Mantripragada Sandeep

Cloud Developer

Email: ad167z@r.postjobfree.com

Contact: 913-***-****

LinkedIn:

www.linkedin.com/in/s-mantripragada-309114265/

OVERVIEW

A Microsoft Azure and AWS Certified Cloud Developer around 5+ years of IT experience in maintaining infrastructure and code using Azure, Azure DevOps. Certified Kubernetes Administrator (CKA) with Expertise in Orchestration of Containers. Expert in using Continuous Integration, Continuous Deployment (CI/CD), Software Configuration Management (SCM) which encompasses experience in Build/Release Management. Implementing CI/CD Pipelines, and different cloud services like Microsoft Azure and Amazon Web Services (AWS), Delivery Management for both Public and Private Cloud services.

PROFESSIONAL SUMMARY

Expertise in working on various Azure services like Virtual Machines, Azure Active Directory (AD), Traffic Manager, Load Balancer, Application Gateways, Auto-Scaling API Management, Scheduling, Azure Auto-scaling, Migrating Existing Active Directory and Exchanged Users to Microsoft Azure AD using Azure AD Connect, and PowerShell Automation Azure Service Bus, Azure Search, Azure DNS, Azure VPN Gateway, and Notification Hub.

Experienced in Azure Cloud Services, Storage Accounts, and Virtual Networks, as well as the ability to configure and maintain ExpressRoute, VPN, V-nets, and Subnets on Azure Virtual Machines (VM), Auto-Scaling and Traffic Manager.

Experienced in configuring Azure Traffic Manager, Analyzing Azure Networks with Azure Network Watcher, Implementing Azure Web Apps, Azure App Services, Azure Application Insights, Azure Application Gateway, Azure DNS, Azure Stack, Azure Backup and Azure Automation.

Experienced in migrating from stand alone DevOps tools to Azure DevOps where I have configured services such as Pipelines, Repos, Test Plans, and Artifacts.

Expertise in provisioning Azure Infrastructure using Azure DevOps by leveraging Infrastructure as Code approach such as Terraform, ARM templates, Cloud Formation templates onto Azure and AWS Cloud environments.

Implemented a CI/CD pipeline using Azure DevOps (VSTS, TFS) in both Cloud and On-Premises with GIT, MS Build, Docker, Maven along with Jenkins Plugins.

Hands on experience in the strategy and practical implementation of AWS cloud-specific technologies like Elastic Compute Cloud (EC2), Simple Storage Services (S3), Route 53, Cloud Formation, Elastic IPs, Virtual Private Cloud (VPC), RDS and Cloud Watch, WAF, CloudFront, SNS & SES, KMS, CloudHSM, Auto Scaling Group(ASG), Storage Gateway, IAM, Inspector, Macie, Shield.

Brought in the DevSecOps culture as part of the cloud transformation journey by working with IT, Security and various teams within the organization.

Implemented CheckMarx, OWASP, SonarQube, Microsoft Security Code Analysis, WhiteSource Bolt, SAST, DAST, Container Security, Twistlock in Azure DevOps.

Implemented Kubernetes Clusters on cloud environments with Master/ Minion architecture and wrote many YAML files to create many services like Pods, Deployments, Auto Scaling, Load Balancers and Managed Kubernetes charts using Helm.

Involved in development of test environment on Docker containers and configuring the Docker containers using Kubernetes. Utilized Kubernetes and Docker for the runtime environment of the CI/CD system to build, test deploy.

Good experience with Helm Charts deployments, writing manifest files to deploy K8s objects/ Microservices. Implemented Kubernetes manifests, helm charts for deployment of Microservices into k8s clusters.

Experience in writing Terraform modules to deploy cloud based Kubernetes clusters and enabling the Node Auto Scaling. Enabling Log-Analytics workspace and writing Helm charts to deploy micro-services into Kubernetes.

Implemented Terraform Templates automating Azure IAAS VM’s using Terraform modules and deployed virtual machine scale sets in production environment.

Implemented Azure Active Directory for Single Sign-On (SSO) access to thousands of cloud SaaS applications like Office 365, Dropbox.

Implemented and configured Azure Defender for Office, Endpoint, and Identity, enhancing threat detection capabilities and strengthening security postures across the Azure environment.

Experienced in maintaining robust security solutions in Azure Active Directory (AAD), including the implementation of Multi-Factor Authentication (MFA) and Single Sign-On (SSO) for enhanced identity security.

