Simranjeet Singh Dua
Cloud Platform Engineer
🎯 Professional Summary
I am a versatile Cloud Platform Engineer with over 4 years of professional experience specializing in building scalable internal developer platforms and automating cloud infrastructure. My focus is on empowering engineering teams with secure, self-service tooling and creating “golden paths” for seamless deployment.
| Cloud | Infrastructure | Configuration | Extensibility | Governance | CI/CD |
|---|---|---|---|---|---|
| Azure | Terraform | Ansible | Python | GitHub | GitHub Actions |
💼 Professional Experience
Cloud Platform Engineer @ Gjensidige
May 2024 – Present | Oslo, Norway
Tech Stack: Azure Cloud Linux Python Ansible Terraform GitHub Actions
Cloud Specialist @ HCL Tech
January 2023 – May 2024 | Oslo, Norway
Tech Stack: Google Cloud Linux Python Ansible Terraform
Software Engineer Intern @ Tech Agrim
October 2022 – December 2022 | Lierstranda, Norway
Tech Stack: AWS Cloud Linux Python
System Engineer @ Infosys
September 2020 – July 2021 | Pune, India
Tech Stack: AWS Cloud Linux Python
Machine Learning Intern @ Eckovation
June 2018 – July 2018 | Remote, India
Tech Stack: Python Machine Learning
🚀 Featured Projects
1. Ansible Execution Platform
Technologies: Ansible GitHub Actions AKS Containerization
- Architected a scalable internal automation platform using Custom GitHub Actions Reusable Workflows and Community Ansible for automated testing, dry-runs, and controlled deployments, replicating enterprise-grade features of Ansible Tower and avoiding costly vendor licensing.
- Built and managed custom runner images on AKS, integrating automated linting and using Ansible Galaxy along with PIP to standardize package management of collections and python packages as per required by a playbook.
- Secured infrastructure access by developing custom onboarding logic that restricts repository permissions to specific target machines, backed by github workflow logging.
2. Automated Backup Service
Technologies: GitHub Actions Terraform Python Azure Native Backup AzCopy
- Designed and implemented an automated backup solution for all the Azure resources based on native cloud services, built to be reusable across all environments. This solution significantly improved scalability, reduced delivery time, and requires
- minimal to no maintenance. Once configured, it automatically handles newly discovered or removed resources, ensuring scheduled backups are always maintained. Delivered backups for all the existing resources in our modern subscription within 9 months period and around 99% backup operation success rate because of the reliability of the solution.
- Developed a custom backup script to address scenarios not supported by Azure’s native backup capabilities. This script runs daily on our cluster to perform regular backups and is fully integrated into our standard GitOps workflow
3. Webhook Security Framework for Azure Automation
Technologies: Azure Automation Python Runbooks Azure Key Vault
- Identified and remediated a critical security gap in Azure Automation where publicly accessible webhook URLs could trigger runbooks without secondary authentication.
- Architected a custom authentication layer where unique tokens are generated at webhook creation and stored securely in Azure Key Vault.
- Developed a validation logic within runbooks to intercept the WebhookData payload, verifying the presence of a valid auth token in the request header before allowing script execution.
- Standardized organizational security posture by ensuring no runbook can be triggered by unauthorized or anonymous external calls.
4. Python Dispatcher for Azure Automation Hybrid Workers
Technologies: Azure Automation Python Runbooks Virtual Environments
- Developed a Python dispatcher module to dynamically load and execute runbooks in the virtual environment specified in the script shebang, enabling controlled runtime environments on Azure Automation Hybrid Worker VMs.
- Implemented a runtime shim layer that launches scripts in the designated virtualenv, overcoming Azure Automation’s default system Python limitation.
- Enabled local runbook execution within internal networks via Hybrid Worker VMs while maintaining strict control over Python dependencies and environment isolation.
- Improved runbook reliability and dependency management by mapping runbooks to dedicated virtual environments on hybrid worker infrastructure.
🎓 Education
| Degree | Institution | Period | Location |
|---|---|---|---|
| Master’s in Information Security | NTNU | Aug 2021 – Dec 2023 | Gjøvik, Norway |
| Bachelor of Technology, Computer Science | Guru Gobind Singh IP University | Aug 2015 – Aug 2019 | New Delhi, India |
🏆 Certifications
Cloud Platforms
Professional Cloud Architect — Mar 2023
SysOps Administrator – Associate — Oct 2023
Networking & Security
CCNA Routing and Switching — Aug 2019
Cybersecurity (Pentester Academy)
- WebApps CVE Basics — Jul 2020
- WebApps CVE Intermediate — Jul 2020
- Network Scanning Basics — Jul 2020
- Password Cracking Basics — Jul 2020
- Privilege Escalation Basics — Jul 2020
- OSQuery Basics — Aug 2020
🌍 Languages
| Language | Proficiency |
|---|---|
| 🇬🇧 English | Second Language (Professional Working Proficiency) |
| 🇳🇴 Norwegian | B1 (Intermediate) |
| 🇮🇳 Hindi | Native |
📫 Let’s Connect!
I’m always interested in hearing about new projects and opportunities in cloud infrastructure, DevOps, and automation.
Last updated: March 2026