infrastructure as Code — Terraform (modular, multi-environment) · Ansible · SaltStack · Docker · EKS

CI/CD & GitOps — GitHub Actions · GitLab CI · Jenkins · CircleCI · Argo CD · GitHub OIDC

DevSecOps — SonarQube · Trivy · Gitleaks · Bandit · Flake8 · Safety · Snyk

Security & Compliance — Azure HIPAA Policy Pack · AWS Conformance Packs · WAF · Zero Trust networking

Observability — Prometheus · Grafana · Datadog · Splunk · ELK · Azure Managed Grafana · Log Analytics · CloudWatch · CloudTrail

Data — Snowflake · PostgreSQL · Cosmos DB · Redis · Azure SQL

Languages — Python · Bash · JavaScript · SQL

Certifications

HashiCorp Terraform Associate (004) · Microsoft Azure Fundamentals (AZ-900) · AWS Certified Cloud Practitioner · Google Cloud Cybersecurity Professional · Oracle Cloud Infrastructure Foundations · IBM DevOps for Enterprise Agility

MCA, Manipal University Jaipur · Former GDSC Cloud Lead — taught cloud technologies to 500+ students through hands-on workshops.

Pinned Loading

  1. flask-counter-ecr-pipeline flask-counter-ecr-pipeline Public

    Flask counter service with volume-backed state, CPU/memory-capped Compose deployment, SonarQube analysis, and GitHub Actions publishing to Amazon ECR.

    Python 2

  2. ansible-linux-lab ansible-linux-lab Public

    Disciplined Ansible automation reference: inventory as code, reusable role defaults, idempotent tasks, validated handlers, staged rollouts, and post-deployment health checks.

    Jinja

  3. aws-ecs-platform-blueprint aws-ecs-platform-blueprint Public

    Terraform + ECS Fargate platform on AWS: 3-tier VPC, RDS PostgreSQL, gated GitHub Actions delivery pipeline, and Prometheus/Grafana + CloudWatch observability.

    HCL

  4. aws-ecs-terraform aws-ecs-terraform Public

    Hotel booking platform infrastructure: Terraform for Internet -> ALB -> ECS Fargate -> RDS, plus a local Postgres environment with migrations, seed data, and self-checking backup/restore scripts.

    HCL

  5. selfhosting-reference-library selfhosting-reference-library Public

    Deployable Docker Compose stacks, Ansible playbooks, and reverse-proxy configs for ~90 self-hosted services.

    Shell

  6. wisecow-kubernetes-tls wisecow-kubernetes-tls Public

    Containerises a legacy Bash HTTP server and deploys it to Kubernetes behind NGINX Ingress with cert-manager TLS.

    Shell