Jins Thomas

Designing and operating multi-cloud DevOps and Kubernetes platforms for the amAIz Generative AI product line — driving the migration from Azure to GCP and from GitLab CI/CD to GitHub Actions, serving GenAI models, and keeping production AI services running reliably across cloud and on-prem GPU clusters.

• Led the Azure → Google Cloud migration for AI workloads using Terraform — GKE clusters, Compute Engine VMs, Dataproc, Apigee, Load Balancers, Cloud Storage buckets with lifecycle rules, Secret Manager, Cloud KMS, Cloud Armor and Elastic Cloud.
• Built the GCP networking foundation — VPCs and subnets, Private Service Connect (PSC), site-to-site VPN, Network Connectivity Center (NCC), Cloud NAT, and firewall / routing for hybrid and multi-region connectivity.
• Deployed and operated NVIDIA LLMs on an on-prem GPU cluster using Run:AI (GPU orchestration / scheduling) and NVIDIA NIM microservices — serving models such as gpt-oss-120b, gpt-oss-20b, Llama-3.2-3B-Instruct and Llama-3.3-70B-Instruct.
• Deployed NVIDIA embedding models (Llama-3.2-NV-EmbedQA-1B-v2) and built a RAG (Retrieval-Augmented Generation) pipeline using NVIDIA NV-Ingest for document ingestion, parsing and indexing.
• Integrated multiple managed LLM providers — Azure OpenAI, Google Vertex AI and AWS Bedrock — for model routing, fallback and redundancy.
• Deployed and configured data stores for the AI platform — MongoDB Atlas as vector store and document store (RAG), and PostgreSQL (Cloud SQL) on Google Cloud.
• Designed and operated the API gateway stack on Apigee, Azure API Management and Agent Gateway — API proxies with rate limiting and custom authentication / authorization for LLM routing and multi-tenant traffic.
• Supported the NGINX → Agent Gateway migration and implemented agent-oriented routing using A2A (Agent-to-Agent) and MCP (Model Context Protocol).
• Multi-cloud platform engineering across Azure and GCP — landing zone, IAM, networking, GKE / AKS clusters, shared services.
• Built GitOps delivery on ArgoCD + Helm for microservices and MCP servers; standardized Helm charts with HTTPRoute (Gateway API), Workload Identity, HPA and config / secret management.
• Implemented Workload Identity Federation from Kubernetes Service Accounts to Google Service Accounts with least-privilege cross-project access.
• Owned secure networking — private endpoints, hub-and-spoke topology, mTLS between services, corporate proxy & CA trust chain.
• Designed and managed Azure resources — VNets, subnets, NSGs, Application Gateway, Private DNS, Storage Accounts, VMs, disks, Private Endpoints, Azure OpenAI; AKS workloads with API Management, Logic Apps and PostgreSQL / Cosmos DB.
• Configured Key Vault, security policies and DR strategies, optimizing security and high availability for AI-driven applications.
• Led the GitLab → GitHub CI/CD migration — refactored and rebuilt pipelines for 150+ repositories on GitHub Actions with reusable shared workflows, secrets & environments, OIDC to cloud, runner configuration, branch protection, release flows and CI/CD security best practices.
• Implemented GitLab CI/CD with merge trains and merge result pipelines (initial Azure phase); contributed to design-stage features leveraging the Azure SDK.
• Built release and on-call tooling including a read-only DevOps troubleshooting agent integrating kubectl, gcloud, ArgoCD, Apigee, Elastic and GitHub.
• Implemented an automated release process for our SaaS platform, now close to achieving fully one-click releases; maintained release stability across customer environments.

