DevOps Lead · Yamaha Agriculture
Sahan Wimalasiri
I build the platforms engineering teams ship on, and lead the people who keep them running. 14+ years across Azure, AWS and GCP. Most recently I've led technology integration through acquisitions in AgTech.
- M&A technology integration
- Azure & multi-cloud
- FinOps
- DevSecOps
- Distributed teams
$ whoami
sahan.wimalasiri
$ cat role.yaml
role: DevOps Lead
org: Yamaha Agriculture
clouds: [azure, aws, gcp]
team: distributed · multi-timezone
focus: [m&a, finops, devsecops]
$ terraform plan
No changes. Infrastructure matches config.
$
01 · Impact
What I deliver
- Lower cloud spend Lasting savings from autoscaling, rightsizing, removing idle resources and cost policies teams follow.
- Multi-cloud consolidation Moving workloads between clouds to cut cost and the overhead of running several platforms.
- Platform migrations Moving source control and CI/CD to a new platform at scale without slowing delivery.
- Faster releases Deployments cut from hours to minutes with automated testing and parallel builds.
- Post-merger integration Bringing acquired teams onto shared IT, security and engineering systems while staying standards compliant.
- AI-assisted engineering Rolling out AI tooling to improve development velocity and efficiency.
02 · Experience
Where I've worked
-
DevOps Lead @ Yamaha Agriculture
Yamaha Motor Corporation acquired The Yield Technology Solutions as part of its move into AgTech.
- Led technical integration of IT and engineering systems after the acquisition, maintaining compliance through security and productivity platform migrations into the parent company.
- Helped bring a further acquisition into the agriculture business, consolidating engineering tools and practices.
- Reduced cloud spend through autoscaling, rightsizing and removing idle resources, backed by cost reporting and rightsizing policies.
- Migrated services from GCP to Azure, lowering infrastructure costs and cutting cross-cloud management overhead through consolidated billing and monitoring.
- Moved source control and CI/CD from Azure DevOps, GitHub Teams and Jenkins to GitHub Enterprise without slowing delivery, managing the change across teams in several timezones.
- Lead a distributed team of engineers: regular 1:1s, performance reviews, hiring decisions, and mentoring through certifications.
- Rolled out Claude AI across engineering and set up AI-assisted development practices, including secure, sandboxed cloud access so AI agents and engineers can work quickly and safely.
- Implemented edge security, secure tunnelling and mesh networking on Cloudflare.
- Built security scanning and vulnerability reporting into CI/CD to protect against supply-chain attacks, with dashboards for leadership.
- Run the in-house cyber security function, reporting to the CTO/CDIO.
- Lead penetration testing against the OWASP Top 10, and align security controls with NIST CSF 2.0, NIST SP 800-53 and ISO/SAE 21434.
- Work with external auditors on assessments, and with engineering teams to prioritise and remediate findings based on business risk and risk acceptance.
-
DevOps Lead @ The Yield Technology Solutions
AgTech startup helping feed the world without wrecking the planet.
- Introduced structured DevOps release practices that raised release speed and stability.
- Built CI/CD on Jenkins, cutting deployment time from hours to minutes.
- Automated infrastructure provisioning with Terraform and Bicep across dev, test and prod.
- Designed a hub-and-spoke network in Azure, strengthening security posture and limiting lateral movement.
- Designed and built real-time data processing microservices on AKS, deployed with Jenkins, Azure DevOps and Helm.
- Set up platform monitoring with Grafana, InfluxDB, Fluentd, Pingdom, Prometheus and OpsGenie.
- Provided after-hours and weekend on-call support.
-
Senior DevOps Engineer @ PetSure
White-label pet insurance underwriter.
- Substantially increased release frequency with fortnightly sprint releases and DevOps tooling.
- Moved all infrastructure from a managed hosting provider, and all dev, SIT and UAT environments from on-premises, to Azure and AWS.
- Deployed Office 365 and migrated off on-premises Exchange 2013.
- Implemented PRTG, New Relic and AppDynamics for application and network monitoring.
-
DevOps Engineer & Cloud Platform Manager @ ClickView
Educational video platform, "the Netflix of education".
- Migrated a large media library from an on-premises data centre to Amazon S3.
- Configured CloudFront and Akamai CDNs, including picking POPs and changing code so streaming media went through the CDN.
- Set up Route 53 DNS with health checks.
- Ran Puppet for build deployment to staging and production, then rolled out Git and Chef when infrastructure moved to Azure.
- Deployed serverless microservices on AWS Lambda and Azure Functions.
Freelance & consulting
-
DevOps Consultant @ WeatherIt
Australian platform helping outdoor experience businesses protect revenue with simple weather protection built on official weather data.
- Built the Google Cloud infrastructure, including ETL pipelines ingesting weather data from the Bureau of Meteorology (BOM) and Open-Meteo.
- Built GitHub Actions CI pipelines deploying services to Cloud Run.
- Strengthened security posture with Cloudflare and Vanta.
-
Senior DevOps Engineer @ Particular Audience
Global retail decisioning platform powering search, recommendations, merchandising, pricing and sponsored placements.
- Established CI practices for repeatable build and release automation across the organisation.
- Built consistent, repeatable infrastructure with AWS CloudFormation and CDK.
- Took part in solution design sessions with the technical leads and helped build ETL pipelines.
03 · Toolkit
What I work with
Cloud
- Azure
- AWS
- GCP
- ExpressRoute
- Direct Connect
- Cloudflare
Containers & orchestration
- Kubernetes (AKS / EKS)
- ACI
- Docker
- Helm
- Cloud Run
- Istio/Service Mesh
- OpenShift Kubernetes
Infrastructure as code
- Terraform
- Bicep
- CloudFormation
- AWS CDK
- Ansible
- Chef
- Puppet
CI/CD & source control
- GitHub Enterprise
- Azure DevOps
- GitHub Actions
- Jenkins
- Argo CD
- Argo Workflows
- Git
Observability
- Grafana (incl. Alloy, k6, Loki)
- OpenTelemetry
- Prometheus
- InfluxDB
- Fluentd
- Jira Service Management
- OpsGenie
- New Relic
Security & reliability
- DevSecOps
- Penetration testing
- OWASP Top 10
- NIST CSF 2.0
- NIST SP 800-53
- ISO 27001
- ISO/SAE 21434
- Vanta
- Zscaler
- Cloudflare WAF & Zero Trust
- Chaos engineering
- Performance tuning
Data & AI
- Databricks (data + ML)
- Postgres
- Citus
- MSSQL
- MySQL
- Claude AI
Languages & Systems
- Python
- Bash
- Golang
- C#
- Linux (Debian/RHEL/SUSE)
- Windows
04 · Off the clock
Beyond the pipeline
Photography
Behind a camera whenever I can be.
Homebrew IoT
Wiring up sensors and automations around the house.
Family
The most important deployment there is.
Sport
Staying active and switching off from screens.
05 · Contact
Let's talk
Platform work, cloud migrations, post-acquisition integration, or building a DevOps team: I'm happy to chat.
- Emailsahan@sahan.io
- LinkedInin/sahan-wimalasiri
- GitHub@sahanishere
- Based inNSW, Australia