# Kirat, explained

How one engineer keeps a marketplace up, safe and honest. Kirat Pal Singh Lamba is the Lead DevOps Engineer at Quinbay, the team behind Blibli.com, working on DevSecOps, AI-Ops and multi-cloud platforms. Available for open-source contributions; based in Bengaluru, India.

## Who

Lead DevOps Engineer / SRE with 6+ years of experience building cloud platforms, AI-enabled monitoring systems, and scalable CI/CD infrastructure. Specialized in DevSecOps, AI-Ops, automation, reliability engineering, and cost optimization across GCP, AWS and Tencent Cloud. Proven track record of leading org-wide platforms, incident automation, and infrastructure modernization. My stack spans GCP and AWS, containerization with Docker and Kubernetes, configuration management via Ansible and Terraform, monitoring with Prometheus, Grafana, and Datadog, and logging with the ELK stack. I've led initiatives such as an org-wide GCP security compliance platform, AI agents for incident RCA, the Tencent Cloud migration, Elasticsearch upgrades and scale-out, and the GitHub migration, always focusing on reliability, security and cost.

- 06+ years experience
- 10+ projects completed
- GCP, AWS and Tencent Cloud
- Open for open-source contributions

## The numbers

### DevSecOps

Continuous compliance, keyless identity and audits that end in fixes, not just findings.

- 953 user-managed service-account keys surfaced
- 175 unrestricted API keys found
- 40 Prowler checks, org-wide, across 8 compliance frameworks (CIS, ISO 27001, PCI DSS, NIST and internal)
- Workload Identity Federation, with Velero cut over on every GKE cluster

### AI-Ops

Guardrailed agents that read live telemetry and draft the RCA before the war room starts.

- 38 guardrailed MCP tools shipped in 3 agent plugins (DevOps RCA, Datadog, SigNoz)
- $44K a month saved by Heartbeat AI-OPS, winner of Blibli Hackweek 2025
- 80% GKE cost reduction
- 19 applications moved to Tencent Cloud through GitOps

## Journey

- **2026**, Lead DevOps / SRE, Quinbay (Blibli.com): Leads DevSecOps and AI-Ops. Built a GCP security compliance platform (Prowler, 40 checks across 8 frameworks), moved service accounts to Workload Identity Federation, shipped AI agents with 38 guardrailed MCP tools for incident RCA, set up Vault and Consul for the Tencent Cloud migration, scaled Elasticsearch from 10 to 15 nodes and led the GitHub migration.
- **2023**, Senior DevOps Engineer, Quinbay (Blibli.com): Cloud platform engineering, cost optimisation (75%+ savings with Spot VMs), observability with Prometheus, Grafana and Datadog, and mentoring new joiners. Spot Award.
- **2020**, DevOps Engineer, Quinbay (Blibli.com): CI/CD with Jenkins and Bitbucket, Kubernetes clusters, Terraform and Ansible, the Velero backup upgrade and the Bitbucket migration PoC.
- **2020**, DevOps Engineer, COVIAM: Intern in January, engineer by August. Foundational CI/CD pipelines, Docker workflows and Linux automation.
- **2018**, Cyber Security Researcher, Sector443 Labs: Security research at SRM University, CTF 2nd runner-up, member of the Null and OWASP Chennai communities.
- **2018**, Research Intern, DRDO: Parallel computing, volume rendering and CUDA at the Defence Research and Development Organisation, Hyderabad.

## Case studies

### [Cloud posture, on autopilot](https://kirat.space/work/cloud-posture)

DevSecOps, 2026. An in-house GCP security compliance and alerting platform, plus an org-wide audit that moved workloads to keyless identity.

- 953 SA keys surfaced
- 40 security checks
- 8 compliance frameworks
- 175 unrestricted API keys

### [Incidents that explain themselves](https://kirat.space/work/ai-ops)

AI-Ops, 2025 to 2026. Heartbeat AI-OPS on an in-house LLM, then guardrailed AI agents that let any engineer run a root-cause analysis.

- $44K saved per month
- 38 guardrailed MCP tools
- 3 agent plugins
- #1 Hackweek 2025

### [GCP to Tencent Cloud, secrets first](https://kirat.space/work/tencent-migration)

Platform, 2026. Secrets, service discovery and GitOps foundations on Tencent Kubernetes Engine for a multi-cloud migration.

- 19 apps via GitOps
- KMS Vault auto-unseal
- GCS→COS data migrated
- VSO secrets synced to TKE

## Side projects

### [Synaptrix](https://kirat.space/projects/0)

Fully local AI content pipeline: discovers trending DevOps/AI topics from RSS and Reddit, generates LinkedIn posts and blog outlines via Ollama, creates SDXL cover images, and publishes to Medium. Zero external APIs.

