0%
Download Resume (PDF) GitHub Profile LinkedIn Email Direct WhatsApp

SAMEER BANCHHOR

DevOps and Platform Engineer specializing in systems automation, container lifecycle security, and infrastructure reliability across two distinct deployment paradigms: cost-engineered scale-to-zero serverless cloud platforms and fully air-gapped on-premises environments.

/ DEVOPS & PLATFORM ENGINEER   / AIR-GAPPED DEPLOYMENTS   / SCALE-TO-ZERO SERVERLESS   / SYSTEMS AUTOMATION
ANSIBLE AUTOMATION AIR-GAPPED DEPLOYMENTS DOCKER (MULTI-STAGE NON-ROOT) KUBERNETES WORKLOADS GOOGLE CLOUD RUN ($0 IDLE) TERRAFORM IAC SOCKET TLS (curl_cffi) CONNECTION POOLING (httpx) GO 1.24 MICROSERVICES PROMETHEUS & GRAFANA DUCKDB & CHROMADB GITHUB ACTIONS CI/CD ANSIBLE AUTOMATION AIR-GAPPED DEPLOYMENTS DOCKER (MULTI-STAGE NON-ROOT) KUBERNETES WORKLOADS GOOGLE CLOUD RUN ($0 IDLE) TERRAFORM IAC SOCKET TLS (curl_cffi) CONNECTION POOLING (httpx) GO 1.24 MICROSERVICES PROMETHEUS & GRAFANA
$0/mo
Idle Cloud Infrastructure
Scale-to-zero Cloud Run concurrency ($0 baseline run-rate)
31M+
Records Stress-Tested
High-concurrency ingestion & memory envelope validation
100%
Air-Gapped Sovereignty
Zero-egress local topology for municipal & forensics data
>80%
Memory Footprint Cut
Socket-level TLS (curl_cffi) vs headless browser processes
~300 DAU
Active Users Supported
Public civic platforms & departmental operations
— CORE DOMAINS

ENGINEERING CAPABILITIES

Production infrastructure architectures engineered for reliability, automation, and scale.

// Cloud & Orchestration
cloud.providers → AWS, Azure, GCP
containers.k8s → Docker, Kubernetes, Helm, ArgoCD, Istio, Kustomize
— CAREER & OPERATIONS

PRODUCTION INFRASTRUCTURE EXPERIENCE

Hands-on DevOps, platform engineering, and systems automation across air-gapped municipal environments, higher education, and law enforcement.

MUNICIPAL CIVIC PLATFORM • ON-PREMISES & AIR-GAPPED

Contract DevOps & Platform Engineer

Bhilai Nagar Municipal Corporation • Vasundhara Nagar Smart Analysis Platform
Oct 2025 – Jun 2026

Managed deployment automation, containerization, and infrastructure reliability for an on-premises civic intelligence platform used daily by 3 municipal officers, 1 administrator, and 1 field operator.

Air-gapped architecture & data sovereignty: Designed and deployed a zero-egress, local-only topology with entirely local inference, guaranteeing no civic or voter data leaves the physical security perimeter.
Automated provisioning via Ansible: Authored reusable, idempotent playbooks to provision bare-metal workstations, configure OS dependencies, manage systemd daemons, and set up isolated runtimes.
Process & resource segregation: Isolated Go-based high-throughput document pipelines from Python/LangGraph inference runtimes, preventing CPU/memory contention and keeping local inference uninterrupted.
Embedded storage topology: Architected a local storage layer on ChromaDB and DuckDB, eliminating the operational overhead, network latency, and memory footprint of distributed clusters.
Load & scale validation: Simulated high-concurrency ingestion and memory stability against a 31-million-record synthetic dataset, validating pipeline resiliency without exposing classified data.
Ansible Air-Gapped Topology Docker Go 1.24 Python DuckDB 1.5 ChromaDB systemd 31M Load Validation
INSTITUTIONAL SYSTEMS • HIGH-THROUGHPUT & SERVERLESS

Contract Infrastructure & Systems Engineer

Durg Division Higher Education • Durg Smart Result Management System
Jul 2025 – Apr 2026

Operated high-throughput result processing and semantic query infrastructure supporting 1 head of department and 3 assistant professors daily.

