Freelance DevOps Services & Cloud Consulting - Sahil Aghara

Production-Grade AWS Infrastructure & Terraform Orchestration

CI/CD Pipeline Automation & Kubernetes Deployment Services

Written by Sahil Aghara, Freelance DevOps Engineer. Published: 2026-06-21. Last updated: 2026-07-08.

Infrastructure that lets your team ship without hesitation.

Most teams reach out after a failed deploy, a climbing AWS bill, or when the person who built the infra has left. That is exactly the point I step in.

engagement.yml
status: accepting_projects
focus:cloud + automation
delivery:remote / project-based
principle:secure_by_default
Designed around your existing stack
01
Single ownerFrom audit to handover
< 24h
Reply timeOn active projects
IaC
Repeatable systemsDocumented and versioned

The real problems, named plainly.

Clients hire me when the bill is too high, the migration is overdue, the “server guy” vanished, or deployments are still manual. Here is how I address each one.

Cost Audit01
> auditing idle_resources... found 6

Cut your cloud bill

Most accounts I audit are bleeding 20–40% on compute they never needed. Idle EC2 instances running 24/7 for a site that gets traffic for 3 hours a day. Unattached EBS volumes accumulating charges. Load balancers pointing at nothing.

  • Rightsize oversized EC2 / RDS instances
  • Terminate zombie resources (EBS, EIP, idle LBs)
  • Reserved Instance / Savings Plan strategy
  • Autoscaling so you pay for load, not headroom
  • S3 lifecycle rules for cold storage
  • Cost anomaly alerts before the bill surprises you
Migration02
> planning cutover... rollback_plan: ready

Cloud migration

Migrations fail when the rollback plan is an afterthought. I treat it as a first-class deliverable — defined before the first resource is provisioned. That is how you move off cPanel, an over-provisioned VPS, or a reseller host without a Sunday-night outage.

  • Lift-and-shift vs. re-architecture decision
  • Zero/minimal-downtime cutover plan
  • Rollback procedure documented before go-live
  • DNS cut and SSL transition without downtime
  • Right-sized target infra — no over-provisioning
  • Post-migration cost and performance baseline
Reliability03
> checking single_points_of_failure... 3 found

Replace your “server guy”

When infrastructure lives in one person’s head, you have a single point of failure that is not on any architecture diagram. I deliver IaC (Terraform / Ansible), runbooks, and Prometheus + Grafana alerting — so you catch issues before your users do and are never dependent on one person’s availability.

  • Terraform state for all infra — nothing manual
  • Ansible playbooks for repeatable server config
  • Prometheus + Grafana alerting before downtime
  • On-call runbook with escalation paths
  • Clean handover — zero knowledge locked away
  • Response SLA on active projects: under 24 h
Automation04
> deploy_mode: ssh_by_hand... replacing with pipeline

Stop deploying by hand

Manual SSH deploys mean every release is a manual QA step and a potential typo away from a broken production environment. Automated CI/CD pipelines make deploys boring: push to main, tests run, staging gates pass, production updates — no one is up at midnight watching logs.

  • GitHub Actions / GitLab CI pipeline from scratch
  • Docker build + registry push automation
  • Staging environment gate before prod deploy
  • One-command rollback on failed release
  • Secrets management via Vault or AWS SSM
  • Deploy time cut from 40+ min manual to under 5

What I can take off your plate

Focused engagements that leave you with a stronger system, clear documentation, and less operational drag.

Cloud01

Cloud Infrastructure

Harden and scale your cloud infrastructure. AWS provisioning with security-first IAM policies, VPC isolation, and automated database backups.

  • EC2 & VPC Setup
  • S3 Lifecycle Policies
  • RDS High Availability
  • IAM Security Hardening
Learn more
Delivery02

CI/CD Pipeline Setup

Automate your software delivery. Fast, repeatable CI/CD pipelines that run linting and testing suites and deploy to production automatically with zero manual overhead.

  • GitHub Actions Workflows
  • Docker Build Automation
  • Staging → Production Gates
  • Rollback Strategies
Learn more
Automation03

Infrastructure as Code

Declarative infrastructure with Terraform & Ansible. Eliminate configuration drift and provision staging or production environments with a single command.

  • Terraform Modules
  • Ansible Playbooks
  • State Management
  • Multi-env Configuration
Learn more
Reliability04

Monitoring & Observability

Spot bottlenecks before your users do. Set up Prometheus & Grafana dashboards with critical alerting rules that notify you before systems crash.

  • Prometheus Metrics
  • Grafana Dashboards
  • Alertmanager Rules
  • Log Pipeline Setup
Learn more
Platform05

Container Orchestration

Deploy with containers from day one. Docker Compose for local parity, and Kubernetes clusters sized for actual production workloads.

  • Docker Containerization
  • K8s Cluster Setup
  • Helm Chart Management
  • Resource Scaling
Learn more
Advisory06

Freelance DevOps Consulting

On-demand DevOps expertise. Hire me for project-based tasks including cloud cost audits, migration planning, security hardening, or team advisory sessions.

  • Infrastructure Audits
  • Migration Planning
  • Cost Optimization
  • On-call Support
Learn more
Cloud07

AWS Infrastructure Setup

Fixed-price AWS cloud foundations. VPC design, EC2 auto-scaling, RDS Multi-AZ, and IAM least-privilege — built for zero-downtime and 30 days of post-launch support.

  • VPC & Subnet Design
  • Auto-Scaling Groups
  • RDS Multi-AZ
  • IAM Hardening
Learn more
Delivery08

Kubernetes Setup & Scaling

Auto-scaling Kubernetes clusters that stop you paying for idle servers. Cluster provisioning, Helm charts, and secrets management done right.

  • Cluster Provisioning
  • Helm Chart Management
  • Horizontal Pod Autoscaling
  • Secrets Management
Learn more
Automation09

Cloud Cost Optimisation

Stop hemorrhaging cash on idle resources and oversized instances. Fixed-price cloud audits that deliver a clear savings roadmap.

  • Rightsizing Audits
  • Reserved Instance Strategy
  • Zombie Resource Cleanup
  • Cost Anomaly Alerts
Learn more
Reliability10

Linux Server Setup & Management

Hardened, production-ready Linux servers. SSH key-only access, firewall configuration, Fail2Ban, and Ansible-driven repeatable provisioning.

  • Server Hardening
  • Firewall & Fail2Ban
  • Ansible Playbooks
  • Automated Security Patching
Learn more

A clear path from problem to production.

No black-box implementation. You get visibility at every stage and an operational system your team understands.

01

Discover

Audit the stack, constraints, risks, and the outcome your team actually needs.

02

Architect

Turn findings into a practical system design with clear milestones and tradeoffs.

03

Implement

Build, automate, test, and document the infrastructure in your environment.

04

Handover

Ship runbooks, knowledge transfer, and a clean path for ongoing operations.

Ready to stop firefighting?

Tell me what's broken. I'll come back with a plan.

Start the conversation