Vikas Kumar D.

🏆 Top Rated AWS Cloud / DevOps Architect (Landing Zones + Networking + IaC) 🏆 I’m Vikas — 6x AWS Certified (✅ Advanced Networking – Specialty | ✅ DevOps Engineer – Professional | ✅ Solutions Architect – Professional) — and I help teams design, build, and operate secure, scalable AWS platforms where networking, security, and automation must be rock-solid. My focus is enterprise-grade AWS foundations: multi-account architecture, Control Tower / Organizations guardrails, Terraform-driven Infrastructure as Code, and production-ready DevOps delivery. If you need a clean plan, fast troubleshooting, or a repeatable platform your team can run confidently — I’m the right fit. What I do best (real-world, practical outcomes): ☞ Build AWS Landing Zones that teams can scale safely (accounts, guardrails, identity, logging). ☞ Design advanced networking (VPC/TGW routing, split-horizon Route 53 DNS, hybrid VPN/DX). ☞ Deliver IaC + CI/CD so infra changes are reviewable, auditable, and repeatable. ☞ Improve security posture + cost efficiency without breaking reliability. ─────────────────────────────────────────────────── Certifications (6x AWS Certified) ↳ AWS Certified Advanced Networking – Specialty ↳ AWS Certified DevOps Engineer – Professional ↳ AWS Certified Solutions Architect – Professional ↳ AWS Certified Solutions Architect – Associate ↳ AWS Certified Developer – Associate ↳ AWS Certified Cloud Practitioner ─────────────────────────────────────────────────── Services I deliver ① Cloud Foundation / Landing Zone (Multi-account) ♚ AWS Organizations + Control Tower setup (OU/account strategy) ♚ SCP guardrails, identity strategy (IAM Identity Center) ♚ Centralized logging (Org CloudTrail, log archive patterns) ♚ Security baseline (Config / Security Hub / GuardDuty) ♚ Networking baseline (TGW hub/spoke, shared services patterns) ② Advanced Networking (where most teams get stuck) ♚ VPC design, routing, NACL/SG strategy ♚ Transit Gateway segmentation (prod/nonprod/shared route domains) ♚ Route 53 private DNS, split-horizon patterns, Resolver endpoints/rules ♚ Hybrid connectivity: Site-to-Site VPN, BGP, Direct Connect–ready design ♚ Private connectivity: VPC endpoints / PrivateLink, egress patterns ③ DevOps & Platform Engineering (IaC-first) ♚ Terraform / CloudFormation / CDK (clean repo patterns, modules, environments) ♚ GitHub Actions / Jenkins pipelines (plan/apply gating, approvals, policy checks) ♚ EKS baseline + serverless patterns (when appropriate) ♚ Observability foundations (CloudWatch metrics/logs/tracing) ④ Security + Cost + Reliability ♚ Least-privilege IAM, encryption, monitoring/detection ♚ Cost optimization that preserves uptime (NAT/egress strategy, endpoints, right-sizing) ♚ Governance guardrails so costs/security don’t drift over time ─────────────────────────────────────────────────── How I work ⚡ Fast assessment → 🧭 clear plan → 🏗️ clean implementation → 📦 handover You get architecture diagrams, IaC repo structure, runbooks, and a phased roadmap your team can operate confidently. ─────────────────────────────────────────────────── To get started, send: ✅ #accounts + regions ✅ current architecture (even rough) ✅ key pain points ✅ success criteria / constraints …and I’ll propose the quickest, safest path forward.