Lightweight microservice deployment: Shipped Go backend services as compiled binary images under 30 MB, optimizing container memory footprint and cold-start boot times.
Resilient ingestion pipelines: Implemented rate limiting, jittered retries, and circuit breakers against source portals to guarantee respectful, reliable ingestion without triggering bans or service strain.
Serverless production demo: Provisioned and automated a public demonstration environment on Google Cloud Run using scale-to-zero serverless mechanics.
Go 1.24 Google Cloud Run Docker (<30MB) Rate Limiting Circuit Breakers OpenAPI 3.0 Scale-to-Zero
DEFENSE & LAW ENFORCEMENT • AIR-GAPPED FORENSICS

Cyber Infrastructure & Security Consultant

Law Enforcement & Cyber Crime Cell Engagements • Korba Cyber Investigation Tool (Confidential)
Dec 2023 – Present

Hardened and maintained offline, privacy-preserving infrastructure for law enforcement intelligence and CDR analysis, used daily by 2 sub-inspectors and 4 subordinate operators.

Hardened air-gapped topology: Implemented air-gapped host configurations with full disk encryption, localized access controls, and zero outbound network interfaces for sensitive FIR and CDR records.
Forensic security standards: Applied digital forensics chain-of-custody practices to data handling and system logging, ensuring tamper-evident, auditable local operation.
Zero-trust data residency: Leveraged a prior digital forensics and CDR analytics background (2019–2021) to implement strict zero-trust data residency models.
Air-Gapped Topology Full Disk Encryption CDR Forensics Chain of Custody Zero-Trust Linux Hardening
— SYSTEM ARCHITECTURE

SYSTEM DESIGN KNOWLEDGE

Proven expertise in blueprinting distributed, fault-tolerant, and high-throughput architectures.

Systems Comfortable Designing
URL Shortener Chat Application Notification Service Distributed Cache Rate Limiter API Gateway Authentication Service File Storage System Video Streaming Platform Event Driven Architecture Distributed Logging Kubernetes Architecture High Availability Systems Microservices AI Inference Platform Multi-Tenant SaaS RAG Infrastructure CI/CD Platform Design
Core Distributed Concepts
CAP Theorem Consistency Models Horizontal Scaling Vertical Scaling Load Balancing Database Sharding Replication Caching Strategies Message Queues Event Streaming Fault Tolerance Consensus Algorithms Service Discovery Reverse Proxy Distributed Tracing
— INTERACTIVE LAB & SIMULATIONS

CI/CD & DEPLOYMENT SIMULATORS

Experience real-time GitOps deployment pipelines, interactive terminal command execution, and live cloud infrastructure topology scaling.

LIVE ENGINE

GitOps Automated Pipeline Runner

1. SOURCE
git commit `a8f3b9`
READY
➔
2. CI BUILD
Docker & PyTest
WAITING
➔
3. GITOPS
ArgoCD Sync
WAITING
➔
4. K8S DEPLOY
Rolling Pod Update
WAITING
➔
5. TELEMETRY
Prometheus & SLA
WAITING
Live Pipeline Logs
// Select a preset pipeline above and click "TRIGGER GITOPS DEPLOYMENT" to watch real-time automated execution.
CLI SANDBOX

Interactive Terminal Shell

Run interactive infrastructure commands directly in-browser or click quick presets below.

sameer@infra-node-01:~$
# DevOps & AI Infra Interactive Sandbox v2.4
# Type 'help' or click any quick command above.
sameer@infra-node-01:~$
INFRA CALCULATOR

AI Infra Topology & Cost Estimator

Simulate cluster size, GPU hardware acceleration, and multi-region specs for real-time AWS cost and throughput metrics.

