Hemant Tiwari

Resume

R&D Engineer, Security & Compliance. Over seven years across compliance automation and DevOps.

Summary

Download PDFSee my open-source work

Security Compliance and Platform Engineer with over seven years of experience designing and automating compliance solutions for VMware Cloud Foundation and open-source platforms. Expertise in STIG, CIS, FIPS and FedRAMP, using Chef InSpec, Ansible, Kubernetes and GitHub Actions to strengthen security posture and reduce operational overhead.

Experience

Jan 2022 – Present

R&D Engineer Software III, Security & Compliance

VMware (acquired by Broadcom), Pune
  • Led automation for STIG security compliance across VMware and open-source platforms (VCF, Photon, Ubuntu) using Chef InSpec and Ansible, improving audit readiness and reducing manual effort.
  • Published and maintained open-source STIG compliance profiles in VMware's public GitHub repositories, enabling community adoption and external validation.
  • Developed STIG-hardened container images and automated CI/CD pipelines with GitHub Actions, integrating Twistlock scans to enforce controls and maintain FedRAMP compliance.
  • Owned and led the CIS Benchmark compliance effort for VMware Cloud Foundation: defined security controls, coordinated cross-functional teams and aligned with industry best practices.
  • Designed and delivered an internal scanning tool that identifies non-FIPS cryptographic modules, speeding up vulnerability detection and cutting audit preparation effort.
Apr 2019 – Dec 2021

Senior Software Engineer, DevOps

Wipro Limited, Noida
  • Automated application deployments to Dev and QA environments, improving delivery speed and raising development and testing efficiency by 20%.
  • Built and optimized CI/CD pipelines with automated testing and better Docker image builds, reducing build and release times.
  • Developed Helm charts for Spring Boot applications to streamline deployments and keep environments consistent.
  • Managed Kubernetes clusters across production and staging, troubleshooting deployment issues and keeping the platform stable and highly available.
  • Ran disaster recovery drills and implemented backup and restoration strategies to validate application resilience.

Skills

Compliance and security

STIG, CIS Benchmarks, FIPS, FedRAMP, Twistlock

Automation and CI/CD

Chef InSpec, Ansible, SALT, GitHub Actions, GitLab, Jenkins, Concourse, Gerrit

Containers and cloud

Docker, Kubernetes, Helm, Harbor, AWS, Azure

Artifacts and code quality

JFrog, Nexus, Maven, SonarQube

Observability

Prometheus, Grafana, cAdvisor

Languages and data

Python, Java, Shell, MariaDB (SQL), Git

Education

M.Tech, Software Engineering

Birla Institute of Technology and Science (BITS), Pilani

2022 – 2024

B.Tech, Mechanical Engineering

Kalinga Institute of Industrial Technology (KIIT), Bhubaneswar

2015 – 2019

Certifications

  • Microsoft Certified: Azure Fundamentals (AZ-900)
  • Wipro Certified DevOps Professional

Honors and recognition

  • At Our Best award from the NSX BU for automating STIG content for NSX-T.
  • Spot Award for exemplary work during the Broadcom acquisition.
  • Accolades from senior leadership for STIG-hardened container images and FedRAMP contributions.
  • Round-of-Applause recognition at Wipro for leading an application migration.
  • Featured on the client Yammer page at Wipro for cross-functional collaboration.

Working on compliance, security or automation? Let's talk.

Get in touchDownload resume