Enterprise Cloud Secure by Design AI-Enabled

Cloud strategy and engineering transformation across regulated and mission-critical environments, with security, resilience, governance, and AI enablement integrated throughout the technology lifecycle.

20+Years in Technology
50+Enterprise Engagements
30+Professional Credentials
4Cloud PlatformsAWS · Azure · GCP · Huawei Cloud

Experience Across Regulated and Mission-Critical Environments

Orange Business Services
GovTech Singapore
Tech Mahindra
HCL Technologies
CrimsonLogic
Wipro
Kaplan
Leadership Profile

Enterprise Technology Leadership

Focus Areas
Cloud Strategy & Architecture Application Modernisation Platform Engineering & DevSecOps Site Reliability & Operational Resilience Infrastructure as Code & Automation Cloud Security & Governance FinOps & Cloud Cost Governance Generative AI Enablement & Governance

Balakrishna brings 20 years of experience across regulated and mission-critical environments, spanning financial services, government, telecommunications, education, and healthcare.

He brings together enterprise priorities, cloud and application architecture, platform engineering, delivery, and operations to shape technical direction and build secure, resilient, and scalable services.

He translates complex challenges into pragmatic architecture decisions, modernisation roadmaps, operating models, and governance frameworks that strengthen engineering capability and create sustainable organisational value.

His enterprise perspective, further strengthened through the ISB Executive CTO Programme, enables him to align technology strategy, innovation, architecture, and governance with organisational priorities, business value, and transformation outcomes.

Professional Experience

Lead Cloud & DevSecOps Architect

Orange Business Services, Singapore

Current Dec 2021 – Present
  • Led cloud strategy, architecture, and engineering transformation engagements for regulated financial-services and global enterprise clients across APAC and EMEA
  • Defined technology strategy and target architectures for multi-cloud, platform engineering, DevSecOps, operational resilience, cloud cost governance, and AI enablement
  • Guided migration and modernisation programmes across complex capital-markets environments, balancing delivery priorities with resilience, security, regulatory, and operational requirements
  • Established architecture standards, engineering guardrails, and governance practices that enable teams to deliver consistently at scale
  • Built engineering capability through mentoring, technical enablement, and cross-functional collaboration
Technology StrategyEnterprise ArchitectureArchitecture GovernanceDelivery LeadershipStakeholder ManagementRegulatory AlignmentTeam Mentoring

Cloud & DevOps Architect

Government Technology Agency (GovTech), Singapore

Nov 2018 – Dec 2021
  • Directed multi-cloud architecture and platform enablement for Whole-of-Government agencies on Singapore's Government Commercial Cloud
  • Led and mentored a team of cloud engineers delivering secure, scalable cloud enablement services
  • Established a scalable secrets-management capability using HashiCorp Vault and Terraform across government cloud environments
  • Set cloud migration, automation, and technical architecture standards through cross-agency governance forums
  • Recognised with a Best Performer award for delivery excellence and contribution to cloud platform security
Public-Sector TransformationPlatform StrategySecurity ArchitectureTeam LeadershipCross-Agency GovernanceStandards DefinitionEnablement & Training

AWS DevOps Lead

Kaplan Singapore

Aug 2017 – Oct 2018
  • Led migration and modernisation of institutional applications to AWS, managing cloud engineering and application-support teams
  • Introduced automated deployment practices, blue/green release patterns, and disaster-recovery automation
  • Strengthened production readiness, operational consistency, and release reliability across institutional systems
Cloud MigrationDevOps TransformationTeam LeadershipResilience EngineeringRelease GovernanceOperational Readiness

Senior Lead Cloud & Systems Engineer

CrimsonLogic Pte Ltd, Singapore

Mar 2014 – Aug 2017
  • Modernised application delivery for government workloads on AWS through repeatable automation and cloud operating practices
  • Reduced deployment cycles from weeks to hours by standardising delivery workflows and infrastructure automation
  • Supported secure, reliable cloud adoption in high-accountability public-sector environments
Cloud AdoptionDelivery TransformationInfrastructure AutomationProcess StandardisationPublic-Sector Delivery

Lead Systems Engineer

CrimsonLogic Pte Ltd, Singapore

Oct 2011 – Feb 2014
  • Led infrastructure operations for mission-critical Singapore public-sector systems
  • Delivered technology refresh, operational improvements, audit readiness, and compliance activities across critical services
  • Built a strong operational foundation in reliability, governance, production support, and service continuity
Infrastructure LeadershipService ReliabilityGovernance & ComplianceAudit ReadinessTechnology Refresh

Middleware Administrator

HCL Singapore Pte Ltd (Client: Deutsche Bank)

Sep 2010 – Sep 2011
  • Delivered middleware technology refresh activities for a core banking application
  • Supported annual disaster-recovery testing, production operations, and service-continuity requirements
  • Developed hands-on experience in highly controlled financial-services environments
Middleware EngineeringDisaster RecoveryFinancial Services OperationsChange Management