NVIDIA A100/H100 GPU Pool 4 GPUs
EKS CPU Worker Nodes 8 Nodes
Multi-Region Active-Active Failover
Est. Cloud Cost $3,840/mo
LLM Throughput 1,450 tok/s
Uptime SLA 99.95%
GENERATED TERRAFORM (HCL) 
resource "aws_eks_node_group" "gpu_pool" {
  cluster_name    = "ai-production-cluster"
  node_group_name = "vllm-a100-nodes"
  instance_types  = ["p4d.24xlarge"]
  desired_size    = 4
}
— FEATURED WORKS

FEATURED SYSTEMS & INFRASTRUCTURE

Air-gapped on-premises deployments, scale-to-zero serverless platforms, high-throughput microservices, and AI serving gateways.

CIVIC INFRASTRUCTURE • ON-PREMISES AIR-GAPPED

Vasundhara Nagar Smart Analysis Platform (v7.1.1)

Oct 2025 – Jun 2026 • Production

Official civic record-management and voter intelligence platform for Ward 18 (Bhilai), running 100% locally air-gapped on dedicated hardware for strict data sovereignty.

Designed zero-egress, local-only topology with entirely local inference; zero civic or voter data leaves the physical security perimeter.
Provisioned bare-metal workstations via idempotent Ansible playbooks, managing systemd daemons and process/resource segregation (Go document pipeline vs Python/LangGraph runtimes).
Embedded local analytical stores on DuckDB 1.5 (sub-15ms text-to-SQL) and ChromaDB; validated stability against a 31-million-record synthetic dataset.
Ansible Air-Gapped Docker DuckDB 1.5 ChromaDB Go 1.24 Python LangGraph Zero-Egress
// Architecture Highlights: 100% Air-Gapped On-Premises | Bare-Metal Ansible Automation | DuckDB CGO Sub-15ms Analytics | ChromaDB Vector Store | 31M Synthetic Stress-Tested | Certificate of Appreciation from Councillor's Office. Demo: voter.sameerbanchhor.in
SCALE-TO-ZERO SERVERLESS • GOOGLE CLOUD RUN & TLS ENGINEERING

BhilaiTV — Civic Media Discovery Platform

Jul 2026 – Aug 2026 • 200–300 DAU

Zero-ad CRT terminal-styled media discovery engine serving 200–300 daily active users, engineered for extreme memory efficiency and $0 idle run-rate.

Multi-stage non-root Docker build running on Google Cloud Run with scale-to-zero concurrency rules, driving idle cost to exactly $0/month.
Socket-level TLS JA3/JA4 fingerprint impersonation (curl_cffi) to bypass Turnstile without headless browsers, cutting memory consumption by >80%.
Event-loop-aware httpx connection pool (max_keepalive_connections=25) cutting catalog latency ~40%; enforced 1,000-key LRU cache to prevent container OOMs.
Google Cloud Run Docker (Non-Root) curl_cffi (JA3/JA4) httpx Pooling LRU Caching Grafana Scale-to-Zero ($0/mo)
// Architecture Highlights: Google Cloud Run Serverless | Socket-Level TLS Fingerprint Impersonation | Zero Browser Overhead (>80% Memory Saved) | Event-Loop HTTPX Pooling | Bounded LRU Cache | $0/mo Idle Run-Rate. Endpoints: bhilaitv.sameerbanchhor.in | movies.sameerbanchhor.in
LIGHTWEIGHT MICROSERVICES • GO BINARIES & INGESTION PIPELINES

Durg Smart Result Management & Ingestion System

Jul 2025 – Apr 2026 • Institutional

High-throughput academic examination query platform supporting university department heads and faculty across records dating back to 2016.

