Arpan Chatterjee
Senior Platform Engineer • Kubernetes, Cloud Infrastructure & Migration Specialist
⚡ Primary Focus & Core Tooling
☸️ Kubernetes
⎈ Helm
🐙 Argo Ecosystem (ArgoCD, Rollouts, Workflows)
🐹 Go (Golang)
⚙️ Kubebuilder (Custom Operators)
🔀 Kubernetes Gateway API
☁️ Crossplane & Terraform
📡 OpenTelemetry
🚀 Cloud & Workload Migration
🤖 MCP (Model Context Protocol)
🛡️ Zero-CVE Hardening & OPA
💾 Velero (DR) & cert-manager
📌 Executive Summary¶
Senior Platform Engineer with 9 years of experience architecting and operating enterprise-scale Kubernetes platforms, cloud infrastructure, and GitOps-driven delivery pipelines across GCP, Azure, and on-premises environments.
- Scale & Reliability: Specialized in hyper-scale Kubernetes cluster operations (35 GKE clusters, 200+ projects, 10,000+ workloads), cloud-to-cloud and on-prem-to-cloud migrations, and high availability systems (99.9% uptime).
- Automation & IaC: Production expertise in Infrastructure as Code (Terraform, Crossplane), Kubernetes Operators (Kubebuilder), and progressive GitOps automation (ArgoCD, Flux, Kargo, Argo Rollouts, Flagger).
- Traffic, Ingress & Mesh: Deep hands-on experience with Kubernetes Gateway API (managing 6,000–7,000 URLs), ingress controllers, certificate lifecycle management (cert-manager), and disaster recovery (Velero).
- Modern Paradigms: Active pioneer in Model Context Protocol (MCP) for AI-to-infrastructure operations, batch workload queueing (Kueue), and multi-cluster management (Sveltos).
- Open Source: Active contributor to CNCF and Kubernetes SIG projects (
kubernetes-sigs/kueue,aquasecurity/trivy-operator,GoogleCloudPlatform/kubectl-ai) and maintainer ofrepo-lister.
🛠️ Core Competencies & Technology Matrix¶
- Cluster Management: Kubernetes, Google Kubernetes Engine (GKE), Azure Kubernetes Service (AKS), Self-hosted Kubernetes, Kind
- Traffic & Networking: Kubernetes Gateway API, Ingress Controllers, Traffic Management, CoreDNS, Cilium/Calico
- Workload Management: Kubebuilder (Custom Operators & CRDs), Kueue (Job Queueing), Argo Rollouts (Canary / Blue-Green), Sveltos (Multi-cluster)
- Autoscaling & Optimization: Cluster Autoscaler, Karpenter-style Node Optimization, Pod Disruption Budgets, Resource Quotas
- Backup & Certificates: Velero (DR / Backup & Restore), cert-manager (ACME / Automated TLS Lifecycle)
- IaC Platforms: Terraform (Reusable Modules, State Management), Crossplane (Self-Service Infrastructure Compositions & XRDs)
- Cloud Providers: Google Cloud Platform (GCP), Microsoft Azure, Amazon Web Services (AWS)
- Architectures: Multi-cloud, Hybrid Cloud, Enterprise Landing Zones, VPC Peering, Private Service Connect
- Self-Service: Declarative API definitions, developer self-service provisioning, drift reconciliation
- GitOps Toolchain: ArgoCD, Flux (Flux2), Kargo (Multi-stage Promotion), Argo Workflows
- Progressive Delivery: Argo Rollouts, Flagger (Automated Canary Analysis & Metric Checks)
- CI Pipelines & Runners: GitLab CI, Tekton Pipelines, Kaniko (Daemonless In-cluster Image Builds), GitHub Actions
- Deployment Strategies: Git-driven declarative delivery, zero-downtime rolling cutovers, automated release verification
- Observability: OpenTelemetry (OTel Collector, auto & manual instrumentation), Datadog, Prometheus, Grafana, Distributed Tracing
- Log & Metric Analytics: Structured log ingestion, APM, Synthetic Monitoring, custom alert tuning (cutting MTTD/MTTR by 35-40%)
- FinOps & Cost Optimization: Spot instance orchestration, workload right-sizing, Karpenter node packing, ~30% monthly spend reduction
- Policy Enforcement: Open Policy Agent (OPA / Gatekeeper), Kyverno, Admission Webhooks
- Runtime & Endpoint Security: CrowdStrike Falcon, Oligo Runtime Application Security
- Supply Chain Security: Trivy Operator, Container vulnerability scanning, Sigstore / Cosign cryptographic release signing
- Compliance: Zero-CVE production policy, RBAC least-privilege, network segmentation
- Languages: Golang (CLI tools, Kubebuilder operators), Python, Bash, YAML
- Automation: Ansible (Automated fleet patching), GitHub Actions, GitLab CI scripts
- Emerging AI Tooling: Model Context Protocol (MCP) server development, AI-to-infrastructure operational automation
💼 Professional Experience¶
Platform Engineer
Renault Nissan Technology and Business Centre India (RNTBCI)
- Architected and managed a multi-tenant GKE platform across 35 clusters, delivering 99.9% uptime.
