safwan@workindia:~online

safwan@workindia:~$ whoami

Safwan Khan

DevOps Engineer II

WorkIndia · Bangalore · Debezium contributor

Building and operating scalable AWS & Kubernetes platforms — EKS, Argo CD, Helm, Karpenter, GitOps, and automation that keeps production stable.

AWSEKSArgo CDHelmKarpenterGitOpsBash

cat ./experience git show opensource

tip: scroll · press section links in nav · print for a clean resume view

$ cat ~/about.md

About

Who I am and what I run in production.

about.md

DevOps Engineer II with hands-on experience building and managing scalable, secure, and highly available cloud infrastructure on AWS. Specialized in containerization and orchestration on Kubernetes, with a strong focus on automation, reliability, and performance.

Proven track record designing CI/CD pipelines, optimizing cloud resources, and improving deployment efficiency. I collaborate with development teams to streamline release cycles and keep production stable — GitOps, load balancers, secrets, networking, and bash-driven automation included.

Open-source contributor to Debezium mysql-binlog-connector-java, fixing a TLS 1.3 production crash now shipped in v0.41.1.

AWS / EKSArgo CD / HelmKarpenterGitOpsGitHub ActionsTerraformBashLoad BalancersPrometheus / Grafana

profile.jpg

$ git log --oneline --author=safwan | head

Open Source

Upstream contributions that shipped to production users.

debezium/mysql-binlog-connector-java#25merged

pr → main · Jul 2026 · released in v0.41.1

Fix TLS 1.3 KeyUpdate causing Connection reset by peer

Fixed a production crash in high-throughput MySQL CDC connectors on Java 17+: TLS 1.3 post-handshake KeyUpdate raced with keepalive pings, corrupting the SSL stream. Reconnect then deadlocked on SSLSocket.shutdownOutput(). Upstreamed to Debezium's mysql-binlog-connector-java and merged after maintainer review.

*Pin TLS protocol after socket creation so TLS 1.3 is not selected by JVM defaults
*Skip shutdownOutput() when SO_LINGER(0) is active to avoid SSL close_notify deadlocks
*Always apply SO_LINGER(0) on SSL channel disconnect so reconnect cannot hang
*Added unit tests for protocol pinning and SSL disconnect behavior

JavaTLS 1.3MySQL CDCDebeziumSSL

view pull request →related issue #2213

$ ls ~/skills/

Skills

Tools and platforms I use to ship and operate infrastructure.

./cloud_k8s/

→AWS (EC2, EKS, S3, IAM, VPC, ALB/NLB)
→Kubernetes / EKS
→Helm
→Karpenter
→Argo CD / GitOps
→Docker

./cicd_automation/

→GitHub Actions / Projects
→Jenkins / GitLab CI
→Terraform / CloudFormation
→Bash scripting
→Infrastructure automation
→Secrets & RBAC

./observability_ops/

→Prometheus / Grafana
→CloudWatch
→Load balancers & networking
→Incident response / RCA
→Linux server management
→Python / Django

$ ./what-i-do --list

What I Do

Day-to-day focus as a DevOps Engineer II.

infra.up

Cloud & EKS platforms

Design and operate AWS infrastructure — EC2, EKS, VPC, IAM, S3, and load balancers — built for scale and high availability.

gitops.apply

GitOps & delivery

Ship with Argo CD, Helm, and GitHub Actions so releases are repeatable, auditable, and safe.

cluster.scale

Kubernetes ops

Run containerized workloads on EKS with Karpenter autoscaling, networking, secrets, and security best practices.

pipeline.run

CI/CD automation

Build pipelines and bash-driven automation that cut manual toil and speed up deploy cycles.

observe.watch

Observability

Prometheus, Grafana, and CloudWatch for metrics, alerts, and faster incident response.

tf.plan

IaC & reliability

Provision with Terraform / CloudFormation; troubleshoot production and drive root cause analysis.

$ ls ~/work/

Work

Highlights from platforms, automation, and reliability work at WorkIndia.

EKS / GitOps platform

Operate containerized services on EKS with Helm and Argo CD — reliable deploys, cluster autoscaling with Karpenter, and production-ready networking.

EKSHelmArgo CDKarpenterAWS

CI/CD & automation

CI/CD with GitHub Actions and bash scripts; infrastructure provisioning with Terraform / CloudFormation to reduce manual ops.

GitHub ActionsBashTerraformGitOps

Self-hosted dialer system

Built and maintained self-hosted dialer systems for blast IVRs — less third-party dependency, better outreach scale.

DjangoPythonTelephonyInfra

Bulk operation panel

Kafka-backed bulk operations in CRM for async large-scale processing — ~70% faster workflows.

DjangoKafkaPostgreSQL

VM management platform

Django app to manage VMs — remote commands, updates, and file ops for infrastructure maintenance.

DjangoAutomationLinux

Monitoring & observability

Grafana, Prometheus, CloudWatch, and Sentry — cutting incident response times by ~40%.

GrafanaPrometheusCloudWatch

$ cat ~/experience.yaml