OjaswiKumar Singh

Cloud & Kubernetes (AKS) Administrator

Running private, hardened AKS clusters in production, and the Terraform, Istio and ArgoCD around them.

linkedin.com/in/imojaswi New Delhi, India

Kubernetes is Greek for helmsman, Istio for sail. Argo was the ship.

Profile

Certified Kubernetes Administrator with 5+ years across cloud operations, DevOps and Azure infrastructure, now focused on running production-grade AKS environments end to end.

Private cluster provisioning and security hardening are the daily work. The rest of the stack comes with it: cluster networking and connectivity, identity and access (Entra ID, Workload Identity, RBAC), service mesh (Istio), GitOps delivery (ArgoCD, Helm) and Azure Container Registry. Currently going deeper on Terraform module design and state management for enterprise AKS platforms.

Experience

Kubernetes Administrator (Senior Specialist)

HCLTech

Apr 2026 – Present

  • Administer and harden production and private AKS clusters, including cluster provisioning via Terraform.
  • Deployed Istio on private AKS clusters end to end: mirrored images to ACR, performed Helm-based installation with ACR overrides, and configured internal load balancers.
  • Deployed ArgoCD on a private AKS cluster pulling from a private ACR, including ACR private endpoint setup, AcrPull attachment and image mirroring, documented in an enterprise-architect-level design.
  • Apply CIS-aligned container hardening, running workloads as non-root users with enforced securityContext policies.
  • Collaborate with engineering teams to resolve recurring AKS cluster upgrade issues and contribute improvements to internal operational documentation.

Cloud Administrator

Wipro

Jun 2022 – Apr 2026

  • Delivered technical workshops and knowledge sessions for new team members on Azure PaaS and AKS operational scenarios, improving team readiness and consistency.
  • Supported provisioning and day-to-day operations of cloud resources, contributing to deployment and release workflows in a DevOps-oriented team.
  • Assisted customers with deployment and configuration of Azure Web Apps, Functions and custom domains.

Junior Engineer

Wissen Infotech

Apr 2021 – May 2022

  • Monitored infrastructure and application health using SolarWinds, tracking performance metrics and raising alerts on anomalies to support uptime.
  • Worked with Microsoft Azure resources as part of early cloud operations exposure, supporting the team on cloud infrastructure tasks.
  • Built foundational skills in infrastructure monitoring and cloud operations that laid the groundwork for the move into dedicated cloud, DevOps and Kubernetes administration roles.

Skills

AKS
Private and public cluster provisioning, node pool management, RBAC, cluster networking, connectivity troubleshooting, securityContext and pod hardening
Infrastructure as code
Terraform: reusable AKS modules, remote state management, state isolation per environment, drift detection
CI/CD
Azure DevOps pipelines
Identity and security
Entra ID, Workload Identity Federation, Managed Identity vs Service Principal, Key Vault CSI driver, Azure RBAC for Kubernetes, least-privilege service principals, CIS container hardening
Service mesh and networking
Istio on private AKS: image mirroring to ACR, Helm-based install, internal load balancer configuration
GitOps and delivery
ArgoCD, with CRD lifecycle management across Helm upgrades
Container registry
Azure Container Registry (ACR) private endpoints, AcrPull attachment

Project

Ingress modernization with Gateway API on AKS

Independent project

Azure Kubernetes Service (AKS), Kubernetes Gateway API, Azure Application Gateway for Containers (AGC), ALB Controller, Workload Identity

  • Migrated ingress traffic management from traditional Ingress resources to the Kubernetes Gateway API standard, using Azure Application Gateway for Containers (AGC) as the data plane.
  • Deployed and configured the ALB Controller via Helm, using Workload Identity for credential-free authentication to Azure resources.
  • Defined GatewayClass, Gateway and HTTPRoute resources to implement host- and path-based routing, decoupling routing configuration from the underlying infrastructure.
  • Configured TLS termination at the Gateway and associated Application Gateway for Containers with the AKS subnet for traffic delivery.
  • Evaluated Gateway API's advantages over traditional Ingress (role-oriented resource model, native traffic splitting, cross-namespace routing) for enterprise-scale AKS platforms.

Certifications