Lokendra Bhat
DevOps Engineer
Kathmandu, Bagmati Province, Nepal
Professional Summary
DevOps Engineer with 2.5+ years of hands-on experience designing, deploying, and maintaining scalable, highly available infrastructure. Expert in container orchestration (Docker, Kubernetes, Docker Swarm), CI/CD pipeline development (Jenkins, GitLab CI), and infrastructure automation (Ansible, Terraform). AWS Certified Cloud Practitioner with proven ability to deliver 95%+ system uptime, implement CIS-benchmark security hardening, and drive 70%+ deployment efficiency gains. Skilled at cross-functional collaboration, disaster recovery planning, and embedding DevOps best practices across the full delivery lifecycle.
Work Experience
AMNIL Technologies Pvt. Ltd. — Manbhawan, Lalitpur, Nepal
Jan 2024 – Present
Relevant Projects
Scheduler Application – Auto Recharge for Ncell App
Associate DevOps Engineer
- Provisioned infrastructure via Ansible & Terraform — RKE2 in production, k3s in UAT — reducing deployment time by 70%.
- Engineered Jenkins + Ansible CI/CD pipelines for zero-downtime feature and hotfix deployments.
- Enforced backup and DR strategies achieving RTO under 15 minutes.
- Deployed Prometheus + Grafana monitoring stack tracking 50+ KPIs for proactive health monitoring.
- Implemented Minimum Baseline Security Standard (MBSS) per CIS Benchmark with recurring VAPT patching.
Technologies: Ansible, Terraform, Linux, Kubernetes, RKE2, k3s, Jenkins, GitLab, Prometheus, Grafana, CIS Benchmark
Chatbot Enhancement Team
Associate DevOps/System Admin Engineer
- Reduced Docker image size by 58% (6 GB → 2.5 GB) through multi-stage builds and per-layer analysis.
- Configured Docker Swarm auto-heal and liveness probes, reducing downtime by 95%.
- Deployed Grafana + Loki + Alloy centralized logging with smart alerting identifying failing container replicas by ID.
- Achieved 95%+ uptime SLA through automated monitoring with Uptime Kuma and Grafana.
- Configured Redis replication for session management and resolved PostgreSQL pooling issues with PgBouncer/Pgpool.
Technologies: Nginx, Docker, Docker Swarm, Redis, Grafana, Loki, Alloy, Beszel, Uptime Kuma, PostgreSQL, PgBouncer, Pgpool
Ncell Mobile Application Platform
Associate DevOps Engineer
- Maintained shared Kubernetes platform supporting a critical customer-facing mobile application.
- Managed HA Proxy master-slave DMZ gateway handling 5,000+ requests/minute.
- Managed Java keystores and SSL certificate lifecycle ensuring ongoing security compliance.
- Conducted Kibana log monitoring and root-cause analysis; authored detailed incident reports.
Technologies: Kubernetes, HA Proxy, Jenkins, Kibana, Nginx, Java Keystores
Payment Gateway Application
Associate DevOps Engineer
- Managed non-dockerized multi-instance HA production environment for a high-availability payment gateway.
- Developed Bash automation scripts for backup, deployment, rollback, and Nginx access log analysis.
- Investigated and mitigated bot attacks through Nginx log and server metric analysis.
- Enforced firewalld security rules ensuring secure inter-instance communication.
Technologies: Bash, Nginx, Linux, Firewalld
Payroll Management System
Associate DevOps Engineer
- Designed and deployed core infrastructure for an enterprise Payroll Management System.
- Built Jenkins CI/CD pipelines with integrated SonarQube SAST scanning for pre-production quality gates.
- Configured PostgreSQL HA replication via Repmgr; implemented full Disaster Recovery failover.
- Established Docker Swarm high-availability cluster for uninterrupted payroll processing cycles.
Technologies: Nginx, Docker Swarm, Jenkins, SonarQube, PostgreSQL, Repmgr
Server Migration Project
Associate DevOps Engineer
- Containerized 15+ applications with Docker, standardizing deployment workflows across environments.
- Migrated apps and databases from cPanel/Windows Server to on-premise and AWS (EC2, VPC, RDS, S3).
