Mihir Maurya ~/devops
Mihir Maurya

Mihir Maurya

Open to work

Cloud & DevOps Engineer · Prayagraj, India · Azure & IaC

Professional Summary

Cloud & DevOps Engineer pursuing an M.Sc. in Computer Science at the University of Allahabad, with hands-on experience architecting Azure Hub-Spoke network infrastructure using modular Terraform, implementing Zero-Secret Azure Key Vault patterns, enforcing shift-left IaC security (tfsec, Checkov, Gitleaks, TruffleHog), and building secretless CI/CD pipelines across GitHub Actions (OIDC) and Azure DevOps (Self-Hosted Agents).

Click any skill tag to highlight matching experience & builds
Microsoft Azure Terraform (IaC) Azure Key Vault Azure DevOps (YAML) GitHub Actions (OIDC) Self-Hosted Build Agents Entra ID (RBAC & OIDC) tfsec & Checkov Gitleaks & TruffleHog TFLint & Terratest Infracost & FinOps Cloudflare CDN/WAF Linux (Ubuntu) Bash & PowerShell Python & C++ PHP 8.x & MySQL Microsoft Azure Terraform (IaC) Azure Key Vault Azure DevOps (YAML) GitHub Actions (OIDC) Self-Hosted Build Agents Entra ID (RBAC & OIDC) tfsec & Checkov Gitleaks & TruffleHog TFLint & Terratest Infracost & FinOps Cloudflare CDN/WAF Linux (Ubuntu) Bash & PowerShell Python & C++ PHP 8.x & MySQL

Experience

Cloud & DevOps Engineer Intern @ DevOps Insiders

Modular Hub-Spoke IaC & App Gateway Deployed reusable network, vpn, and key_vault modules with for_each subnetting and isolated hub/spoke-dev/spoke-prod remote states (<15m provisioning). Load-balanced 3 Azure VMs behind Application Gateway & Cloudflare.
Jan 2026 – Present
Secretless OIDC & Self-Hosted Runners Built GitHub Actions (OIDC) & Azure DevOps YAML pipelines with locked terraform plan -out artifacts. Configured self-hosted agents (Velociraptor-Agent, T-Rex-Agent) with JIT PowerShell tool bootstrapping and agentless pool: server gates.
CI/CD
Pre-Merge Policy & RBAC Governance Enforced tfsec, Checkov, Gitleaks, and TruffleHog pre-merge gates—catching missing NSGs and disabled Key Vault purge protection to block 100% of misconfigurations.
DevSecOps

Projects

Click to inspect architecture & topology

FlexZone — Fitness Tracking API on Azure PHP 8.x & MySQL REST API (<200ms response) provisioned on Azure VM via Terraform with scoped NSGs and Cloudflare CDN (b18g119.online, ~30% faster delivery).
Mar 2024 – Present View GitHub Repositories

Education

Academic background

University of Allahabad M.Sc, Computer Science · J.K. Institute of Applied Physics & Technology
2026 – 2028
Ewing Christian College, Allahabad B.Sc, Mathematics & Computer Applications
2023 – 2026

Security, Key Vault & Governance

Secret Zero & shift-left engineering

Zero-Secret Key Vault Architecture Dynamic random_password injection, Entra ID RBAC (Secrets Officer/User), Private Endpoints (privatelink.vaultcore.azure.net), Managed Identities (IMDS), and Purge Protection.
Shift-Left DevSecOps & FinOps Gates Gitleaks, TruffleHog, tfsec, Checkov (SARIF & JUnit dashboards), TFLint, Terratest, and Infracost + Azure Retail Prices API.
Copied to clipboard!