Middleware Administrator

Tech Mahindra (Client: British Telecom)

Oct 2008 – Sep 2010
  • Supported middleware administration and systems integration across a large telecommunications application estate
  • Contributed to stable platform operations, issue resolution, and service delivery across interconnected systems
Platform OperationsSystems Integration

Middleware Support Engineer

Wipro Technologies, Bangalore

Nov 2006 – Sep 2008
  • Supported middleware across pre-production and production environments
  • Performed application-load and performance-testing activities, building a foundation in enterprise operations and service reliability
Platform OperationsPerformance Engineering

Credentials

A multidisciplinary credential portfolio spanning cloud architecture, engineering, security, reliability, FinOps, and emerging AI technologies.

Cloud Architecture & Platforms

  • Amazon Web Services
    AWS Certified Solutions Architect – Professional Amazon Web Services
  • Amazon Web Services
    AWS Certified Solutions Architect – Associate Amazon Web Services
  • Microsoft Azure
    Microsoft Certified: Azure Solutions Architect Expert Microsoft Azure
  • Google Cloud
    Google Cloud Certified: Professional Cloud Architect Google Cloud
  • Huawei Cloud
    Huawei Cloud Migration Professional Huawei Cloud

DevOps, SRE & Platform Engineering

  • Amazon Web Services
    AWS Certified DevOps Engineer – Professional Amazon Web Services
  • Microsoft Azure
    Microsoft Certified: DevOps Engineer Expert Microsoft Azure
  • Google Cloud
    Google Cloud Certified: Professional Cloud DevOps Engineer Google Cloud
  • Red Hat
    OpenShift Container Platform Red Hat
  • Linux Foundation
    Certified Kubernetes Administrator (CKA) Linux Foundation

Cloud Security & Zero Trust

  • Google Cloud
    Google Cloud Certified: Professional Cloud Security Engineer Google Cloud
  • Microsoft Azure
    Microsoft Certified: Azure Security Engineer Associate Microsoft Azure
  • ISC2
    ISC2 Certified in Cybersecurity ISC2
  • CyberArk
    CyberArk Certified Defender & Sentry CyberArk
  • HashiCorp
    Vault CHIP & Associate HashiCorp

Networking & Multi-Cloud Connectivity

  • Amazon Web Services
    Advanced Networking Specialty Amazon Web Services
  • Aviatrix
    Multi-Cloud Network Professional Aviatrix
  • Microsoft Azure
    Network Engineer Associate Microsoft Azure

Infrastructure as Code & Automation

  • HashiCorp
    Terraform CHIP & Associate HashiCorp
  • HashiCorp
    HashiCorp Consul Associate HashiCorp

FinOps & Cloud Cost Optimisation

  • Flexera
    Cloud Cost Optimization Administrator Flexera
  • Flexera
    FinOps Technical Administration Flexera

AI & GenAI

  • Anthropic
    Claude Associate Certification Anthropic
  • Microsoft Azure
    Microsoft Certified: Azure AI Engineer Associate Microsoft Azure
  • AWS Partner
    Generative AI Essentials (Business) AWS Partner

Programming & Middleware

  • OpenEDG
    PCAP: Python Programming OpenEDG
  • BEA Systems
    WebLogic Application Server BEA Systems

Expertise

Strategic disciplines spanning cloud transformation, platform engineering, secure delivery, operational resilience, cloud cost governance, and AI enablement.

Cloud Strategy & Architecture

  • Define multi-cloud strategy, target architectures, governance standards, and cloud adoption roadmaps
  • Guide migration, application modernisation, and operating-model transformation across complex enterprise technology environments
  • Align technology decisions with business priorities, regulatory expectations, resilience, and long-term capability

DevSecOps & Engineering Enablement

  • Establish secure software-delivery practices with automated quality, security, and compliance controls
  • Standardise CI/CD, GitOps, release governance, and reusable delivery patterns across engineering teams
  • Enable developer teams through platform capabilities that improve speed, consistency, and production confidence

Site Reliability Engineering & Resilience

  • Develop reliability-engineering practices across observability, incident response, service ownership, and continuous improvement
  • Introduce operational analytics and automation to improve detection, triage, and remediation of service issues
  • Strengthen recovery readiness through resilience testing, failover planning, and operational runbooks

Infrastructure as Code & Automation

  • Establish Infrastructure as Code standards with policy-driven provisioning, reusable modules, and governance controls
  • Define Kubernetes and container-platform strategies for secure, scalable application environments
  • Build internal developer platform (IDP) capabilities that standardise cloud-native engineering patterns