• Designed, implemented and maintained CI/CD pipelines using Jenkins and Groovy scripting; automated build, test and deployment for microservices and monolithic applications.
• Troubleshot pipeline failures, integration issues and performance bottlenecks to keep delivery flowing.
• Installed, configured and maintained Jenkins for enterprise environments — plugin management, pipeline automation, security hardening, RBAC and user-access control.
• Created custom deployment automation in Groovy, Shell and Bash scripting.
• Performed regular backups and restores for DevOps tooling, ensuring high availability and disaster recovery.
• Installed, configured and managed GitLab Enterprise for version control and CI/CD — repositories, user permissions, branch policies and pipeline standards.
• Configured LDAP and SMTP integrations for DevOps tools.
• Installed, configured and maintained Nexus Repository Manager for artifact storage — Docker images, Maven and NPM packages; automated backup, cleanup and repository integrations.
• Built and optimized Docker images for microservices and enterprise applications.
• Deployed and managed applications in Kubernetes, including RBAC, Ingress and end-to-end troubleshooting.
• Implemented Helm charts and ArgoCD for automated deployments and GitOps workflows.
• Set up and maintained NGINX Ingress controllers for traffic routing and load balancing.
• Implemented OpenBao Key Vault with External Secrets for secure secret management in Kubernetes.
• Automated infrastructure provisioning using Terraform across cloud and on-prem environments.
• Managed and deployed workloads on AWS and Kubernetes clusters; deployed, managed and troubleshot production and staging environments.
• Implemented continuous-deployment strategies across client environments; monitored system health, optimized performance and ensured high availability.
• Implemented TLS / mTLS encryption for secure communication across microservices and managed SSL/TLS certificates for Jenkins, GitLab, Nexus, Kubernetes and ArgoCD.
• Worked with PostgreSQL and Couchbase for database administration and automation.
• Built a Configuration-as-Code (CAC) framework that delivers custom SQL queries and JSON files to Couchbase buckets, packaged as a Docker image.
• Designed and implemented DevOps networking between client sites and Amdocs premises, ensuring secure and efficient connectivity across multiple locations.
• Created automation for data synchronization between Nexus repositories, ensuring seamless flow between customer sites and Amdocs infrastructure.
• Developed complex automation solutions integrated with products to streamline data publishing, integrity checks and notifications.
• Acted as the focal point for DevOps technical issues — guiding teams, resolving complex challenges and assisting management in DevOps strategy and product-delivery planning.
• Onsite deployment & knowledge transfer: traveled to Kazakhstan to build a complete DevOps environment and conducted knowledge-transfer sessions for the customer.

• Designed and managed Azure cloud infrastructure — cost-effective, high-availability architectures across multiple clients.
• Automated Azure provisioning with PowerShell and ARM templates; built post-provisioning automation.
• Provisioned and managed AKS clusters; Helm-based deployments; troubleshooting for high availability and scalability.
• Designed DevOps networking between client sites and Amdocs premises; built Nexus data sync automation across geographies.
• Acted as the focal point for DevOps technical issues and assisted management on DevOps strategy and product delivery planning.
• Onsite deployment and knowledge-transfer assignment in Kazakhstan — built a complete DevOps environment for the customer.
• Implemented CI/CD pipelines for AKS using Helm charts; configured Datadog for cloud and Kubernetes monitoring.
• Configured and managed Azure Pipelines for Continuous Delivery.

• Containerized applications and daemon jobs using PKS (Pivotal Container Service).
• Authored Dockerfiles and Kubernetes manifests for client applications.
• Built CI/CD pipelines using GitLab CI/CD; managed repositories, version control and collaboration.
• Designed and optimized GitLab pipelines for build, test and deployment automation.
• Monitored and managed pods, deployments and services using PKS Dashboard and kubectl; troubleshot containerized application and deployment issues.

• Built and activated new telecom services for enterprise customers — VOIP services, trunks and routers.
• Configured and provisioned network services for seamless connectivity and optimal performance.
• Diagnosed and resolved network issues on switches and routers, ensuring minimal downtime.
• Performed service migrations across platforms and managed lifecycle disconnections per contract policy.