Samuel Raju Mamootil
DevOps Engineer
Austin, TX | 512.563.0303 | samuelrajumamootil@gmail.com | linkedin.com/in/samuel-mamootil | samuelmamootil.github.io
Professional Summary
DevOps Engineer with 8+ years of professional experience helping enterprise teams modernize applications, automate cloud delivery, and operate secure platforms across AWS, Azure, and GCP. Most recently worked in an AWS data engineering platform for client Alight Solutions, building Terraform-driven infrastructure and Python automation for data ingestion, transformation, metadata discovery, analytics delivery, and forecasting workflows. Previously with IBM delivered migration and DevSecOps work for clients including H&M, Siemens, Südzucker, Parexel, GenRe, and Veolia Water, including 100+ application migrations, CI/CD pipeline design, hardened images, private connectivity, monitoring, and technical documentation.
Technical Skills
- Cloud Platforms
- AWS, Azure, GCP
- Infrastructure as Code
- Terraform, ARM Templates, Bicep, CloudFormation
- Scripting and Development
- Python, Bash, PowerShell, PHP, SQL, PySpark
- Monitoring and Documentation
- Azure Monitor, Application Insights, CloudWatch, CloudTrail, Prometheus, DataDog, Confluence
- Data Engineering and Analytics
- AWS Glue, Athena, Redshift, Databricks, Unity Catalog, SageMaker, Azure Data Factory, Azure Synapse, Hive, PostgreSQL, Tableau, Power BI
- Security and Quality
- SonarQube, Coverity, IAM, KMS, Secrets Manager, Azure Key Vault, CloudTrail
- CI/CD and Containers
- GitHub Actions, Azure DevOps YAML, GitLab CI/CD, Docker, Kubernetes, AKS, Helm charts
Professional Experience
- Led and mentored a 7-member data engineering team; wrote, deployed, and managed reusable Terraform modules to provision AWS data platform components for ingestion, transformation, cataloging, analytics, caching, and ML-ready workflows across S3, Glue, Athena, Redshift, Lambda, Step Functions, and Redis.
- Worked in a data engineering workflow where data from 10+ applications landed in Amazon S3; configured AWS Glue Crawlers to scan new and changed datasets, infer schemas, update partitions, and register table metadata in AWS Glue Data Catalog; and used Athena and Redshift SQL to validate, join, and analyze curated datasets consumed by Tableau dashboards.
- Built SQL and Athena-based validation checks to reconcile source-to-target record counts, detect nulls and duplicate business keys, and validate schemas, date formats, and accepted value ranges before publishing curated datasets.
- Applied access controls and data protection using IAM, KMS, Secrets Manager, and SOPS, and governed data access through Unity Catalog external locations backed by an S3 data lake so analysts queried governed tables rather than raw files.
- Investigated a climbing AWS bill, traced it to a Lambda re-reading the same S3 object in a loop on every run and fixed it, then right-sized over-provisioned instances and tuned autoscaling for roughly $70,000 in annual savings.
- Deployed and configured CloudWatch and CloudTrail to monitor pipeline execution, review job failures, track access activity, and support auditability across Glue, S3, Athena, Redshift, and security-related services.
- Supported Redshift as both a producer and consumer data platform, providing governed access to internal users and enabling other teams to consume trusted datasets for reporting and downstream processing.
- Developed Python batch jobs scheduled to run daily at midnight to fetch the latest source data, process updates, and publish refreshed datasets into Redshift for downstream reporting and Tableau dashboard refreshes.
- Prepared curated datasets in S3 and Redshift for consumption by other application teams, advanced analytics workflows, and machine learning use cases, including Amazon SageMaker model training and prediction.
- Worked with application developers and product owners to gather requirements, understand data definitions, document ownership, clarify access needs, and deliver datasets for reporting, governance, and analytics.
- Led multi-client DevOps delivery across Azure, AWS, and GCP, wrote Terraform, GitHub Actions, Azure DevOps, Helm, Python, Bash, hardened images, migration planning, and secure release automation.
- For H&M, planned and architected GitHub Actions and reusable Terraform modules, migrating 100+ legacy applications and automating VM, AKS, Azure Web App, and Azure Function deployments.
