Ajit Kumar

Open to Work

Software Engineer · Full Stack · DevOps · Cloud Security · DevSecOps

Results-driven Full Stack Engineer with hands-on LAMP Stack production experience and a strong foundation in MERN Stack, Next.js, and cloud-native infrastructure. Engineered 4+ production-grade web applications covering authentication systems, admin dashboards, CMS portals, and REST API integrations. Proficient in Docker, AWS, Terraform, and GitHub Actions CI/CD pipelines with a security-first DevSecOps mindset. Active competitive programmer with 518+ LeetCode problems solved, continuously advancing in System Design, Distributed Systems, and Cloud Security.

518+LeetCode

242+Day Streak

4+Live Projects

6moEng. XP

support@ajitdev.com

ajitk23192@gmail.com

+91 62055 26784

Katihar, Bihar, India

github.com/ajitdev01

linkedin.com/in/ajitdev01

ajitdev.com

leetcode.com/ajitdev01

Professional Experience

Full Stack Engineer — Web Development

Freelance / Contract · LAMP Stack · REST APIs · MVC Architecture

6 Months · 2024

▸Engineered 4+ production-ready LAMP Stack web applications encompassing business portals, admin dashboards, authentication systems, and CMS-driven sites deployed on Apache/Linux.
▸Designed responsive, cross-browser-compatible UI layouts using HTML5, CSS3, and Bootstrap, reducing page rendering inconsistencies across Chrome, Firefox, and Safari.
▸Developed reusable PHP backend modules with MVC-style architecture, implementing role-based access control, session management, and secure form validation workflows.
▸Integrated RESTful APIs and third-party SMTP mail services to enable automated client communication pipelines within production environments.
▸Optimized MySQL database queries through indexing strategies and JOIN refactoring, improving average query execution time across high-frequency data retrieval endpoints.
▸Automated deployment workflows using Git/GitHub version control and Apache VirtualHost configuration, streamlining production release cycles.
▸Implemented on-page SEO optimizations including semantic HTML structure, meta tags, and structured content, improving search engine indexability for client websites.
▸Resolved production bugs across backend authentication flows and frontend rendering pipelines, maintaining uptime and stability for active client deployments.

Web Developer — Contributor

RexVel Web Solution

Digital Branding & Web Development Agency · rexvel.com

Collaborative

▸Contributed to development and maintenance of responsive business websites and digital solutions, delivering pixel-accurate UI components and PHP-driven backend features.
▸Designed reusable front-end components with Bootstrap and vanilla CSS, ensuring consistent branding and cross-device responsiveness across client deliverables.
▸Maintained and extended PHP backend codebases implementing database-driven functionality, dynamic content rendering, and secure authentication modules.
▸Integrated MySQL databases with optimized query structures to support data-driven web portals, admin panels, and dynamic landing pages.
▸Delivered client customizations and feature enhancements within defined scope, meeting deadlines and maintaining production deployment stability.
▸Supported SEO improvements and cross-browser compatibility fixes enhancing page performance and discoverability for agency client portfolios.

Featured Engineering Projects

DevSecOps Automation Pipeline — Shift-Left Security CI/CD

GitHub ActionsDockerTrivySASTOWASP

▸Architected a multi-stage GitHub Actions CI/CD pipeline integrating Trivy container image vulnerability scanning and OWASP dependency-check SAST analysis before every Docker registry push.
▸Containerized a React application with multi-stage Dockerfile, reducing final image size by isolating build and runtime layers, and enforcing non-root container execution for security hardening.
▸Configured automated workflow gates that block deployments on high/critical CVE detections, implementing a shift-left security model aligned with OWASP DevSecOps practices.
▸Instrumented pipeline with secrets management best practices—injecting API keys via GitHub Encrypted Secrets, preventing credential exposure in build logs.

Cloud Security Lab — AWS VPC Network Isolation

AWSTerraformIAMVPCEC2CloudWatch

▸Provisioned a production-grade AWS VPC architecture using Terraform IaC, segregating database nodes inside private non-egress subnets while routing public traffic through an Application Load Balancer and NAT Gateway.
▸Configured granular IAM policies with least-privilege boundaries for EC2 instances, S3 buckets, and CloudWatch monitoring to eliminate over-privileged access vectors.
▸Designed Security Group firewall rules enforcing explicit ingress/egress allowlists, blocking unauthorized lateral movement between VPC tiers aligned with Zero Trust networking principles.
▸Automated infrastructure provisioning with Terraform state management enabling reproducible multi-environment deployments and infrastructure drift detection.

Stateless MERN Platform — JWT Auth + Redis Caching Layer

MongoDBExpressReactNode.jsRedisJWT

▸Engineered a scalable MERN Stack web platform with stateless JWT authentication via HTTP-only cookies, eliminating XSS-based token theft vectors and maintaining secure session lifecycle.
▸Implemented Cache-Aside pattern using Redis to intercept high-frequency MongoDB read operations, reducing database round-trips and improving response latency for frequently queried resources.
▸Designed normalized MongoDB schema with compound indexing strategies, optimizing aggregation pipeline performance for data-intensive dashboard queries.
▸Secured REST API endpoints with Express middleware enforcing input sanitization, rate limiting, and RBAC guards aligned with OWASP API Security Top 10.

