Kshitij Ambre

Architected and deployed FireHydrant as the company-wide incident management platform from scratch at Modulr Finance, establishing a structured incident lifecycle that reduced MTTR by an estimated 40% across all customer-facing services.

• Defined severity taxonomies, escalation policies, and runbooks tailored to business-critical payment processing services.
• Automated stakeholder communications and status page updates during active incidents.
• Established post-incident review workflows yielding actionable reliability improvements.
• Integrated with PagerDuty for on-call routing and with Prometheus/Grafana for alert-to-incident correlation.
• Maintained 99.9% SLA adherence as the dedicated incident manager for all production incidents.

Delivered cloud capacity management at deep service-level granularity across Azure and AWS, optimizing resource allocation and achieving measurable cost savings while maintaining platform headroom for peak demand.

• Performed demand forecasting and right-sizing of compute and storage resources across production environments.
• Produced recurring capacity reports that informed infrastructure investment decisions at the leadership level.
• Managed resource provisioning, access governance, networking, and cost monitoring across both production and non-production environments.
• Aligned capacity planning with business growth trajectories to prevent under-provisioning during peak periods.

Led AI adoption initiatives as part of a cross-functional team, integrating cutting-edge AI tools into operational workflows to automate toil and accelerate engineering productivity.

• Deployed Claude (Anthropic) for intelligent documentation, knowledge retrieval, and operational support.
• Implemented Microsoft Copilot Studio for workflow automation across engineering and operations teams.
• Identified high-impact use cases for AI-driven automation, reducing repetitive manual work.
• Championed AI literacy and best practices across the engineering organisation.

Designed and deployed Microsoft Defender for Cloud across the entire estate at Blenheim Chalcot, achieving measurable improvement in Secure Score and establishing continuous security posture monitoring.

• Configured automated remediation recommendations aligned with CIS benchmarks and organisational security policies.
• Managed vulnerability assessments, firewall rule reviews, and incident triage processes.
• Enforced device compliance via Microsoft Intune (Windows) and Addigy (macOS) with zero-trust conditional access controls.
• Contributed to security awareness programmes that strengthened the overall risk posture.

Owned platform engineering initiatives at Modulr Finance that standardized deployment pipelines, infrastructure-as-code templates, and environment parity across the organisation.

• Built and maintained Terraform modules for consistent, repeatable infrastructure provisioning.
• Reduced configuration drift by enforcing GitOps practices and CI/CD pipeline governance.
• Accelerated release velocity by automating environment setup and teardown.
• Integrated Docker and Kubernetes (Helm) for containerized workload orchestration.

Developed Python-based automation scripts for patch orchestration at Blenheim Chalcot, dramatically reducing manual effort and improving compliance across hybrid infrastructure.

• Reduced manual patching effort by approximately 60% with automated scheduling and execution.
• Ensured consistent, auditable patch cycles across a fleet of Linux servers (Ubuntu, RHEL).
• Integrated with monitoring systems to validate post-patch health and trigger rollback on failure.
• Performed OS hardening and performance tuning alongside patch management to maintain security compliance.