Author Image

Hi, I am Yogesh

Yogesh Sharma

Staff Software Engineer @ LinkedIn

With over 14 years of experience as a software engineer, I am passionate about engineering excellence and developing solutions that improve the efficiency and quality of software development and delivery. I currently work as a principal software engineer at Intuit, where I leverage my skills in cloud computing, platform engineering to create tools and services that enhance the productivity and performance of Intuit’s platform and products.

My previous roles have exposed me to a variety of distributed computing environments, including e-commerce, BFS, FMCG, large-scale software, and social media. I have successfully migrated, re-architected, and containerized services across AWS, Azure, and GCP, as well as managed and operated large-scale systems that handle billions of transactions. I have also implemented infrastructure as code, automation, monitoring, HA/DR, fault tolerance, and capacity planning solutions using various languages and technologies. I enjoy solving complex problems and collaborating with other engineers to deliver scalable, reliable, and user-friendly solutions.

Experience: 0 Year 0 Mon 0 Day 00 Hrs 00 Min 00 Sec
Leadership
Craftmanship
Execution
Team Work
Communication
Problem Solving

Skills

API Gateway & Service Mesh
API Gateway & Service Mesh

Developed and scaled Tier-0 API Gateway handling 1M+ req/sec and 15-20B transactions/day. Engineered service mesh for east-west traffic, load-test frameworks, and north-south communication at internet scale.

Edge Engineering
Edge Engineering

Designed multi-CDN strategies, RUM-based traffic steering for optimal latency and geo-based availability. Built Edge Security solutions integrating CDN, WAF, and DDoS protections.

Cloud Computing
Cloud Computing

Expert with AWS, Azure (Front Door, AFDx, DNS, WAF, Serverless Functions), and GCP (GKE, cloud-native security). Architected active-active, multi-region infrastructure at scale.

Development (Python & Go)
Development (Python & Go)

Writing high-scale, mission-critical services in Python and Go. Automation frameworks, Kubernetes controllers, cloud-native services, and high-performance backend systems.

Kubernetes & Containers
Kubernetes & Containers

Managing large-scale clusters on AWS EKS and Google GKE. Writing custom controllers, CRDs, Admission Controllers (Mutating/Validating Webhooks). Multi-stage, multi-arch Docker builds. Service mesh integration and container orchestration at scale.

Infrastructure as Code
Infrastructure as Code

Terraform, Terragrunt with Atlantis for PR automation. AWS CDK (TypeScript), CloudFormation, Troposphere (contributor), Chef, Ansible, Packer, Azure ARM, Helm, Kustomize.

High Availability & DR
High Availability & DR

Architected active-active multi-region systems. Cross-region sync enabling sub-60s failover at 1M TPS. Achieved 99.999% uptime during peak traffic. Fault tolerance, auto-remediation, and capacity planning.

Security & Compliance
Security & Compliance

PCI DSS and SISA compliance. Custom WAF with ModSecurity and HAProxy. Edge Security, DDoS protection, SSL/TLS automation, HIDS (OSSEC), and security hardening.

Identity & Access Management
Identity & Access Management

AuthN, AuthZ, RBAC, and ABAC implementations. Centralized authentication with FreeIPA, MFA/2FA, PKI infrastructure for certificate management, and team-based authentication services.

CI/CD
CI/CD

ArgoCD, Argo Rollout, Jenkins, Rundeck, AWS CodePipeline, GitLab CI/CD, Code Deploy. Automated deployment of 100+ microservices, cutting release cycles from days to hours.

Observability & Log Management
Observability & Log Management

Built observability and log management platforms from scratch. Grafana, Prometheus, Splunk, AppDynamics, Wavefront, CloudWatch, Nagios, EFK/ELK stack, Jaeger. Real-time visibility into application health and centralized logging at scale.

DNS Management
DNS Management

Managing 50,000+ records, thousands of hosted zones. Cross-region sync for automated regional failover at 1M TPS. Distributed DNS with FreeIPA.

CDN & Caching
CDN & Caching

Multi-CDN strategy (Akamai, Azure CDN, Cloudflare, CloudFront). Caching with Varnish, Memcached, Redis, Valkey, Aerospike. RUM-based traffic steering.

Network & Web Security
Network & Web Security

WAF, DDoS protection, NACL, IP-Tables, TCP/IP, HTTP/HTTPS. High-performance web architectures with clustering, load balancing, and proxy configurations.

Databases & NoSQL
Databases & NoSQL

Architected active-active Aurora PostgreSQL in AWS for multi-region topology. MySQL, Oracle. NoSQL: Aerospike, Cassandra, Couchbase, MongoDB. ScaleArc for load balancing. Query optimization and indexing strategies.

