// devops / platform engineer

Lokesh Dangi

I work on Kubernetes and cloud infrastructure at Appointy — container security, GitOps, and the Terraform platform that provisions and runs it.

Lokesh Dangi

01 · about

About

I'm a DevOps / Platform Engineer at Appointy, working on Kubernetes and cloud infrastructure day to day. I maintain our container security standard and the CI/CD pipeline behind it, enforce Kyverno policies across our clusters, and deploy applications through Helm and ArgoCD as part of our GitOps setup. I also help run the Terraform platform we use to provision GCP infrastructure for new clients — cutting setup from a few days to under an hour — along with a companion module that provisions monitoring alerts for each client in minutes.

02 · experience

Experience

Appointy Jan 2025 — Present
DevOps / Platform Engineer Jul 2025 — Present
DevOps Intern Jan 2025 — Jun 2025

03 · projects

Featured Projects

Production Sole engineer

Zero-Downtime Cloud Run → GKE Migration

Sole-engineer migration of a live SaaS product to a Kyverno-gated GKE cluster with a hardened, signed CI/CD pipeline — zero downtime, with production issues across IAM, networking, and CI/CD root-caused independently along the way.

GKEArgoCDKustomizeKyvernoGateway APICloud BuildCosign
Read case study →
Production Sole engineer

Container Supply-Chain Security Pattern

Authored a compliance-mapped container security standard and hardened build pipeline (scan, sign, attest) — later replicated across four additional projects and three enterprise clients.

DockerCloud BuildTrivyGrypeSyftCosignKubernetes
Read case study →
Production Module lead, 4-person team

Enterprise GCP Infrastructure Platform

Led 4 of 11 Terraform modules on a platform that cut new-client GCP setup from 2–3 days to 15–30 minutes, with 75–85% CIS benchmark compliance out of the box.

TerraformGCPGKEVPCCloud SQLIAM
Read case study →
Production Sole engineer

Multi-Client SaaS Monitoring Platform

9-module Terraform platform for GCP Cloud Monitoring with a primary/secondary notification-channel pattern — onboarding a new client is a config change, not new code.

TerraformCloud MonitoringPub/SubRedisSlackPagerDuty
Read case study →
Production Sole engineer

GitOps Coverage Consolidation

Brought two previously-unmanaged production workloads under ArgoCD and scoped a tighter project boundary — zero downtime, zero pod restarts.

ArgoCDHelmKubernetesGKE
Completed Sole engineer

Alert-Routing Migration CLI

Python discover/plan/apply tool that safely migrated 122 alert policies across 4 GCP projects with zero unintended side effects, and cleaned up 46 obsolete alerts.

PythonGCP Cloud MonitoringCLISlack

Client names above are anonymized — most of this work was delivered for enterprise clients under confidentiality, so source repos aren't public. Case studies describe the engineering in full detail.

04 · skills

Skills & Tech Stack

Cloud & Infrastructure

GCPAWSTerraform

Kubernetes & GitOps

KubernetesGKEArgoCD KustomizeHelmKyverno Gateway API

CI/CD & Supply Chain Security

Cloud BuildDockerHadolint TrivyGrypeSyft Cosign

Observability & SRE

Cloud MonitoringPrometheus GrafanaPagerDutySlack alerting

Languages & Scripting

PythonBashGo YAML/JSON

Everyday Tooling

GitGitHubLinux

05 · writing

Writing

Early notes from earlier in my Linux/DevOps learning — new technical writing in progress.

06 · contact

Get in touch