- Resolved 50+ compatibility issues in partnership with development teams during migration.
- Automated backup and log rotation via Bash; enforced SSL/TLS across all migrated workloads.
Technologies: Nginx, Docker, Docker Swarm, AWS (EC2, VPC, RDS, S3), Jenkins, cPanel, Cloudflare, Bash
Banking Web Application
Associate DevOps Engineer
- Deployed and managed critical banking infrastructure with RBAC enforcement and automated log rotation.
- Developed Jenkins CI/CD pipelines with security scanning and automated testing gates.
- Maintained RKE2/k3s cluster operations and multi-database environments (PostgreSQL, MySQL, MongoDB).
- Configured DR servers with database replication and file synchronization for rapid failover.
Technologies: Linux, Nginx, Docker, Docker Swarm, Jenkins, Uptime Kuma, k3s, RKE2, Grafana, PostgreSQL, MySQL, MongoDB
ProcessMaker Application Setup
Junior DevOps Engineer | 2024
- Deployed production-ready environment following DevOps best practices with CI/CD and automated backups.
- Created Grafana dashboards for real-time performance tracking and historical analysis.
- Configured Prometheus Alertmanager with email notification integration for faster incident response.
Technologies: Nginx, Docker, Docker Swarm, Jenkins, Git, GitLab, Grafana, Prometheus
Technical Skills
| Domain | DevOps Engineering, SRE, Linux System Administration, Server Hardening, CI/CD Pipeline Management, Infrastructure Automation, Monitoring & Logging, Cloud Management (AWS), Security Implementation, Infrastructure as Code, Configuration Management |
| Containers & Orchestration | Docker, Docker Swarm, Kubernetes (RKE2, k3s), Container Optimization |
| CI/CD & Automation | Jenkins, GitLab CI, Ansible, Terraform, Git |
| Monitoring & Logging | Prometheus, Grafana, Loki, Alloy, Kibana, Uptime Kuma, Beszel, Dozzle |
| Cloud Platforms | AWS (EC2, VPC, RDS, S3, IAM) — AWS Certified Cloud Practitioner |
| Web Servers & Proxies | Nginx, Apache, HA Proxy, Cloudflare, DMZ Architecture |
| Databases & Caching | PostgreSQL (Replication, Repmgr, PgBouncer, Pgpool), MySQL, MongoDB, Redis |
| Security & Compliance | CIS Benchmark, VAPT Remediation, Server Hardening, SSL/TLS, RBAC, Wazuh, Vault, MBSS, SonarQube |
| Scripting | Bash, Python |
| Networking | Networking Fundamentals, Firewalls (firewalld), VPNs, NFS, Security Best Practices |
Education & Training
Master of Information Technology (MIT) — In Progress
2024 – Present
Amrit Campus, Tribhuvan University
Bachelor of Science in Computer Science and Information Technology (B.Sc. CSIT)
2019 – 2023
Amrit Campus, Tribhuvan University · Percentage: 81.36%
AWS re/Start Training Program Graduate
2023
Amazon Web Services, Kathmandu, Nepal · Full attendance · Earned AWS Cloud Practitioner certification
Certifications
AWS Certified Cloud PractitionerAmazon Web Services | July 2023 – May 2029 (renewed)
AWS re/Start GraduateAmazon Web Services | July 2023
AWS Academy Cloud FoundationsAmazon Web Services | July 2023
AWS Educate: Getting Started with DatabasesAmazon Web Services | September 2024
Professional Attributes
|
●Root-cause analysis: Traces production incidents back to source quickly, using logs and metrics rather than guesswork.
|
●Automation by default: Replaces repetitive manual steps with scripts or IaC whenever a task repeats more than once or twice.
|
|
●Security-conscious: Builds CIS hardening and VAPT remediation into deployment work rather than treating it as a separate step.
|
●Cross-team coordination: Works directly with developers to debug deployment issues and align on release timing.
|
|
●Keeps up with the field: Tracks new infrastructure and AI tooling, including building observability for internal AI usage.
|
●Documentation habit: Writes runbooks and incident notes so fixes don't depend on one person's memory.
|