Application & Web Servers
Application & Web Servers

Managing 1M+ RPS with Nginx, Envoy, Apache, Tomcat, Karaf, JBoss, WebSphere. HTTP2, gRPC Gateway, clustering, and virtual hosts.

Linux & System Performance
Linux & System Performance

Primary OS for all development. Shell/Bash scripting, system tuning (vmstat, iostat, tcpdump), CPU/memory optimization, and OS hardening.

System Design
System Design

Designing large-scale distributed systems handling billions of transactions. Focus on HA/DR, fault tolerance, auto-remediation, capacity planning, and cloud-native architecture.

Experiences

1
LinkedIn

July 2021 - November 2022

Bangalore, India

Ensuring www.linkedin.com remains reliable and delivers the best possible user experience every time you visit.

Staff Software Engineer

July 2021 - November 2022

Responsibilities:
  • As part of Edge Engineering, I worked on the traffic and internet-facing layer of LinkedIn’s infrastructure, ensuring www.linkedin.com remained reliable, secure, and performant for billions of users worldwide.
  • Engineered and optimized LinkedIn’s global traffic stack, including multi-CDN strategy, API Gateway, and north-south/east-west service communication, to deliver low-latency, highly available experiences at internet scale.
  • Developed RUM-based traffic steering systems to dynamically route user traffic for optimal latency, reliability, and geo-based availability.
  • Collaborated with Microsoft Azure engineering teams to improve core Azure services (Front Door, AFDx, Azure DNS, and WAF), directly shaping cloud offerings used by enterprises globally.
  • Built Edge Security solutions, integrating CDN, WAF, and DDoS protections into LinkedIn’s edge layer to safeguard user traffic and platform availability.
  • Drove adoption of Azure serverless technologies across LinkedIn edge services, improving scalability and operational efficiency.
  • Contributed to open-source templates for the Azure ecosystem, including Bicep-based Azure Quickstart modules for Front Door/CDN.
  • Open Source: microsoft.cdn-azure-frontdoor-cdn-profile
  • Speaker: LSPE #44 - Large Scale Production Engineering India Meetup
Palo Alto Networks

March 2021 - July 2021

Bangalore, India

As a Principal Engineer at Palo Alto Networks, I led the design and implementation of cutting-edge cloud-delivered security solutions, focusing on the Wildfire product, which integrates machine learning into PAN NGFWs to prevent unknown file-based threats in real-time without productivity loss.

Principal Software Engineer

March 2021 - July 2021

Responsibilities:
  • Architected and developed cloud-native security services on Google Cloud Platform (GCP), delivering scalable, resilient, and high-performance threat detection.
  • Implemented Infrastructure as Code (IaC) using Terraform and Terragrunt, with Atlantis integration to streamline pull-request workflows and eliminate manual provisioning.
  • Led container orchestration efforts with Google Kubernetes Engine (GKE), ensuring secure and reliable workloads at scale.
  • Drove CI/CD automation for build, test, and release pipelines, accelerating feature delivery and improving release quality.
  • Partnered with ML engineering teams to integrate machine-learning–based threat detection into production security systems.
2
3
Intuit Inc

January 2016 - February 2021

Bangalore, India

As part of Intuit’s Platform Engineering team, I focused on building large-scale, cloud-native services and frameworks that power Intuit’s global product ecosystem.

Staff Software Engineer

February 2018 - February 2021

Responsibilities:
  • Developed Tier-0 traffic services (API Gateway, DNS Manager, Service Mesh) handling 1M+ requests/sec and 15–20B transactions/day with millisecond latency.
  • Designed and built DNS Manager, enabling automated regional failover for thousands of services; supported cross-region sync for sub-60s failover at 1M TPS.
  • Engineered a service mesh load-test framework to validate east-west traffic performance at scale.
  • Architected active-active, multi-region infrastructure on AWS and Kubernetes, improving resiliency, performance, and scalability.
  • Drove migration of Intuit’s Service Fabric to AWS, enabling 1000+ services to adopt cloud-native deployment.
  • Developed automation frameworks for deployment, observability, and self-healing, offloading operational complexity for hundreds of teams.
  • Contributed to open source - first Troposphere enhancement for AWS ALB Beta features.
  • Impact: First Intuit platform to reach 1 trillion+ transactions in a tax year, setting the benchmark for scale and reliability across the company.
Senior Software Engineer

January 2016 - January 2018

Responsibilities:
  • Focused on application, infrastructure, and cloud platform development to accelerate Intuit’s cloud transformation.
  • Developed automation frameworks in Python, Java, and Go for services, infra, and workflows, enhancing scalability and efficiency.
  • Led cloud migration initiatives, moving services between AWS and private data centers with focus on performance optimization and cost efficiency.
  • Built IaC solutions with Terraform, CloudFormation, Kubernetes; contributed enhancements to Troposphere.
  • Designed CI/CD pipelines and developer tooling with Jenkins, ArgoCD, Rundeck, Chef, and AWS CodePipeline.
  • Engineered observability frameworks with AppDynamics, Splunk, Grafana, Wavefront, and CloudWatch, improving visibility across thousands of services.
  • Developed system performance tooling using Linux (vmstat, iostat, tcpdump), driving optimizations in app and system performance.
  • Built and managed distributed systems including Couchbase, Cassandra, Karaf, Tomcat, Nginx, and HTTPD.
Snapdeal

