Suman Modak

Self-initiated, built and shipped independently outside of work · June 2026 — Present · a 4-service microservices platform, architected end to end on my own time to practice the full IaC-to-CI-to-GitOps-to-CD lifecycle.

• Independently architected an end-to-end CI/CD + GitOps workflow on AWS EKS: automated security gates (Trivy, OWASP Dependency-Check, SonarQube), Docker Hub registry, and ArgoCD-driven continuous deployment from commit to production.
• Designed Jenkins pipelines with shared libraries to enforce DRY principles — automating image builds, security scans, registry pushes, and manifest updates with the new image tag.
• Built a downstream GitOps loop where ArgoCD continuously syncs updated manifests from Git to the EKS cluster, decoupling artifact build from deployment config for safer, auditable releases.
• Engineered the underlying infrastructure: VPC with public/private subnets and NAT, a private-networked EKS cluster, encrypted S3 storage, and IAM/IRSA roles, integrated with a Helm-managed AWS Load Balancer Controller for ALB ingress — SSL/TLS via Let's Encrypt on a custom domain.
• Authored reusable Kubernetes manifests (Deployments, Services, StatefulSet, ConfigMap, Secrets, Ingress, ServiceAccount) with a MongoDB persistent volume, built for easy replica scaling and new-service onboarding.
• Made the platform fast to extend: modular multi-environment Terraform with remote state in S3 and DynamoDB locking, reusable Jenkins shared libraries, and automated GitOps sync.