Vikas Kumar — DevOps & Cloud freelancer in Jaipur

🏆 Top Rated AWS Cloud \u002F DevOps Architect (Landing Zones + Networking + IaC) 🏆 I’m Vikas — 6x AWS Certified (✅ Advanced Networking – Specialty | ✅ DevOps Engineer – Professional | ✅ Solutions Architect – Professional) — and I help teams design, build, and operate secure, scalable AWS platforms where networking, security, and automation must be rock-solid. My focus is enterprise-grade AWS foundations: multi-account architecture, Control Tower \u002F Organizations guardrails, Terraform-driven Infrastructure as Code, and production-ready DevOps delivery. If you need a clean plan, fast troubleshooting, or a repeatable platform your team can run confidently — I’m the right fit. What I do best (real-world, practical outcomes): ☞ Build AWS Landing Zones that teams can scale safely (accounts, guardrails, identity, logging). ☞ Design advanced networking (VPC\u002FTGW routing, split-horizon Route 53 DNS, hybrid VPN\u002FDX). ☞ Deliver IaC + CI\u002FCD so infra changes are reviewable, auditable, and repeatable. ☞ Improve security posture + cost efficiency without breaking reliability. ─────────────────────────────────────────────────── Certifications (6x AWS Certified) ↳ AWS Certified Advanced Networking – Specialty ↳ AWS Certified DevOps Engineer – Professional ↳ AWS Certified Solutions Architect – Professional ↳ AWS Certified Solutions Architect – Associate ↳ AWS Certified Developer – Associate ↳ AWS Certified Cloud Practitioner ─────────────────────────────────────────────────── Services I deliver ① Cloud Foundation \u002F Landing Zone (Multi-account) ♚ AWS Organizations + Control Tower setup (OU\u002Faccount strategy) ♚ SCP guardrails, identity strategy (IAM Identity Center) ♚ Centralized logging (Org CloudTrail, log archive patterns) ♚ Security baseline (Config \u002F Security Hub \u002F GuardDuty) ♚ Networking baseline (TGW hub\u002Fspoke, shared services patterns) ② Advanced Networking (where most teams get stuck) ♚ VPC design, routing, NACL\u002FSG strategy ♚ Transit Gateway segmentation (prod\u002Fnonprod\u002Fshared route domains) ♚ Route 53 private DNS, split-horizon patterns, Resolver endpoints\u002Frules ♚ Hybrid connectivity: Site-to-Site VPN, BGP, Direct Connect–ready design ♚ Private connectivity: VPC endpoints \u002F PrivateLink, egress patterns ③ DevOps & Platform Engineering (IaC-first) ♚ Terraform \u002F CloudFormation \u002F CDK (clean repo patterns, modules, environments) ♚ GitHub Actions \u002F Jenkins pipelines (plan\u002Fapply gating, approvals, policy checks) ♚ EKS baseline + serverless patterns (when appropriate) ♚ Observability foundations (CloudWatch metrics\u002Flogs\u002Ftracing) ④ Security + Cost + Reliability ♚ Least-privilege IAM, encryption, monitoring\u002Fdetection ♚ Cost optimization that preserves uptime (NAT\u002Fegress strategy, endpoints, right-sizing) ♚ Governance guardrails so costs\u002Fsecurity don’t drift over time ─────────────────────────────────────────────────── How I work ⚡ Fast assessment → 🧭 clear plan → 🏗️ clean implementation → 📦 handover You get architecture diagrams, IaC repo structure, runbooks, and a phased roadmap your team can operate confidently. ─────────────────────────────────────────────────── To get started, send: ✅ #accounts + regions ✅ current architecture (even rough) ✅ key pain points ✅ success criteria \u002F constraints …and I’ll propose the quickest, safest path forward.