January 2015 - January 2016

Gurugram, India

At Snapdeal, I played a key role in designing, building, and scaling the FreeCharge Payment Wallet (KlickPay) and strengthening the Snapdeal.com platform to handle extreme seasonal traffic. My focus was on platform engineering, developer productivity, and secure, fault-tolerant systems that powered millions of customers and billions of transactions.

Senior Software Engineer

August 2015 - January 2016

Responsibilities:
  • Architected a hybrid cloud platform (AWS + private cloud) to host KlickPay, enabling secure, elastic scaling of payment services.
  • Built CI/CD frameworks to automate deployment of 100+ microservices, cutting release cycles from days to hours.
  • Implemented IaC with Chef and Ansible, codifying provisioning and ensuring consistency.
  • Developed automated fault-tolerance and recovery, reducing MTTR and maintaining 99.99%+ uptime, peaking at 99.999% during festival sales.
  • Designed a custom WAF with ModSecurity and HAProxy, including ACL-driven rules for DDoS and app-layer security.
  • Delivered PCI DSS and SISA-compliant infrastructure, embedding compliance into workflows.
  • Engineered identity and security services, including centralized auth (FreeIPA), MFA/2FA, and intrusion detection (OSSEC).
  • Scaled systems to handle billions of requests during flash sales, ensuring seamless experience under surges.
  • Built Snapdeal’s first observability and log management platform with the EFK stack, giving developers real-time visibility into application health.
  • Developed a distributed DNS service with FreeIPA for faster resolution and better infra management.
  • Engineered PKI services to manage certificates and encryption at scale.
  • Optimized caching and database layers (Cassandra, Aerospike, Memcached, ScaleArc) for high performance and availability.
  • Mentored engineers and contributed to hiring, helping establish the Bangalore team.
Software Engineer II

January 2015 - July 2015

Responsibilities:
  • Designed and developed Snapdeal’s technical platforms, including cloud services, log management systems, application lifecycle tools, and automation frameworks, enabling scalable, reliable, and secure operations.
4
5
Amelia (formerly IPSoft Inc., acquired by SoundHound)

March 2012 - January 2015

Bangalore, India

Worked as a software engineer at IPsoft, building automation, web infrastructure, and cloud tooling for enterprise customers including MasterCard, Hindustan Unilever Limited (HUL), and British Telecom (BT Cloud Services).

Application Engineer

March 2012 - January 2015

Responsibilities:
  • Designed and developed automation frameworks using IPautomata, Python, Perl, Shell, and Ansible to streamline application deployments, system administration, disaster recovery, and routine operational workflows.
  • Built enterprise-scale infrastructure solutions for WebSphere Application Server (ND), IBM HTTP Server, Apache, JBoss, and CloudStack/VMware, improving deployment efficiency, scalability, and availability.
  • Developed monitoring and alerting platforms (Nagios with custom checks for disk usage, JMX MBeans, MQ/MB, log health, web URLs) to provide reusable observability patterns for developers and operations teams.
  • Automated SSL certificate provisioning, renewals, and configuration across application and web servers, embedding security and compliance into the deployment pipeline.
  • Engineered high-performance web architectures with clustering, load balancing, proxy configurations, virtual hosts, and Apache redirects, reducing latency and improving service availability.
  • Built large-scale automation for disaster recovery, data center failover, and DNS management (including thousands of hosted zones), significantly reducing recovery time and operational risk.
  • Implemented security and compliance automation (e.g., PCI DSS–aligned patching and configuration baselines), ensuring consistent hardened environments across client platforms.
  • Developed and optimized MQ/MB messaging solutions and Linux performance tuning tools focusing on CPU, memory, and process optimization to ensure stable, scalable platforms.
  • Collaborated with internal and client engineering teams (including Citrix and BT Cloud) to co-design cloud orchestration features, self-service tools, and SDK-style automation that empowered teams to manage infrastructure with minimal manual effort.
NTT Data (formerly First Apex Software)

August 2011 - December 2011

Bangalore, India

Designed and developed full-stack enterprise applications for the insurance sector, with a focus on Motor Insurance and General Insurance modules.