Shipped Go backend microservices as compiled binary container images under 30 MB, drastically optimizing cold-start boot times and memory envelopes.
Resilient ingestion pipelines equipped with rate limiting, jittered retries, and circuit breakers against source portals to guarantee reliable ingestion without service strain.
Automated public demonstration environment on Google Cloud Run using scale-to-zero serverless mechanics with OpenAPI 3.0 documented endpoints.
Go 1.24 Google Cloud Run Docker (<30MB) Rate Limiting Circuit Breakers OpenAPI 3.0 Scale-to-Zero
// Architecture Highlights: Sub-30MB Go Binary Images | Respectful Rate-Limited Extraction | Jittered Retries & Circuit Breakers | Serverless Cloud Run Demo | Sub-Second RAG Search. Demo: results.sameerbanchhor.in
AI GATEWAY • MULTI-PROVIDER HOT-SWAPPING & CONTAINERIZATION

ChhattisVani — Multimodal AI Serving Gateway

Apr 2024 – Sep 2026 • Open Source

Regional voice assistant and multimodal inference platform for Chhattisgarhi speakers, featuring an infrastructure-agnostic serving gateway.

Standardized microservice container builds across complex native C/CUDA dependencies (STT, TTS, computer vision) guaranteeing strict environment parity.
Engineered an infrastructure-agnostic routing gateway that hot-swaps between external model endpoints (Claude, HF Inference, Gemini) and self-hosted private VPS runners with zero downtime.
Configured automated build pipelines to package images and deploy across Google Cloud Run and Hugging Face infrastructure.
Python FastAPI Docker Gemini API Hugging Face Spaces CI/CD Pipelines Gateway Routing
// Architecture Highlights: Multi-Provider Inference Hot-Swapping | Native CUDA/C Dependency Parity | Zero-Downtime Provider Failover | Automated Cloud Run & Hugging Face CI/CD. Endpoint: chhattisvani.sameerbanchhor.in
DEFENSE & LAW ENFORCEMENT • AIR-GAPPED FORENSICS

Korba Cyber Investigation Platform

Dec 2023 – Present • Confidential

Hardened offline, privacy-preserving infrastructure for law enforcement intelligence and Call Detail Record (CDR) telecommunication analysis, used daily by 2 sub-inspectors and 4 subordinate operators.

Hardened air-gapped host configurations with full disk encryption (FDE), localized role-based access controls, and zero outbound network interfaces for sensitive FIR and CDR records.
Applied digital forensics chain-of-custody practices to data handling and system logging, ensuring tamper-evident, auditable local operation.
Implemented strict zero-trust data residency models with zero external cloud dependencies.
Air-Gapped Topology Full Disk Encryption CDR Forensics Zero-Trust Linux Hardening Chain of Custody
// Architecture Highlights: 100% Offline Air-Gapped Operation | Full Disk Encryption | Tamper-Evident Chain of Custody | Zero External Cloud Dependencies | Strict Data Residency.
— OPEN SOURCE & COMMUNITY

OPEN SOURCE & GITHUB HIGHLIGHTS

Production infrastructure code, open-source contributions, automation playbooks, and active repositories.

Open Source & Systems Architecture Writings

Author of reusable Ansible playbooks, minimal multi-stage non-root Docker configurations, and Terraform cloud automation templates.
Maintainer of high-performance Go microservice architectures, curl_cffi socket-level TLS engines, and air-gapped DuckDB query pipelines.
Technical writing topics: Air-Gapped Systems Architecture, Scale-to-Zero Cloud Run Optimization, Socket-Level TLS JA3/JA4 Impersonation, Local DuckDB Analytical Engines, and Zero-Trust Containerization.

Featured GitHub Repositories

github.com/sameerbanchhor bhilaitv-media-engine chhattisvani-gateway ansible-airgapped-provisioner cloudrun-scale-to-zero-templates docker-nonroot-multistage duckdb-go-analytical-engine tls-fingerprint-curl-cffi