- Deployed and maintained Azure Storage Accounts for Terraform remote state, enabled versioning, and implemented private endpoints to secure internal application communication.
- Coordinated with developers, product owners, support teams, and stakeholders to migrate applications based on target architecture (Lift and Shift, Re-architecture, Modernization) and remediate deployments across AKS, Web Apps, and Functions with scaling enabled.
- Strengthened Azure infrastructure and application security using encryption at rest/in transit, Key Vault based secret retrieval during deployment, Azure AD application setup, and hardened deployment patterns.
- Automated dynamic allowlisting and removal of GitHub Actions public IP addresses during deployments and wrote Python/Bash scripts to support secure, repeatable release execution.
- Implemented DevSecOps quality gates with SonarQube, Coverity, and secrets hardcoding / vulnerability checks, failing builds on known high vulnerabilities and notifying application teams through Microsoft Teams channels.
- For Siemens, modernized highly dependent legacy applications using custom base images, Helm charts, Terraform modules, and repeatable deployment using GitHub Action for application build and AWS resources deployment using OIDC connection.
- Documented architecture, delivery decisions, SOPs, SLOs, SKA/knowledge artifacts, and handover materials in Confluence to showcase completed work and support operational readiness.
- For Südzucker, created Azure DevOps OIDC service connections and a GCP deployment proof of concept with Terraform modules for Google resources including GFE/GHE components and storage, then handed over documentation and operating steps.
- Delivered cloud automation for Parexel, GenRe, and Veolia Water, supporting landing zone provisioning, application deployments, networking, identity, storage, security, and release operations across Azure, AWS, and GCP.
- For Parexel, wrote ARM Templates, Terraform, Bicep, Azure DevOps YAML, PowerShell, Bash, and Python automation to deploy Azure compute, networking, identity, and storage services.
- Patched Windows and Linux Azure VMs, created hardened VM images, and published standardized images through Azure Compute Gallery.
- Built Python automation to regularly lock resources and reduce accidental deletion risk in cloud environments.
- Built one-click PHP application for LTI Cloud Practice, provisioning landing zone infrastructure across Azure, AWS, and GCP from standardized user inputs and SQL for database and Terraform for deployment.
- Deployed and managed Azure data platform components including Azure Blob Storage, ADLS Gen2, Azure Data Factory, ADF pipelines, Azure Databricks, and PostgreSQL, while supporting deployment/configuration of Hive and Azure Synapse components for data processing, metadata, and analytics workflows.
- Built and scheduled ADF pipelines to ingest data from source systems, copy data from Synapse/PostgreSQL into ADLS Gen2, orchestrate workflow dependencies, trigger Azure Databricks notebooks, and use PySpark, SQL, and Hive-based logic to clean, transform, and publish curated datasets consumed by Power BI dashboards.
- Supported GenRe and Veolia Water engagements with cloud deployment automation, release support, security remediation, and operational readiness patterns.
- Wrote Android application features across requirements, implementation, debugging, backend integration, and release support in a startup environment.
Additional Experience
- Maintained production web updates across 4 university platforms, resolving access, content, release, and site issues while coordinating status with business users.
Key Projects
- Built a generative AI career-coaching platform in .NET/C# where a user uploads a resume, Amazon Textract parses it, and Claude on Amazon Bedrock analyzes it for skill gaps and generates a 28-day learning roadmap.
- Implemented a Retrieval-Augmented Generation (RAG) pipeline over ChromaDB and used Amazon Rekognition and Textract for document analysis, with DynamoDB for application state.
- Containerized the platform with Docker and deployed it on ECS Fargate provisioned entirely through CloudFormation, with VPC-secured Bedrock inference. Placed Second Runner Up at the AWS Hackathon, UTA AI & Analytics Symposium 2026.
Education
Honors
- Maverick Advantage Certificate of Distinction, UTA, 2026.
- Second Runner Up, ReRhythm AI Application, AWS Hackathon, UTA AI & Analytics Symposium, 2026.
- Best Team Award, Parexel Project, LTIMindtree, 2019.