Built with Python, Ollama, ComfyUI, SDXL, SQLite, RSS, Medium API.

### [DarkForge AI](https://kirat.space/projects/1)

Prompt-to-YouTube video pipeline on Google Gemini: writes the script, plans 20 to 35 scenes, generates images, Veo clips and Remotion motion graphics, voices every scene and assembles a 5 to 10 minute video with transitions and color grading.

Built with Python, Gemini, Veo, Remotion, FFmpeg, MoviePy.

### [Authentix](https://kirat.space/projects/2)

Fake news detection using web scraping and domain comparison against OpenSources.co. TkInter GUI with extended support for Indian news sites.

Built with Python, TkInter, Web Scraping, CSV.

### [Awesome Python Scripts](https://kirat.space/projects/3)

Curated collection of reusable Python scripts for automation, utilities, and dev workflows.

Built with Python, Automation, Scripting.

### [Smart AI](https://kirat.space/projects/4)

AI-assisted troubleshooting tool that understands software queries and provides targeted solutions.

Built with Python, AI, Problem Solving.

### [App Exploits](https://kirat.space/projects/5)

Security research project exploring application vulnerabilities and exploitation techniques for penetration testing.

Built with Security, Python, Penetration Testing.

## Recognition

> He is a strong technical contributor and a dependable team player who consistently brings a positive attitude to his work. Kirat stands out for his appetite to learn, his sense of ownership and his ability to take on challenges with confidence. … I would highly recommend him for his technical capabilities, collaborative mindset and commitment to excellence.
>
> Kaliprasad Ruddarraju, Managed Kirat directly at Quinbay, Apr 2026

> Pak Kirat took that further by pushing the idea of automating the monitoring process and identifying the right tooling, including Prowler, to help us continuously assess our cloud posture against security best practices. … Appreciate the ownership, persistence, and collaboration Pak Kirat has shown in driving this initiative forward.
>
> Andrew Sagitta Jauhari, Recognition for Cloud Posture Monitoring, Sep 2026

> Couple of incidents led to thinking to implement tighter monitoring on the infrastructure, taking the idea to completion all the credit should go to Kirat. This should be a good example for the cross functional team work, and constant communication is the key to achieving the final objective.
>
> Phani Kumar Patchava, Cloud Posture Monitoring, Sep 2026

> Thank you Kirat for all your efforts around heartbeat project. This initiative, built entirely in-house from the ground up, establishes a new standard for infrastructure monitoring and optimization within our organization. … Kirat successfully hosted and leveraged the inhouse Mistral LLM to analyze this diverse stream of infrastructure data. This was a non-trivial POC that demanded intense investigative work, deep understanding of infra events. With this, we are able to get our DORA metrics, give insights around ZD alerts to reduce noise, monitor our infra at single point, identify the deviations in deployment process.
>
> Satish Srinivas, Senior DevOps Manager · Spot Award, Heartbeat AI-OPS, Oct 2025

> He consistently coordinated with the relevant teams especially Information Security Team, kept communication going as requirements evolved, and made sure the right stakeholders were involved throughout the process rather than treating this only as a Security initiative.
>
> Andrew Sagitta Jauhari, Cloud Posture Monitoring, Sep 2026

> Thanks a lot for the help and support on building the security & compliance monitoring tool.
>
> Vincent Lius, Security & compliance monitoring tool, Sep 2026

> Appreciate the help on the collaboration with the Security Team, especially on Cloud Monitoring Project!
>
> William Eka Surya, Cloud Monitoring Project, Sep 2026

> Kirat has contributed to several areas of Devops and is also mentoring and training new joinees. He is always available to the team. Kirat owned up the velero backup upgrade and the activity was effortless. Your execution of proof-of-concepts on Bitbucket migration and OSRM deserves special recognition. There were many challenges. You were quick at identifying and resolving them. Kirat has also taken many Devops initiatives pro-actively, such as labelling the VMs and services, which is helping the team on cost optimisation checks.
>
> Satish Srinivas, Senior DevOps Manager · Spot Award, Sep 2022

> I've known Kiratpal for a long time. It gives me pleasure to recommend him as a capable, sincere, knowledgeable and extremely humble cyber security analyst, programmer and an awesome future DevOps engineer. He has amazing soft skills and his presence, in my experience, increases the outcome and the productivity of the team by several folds!
>
> Ujjawal Panchal, Studied together, Oct 2019

