Yasas Malavige
DevOps / Cloud Infrastructure Engineer
About Me
Software Engineering graduate and final-year Network Engineering student who focuses on building stable, reliable systems with a practical mindset. Eager to grow under experienced engineers, contribute to real production systems, and build a strong foundation across modern software and infrastructure practices.
Technical Skills
Cloud & Infrastructure
AWS (EC2, S3, RDS, VPC, Lambda, CloudWatch, IAM) | GCP (Compute Engine, Cloud Run, IAM) | Linux (Ubuntu) | Firebase | Supabase
CI/CD & Containerization
Docker | Docker Compose | Kubernetes (Fundamentals) | Terraform (Fundamentals) | GitHub Actions | Ansible | Git
Monitoring & Reliability
Prometheus | Grafana | Loki | Nginx | Log Analysis & Root-Cause Analysis | Systemd Service Management | Cron Automation
Security & Networking
Networking Fundamentals (DNS, TCP/IP, VPC Routing, Firewall Rules/UFW) | Cloudflare (WAF, Zero Trust) | SSH Key Hardening | OAuth 2.0 | JWT | Secrets Management | IAM & Cloud Access Control
Programming & Frameworks
Java (Spring Boot) | Python | Bash/Shell Scripting | YAML | TypeScript | React
Databases & Storage
PostgreSQL | MySQL | SQLite
Professional Experience
Web Team Lead (Volunteer)
JAN 2026 – AUG 2026University of Vocational Technology | Rathmalana, Sri Lanka
- Architected high-availability production infrastructure on Ubuntu, Docker, and Nginx behind Cloudflare WAF, cutting monthly hosting costs by 80%.
- Guided a student developer team through Clean Code standards, weekly standups, and full runbook handovers for university staff.
- Owned the full server lifecycle – automated deployments, observability, and disaster recovery.
STEM Mentor L2 (Part-time)
DEC 2025 – PRESENTRoboticGen | Colombo, Sri Lanka
- Deliver project-based Programming and AI mentoring to K-12 students while coaching and guiding L1 mentors.
Co-Founder & Lead Web Developer
MAR 2024 – JUN 2025WebDynamo Digital Agency | Remote
- Delivered end-to-end full-stack web solutions and cloud hosting for Australian SME clients across concurrent production environments.
Web Developer
JUL 2023 – APR 2024WDCSE (PVT) LTD | Kottawa, Sri Lanka
- Maintained web environments and CMS configurations within a structured corporate setting — handling deployments, backups, and availability support.
Projects
University of Vocational Technology Official Website
Web Team Lead | Read the Case Study | uovt.ac.lk
- Rebuilt the university's legacy WordPress system from scratch with Next.js and TypeScript — chosen for SSR performance and long-term maintainability across a rotating student team.
- Architected a two-tier production/staging topology on Ubuntu with Docker Compose behind Nginx, protected by Cloudflare.
- Automated the full deployment pipeline through GitHub Actions with environment-mapped triggers and set up PLG observability with alerting and a 3-2-1-1-0 backup strategy targeting Cloudflare R2.
- Built a custom role-based admin panel for non-technical staff to manage content without developer involvement — every change versioned in PostgreSQL for instant rollback.
Docura — Multi-Tenant RAG Engine (Production Cloud Deployment)
Personal Project | Read the Case Study | GitHub
- Built a self-hosted document intelligence platform where teams can chat with their own documents using AI — all processing stays on their own server, so sensitive files never leave the network.
- Balanced privacy and quality using local ONNX embeddings for vector search and Groq's LLaMA 3.3 70B for generation, running the full stack on a t3.small EC2 instance.
- Enforced multi-tenant data isolation at three independent layers so no single vulnerability can expose another user's documents.
- Deployed on AWS EC2 with Docker Compose, Nginx, TLS, and a Prometheus/Grafana observability stack tracking p95 latency and per-endpoint request rates.
Hobby Server Monitor — LXD Container Management Dashboard
Personal Project | hsm.yasasbanuka.com | GitHub
- Built a lightweight LXD container management dashboard on AWS EC2 — a background daemon collects metrics independently and writes to a shared cache, so the dashboard always loads instantly.
- Implemented SQLite with nightly compaction — dropping storage growth from 5,184 to 24 rows per container per day.
- Secured with OAuth 2.0, JWT revocation, and RBAC, with systemd sandboxing containing breaches to the app's own data directory.
- Shipped via GitHub Actions — automated linting, frontend builds, and EC2 deployment through a least-privilege deploy user.
Education
Bachelor of Technology in Computer Network & Cloud Security
University of Vocational Technology · EQF Level 6
Bachelor of Engineering (Hons) in Software Engineering
IIC University of Technology · EQF Level 6
G.C.E (Advanced Level) — Technology Stream
Department of Examinations, Sri Lanka · EQF Level 4
Certifications
- Microsoft Certified: Azure Administrator Associate (AZ-104)— Microsoft
- Microsoft Azure Fundamentals (AZ-900)— KodeKloud
- Fundamentals of DevOps— KodeKloud
- 12 Factor App— KodeKloud
- Learning Linux Basics Course & Labs— KodeKloud
- Azure OpenAI Services in GitHub Models— Microsoft Learn Student Ambassadors, Sri Lanka
Volunteering
Webmaster (SLSAC TA) — IEEE, Sri Lanka Section
JAN 2025 – PRESENTPrior Roles: Founding Chair (TechSpark 1.0), IEEEXtreme 19.0 Ambassador, Lead Organizer (XtremeIgnite 1.0)
Co-Director of Service — Leo Club of Colombo Grand Circle
DEC 2024 – PRESENTColombo, Sri Lanka
FloodSupport.org — Disaster Relief Operations
NOV – DEC 2025Supported trilingual platform operations during Cyclone Ditwah relief efforts, ensuring access for affected communities across Sri Lanka.
Member — Robotic and Innovators Club
JAN 2017 – DEC 2022Mahinda Rajapaksha College, Homagama, Sri Lanka