LAHIRU SANDARUWAN
DevOps Engineer | AWS | Azure | Kubernetes | Terraform | CI/CD
lahirusandaruwanwasantha@gmail.com
+94 71 572 5084
Kandy, Sri Lanka
linkedin.com/in/lahiru-sandaruwan
lahirusandaruwan.online
Professional Summary
DevOps Engineer with 4+ years of hands-on experience designing, automating, deploying, and supporting production cloud infrastructure across AWS and Azure. Experienced in managing 50+ servers and production workloads using Amazon ECS, EC2, Auto Scaling, Terraform, Docker, CI/CD, Linux, and monitoring and observability platforms. Proven experience in highly available infrastructure, production incident response, cloud security, disaster recovery, and cost optimization, including approximately USD 1,710 in documented AWS savings. Experienced in supporting enterprise, FinTech, and government platforms and mentoring junior DevOps engineers and interns.
Professional Experience
Software Engineer - DevOps • Treinetic Pvt Ltd
03/2022 – Present
- Managed and supported 50+ servers across AWS EC2, ECS-backed workloads, and virtualized infrastructure environments.
- Designed, implemented, and maintained automated CI/CD pipelines across AWS CodePipeline, AWS CodeBuild, Azure DevOps Pipelines, and GitHub Actions.
- Administered multiple AWS accounts including AWS GovCloud, managing IAM, networking, security configurations, and operational activities.
- Provisioned and managed AWS infrastructure using Terraform, including EC2 resources and remote backend configuration for repeatable infrastructure provisioning.
- Managed Docker and Amazon ECS production workloads, including ECS deployments, EC2 launch-type workloads, Auto Scaling, load balancing, and deployment troubleshooting.
- Implemented monitoring, centralized logging, and automated alerting using CloudWatch, SNS, Lambda, Microsoft Teams, Prometheus, Grafana, Loki, Netdata, Uptime Kuma, and Container Insights.
- Implemented cloud security and traffic-control measures using AWS WAF, Cloudflare, IAM, rate limiting, SSL/TLS, firewalls, and IPsec VPNs, mitigating SMS abuse and preventing ~$15,000 in potential Twilio charges.
- Reduced AWS infrastructure costs by approximately USD 1,710 through RDS optimization and removal of unnecessary CloudHSM resources.
- Integrated SonarQube and Trivy into CI/CD workflows for code-quality analysis and container security scanning.
- Supported ISO/IEC 27001 ISMS activities through infrastructure security controls, audit preparation, disaster recovery planning, and mentored 3 junior interns/team members.
Certifications & Education
Kubernetes and Cloud-Native Associate (KCNA) — KodeKloud
Amazon Elastic Container Service (AWS ECS) — KodeKloud
Jenkins — KodeKloud
Bachelor of Information and Communication Technology (Honours) — University of Kelaniya (2017 – 2021)