Application Modernisation

  • Guide application modernisation through re-platforming, refactoring, containerisation, and cloud-native architecture patterns
  • Define practical migration paths based on business criticality, technical debt, risk, and delivery readiness
  • Enable API-led and event-driven integration approaches for scalable digital services

AI Enablement & Operational Intelligence

  • Shape operational-intelligence and automation approaches for event correlation, anomaly detection, service insight, and response improvement
  • Enable generative AI adoption through secure platform foundations, governance controls, and prioritised business use cases
  • Establish AI governance considerations for model lifecycle, access controls, monitoring, risk management, and human oversight

Cloud Security & Governance

  • Define Zero Trust-aligned cloud-security and identity approaches for enterprise environments
  • Establish cloud-security governance, secrets-management practices, and security automation capabilities
  • Support alignment to recognised control frameworks, including CIS Benchmarks, ISO 27001, SOC 2, and NIST AI RMF, where applicable

FinOps & Cloud Cost Governance

  • Establish cloud-cost visibility, accountability, and governance across enterprise cloud estates
  • Guide commitment planning, demand forecasting, and consumption optimisation across cloud services
  • Build FinOps reporting and decision-making practices that connect engineering, finance, and business stakeholders

Key Transformations

Representative transformation programmes spanning strategy, architecture, delivery, governance, and operational readiness.

Cloud Migration

Enterprise Workload Migration to AWS

Led a governed migration of enterprise workloads from on-premises environments to AWS, covering assessment, platform foundations, migration execution, and production readiness.

What I Delivered
  • Workload assessment, migration strategy, and delivery sequencing
  • AWS landing-zone foundations using Infrastructure as Code
  • Application and database migration planning and execution
  • Controlled production cutover designed to minimise business disruption
  • Operational handover, support readiness, and governance controls
Technologies Used
AWSAWS Application Migration ServiceAWS Database Migration ServiceCloudFormationTerraformIAMAWS OrganizationsAWS Control Tower
FinOps

FinOps & Cloud Cost Governance

Established cloud-cost visibility and FinOps governance across AWS environments, enabling more informed consumption, commitment, and optimisation decisions.

What I Delivered
  • Cloud-spend assessment and prioritised optimisation roadmap
  • Commitment-planning strategy for Reserved Instances and Savings Plans
  • Tagging, allocation, and accountability model
  • Budgeting, forecasting, showback, and reporting dashboards
  • FinOps governance practices for ongoing cost management
Technologies Used
AWS Cost ExplorerAWS BudgetsCloudCheckrFlexeraPower BI
Platform Engineering

Enterprise Kubernetes & Developer Platform

Established a Kubernetes-based internal developer platform (IDP) on Azure, enabling secure, repeatable application delivery through GitOps and self-service infrastructure patterns.

What I Delivered
  • AKS platform foundation, hardening, and operational standards
  • GitOps-based deployment workflows
  • Reusable self-service Infrastructure as Code modules
  • Standard observability, secrets-management, and platform-security patterns
  • Developer onboarding guidance and engineering guardrails
Technologies Used
KubernetesAKSArgo CDTerraformHelmIstioPrometheusGrafanaVault
Security

Cloud Security & Compliance

Strengthened AWS cloud-security posture through continuous visibility, vulnerability management, perimeter protection, policy-as-code guardrails, and automated response patterns.

What I Delivered
  • Cloud-security assessment and prioritised remediation plan
  • Continuous threat detection and vulnerability-management capabilities
  • Perimeter and DDoS protection hardening
  • Policy-as-code controls to support consistent guardrails and compliance monitoring
  • Security monitoring and automated remediation workflows
Technologies Used
Amazon GuardDutyAmazon InspectorAWS WAFAWS ShieldAWS ConfigAWS Config Rules
DevSecOps

DevSecOps Pipeline Automation

Integrated security testing and policy controls into enterprise delivery pipelines, improving release assurance and reducing reliance on manual checks.

What I Delivered
  • SAST, software composition analysis (SCA), and container scanning within CI/CD
  • Infrastructure as Code and secrets-scanning controls
  • Release-policy gates and approval workflows
  • Reusable secure-pipeline templates for engineering teams
  • Continuous compliance reporting and evidence generation
Technologies Used
GitHub ActionsGitLab CIJenkinsSonarQubeSnykTrivyCheckovDockerKubernetes
Infrastructure

Disaster Recovery & Infrastructure Modernisation

Modernised existing infrastructure through AWS migration, automated provisioning, and multi-region disaster-recovery capability for critical services.

What I Delivered
  • Existing infrastructure and application estate assessment, with cloud target-architecture design
  • Automated infrastructure provisioning and configuration patterns
  • Multi-region disaster-recovery design and implementation
  • Backup, replication, and failover automation
  • Disaster-recovery testing, runbooks, and operational readiness activities
Technologies Used
AWSAWS Elastic Disaster RecoveryAWS BackupTerraformRoute 53Python
SRE & Operational Automation

SRE, Operational Automation & Platform Reliability

Established reliability-engineering practices and operational automation for enterprise AWS workloads, improving visibility, incident response, and service-recovery readiness.