LAMP Stack Production Applications — 4+ Client Deployments

PHPMySQLApacheLinuxREST APIBootstrap

▸Delivered 4+ production-ready LAMP Stack applications: a business CRM portal, multi-role admin dashboard, client authentication system, and CMS-driven brochure website with SEO optimization.
▸Architected role-based authentication modules with PHP session management and MySQL-backed user permission tables, independently securing admin, editor, and client access tiers.
▸Integrated third-party REST APIs and SMTP mail services for contact forms and automated notification workflows within deployed production environments.
▸Optimized SQL query execution through strategic indexing, query refactoring, and EXPLAIN analysis, reducing database load on high-frequency data fetch operations.

Education & Training

Bachelor of Computer Applications (BCA)

Specialization: Cloud Computing & Security

Amity University Online

Ongoing

DevOps Engineering & Full Stack Specialist Program

Brainzima Innovation Institute

MERN Stack development, Linux server administration, Docker/Kubernetes orchestration, Git workflows, and cloud-native infrastructure fundamentals.

Completed

Key Highlights

518+ LeetCode Problems Solved
242+ Day Active Streak
4+ Live Production Projects
LAMP · MERN · Next.js
6 Months Full Stack Engineering
PHP · MySQL · REST APIs
RexVel Web Solution Contributor
rexvel.com
BCA Cloud & Security
Amity University Online
DevSecOps Pipeline Implemented
Trivy · GitHub Actions
AWS VPC + Terraform IaC Labs
IAM · EC2 · S3 · VPC
Docker Container Hardening
Multi-stage · Non-root
Active GitHub Contributions
Boilerplates · OSS
DSA Foundations Mastered
Advancing: Graphs · DP

Tech Stack

Languages

C++JavaScriptTypeScriptPHPPythonSQL

Frontend

HTML5CSS3ReactNext.jsTailwind CSSBootstrapMUIFramer Motion

Backend

Node.jsExpressPHPREST APIsJWTRBACAuth

Database

MongoDBMySQLRedisSQL

Cloud/DevOps

AWSEC2S3VPCIAMCloudWatchTerraformDockerKubernetesNginxGitHub ActionsCI/CDLinux

Security

OWASPDevSecOpsTrivySASTContainer SecurityZero TrustSecrets Mgmt

Core CS

Data StructuresAlgorithmsOSComputer NetworksDBMSOOPSystem DesignCloud ComputingCyber SecurityDistributed Systems

Current Learning

Advanced Graph AlgorithmsActive
Dynamic ProgrammingActive
Low-Level Design (LLD)Active
High-Level Design (HLD)Active
Distributed SystemsFocus
Kubernetes Deep DiveFocus
AWS Solutions ArchitectureFocus
Zero Trust NetworkingFocus

Target Roles

Software EngineerFull Stack EngineerBackend EngineerDevOps EngineerCloud EngineerDevSecOps Engineer

Professional Experience

Full Stack Engineer — Web Development

Freelance / Contract · LAMP Stack · REST APIs · MVC Architecture

6 Months · 2024

▸Engineered 4+ production-ready LAMP Stack web applications encompassing business portals, admin dashboards, authentication systems, and CMS-driven sites deployed on Apache/Linux.
▸Designed responsive, cross-browser-compatible UI layouts using HTML5, CSS3, and Bootstrap, reducing page rendering inconsistencies across Chrome, Firefox, and Safari.
▸Developed reusable PHP backend modules with MVC-style architecture, implementing role-based access control, session management, and secure form validation workflows.
▸Integrated RESTful APIs and third-party SMTP mail services to enable automated client communication pipelines within production environments.
▸Optimized MySQL database queries through indexing strategies and JOIN refactoring, improving average query execution time across high-frequency data retrieval endpoints.
▸Automated deployment workflows using Git/GitHub version control and Apache VirtualHost configuration, streamlining production release cycles.
▸Implemented on-page SEO optimizations including semantic HTML structure, meta tags, and structured content, improving search engine indexability for client websites.
▸Resolved production bugs across backend authentication flows and frontend rendering pipelines, maintaining uptime and stability for active client deployments.

Web Developer — Contributor

RexVel Web Solution

Digital Branding & Web Development Agency · rexvel.com

Collaborative

▸Contributed to development and maintenance of responsive business websites and digital solutions, delivering pixel-accurate UI components and PHP-driven backend features.
▸Designed reusable front-end components with Bootstrap and vanilla CSS, ensuring consistent branding and cross-device responsiveness across client deliverables.
▸Maintained and extended PHP backend codebases implementing database-driven functionality, dynamic content rendering, and secure authentication modules.
▸Integrated MySQL databases with optimized query structures to support data-driven web portals, admin panels, and dynamic landing pages.
▸Delivered client customizations and feature enhancements within defined scope, meeting deadlines and maintaining production deployment stability.
▸Supported SEO improvements and cross-browser compatibility fixes enhancing page performance and discoverability for agency client portfolios.

