Skip to main content

💫 About Utsav Garg

Lead Cloud & AI Security Architect | Staff DevSecOps & Platform Engineer
📍 Global Enterprise Delivery • 15+ Years of Professional Engineering Experience
🔗 Connect on LinkedIn • 📺 TechHustlewithUG on YouTube • 💻 GitHub @techslaves

🔭 Executive Profile​

Cloud Engineering and Security Professional with 14+ years of experience spanning Software Engineering, Cloud Security, Regulatory Compliance, and DevSecOps. Specializing in scalable, secure, and resilient cloud-native architectures, containerization, and artificial intelligence infrastructure.

Proven track record leading Kubernetes infrastructure (EKS), automated GitOps deployments, Infrastructure as Code (Terraform), FinOps cost optimization, and rigorous regulatory authorizations (FedRAMP, EU NIS 2, NIST SP 800-53, SOC 2, SOX).

🤝 Core Domains of Expertise​

🤖 1. AI & LLM Security​

  • OWASP Top 10 for LLM Applications (2025 Edition): Prompt injection mitigation, sensitive data exposure defense, model supply chain safeguards, and unbounded consumption (Denial of Wallet) rate limiters.
  • Model Context Protocol (MCP): Author of the hardened PostgreSQL MCP Server, enforcing parameterized AST query validation and least-privilege tool execution.
  • RAG & Vector Security: Enforcing row-level security (RLS) on vector embeddings, input/output DLP sanitization, and semantic collision defense.

🛡️ 2. Cloud Security & Regulatory Compliance​

  • Statutory Compliance: FedRAMP Authorized environments, EU NIS 2 Directive (EU 2022/2555), Belgian CCB CyFun® 2025, and NIST SP 800-53.
  • AWS Security Governance: AWS Security Hub, AWS Config automated conformance packs, GuardDuty anomaly detection, KMS encryption, IAM least-privilege scoping, and CloudTrail tamper-proof audit trails.
  • Kubernetes Hardening: OPA Gatekeeper & Kyverno admission controllers, Pod Security Standards (Restricted), Calico/Cilium network micro-segmentation, and External Secrets Operator with HashiCorp Vault.

☸️ 3. Cloud-Native, Kubernetes & DevSecOps​

  • Cluster Management: Amazon EKS, multi-tenant cluster management, Karpenter/Cluster Autoscaler, and zero-downtime rolling upgrades.
  • GitOps & Continuous Delivery: ArgoCD and FluxCD declarative cluster synchronization.
  • Hardened CI/CD: Reusable GitHub Actions workflows, AWS OIDC token federation (zero static credentials), SLSA Level 3 provenance, and automated container scanning (Trivy, AquaSec).
  • Infrastructure as Code (IaC): Terraform, Terragrunt, Helm charts, and Kustomize.

🏢 4. Enterprise Software Engineering & FinOps​

  • 54+ Years Enterprise Java/JEE: Deep software engineering foundation in Java 21, Spring Boot, Spring Cloud, Hibernate, and distributed microservices.
  • Resilient Distributed Systems: Apache Kafka (Amazon MSK), PostgreSQL High Availability, Redis caching, and RabbitMQ.
  • Cloud FinOps: Engineered 30% documented AWS cost reductions through automated mixed spot instance fleets, Savings Plans, right-sizing analysis, and S3 lifecycle tiering.

⚡ Key Career Highlights & Impact​

  • ✔ GitOps & Kubernetes Automation – Architected GitOps-driven EKS cluster lifecycle management with automated Canary rollouts and zero-downtime upgrades.
  • ✔ FedRAMP & NIS 2 Cloud Authorization – Led implementation of FedRAMP High/Moderate cloud baselines and NIS 2 compliant security controls with automated continuous monitoring (ConMon).
  • ✔ FinOps Cloud Cost Optimization – Achieved documented 30% reduction in annual AWS infrastructure spend via spot orchestration, right-sizing, and storage tiering.
  • ✔ Monolith to Microservices Transformation – Spearheaded enterprise migration of legacy banking reconciliation systems into containerized microservices.
  • ✔ Technical Educator & Community Creator – Created TechHustlewithUG, authoring deep-dive masterclasses on Helm Charts and GitHub Actions Security.

🌐 Connect & Community​