harshgulhane.com

Tokyo, Japan

Harsh Gulhane

Senior Site Reliability Engineer · Cloud Security

I keep payment platforms fast, available and secure: 8+ years scaling and hardening AWS infrastructure, from Kubernetes clusters serving 800K requests a minute to PCI-DSS and FedRAMP environments.

Read the blog LinkedIn GitHub
years in SRE and cloud security8+
requests per minute on EKS (PayPay)800K
compliant platforms deliveredPCI-DSS · FedRAMP
certifications: CKA, CKAD, CKS, AWS SA Pro…7

Latest writing

All posts →
3 min read

How this site runs: one 16 MB Go binary on a small home server

Nine sub-sites, a dozen security tools and a threat-intel collector, served from a small home server behind a Cloudflare Tunnel, with no open ports at home.

#go#docker#cloudflare#self-hosting

What I work on

I'm a Senior SRE in Tokyo, working where payments, cloud and security meet. I design platforms that stay up under load, recover across regions and pass PCI-DSS and FedRAMP audits, and I automate the toil away with Terraform, GitOps, Python and Go.

Reliability & platforms

EKS, ArgoCD and GitOps, multi-region disaster recovery, blue-green deployments

Cloud security

Zero-trust access, IaC scanning, WAF and JA3 bot defence, secrets management

Compliance

PCI-DSS, FedRAMP Moderate, CIS benchmarks, audit-ready infrastructure

Observability

Datadog (APM, logs, SIEM), Prometheus, Grafana, SLO design

Changelog (experience)

  1. v2024.05current

    KOMOJU Senior SRE / Cybersecurity

    May 2024 – present · Tokyo

    • Put the GitHub org (160 engineers, 200+ repos) behind zero-trust access and moved CI to self-hosted runners with zero pipeline downtime.
    • IaC scanning on every pull request: Trivy plus an AI agent enforcing custom Terraform policies.
    • Designed multi-region disaster recovery for all production services, proven with a live failover.
    • GitOps platform on EKS with ArgoCD; secrets moved to AWS Secrets Manager; WAF bot blocking with JA3 fingerprinting.
  2. v2022.09

    PayPay Senior SRE

    Sep 2022 – May 2024 · Tokyo

    • Ran the EKS clusters serving 80% of PayPay's traffic at 800K requests a minute.
    • Golden AMI pipeline (Terraform + EC2 Image Builder) for 2,000+ instances; 92% of services containerised.
    • Bootstrapped the PayPay Card infrastructure to PCI-DSS compliance.
  3. v2021.10

    Juniper Networks Senior SRE (SE 3)

    Oct 2021 – Sep 2022 · Bangalore

    • Secured AWS GovCloud for FedRAMP Moderate and presented the architecture to the auditors.
    • Automated blue-green Kubernetes deployments at 99.99% availability.
  4. v2020.10

    Deloitte DevOps Cloud Engineer

    Oct 2020 – Oct 2021 · Hyderabad

    • Migrated on-prem monoliths to AWS with Terraform, Vault and Jenkins; reusable pipelines cut manual effort by 70%.
  5. v2017.12init

    Amdocs Site Reliability Engineer

    Dec 2017 – Oct 2020 · Pune

    • Built real-time monitoring for a hybrid cloud on Kubernetes (Grafana, Sensu, InfluxDB, Icinga) and automated a lot of toil away.

Services (security toolkit)

Free tools I built for everyday security work. They run on this site, in English.

Certifications

  • CKACertified Kubernetes Administrator
  • CKADCertified Kubernetes Application Developer
  • CKSCertified Kubernetes Security Specialist
  • SAPAWS Solutions Architect – Professional
  • SAAAWS Solutions Architect – Associate
  • CCISC2 Certified in Cybersecurity
  • TFAHashiCorp Terraform Associate

Awards

  • Unsung Hero Award, KOMOJU (2025)
  • Rockstar Award, PayPay (2023), for bootstrapping the PayPay Card infrastructure
  • Discretionary Award, Juniper Networks (2022), for the FedRAMP assessment
  • Outstanding Performance Award, Deloitte (2021), for the AWS migration
  • Star Employee of the Month, Amdocs (2019, 2020)
  • Amdocs Python Hackathon winner (2019)

Education

  • MBA, Business Analytics: BITS Pilani (2020–22)
  • B.Tech, Information Technology: Shri Ramdeobaba College of Engineering & Management, Nagpur (2013–17)

Projects

Contact

The best way to reach me is LinkedIn. Happy to talk about SRE, platform engineering and cloud security.

LinkedIn GitHub