Gprnt (Greenprint)
2025 - Present
Principal Cloud Engineer
Own end-to-end cloud infrastructure for the world's first MAS-backed nationwide sustainability-reporting utility on Microsoft Azure.
- Replaced Azure Pipelines deployments with Argo CD GitOps and gated pre-production validation, eliminating late-night releases; delivered blue-green switchover and automated rollback with Argo Rollouts for 2-3 releases per month.
- Standardized multi-environment delivery with a Terramate-based IaC framework and reusable Azure service libraries, while embedding continuous FinOps governance through Kubecost and automated cost and budget reporting.
- Built an AI-assisted observability and incident-response stack with OpenObserve, Coroot, and a custom HolmesGPT MCP integration; established critical-service monitoring and SRE on-call alerting with Uptime Kuma and PagerDuty.
- Re-architected the Azure platform around hub-and-spoke networking and Zero Trust, enforcing layered protection with Azure Firewall and WAF across Application Gateway and Front Door.
- Expanded identity and AI platform capabilities with Azure AD B2C custom IEF policies for SSO and passwordless access, plus OpenAI model configuration, delivery pipelines, and token-usage guardrails.
- Lead a platform cost-optimization track that reduced Azure infrastructure spend from USD 20K+ to USD 6K per month, embedding cost targets into a 90-day execution plan and partnering with engineers to right-size workloads.
- Drove platform security and compliance to achieve ISO 27001, GDPR, and PDPA certification, coordinating across project teams to meet financial-sector regulatory requirements.
- Architected new deployment models — Gprnt Enterprise and Sovereign editions — engineering deployment speed, flexibility, and multi-tenant readiness to support revenue growth.
- Operationalized cloud security and compliance through Azure Policy as Code, AKS RBAC, Microsoft Sentinel SIEM, vulnerability remediation, and VAPT support; closed tasks tracked in Sprinto for compliance.
- Singapore
- Azure
- AKS
- Argo CD
- Terramate
- FinOps