Summary
Senior engineer with 12+ years in software, including ~8 years building and supporting production systems on AWS for enterprise cybersecurity products, most recently at Check Point. Hands-on across serverless infrastructure (Lambda, API Gateway, DynamoDB, Step Functions, SQS/SNS) and containerized microservices running on Kubernetes across multi-region AWS, released through GitOps pipelines (ArgoCD). Experienced in production debugging with Grafana and Kibana, and in event-driven systems. Currently building hands-on depth in Terraform, EKS, VPC networking and CI/CD pipelines.
Technical skills
- Cloud (AWS)
- LambdaAPI GatewayDynamoDBStep FunctionsS3SQSSNSCloudWatchIAMSecrets ManagerSSM Parameter StoreRoute 53CloudFrontACMEC2VPCEKS
- Infrastructure as Code
- CloudFormationTerraform
- CI/CD & GitOps
- AWS CodePipelineAWS CodeBuildAWS CodeDeployArgoCDJenkinsGitGitHub
- Containers
- DockerKubernetes
- Observability
- GrafanaKibanaCloudWatchOpsGenie
- Scripting & Languages
- BashPythonNode.jsTypeScriptJavaScript
- Databases & Caching
- PostgreSQLDynamoDBRedis
- Operating Systems
- Linux
Professional experience
- Jul 2021 – Sep 2026
Software Developer
Check Point Software Technologies Ltd. | Pune, IndiaCloud Infrastructure PlatformMay 2025 – Sep 2026
Node.js, TypeScript, PostgreSQL, Redis, SQS, Docker, Kubernetes, ArgoCD, AWS
Backend services for the shared platform behind Check Point's cloud security products: identity, billing, licensing and tenancy, running as containerized microservices on Kubernetes across multi-region AWS.
- Owned end-to-end delivery of two-factor authentication (TOTP and SMS via Twilio) for the centralized single sign-on service used across multiple Check Point products, from design through production release.
- Built AWS Marketplace billing integration APIs handling the subscription lifecycle (subscribe, entitlement change, unsubscribe), with idempotent, retry-safe handling of AWS's at-least-once event delivery.
- Built on-prem license management APIs integrated with the platform's authentication, identity and tenant services.
- Diagnosed and resolved a cross-region replication defect that caused child licenses to fail to sync from parent licenses, tracing the root cause through Grafana dashboards and Kibana logs.
- Shipped services to Kubernetes through GitOps release pipelines (ArgoCD), and wrote and maintained scheduled cron jobs for background processing.
Serverless Security ProductJul 2021 – May 2025
Python, Node.js, Lambda, API Gateway, DynamoDB, Step Functions, S3, SQS, SNS, CloudFormation
- Developed and maintained Lambda-based services in Python and Node.js on a fully serverless AWS architecture, supporting the product's transition from Protego into Check Point after the acquisition.
- Created and updated CloudFormation templates for Lambda functions, IAM permissions and supporting AWS resources, with secrets managed in Secrets Manager and SSM Parameter Store.
- Provided nearly four years of production support, debugging live issues through CloudWatch logs and metrics.
- Apr 2020 – Jun 2021
Software Consultant
Codewits Solutions Pvt. Ltd. | Pune, India- Continued development of the AWS serverless security product through enterprise readiness ahead of its acquisition by Check Point.
- Sep 2019 – Apr 2020
Senior Software Engineer
GDB Technologies Pvt. Ltd. | Pune, India- Developed features and supported production for the same AWS serverless security product through a period of organizational restructuring.
- Dec 2016 – Jan 2019
Software Engineer
GDB Technologies Pvt. Ltd. | Pune, India- Moved from iOS development (Objective-C, Swift) into backend engineering, building services on AWS serverless architecture (Lambda, API Gateway, DynamoDB).
- Jan 2016 – Aug 2016
iOS Developer
CallnData Technologies | Pune, India - Jun 2013 – Jan 2016
Software Developer
BVBI Infotech | Bengaluru, India
Projects
amitjikar.com | https://amitjikar.com
S3, CloudFront, Route 53, ACM
- Hosted a static website in a private S3 bucket (public access blocked, encryption at rest enabled), served globally through a CloudFront CDN distribution, with bucket access restricted to CloudFront using Origin Access Control (OAC) and a bucket policy.
- Delegated DNS from the domain registrar (BigRock) to a Route 53 public hosted zone, and configured A and AAAA alias records to route IPv4 and IPv6 traffic to the CloudFront distribution.
- Secured the custom domain with HTTPS using an AWS Certificate Manager (ACM) certificate, validated through a DNS CNAME record in Route 53.
Education
Bachelor of Engineering (B.E.)
Computer Science and Engineering
RTM Nagpur University, Nagpur, India
2012