DevOps Lead · Yamaha Agriculture

Sahan Wimalasiri

I build the platforms engineering teams ship on, and lead the people who keep them running. 14+ years across Azure, AWS and GCP. Most recently I've led technology integration through acquisitions in AgTech.

  • M&A technology integration
  • Azure & multi-cloud
  • FinOps
  • DevSecOps
  • Distributed teams
$ whoami
sahan.wimalasiri
$ cat role.yaml
role:     DevOps Lead
org:      Yamaha Agriculture
clouds:   [azure, aws, gcp]
team:     distributed · multi-timezone
focus:    [m&a, finops, devsecops]
$ terraform plan
No changes. Infrastructure matches config.
$ 

01 · Impact

What I deliver

02 · Experience

Where I've worked

  1. Jul 2024 – Present Surry Hills, NSW

    DevOps Lead @ Yamaha Agriculture

    Yamaha Motor Corporation acquired The Yield Technology Solutions as part of its move into AgTech.

    • Led technical integration of IT and engineering systems after the acquisition, maintaining compliance through security and productivity platform migrations into the parent company.
    • Helped bring a further acquisition into the agriculture business, consolidating engineering tools and practices.
    • Reduced cloud spend through autoscaling, rightsizing and removing idle resources, backed by cost reporting and rightsizing policies.
    • Migrated services from GCP to Azure, lowering infrastructure costs and cutting cross-cloud management overhead through consolidated billing and monitoring.
    • Moved source control and CI/CD from Azure DevOps, GitHub Teams and Jenkins to GitHub Enterprise without slowing delivery, managing the change across teams in several timezones.
    • Lead a distributed team of engineers: regular 1:1s, performance reviews, hiring decisions, and mentoring through certifications.
    • Rolled out Claude AI across engineering and set up AI-assisted development practices, including secure, sandboxed cloud access so AI agents and engineers can work quickly and safely.
    • Implemented edge security, secure tunnelling and mesh networking on Cloudflare.
    • Built security scanning and vulnerability reporting into CI/CD to protect against supply-chain attacks, with dashboards for leadership.
    • Run the in-house cyber security function, reporting to the CTO/CDIO.
    • Lead penetration testing against the OWASP Top 10, and align security controls with NIST CSF 2.0, NIST SP 800-53 and ISO/SAE 21434.
    • Work with external auditors on assessments, and with engineering teams to prioritise and remediate findings based on business risk and risk acceptance.
  2. Jul 2018 – Jun 2024 Surry Hills, NSW

    DevOps Lead @ The Yield Technology Solutions

    AgTech startup helping feed the world without wrecking the planet.

    • Introduced structured DevOps release practices that raised release speed and stability.
    • Built CI/CD on Jenkins, cutting deployment time from hours to minutes.
    • Automated infrastructure provisioning with Terraform and Bicep across dev, test and prod.
    • Designed a hub-and-spoke network in Azure, strengthening security posture and limiting lateral movement.
    • Designed and built real-time data processing microservices on AKS, deployed with Jenkins, Azure DevOps and Helm.
    • Set up platform monitoring with Grafana, InfluxDB, Fluentd, Pingdom, Prometheus and OpsGenie.
    • Provided after-hours and weekend on-call support.
  3. Jul 2016 – Jul 2018 Chatswood, NSW

    Senior DevOps Engineer @ PetSure

    White-label pet insurance underwriter.

    • Substantially increased release frequency with fortnightly sprint releases and DevOps tooling.
    • Moved all infrastructure from a managed hosting provider, and all dev, SIT and UAT environments from on-premises, to Azure and AWS.
    • Deployed Office 365 and migrated off on-premises Exchange 2013.
    • Implemented PRTG, New Relic and AppDynamics for application and network monitoring.
  4. Jan 2012 – Jun 2016 Pyrmont, NSW

    DevOps Engineer & Cloud Platform Manager @ ClickView

    Educational video platform, "the Netflix of education".

    • Migrated a large media library from an on-premises data centre to Amazon S3.
    • Configured CloudFront and Akamai CDNs, including picking POPs and changing code so streaming media went through the CDN.
    • Set up Route 53 DNS with health checks.
    • Ran Puppet for build deployment to staging and production, then rolled out Git and Chef when infrastructure moved to Azure.
    • Deployed serverless microservices on AWS Lambda and Azure Functions.

Freelance & consulting

  1. Apr 2025 – Dec 2025 Freelance

    DevOps Consultant @ WeatherIt

    Australian platform helping outdoor experience businesses protect revenue with simple weather protection built on official weather data.

    • Built the Google Cloud infrastructure, including ETL pipelines ingesting weather data from the Bureau of Meteorology (BOM) and Open-Meteo.
    • Built GitHub Actions CI pipelines deploying services to Cloud Run.
    • Strengthened security posture with Cloudflare and Vanta.
  2. Mar 2022 – Aug 2022 Surry Hills, NSW · Freelance

    Senior DevOps Engineer @ Particular Audience

    Global retail decisioning platform powering search, recommendations, merchandising, pricing and sponsored placements.

    • Established CI practices for repeatable build and release automation across the organisation.
    • Built consistent, repeatable infrastructure with AWS CloudFormation and CDK.
    • Took part in solution design sessions with the technical leads and helped build ETL pipelines.

03 · Toolkit

What I work with

Cloud

  • Azure
  • AWS
  • GCP
  • ExpressRoute
  • Direct Connect
  • Cloudflare

Containers & orchestration

  • Kubernetes (AKS / EKS)
  • ACI
  • Docker
  • Helm
  • Cloud Run
  • Istio/Service Mesh
  • OpenShift Kubernetes

Infrastructure as code

  • Terraform
  • Bicep
  • CloudFormation
  • AWS CDK
  • Ansible
  • Chef
  • Puppet

CI/CD & source control

  • GitHub Enterprise
  • Azure DevOps
  • GitHub Actions
  • Jenkins
  • Argo CD
  • Argo Workflows
  • Git

Observability

  • Grafana (incl. Alloy, k6, Loki)
  • OpenTelemetry
  • Prometheus
  • InfluxDB
  • Fluentd
  • Jira Service Management
  • OpsGenie
  • New Relic

Security & reliability

  • DevSecOps
  • Penetration testing
  • OWASP Top 10
  • NIST CSF 2.0
  • NIST SP 800-53
  • ISO 27001
  • ISO/SAE 21434
  • Vanta
  • Zscaler
  • Cloudflare WAF & Zero Trust
  • Chaos engineering
  • Performance tuning

Data & AI

  • Databricks (data + ML)
  • Postgres
  • Citus
  • MSSQL
  • MySQL
  • Claude AI

Languages & Systems

  • Python
  • Bash
  • Golang
  • C#
  • Linux (Debian/RHEL/SUSE)
  • Windows

04 · Off the clock

Beyond the pipeline

Photography

Behind a camera whenever I can be.

Homebrew IoT

Wiring up sensors and automations around the house.

Family

The most important deployment there is.

Sport

Staying active and switching off from screens.

Education Bachelor of Computer Science · University of Western Sydney · 2007–2011

05 · Contact

Let's talk

Platform work, cloud migrations, post-acquisition integration, or building a DevOps team: I'm happy to chat.