Software Engineer

August 2011 - December 2011

Responsibilities:
  • Implemented core features across the insurance lifecycle, including policy issuance, underwriting, claims management, and financial ledger integration.
  • Built scalable, high-performance services using Java, Web Services, SQL, and MySQL, ensuring efficient data processing and compliance with business rules.
  • Developed responsive front-end components with HTML, CSS, and JavaScript to improve usability and client engagement.
  • Integrated third-party APIs and automated workflows to streamline operations, reduce manual intervention, and improve turnaround time.
  • Optimised database queries and indexing strategies, cutting transaction processing times and improving application performance.
  • Applied best practices in software engineering, including secure coding, modular design, and maintainable deployment practices.
6

Education

Birla Institute of Technology and Science
2020-2022
M.Tech in Data Science and Engineering
Uttar Pradesh Technical University
2007-2011
B.Tech in Computer Science and Engineering
Kendriya Vidyalaya No.2 AFS Hindon (CBSE)
2005-2006
Higher Secondary School Certificate (XII, CBSE)
Kendriya Vidyalaya No.2 Golconda Hyderabad, AP
2003-2004
Secondary School Certificate (X, CBSE)

Recent Posts

Hero Image
08: Telemetry with App Insight

Let us now create work on injestig code for App Insight telemetry. This help observe how a request was served from the different part of the code. Code Changes In src/appinsight/logger.py, we will create decorator that help inject trace to App Insight def trace_as_dependency(tracer: Tracer = None, name: str = None, prefix: str = None): """trace_as_dependency [method decorator to trace a method invocation as a dependency (in AppInsights)] Args: tracer (Tracer): [Opencensus tracer object used to create the trace record.] name (str): [Name of the created trace record] prefix (str): [Prefix to be attached to Name] Returns: The inner function """ def inner_function(method): @wraps(method) def wrapper(*args, **kwargs): file_name = inspect.getfile(method).split("/")[-1].split(".py")[0] f = inspect.currentframe() i = inspect.getframeinfo(f.f_back) line_number = i.lineno trace_name = name if (name is not None) else method.__name__ trace_name = f"{file_name}.{trace_name}" if prefix: trace_name = f"{prefix}.{trace_name}" oc_tracer = ( tracer if (tracer is not None) else execution_context.get_opencensus_tracer() ) if oc_tracer is not None: with oc_tracer.span(trace_name): result = method(*args, **kwargs) else: result = method(*args, **kwargs) return result return wrapper return inner_function def get_opencensus_tracer() -> Tracer: return execution_context.get_opencensus_tracer() Starting Tracer In the entrypoint of Azure Function i.e. functiondemo/__init__.py we will initialize telemetry processor.

Saturday, October 1, 2022 Read
Hero Image
07: Logging with App Insight

Before we start, we need to verify if Azure Function App is connected to an instance of App Insight or not. To check this, go to Application Insights in Azure Function and verify if it is connected to an App Insight Resource. If not, we either need to create a new App Insight resource and attach it to Function App or use an existing App Insight app. Get App Insight Connection String Click on App Insight attached to Azure Function Copy Instrumentation Key and Connection String from overview tab Code Changes Notes:

Saturday, October 1, 2022 Read
Hero Image
06: Accessing Protected API

To access protected API in our Function App, we need to get an access token from Azure AD App. This diagram shows a high-level view of the authentication flow: The E2E oauth2 auth code flow is being described here Generate Client Id and Secret To generate an access token to access our APIs, A User first need to onboard their AD App (Client AD App) to our AD App (Server AD App). However, for demo purpose, we will directly create a secret id and token in Server Ad App. In AD App Blade in Azure Portal, Select Ad App functiondemo-ad-server-app In Certificates & secrets tab, create a new client secret. Every individual user can create their own client secret either directly in the above server ad app (given they have permission). In case service owner do not want to give permission to Server Ad App directly as it may have access to all API, we can ask them to create their own Ad App (know as client Ad App) and then we can onboard that to our server AD App with required scope/permission. In this way a team can manage users on their own and all of those user will automatically get same level of access as on client app. Get Azure AD OAuth2 token export TENANT_ID="xxxxxxx-353f-xxxxxxx-be76-xxxxxx" export GRANT_TYPE="client_credentials" export CLIENT_ID="xxxxx-47cd-xxxxxxx-a16e-xxxxxx" export SCOPE="api://$CLIENT_ID/.default" read -p "Enter Client Secret: " CLIENT_SECRET curl --location --request POST "https://login.microsoftonline.com/$TENANT_ID/oauth2/v2.0/token" \ --header "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "grant_type=$GRANT_TYPE" \ --data-urlencode "client_id=$CLIENT_ID" \ --data-urlencode "client_secret=$CLIENT_SECRET" \ --data-urlencode "scope=$SCOPE" | jq . Above CURL returns an access token which is valid for 1 hour. We need to use this token and authenticate to our Function API. If access token does not have required JWT claims, our code will reject the access.

Saturday, October 1, 2022 Read