Anvesh Polasa

Background

About Anvesh Polasa

Over all 8 years 10 months of IT experience into DevSecOps engineering and Release Management: 1. Release Planning & Scheduling Coordinate release plans with Dev, QA, Ops, and Product teams. Define release windows and freeze dates. Maintain and publish the release calendar. Build Automation & Configuration Automate build processes using CI/CD tools (e.g, Jenkins, GitLab CI). Maintain build scripts, tools, and configuration settings. Handle build failures, dependency management, and integration issues. Version Control & Branching Strategy Work with Git, Bitbucket, or other VCS to manage branches and tags. Ensure consistent versioning and change tracking. Release Packaging & Artifact Management Create installable packages (JARs, Docker images, etc.). Store and manage artifacts in repositories (Nexus, Artifactory). Environment Management & Deployment Automate deployments to staging and production environments. Ensure environment consistency using infrastructure-as-code (IaC) tools. Plan and execute rollback strategies for failed deployments. Change Management & Documentation Maintain release notes, deployment instructions, and changelogs. Coordinate change approvals and sign-offs. Monitoring & Reporting Track release metrics (success rate, deployment time, failure rate). Monitor system performance post-deployment for stability. Incident & Rollback Handling Responding to release-related incidents. Trigger rollback or hotfix procedures when needed. DevSecOps Engineer Roles and Responsibilities: 1. Integrate Security in CI/CD: Embed security scans in CI/CD (SAST, DAST, SCA). Automate vulnerability scanning of code, containers, and infrastructure. Security as Code: Implement security policies through code Secure IaC using tools like tfsec, Checkov, or KICS. Secrets & Identity Management: Manage credentials using Vault, AWS Secrets Manager, or Azure Key Vault. Enforce least-privilege access and RBAC. Threat Modeling & Risk Assessment: Conduct risk assessments and threat modeling sessions. Work with development teams to remediate identified risks early. Compliance & Governance: Ensure pipelines and processes are compliant with standards (e.g, SOC 2, NIST, GDPR). Generate audit trails for all CI/CD and security operations. Security Monitoring & Incident Response. Container and Cloud Security: Secure Docker, Kubernetes, and cloud infrastructure (AWS, Azure, GCP).