- Implemented OpenTelemetry instrumentation across 10,000+ workloads, reducing MTTD by ~40%.
- Deployed Kubernetes Gateway API to manage 6,000+ routes, reducing traffic misconfigurations by ~60%.
- Automated GitOps delivery via Kargo, ArgoCD, Flux, and Argo Rollouts, cutting release cycle time to <4 hours.
- Led FinOps optimization with spot orchestration and rightsizing, cutting monthly cloud spend by ~30%.
- Built AI-to-infrastructure operational tooling using Model Context Protocol (MCP), cutting manual toil by ~35%.
Kubernetes (GKE)
Gateway API
OpenTelemetry
ArgoCD & Kargo
FinOps
MCP
Transformation Specialist
Accenture India
- Migrated 30+ services from on-prem to Kubernetes with Helm and ArgoCD, reducing environment setup time to <2 hours.
- Built reusable multi-cloud Terraform modules (GCP, Azure, on-prem), cutting provisioning time by ~60%.
- Designed self-service developer APIs using Crossplane, reducing operations ticket volume by ~45%.
- Developed custom Kubernetes Operators in Golang with Kubebuilder, saving ~10 hours/week of manual operations.
- Deployed Open Policy Agent (OPA) cluster guardrails, achieving 100% compliance pass rate on security audits.
- Implemented Datadog APM and custom dashboards, cutting MTTD by ~35% and MTTR by ~40%.
Kubernetes Migration
Crossplane
Kubebuilder (Go)
Terraform
OPA / Gatekeeper
Datadog
Associate Cloud Engineer
PwC India
- Operated 3 Kubernetes clusters for big data workloads processing 500GB+ daily with 99.95% availability.
- Built automated operational runbooks and improved incident response, cutting resolution times by ~25%.
Kubernetes
GCP
Data Platform Reliability
Associate Cloud Engineer
Tata Consultancy Services (TCS) India
- Led a 5-member team designing Datadog monitoring across 20+ servers, reducing undetected incidents by ~45%.
- Created Ansible automation for fleet patching across 200+ servers, shrinking patch cycles from 2 weeks to 3 days.
Ansible Automation
Datadog
Linux Systems
Associate Consultant
Capgemini India
- Built monitoring strategies and 50+ custom alerts for McDonald's Cloud Application, reducing MTTD by ~30%.
- Implemented synthetic monitoring across 15+ user journeys, cutting alert noise by ~40%.
- Deployed internal services with Docker and Kubernetes test environments.
Synthetic Monitoring
Docker
Kubernetes
Grafana
🌟 Open Source & CNCF Contributions¶
Active open-source contributor to Kubernetes ecosystem projects, CNCF tooling, and author of developer utilities:
🔹 kubernetes-sigs/kueue¶
- Contribution: Enhanced Helm chart configuration by parametrizing
IngressClass,PriorityClass, andimagePullSecretsfor KueueViz. - Impact: Resolved an ingress TLS-secret misconfiguration issue affecting secure production deployments.
- Reference: Merged PR #5815
🔹 GoogleCloudPlatform/kubectl-ai¶
- Contribution: Implemented Server-Sent Events (SSE) transport mode support for the Model Context Protocol (MCP) server integration.
- Impact: Extended MCP server functionality beyond STDIO-only mode, enabling remote agentic orchestration of Kubernetes clusters.
- Reference: Merged PR #418
🔹 aquasecurity/trivy-operator¶
- Contribution: Implemented
_json_keyservice account authentication support for Google Container Registry (GCR) and Google Artifact Registry (GAR) in the Trivy plugin. - Impact: Enabled secure vulnerability scanning across private Google Cloud registries.
- Reference: Merged PR #1404
🔹 repo-lister (CLI Tool) (Owner & Maintainer)¶
- Description: Built and actively maintain an open-source Golang CLI utility designed to manage container images (listing, copying, pulling, pushing) across multiple container registries using native Kubernetes credentials.
- Security: Every release artifact and container image is cryptographically signed and verified using Sigstore / Cosign.
- Repository: github.com/btwseeu78/repo-lister
✍️ Technical Articles & Publications¶
Articles published on modern GitOps and Kubernetes delivery on Medium (@btwseeu78): - Testing Helm Charts in GitLab CI with Kind (Kubernetes-in-Docker) - Building Progressive GitOps Deployment Pipelines: Flux2 + Helm + Tekton + Kaniko
📜 Certifications & Education¶
Professional Certifications¶
- Certified Kubernetes Application Developer (CKAD) — Cloud Native Computing Foundation (Alumni)
- Google Cloud Certified Associate Cloud Engineer (GCP ACE) — Google Cloud
- Microsoft Certified: Azure Fundamentals (AZ-900) — Microsoft
- Red Hat Certified Engineer (RHCE) — Red Hat
- Red Hat Certified System Administrator (RHCSA) — Red Hat
Education¶
- Bachelor of Technology (B.Tech / B.E.) in Computer Science & Engineering (CSE)
- Meghnad Saha Institute of Technology, Kolkata
- Grade: 7.8 / 10
Languages & Interests¶
- Languages: English, Bengali, Hindi
- Interests: Open Source Development, Cloud Architecture, Technical Writing, Long-Distance Running