> Kirat is an amazing person to work with! He is really talented and I was a part of a team which he lead and it was amazing to have him as a team leader! He has a good concept on many aspects of technology.
>
> Rhythm Varshney, Studied together, Apr 2018

- Hackweek 2025 · 1st Winner: Blibli.com · Heartbeat AI-OPS (Nov 2025)
- Spot Award ×2: Quinbay · Heartbeat (Oct 2025), DevOps (Sep 2022) (2022, 2025)
- SRM IET Hackathon Winner: 1st rank, cash prize and internships (2018)
- CTF 2nd Runner-up: Sector443 Labs · Jeopardy-style (Jul 2018)

## Capabilities

- **DevSecOps**: Prowler, HashiCorp Vault, Consul, Workload Identity Federation, Cloud Asset Inventory, CIS, ISO 27001, PCI DSS, NIST
- **AI-Ops**: MCP agents, LLM-driven RCA, Heartbeat AI-OPS, Ollama, n8n
- **Cloud**: GCP (GKE, IAM, Vertex AI), AWS (EC2, S3, EKS), Tencent Cloud (TKE, COS)
- **Platform**: Kubernetes, Docker, Helm, Istio, Velero, Terraform, Ansible
- **Delivery**: Jenkins, ArgoCD, GitHub, GitOps, Rundeck, Python, Bash
- **Observability**: Prometheus, Grafana, Datadog, SigNoz, ELK, OpenSearch, PagerDuty

## Write

- [Reducing Storage Costs by Migrating to Single-Region…](https://medium.com/quinbay/blog-series-unlocking-cloud-savings-reducing-storage-costs-by-migrating-to-single-region-8b3afcc9b670)
- [Optimizing Storage Costs by Disabling Soft Delete Policy](https://medium.com/quinbay/blog-series-unlocking-cloud-savings-optimizing-storage-costs-by-disabling-soft-delete-policy-604e30a2a533)
- [Comprehensive Cost Optimization Strategies in GCP (Part 1)](https://medium.com/quinbay/blog-series-unlocking-cloud-savings-comprehensive-cost-optimization-strategies-in-gcp-part-1-b253432168c4)
- [K8s DR in GCP using Velero](https://medium.com/quinbay/k8s-dr-in-gcp-using-velero-69f22ab1428b)

## Asked, answered

### What does Kirat do?

He is the Lead DevOps Engineer at Quinbay, the team behind Blibli.com. He runs DevSecOps, AI-Ops and the multi-cloud platform: continuous compliance, AI agents for incident RCA, CI/CD and cost optimisation across GCP, AWS and Tencent Cloud.

### Is he open to new roles?

Yes: lead SRE, DevSecOps and AI-Ops roles, DevOps consulting and infrastructure problems worth solving. He is also open to open-source contributions. The quickest way is the [contact form](https://kirat.space/#contact) or [email](mailto:kirat.lamba10@gmail.com).

### Which clouds and tools does he work with?

GCP, AWS and Tencent Cloud. Kubernetes (GKE, EKS, TKE), Terraform, Helm, ArgoCD and Jenkins for delivery; Vault, Prowler and Workload Identity Federation for security; Datadog, SigNoz, Prometheus and OpenSearch for observability; MCP agents and in-house LLMs for AI-Ops. The full list is in the [toolkit](https://kirat.space/#skills).

### What has he built that I can read about?

Three case studies: [Cloud posture, on autopilot](https://kirat.space/work/cloud-posture), [Incidents that explain themselves](https://kirat.space/work/ai-ops) and [GCP to Tencent Cloud, secrets first](https://kirat.space/work/tencent-migration). Side projects are on [Projects](https://kirat.space/projects).

### Where is he based?

Bengaluru, India.

### Can I get this site’s facts as data?

Yes. There is a free, read-only [JSON API](https://kirat.space/developers), every page is available as Markdown at its URL plus .md, and [llms.txt](https://kirat.space/llms.txt) maps the site for language models.

## Elsewhere

Open to infrastructure problems, DevSecOps and AI-Ops work, and lead SRE roles. Write to [kirat.lamba10@gmail.com](mailto:kirat.lamba10@gmail.com).

---

Kirat Pal Singh Lamba, Lead DevOps Engineer, Bengaluru, India.

- [kirat.lamba10@gmail.com](mailto:kirat.lamba10@gmail.com)
- [LinkedIn](https://www.linkedin.com/in/kirat-pal-singh-lamba-00893b147/)
- [GitHub](https://github.com/skirat)
- [Medium](https://medium.com/@skirat)