⚡ Enterprise Cloud Solutions Architect & DevSecOps Engineer | Agentic AI Systems

Production Azure Infrastructure · Zero-Trust IaC · Shift-Left DevSecOps · Autonomous SRE Swarms

I am a Cloud Solutions Architect and DevSecOps Engineer specializing in enterprise-grade Microsoft Azure platforms, Zero-Trust Infrastructure as Code (Terraform), and cutting-edge Agentic AI systems (Model Context Protocol, RAG, and autonomous SRE operations).

Combining an analytical foundation in Computer Applications & Mathematics (M.Sc Computer Science) with hands-on enterprise cloud architecture and infrastructure engineering, I engineer production platforms designed for high resilience, verifiable security compliance, and automated self-healing operations:

• ☁️ Cloud Architecture & CAF Governance: Architecting enterprise Hub-and-Spoke topologies, micro-segmented Virtual Networks, Route Tables with forced egress, Azure Firewall Premium, and production AKS clusters.
• 🛡️ Shift-Left DevSecOps & Supply Chain: Authoring 4-stage automated pipelines in Azure DevOps and GitHub Actions with secretless OIDC authentication, static code analysis (Checkov, tfsec, TFLint), secret scanning (Gitleaks, TruffleHog), and manual approval gates.
• 🤖 Agentic AI & LLMOps: Implementing Model Context Protocol (MCP) servers and LangGraph multi-agent swarms that ingest live infrastructure alerts, retrieve runbooks from vector stores, and autonomously generate remediation GitOps pull requests.
• 🧠 Systemized Architectural Knowledge: Architect of a 174+ note production-grade Obsidian Knowledge Vault spanning 16 domains, 33 Azure services, 400+ scenario interview questions, and real-world Architecture Decision Records (ADRs).

flowchart TD
    subgraph Core["🏛️ Architecture & Governance"]
        A["Mihir Maurya Cloud Platform"] --> B["Azure CAF Landing Zones"]
        A --> C["Enterprise Hub & Spoke VNet"]
        A --> D["Agentic AI SRE & MCP Swarm"]
        A --> E["174+ Note Obsidian Vault"]
    end

    subgraph DevSecOps["🛡️ DevSecOps & Pipeline Gates"]
        B --> F["Terraform Modular IaC"]
        C --> F
        F --> G["Gitleaks & TruffleHog Scan"]
        G --> H["Checkov & tfsec CIS Gate"]
        H --> I["Azure DevOps / GitHub Actions OIDC"]
        I --> J["Environment Approval Gate"]
    end

    subgraph AI["🤖 Autonomous AI Operations"]
        D --> K["Model Context Protocol (MCP) Host"]
        E -.->|"Vectorized Runbooks"| L["RAG Incident Knowledge Base"]
        K --> L
        L --> M["LangGraph Self-Healing Agent"]
        M --> N["Automated GitOps Remediation PR"]
    end

    subgraph Runtime["☸️ Production Runtime"]
        J --> O["Zero-Trust Azure Runtime"]
        N --> O
        O --> P["Production AKS Platform"]
        O --> Q["Azure Firewall & Hub Peering"]
        O --> R["Key Vault Workload Identity"]
    end

    classDef purple fill:#1d0738,stroke:#9d4edd,stroke-width:2px,color:#fff;
    classDef matrix fill:#032111,stroke:#00ff66,stroke-width:2px,color:#fff;
    classDef cyan fill:#051b2e,stroke:#00e5ff,stroke-width:2px,color:#fff;
    classDef amber fill:#2d1900,stroke:#f59e0b,stroke-width:2px,color:#fff;

    class A,B,C,E purple;
    class F,G,H,I,J amber;
    class D,K,L,M,N cyan;
    class O,P,Q,R matrix;

Enterprise Hub-and-Spoke Network Topology & CAF Segmentation via Modular Terraform

HUB-SPOKE/
├── azure-pipelines.yml       # 🔄 Azure DevOps Multi-Stage CI/CD pipeline
├── run-pipeline.ps1          # 🛠️ Shift-Left Checkov + Terraform execution harness
└── terraform/
    ├── environments/         # 🚀 ISOLATED STATE ROOT DEPLOYMENTS
    │   ├── hub/              # Central Hub: VNet (10.0.0.0/16), VPN GW, Key Vault
    │   ├── spoke-dev/        # Dev Workload VNet (10.1.0.0/16) -> Peered to Hub
    │   └── spoke-prod/       # Prod Workload VNet (10.2.0.0/16) -> Peered to Hub
    │
    └── modules/              # 🧩 REUSABLE TERRAFORM MODULES
        ├── key_vault/        # Private Key Vault with RBAC & Access Policies
        ├── network/          # Dynamic VNet/Subnet generator via for_each
        └── vpn/              # Enterprise Gateway & P2S / S2S VPN

Enterprise 4-Stage Shift-Left Security, FinOps Cost Gating & Terraform CI/CD

stages:
  - stage: Terraform_Plan
    jobs:
      - job: Plan_And_FinOps
        steps:
          - task: TerraformCLI@0 (init, validate, fmt -check)
          - task: PowerShell@2 (Query Azure Retail Prices API from tfplan JSON)
          - task: PublishPipelineArtifact (drop tfplan)

  - stage: DevSecOps_Security_Scan
    dependsOn: Terraform_Plan
    jobs:
      - job: Static_Analysis
        steps:
          - script: gitleaks detect --config .gitleaks.toml
          - script: trufflehog git file://. --only-verified
          - script: tfsec . --format junit --out tfsec-results.xml
          - script: trivy config . --severity CRITICAL,HIGH

  - stage: Production_Approval_Gate
    dependsOn: DevSecOps_Security_Scan
    jobs:
      - deployment: Human_Signoff
        environment: 'production-approval'

  - stage: Terraform_Apply
    dependsOn: Production_Approval_Gate
    jobs:
      - job: Apply
        steps:
          - task: DownloadPipelineArtifact (retrieve verified tfplan)
          - task: TerraformCLI@0 (apply tfplan)

Autonomous Incident Response & SRE Swarms driven by Model Context Protocol (MCP) & LangGraph

Production-Grade Obsidian Knowledge Engine & Enterprise Architectural Runbooks

Modular Azure Infrastructure as Code Framework · CAF Enterprise Blueprints & Multi-Tier Compute

AI-Powered Clinical Intake & Triage Kiosk Platform (Smart India Hackathon SIH 2026)

A comprehensive index of production infrastructure repositories, security scanners, and agentic AI systems maintained across this portfolio:

Demonstrating the architectural rationale and risk-tradeoff evaluations applied across production environments:

┌────────────────────────────────────────────────────────────────────────┐
│  1. ZERO-TRUST IDENTITY: No static passwords or client secrets in CI   │
│  2. IMMUTABLE IaC: All infrastructure versioned and drift-detected     │
│  3. SHIFT-LEFT GATES: Checkov & Gitleaks block vulnerabilities at PR   │
│  4. ARCHITECTURAL RIGOR: Every major design documented via an ADR      │
│  5. AUTONOMOUS RESILIENCE: AI agents augment SRE for rapid MTTR triage │
└────────────────────────────────────────────────────────────────────────┘

I am actively open to full-time opportunities regarding DevSecOps Engineer, Cloud Solutions Architect, and Agentic AI Systems roles.