Featured Engineering Projects

DevSecOps Automation Pipeline — Shift-Left Security CI/CD

GitHub ActionsDockerTrivySASTOWASP

▸Architected a multi-stage GitHub Actions CI/CD pipeline integrating Trivy container image vulnerability scanning and OWASP dependency-check SAST analysis before every Docker registry push.
▸Containerized a React application with multi-stage Dockerfile, reducing final image size by isolating build and runtime layers, and enforcing non-root container execution for security hardening.
▸Configured automated workflow gates that block deployments on high/critical CVE detections, implementing a shift-left security model aligned with OWASP DevSecOps practices.
▸Instrumented pipeline with secrets management best practices—injecting API keys via GitHub Encrypted Secrets, preventing credential exposure in build logs.

Cloud Security Lab — AWS VPC Network Isolation

AWSTerraformIAMVPCEC2CloudWatch

▸Provisioned a production-grade AWS VPC architecture using Terraform IaC, segregating database nodes inside private non-egress subnets while routing public traffic through an Application Load Balancer and NAT Gateway.
▸Configured granular IAM policies with least-privilege boundaries for EC2 instances, S3 buckets, and CloudWatch monitoring to eliminate over-privileged access vectors.
▸Designed Security Group firewall rules enforcing explicit ingress/egress allowlists, blocking unauthorized lateral movement between VPC tiers aligned with Zero Trust networking principles.
▸Automated infrastructure provisioning with Terraform state management enabling reproducible multi-environment deployments and infrastructure drift detection.

Stateless MERN Platform — JWT Auth + Redis Caching Layer

MongoDBExpressReactNode.jsRedisJWT

▸Engineered a scalable MERN Stack web platform with stateless JWT authentication via HTTP-only cookies, eliminating XSS-based token theft vectors and maintaining secure session lifecycle.
▸Implemented Cache-Aside pattern using Redis to intercept high-frequency MongoDB read operations, reducing database round-trips and improving response latency for frequently queried resources.
▸Designed normalized MongoDB schema with compound indexing strategies, optimizing aggregation pipeline performance for data-intensive dashboard queries.
▸Secured REST API endpoints with Express middleware enforcing input sanitization, rate limiting, and RBAC guards aligned with OWASP API Security Top 10.

LAMP Stack Production Applications — 4+ Client Deployments

PHPMySQLApacheLinuxREST APIBootstrap

▸Delivered 4+ production-ready LAMP Stack applications: a business CRM portal, multi-role admin dashboard, client authentication system, and CMS-driven brochure website with SEO optimization.
▸Architected role-based authentication modules with PHP session management and MySQL-backed user permission tables, independently securing admin, editor, and client access tiers.
▸Integrated third-party REST APIs and SMTP mail services for contact forms and automated notification workflows within deployed production environments.
▸Optimized SQL query execution through strategic indexing, query refactoring, and EXPLAIN analysis, reducing database load on high-frequency data fetch operations.

Education & Training

Bachelor of Computer Applications (BCA)

Specialization: Cloud Computing & Security

Amity University Online

Ongoing

DevOps Engineering & Full Stack Specialist Program

Brainzima Innovation Institute

MERN Stack development, Linux server administration, Docker/Kubernetes orchestration, Git workflows, and cloud-native infrastructure fundamentals.

Completed

Key Highlights

518+ LeetCode Problems Solved

242+ Day Active Streak

4+ Live Production Projects

LAMP · MERN · Next.js

6 Months Full Stack Engineering

PHP · MySQL · REST APIs

RexVel Web Solution Contributor

rexvel.com

BCA Cloud & Security

Amity University Online

DevSecOps Pipeline Implemented

Trivy · GitHub Actions

AWS VPC + Terraform IaC Labs

IAM · EC2 · S3 · VPC

Docker Container Hardening

Multi-stage · Non-root

Active GitHub Contributions

Boilerplates · OSS

DSA Foundations Mastered

Advancing: Graphs · DP

Tech Stack

Languages

C++JavaScriptTypeScriptPHPPythonSQL

Frontend

HTML5CSS3ReactNext.jsTailwind CSSBootstrapMUIFramer Motion

Backend

Node.jsExpressPHPREST APIsJWTRBACAuth

Database

MongoDBMySQLRedisSQL

Cloud/DevOps

AWSEC2S3VPCIAMCloudWatchTerraformDockerKubernetesNginxGitHub ActionsCI/CDLinux

Security

OWASPDevSecOpsTrivySASTContainer SecurityZero TrustSecrets Mgmt

Current Learning

Advanced Graph AlgorithmsActive

Dynamic ProgrammingActive

Low-Level Design (LLD)Active

High-Level Design (HLD)Active

Distributed SystemsFocus

Kubernetes Deep DiveFocus

AWS Solutions ArchitectureFocus

Zero Trust NetworkingFocus