Imran Raza Khan

Lead Platform Engineer (Consultant) @DHL Data & AI

DE

Implemented highly available and secure GKE clusters across multiple environments (dev, staging, prod) using Terraform and GitOps (ArgoCD) for automated deployments.• Deployed a secure secrets management solution leveraging External Secrets Operator (ESO) and HashiCorp Vault.• Integrated SOPS encryption for Git-managed manifests, ensuring compliance with GitOps pipelines using ArgoCD. • Implemented CI/CD pipelines with GitHub Actions / Azure DevOps, including container image builds, vulnerability scans, and deployments to GKE.• Designed and implemented a centralized Kyverno policy management framework across multiple GKE clusters with cluster/global policy sets, custom controls for security and cost governance, and CI/CD integration for policy validation.• Led Kyverno policy implementation at cluster and organization levels with focus policy-as-code, enforcing standards(naming conventions, labels), security restrictions(hostPath, hostNetwork, etc), trusted image sources, default resource mutations(e.g, setting resource requests/limits), compliance audits, and GitOps integration with ArgoCD.• Integrated Azure Blob Storage with GKE using the Azure Blob CSI driver, enabling hybrid storage access for containerized workloads.• Led infrastructure cost optimization using FinOps practices, including scheduled GKE node pool scaling, Kyverno-based cost policies, Kubecost and GCP cost insights, and committed use discount planning.• Developed reusable Terraform modules and Helm charts to standardize GKE provisioning, central logging (FLG/OpenSearch), monitoring (Prometheus/Grafana), and ingress (NGINX, Cert-Manager) across multiple clients.

PAF, College, Shor Kot Cantt

Intermediate, Pre- Engineering

Hajvery University (HU)

Bachelor in Computer Sciences (Honors), Computer Science