2023 · MSc Information Technology and Applied Security
Continuous Automation with DevOps Practices for Threat Detection
London Metropolitan University (delivered through Islington College)
About
I build cloud platforms where the secure path is also the fastest one.
My career began in 2017 as a system engineer at a nationwide internet service provider, running the cloud and on-premises infrastructure behind service for hundreds of thousands of subscribers. The work spanned AWS, Linux, VPNs, firewalls, routing, and monitoring, and it taught me to treat every change to production as something that has to be reversible.
From there I moved into DevOps at a software services company, building Kubernetes platforms and CI/CD pipelines for enterprise and healthcare products, including backup, restore, and disaster recovery for those clusters.
At BeyondID, an Okta Apex Partner, I worked on identity, Zero Trust, and cloud security for globally recognised organisations, in environments aligned with HIPAA and SOC 2. That role shaped how I build: identity is the perimeter, and security controls belong inside the automation, not after it.
Today, as a Senior DevSecOps Engineer at Parkcity Technologies, I lead and manage a team of 5–6 engineers running multi-cloud platform engineering across AWS, GCP, and DigitalOcean. Together we operate more than 10 Kubernetes clusters hosting 300+ services at 99.99% uptime for products used by more than 10 million people, lead GitOps adoption with ArgoCD, set infrastructure-as-code standards, and lead Kubernetes upgrades and migrations, most recently from 1.33 to 1.35. Cost is part of the job too: for one customer I brought monthly cloud spend down from over $19K to $12K, a saving of roughly $84K a year.
I start with what failure would look like, then work backwards: which control would have caught it, where that control should live, and how to make it automatic. I prefer boring, reviewable systems over clever ones, and I measure success by how uneventful production becomes.
My MSc research looked at how DevOps automation can deliver continuous threat detection in cloud environments. That question still drives my work: how to make detection and response part of the platform rather than a separate project.
I'm looking for a senior DevSecOps or platform engineering role with a team that treats reliability and security as engineering problems, working remotely on that team's hours.
Krishna Neupane is a Senior DevSecOps Engineer and Applied Security Researcher based in Kathmandu, Nepal. He designs, secures, and operates cloud-native platforms across AWS, Google Cloud, Azure, DigitalOcean, and Heroku, with more than nine years in production infrastructure.
May 2024 – Present · Kathmandu, Nepal
Parkcity Technologies
Lead and manage a team of 5–6 engineers delivering multi-cloud platform engineering and DevSecOps across AWS, GCP, DigitalOcean, and enterprise customer environments.
Dec 2021 – May 2024
BeyondID · Okta Apex Partner
Enterprise identity, Zero Trust, and cloud security solutions for globally recognized organizations through Okta-focused delivery programs.
Sep 2020 – Sep 2021 · Kathmandu, Nepal
Company name available on request · Software services company
Cloud-native application delivery and Kubernetes platform operations for enterprise and healthcare technology products.
Jul 2017 – Aug 2020 · Lalitpur, Nepal
Company name available on request · Nationwide internet service provider
Cloud and on-premises infrastructure for a nationwide telecommunications and internet provider serving hundreds of thousands of subscribers.
What senior looks like day to day: setting direction and standards, leading adoption, and growing the people around me.
01
Provide technical leadership for multi-cloud platform engineering and DevSecOps across AWS, GCP, DigitalOcean, and enterprise customer environments.
02
Established infrastructure-as-code standards and reusable Terraform and Terragrunt patterns, so environments are consistent across teams and customers.
03
Led GitOps adoption with ArgoCD: delivery model, repository structure, and governance, improving deployment reliability and change management.
04
Set operational standards for monitoring, disaster recovery, backup, security, resilience, and incident response.
05
Lead and manage a team of 5–6 engineers: setting priorities, owning delivery from design to production, and building Platform Engineering, GitOps, and SRE practices into how the team works.
06
Work with engineering leadership, security teams, and business stakeholders to turn requirements into secure, scalable platforms.
Source to runtime, with security and resilience as planes that cut across every stage rather than steps at the end.
Reference platform architecture
01
Source
02
CI & gates
03
Infrastructure
04
GitOps delivery
05
Runtime
06
Observe
Security plane
HashiCorp Vault · Cloudflare WAF · IAM · Zero Trust
Resilience plane
Backups · Disaster recovery · Incident runbooks
2023 · MSc Information Technology and Applied Security
London Metropolitan University (delivered through Islington College)
2018 · BSc Computer Networking and IT Security
London Metropolitan University (delivered through Islington College)
Ongoing applied notes are published in Research Core and Writing.
MSc Information Technology and Applied Security
London Metropolitan University, delivered through Islington College
BSc Computer Networking and IT Security
London Metropolitan University, delivered through Islington College
Certification
Okta Certified Professional
Okta
OCNA Wireless
Feb 2025
AWS Security Incident Response: Cryptomining Use Cases
Amazon Web Services · Feb 2025
AWS Knowledge: Architecting
AWS Training and Certification · Nov 2024
Foundations of Cybersecurity
Jun 2024
AWS Cloud Practitioner Essentials
Amazon Web Services · Jan 2024
ISC2 Candidate
ISC2 · Jan 2024
Google Cloud Fundamentals: Core Infrastructure
Coursera
AWS Fundamentals: Going Cloud-Native
Coursera
Networking in Google Cloud: Defining and Implementing Networks
Coursera
Computed from the experience above (years used in production roles), not self-rated.
Recently pushed public repositories, live from GitHub.
Krishna Neupane is a Senior DevSecOps Engineer and Applied Security Researcher based in Kathmandu, Nepal, with 9+ years of experience in platform engineering, multi-cloud architecture, Kubernetes, and cloud security. He is currently a Senior DevSecOps Engineer at Parkcity Technologies.
DevSecOps and platform engineering: enterprise Kubernetes platforms (EKS, GKE, AKS), GitOps with ArgoCD, infrastructure as code with Terraform and Terragrunt, cloud security and Zero Trust controls, observability, cloud migration, and disaster recovery across AWS, Google Cloud, Azure, DigitalOcean, and Heroku.
His MSc research, 'Continuous Automation with DevOps Practices for Threat Detection' (London Metropolitan University, 2023), studies how DevOps automation can deliver continuous threat detection. He also publishes applied engineering notes in Research Core.
Parkcity Technologies (Senior DevSecOps Engineer, 2024–present), BeyondID, an Okta Apex Partner (DevSecOps Engineer, 2021–2024), a software services company (Software Engineer, DevOps, 2020–2021), and a nationwide internet provider (System Engineer, 2017–2020).
By booking a 30-minute call through Calendly, or through the contact form at krishnaneupane.com/contact. He is open to senior DevSecOps and platform security roles, working remotely from Kathmandu (UTC+5:45).
Recommendations
“He enjoys doing things differently with some research and sophisticated approach. He is a person of quality work, focus and one of a passionate individual who gets thrilled to learn new skills and keep up to date with the technological trend.”
“Krishna is an individual with good communication skills… Krishna gains highest recommendation in his Network and Security skills and his interest in DevOps.”
Excerpts from recommendations on LinkedIn ↗, where the full text is public.
Rotaract Club of Jawalakhel
Secretary
Leo Club of Samakhusi
General Member
Bishweshwor Sushila Foundation
Program Manager