What I Delivered
  • SRE operating model, service-level objectives, and error-budget framework
  • Improved event detection, correlation, and incident triage through observability and automation
  • Runbook automation for recurring remediation activities
  • Standard observability patterns across services
  • On-call, escalation, incident-management, and review practices
Technologies Used
Amazon CloudWatchAWS X-RayAmazon Managed Service for PrometheusAmazon Managed GrafanaPagerDuty
Generative AI

Secure Generative AI Platform for Financial Services

Designed a secure generative AI platform for financial-services use cases, combining retrieval-augmented generation, selected AI-agent workflows, access controls, monitoring, and governance guardrails.

What I Delivered
  • Generative AI architecture and cloud deployment model
  • AI-agent workflow design for selected multi-step analysis and task-orchestration use cases
  • Natural-language-to-SQL capability
  • Retrieval-augmented generation for controlled knowledge access
  • Access controls, audit logging, monitoring, and governance guardrails
  • Governance foundations to support controlled experimentation and production readiness
Technologies Used
AWS BedrockAmazon Bedrock AgentsAmazon OpenSearch ServiceSageMakerLambdaAPI GatewayS3AthenaPythonLangChainCloudWatch

What Leaders Say

Recommendations from leaders and collaborators across enterprise, public-sector, and technology-services environments.

“Bala is the person you turn to for expertise in cloud-native technologies, whether it's microservices, DevOps, or data & security-driven architectures. His work on a large government project, especially developing Terraform scripts, has made a huge impact on efficiency. Reliable, delivers top-quality work, and a great team player.”
S
Subrata Chakraborty Enterprise Cloud & Security Architect
“Bala has played a pivotal role in the adoption of IaC and DevOps practices, helping customers achieve significant improvements in their IT operations. He has successfully migrated customers onto cloud, deployed landing zones using IaC and optimized cloud costs using FinOps principles for customers across APAC.”
D
Daniel Trajkovski Cloud & Infrastructure Leader
“Bala independently handled the deployment of Secrets Management using HashiCorp Vault and Terraform on the Government Commercial Cloud. He ensured strict adherence to security policies, conducted workshops with public agencies, and effectively led a team of cloud infrastructure engineers ensuring GCC security operations and critical audits were handled in a timely manner.”
V
Vincent Teh Cloud Platform Engineering Lead
“Bala worked with us on critical trade and customs projects while working with global teams. His deep experience in middleware, Linux systems, and third-party integrations helped resolve critical production incidents very quickly. His application of site reliability principles ensured reliability, capacity and quick service recovery.”
V
Vikram Patil Senior Director, AI Transformation
“Within 3 months of joining, he delivered quality work in his very first challenging engagement for an enterprise client in Azure, starting with zero information on the customer environment. Bala automated every deployment using Terraform IaC, reducing provisioning time from weeks to days with zero downtime in production.”
P
Purushothaman K Enterprise Architect | CISSP | PMP
“Bala is known to me for over nine years across multiple critical on-premises and cloud infrastructure projects. He led several critical projects including middleware technology refresh and AWS cloud migration. A tremendously focused and goal-oriented professional who always finishes the job ahead of time.”
V
Velmurugan Sanjeevi IT Infrastructure Manager
“Bala is the most effective technology enthusiast I have come across. He has strong experience across entire IT systems from Middleware, Systems, Cloud Technologies and Project Management. His contribution towards on-premise to AWS migration is outstanding.”
A
Angamuthu Mutharasu Technical Management Office
“One thing immediately flashes in my mind about Bala: professionalism. He is a true professional who keeps learning. He always sets his goals higher and achieves them. In hard times, he never quits and always looks to solve the problem. He is a true winner.”
P
Pugalenthi Alagesan Cloud Security Architect | vCISO
“Bala has helped with the POC and implementation of HashiCorp Vault and Terraform for AWS, Azure and GCP.”
K
Keng Leong Choong Cloud & Data Centre Transformation Lead
“Balakrishna is a competent and responsible system administrator who supported me well for the operations of a mission-critical system. It was a great experience working with him.”
J
Joe Tan Cyber Security Practitioner
“Bala is technically savvy with strong project management skills, bringing across departments for timely delivery of services.”
K
Karen Tan Governance & Quality
“Worked with Bala in the SingPass project. He is friendly and knowledgeable in his area, great to have him as part of the team.”
L
Lee Fu Xiang Gunawan Lead Software Engineer

Let's Connect

Exploring your next technology priority?

Cloud strategy, engineering transformation, platform engineering, operational resilience, governance, FinOps, or AI adoption. I would welcome the opportunity to connect and discuss your priorities.

Singapore