Expertise in deploying Micro services, its application improvement and upgradation utilizing Azure administrations like Azure DevOps, Kubernetes Service (AKS), Container Services and also used Prometheus and Grafana for Monitoring.

Proficient in using Docker Hub, Docker Engine, Docker images, Docker Weave, Docker Compose, Docker Swarm, and Docker Registry and used Containerization for applications.

Installation of Istio for Service mesh and Implemented ISTIO as a Service Mesh component to observe and control network flow across services running in multiple Kubernetes clusters.

Implemented Infrastructure Automation through Terraform, Cloud Formation, ARM Templates for Auto-Provisioning, Code Deployments (Blue Green/Canary), and software installation.

Used GIT as source code management tool to for an application and setup the entire GIT branching strategy using Github.

Automated the infrastructure using Terraform and making it auditable by storing all the infrastructure changes in a version control system like GITHUB.

Expertise in reporting on additional version control tools such as SVN, Perforce, TFS, UCM ClearCase.

Integrated the Linux environment with Active Directory providing a Single Sign On (SSO) solution. Using syslog & MySQL, deployed a custom syslog reporting solution for system alerts and notifications.

Participate in product design reviews and review documents to evaluate the quality of functional requirements and drafted Test Plan for System and UAT Testing

Responsible for estimating the Cluster size, monitoring, and troubleshooting of the Spark Databricks cluster.

Experience with Jumpstart & Kick-start Installations on Solaris & Linux. Installed, maintained and fine tuned the Apache-Tomcat server and Web-sphere Application Server in Linux Platform

CERTIFICATIONS

Microsoft Certified: DevOps Engineer Expert

Issued By: Microsoft

Certification Number: 57584-8329Y2

Microsoft Certified: Microsoft Certified: Azure Administrator Associate

Issued By: Microsoft

Certification Number: 4A355C-024360

AWS Certified Cloud Practitioner

Issued By: Amazon Web Services

Certification Number: 6TC97G4DN14E1E33

Certified Kubernetes Administrator

Issued By: The Linux Foundation

Certification Number: LF-q6gikr5fwi

TECHNICAL SKILLS

Cloud Technologies

Azure, Amazon Web Services (AWS)

Operating System

Windows, MacOS, RHEL, CentOS, Ubuntu, Fedora, Debian, Solaris.

Configuration Management Tools

Ansible, Chef, Puppet

Build Tools

ANT, Maven, Gradle

CI/CD Tools

Azure DevOps, Jenkins, Git, Github actions, Gitlab pipelines

Virtualization

VMware, Windows Hyper-V, Vagrant, Virtual Box

Version Control Tools

GIT, GITHUB, Bitbucket, SVN, Gitlab

Containerization

Kubernetes, Docker, Docker Swarm

Monitoring Tools

ELK, Nagios, Cloudwatch, Azure Monitor, Grafana, Prometheus, Confluence, Jira.

Scripting/ Programming Languages

Python, Java, PowerShell, Shell Scripting, Bash Shell, Ruby, Groovy, YAML, Perl, Kotlin, C, C++.

Networking

DNS, DHCP, FTP/TFTP, NFS, SMTP, TCP/IP, NIS, HTTP/HTTPS, WAN, LAN

Database

Dynamo DB, MySQL, RDBMS, NoSQL, Cassandra, PostgreSQL, Mongo DB, Oracle DB

Web Servers

Apache Tomcat, JBOSS, Nginx, Apache Http

WORK EXPERIENCE

Client: Bank of America BOFA, Charlotte, North Carolina April 2023 – Present

Role: Cloud Developer Position: Contract

Responsibilities:

Implementing Azure Services such as Azure Active Directory (AAD), Azure Storage, Azure Cloud Services, Azure Resource Manager (ARM), Azure Blob Storage, Azure VM, Azure Functions.

Designed and implementation of Proof of Concepts (POC’s) for custom roles in Azure RBAC to specific organizational requirements, achieving granular access control for user groups and resources. Additionally, integrated Azure Privileged Identity Management (PIM) to efficiently manage privileged access, mitigating potential security risks and unauthorized usage.

Execution of a Proof of Concept (POC) to implement and deploy EPAC (Enterprise Policy Automation and Compliance) software, enforce governance and compliance standards for Azure Policies and maintain compliance standards throughout the Azure environment.

Extensively worked in designing, developing, and maintaining cloud-based solutions on Azure cloud using DevOps practices and tools, including Azure DevOps, Azure Resource Manager and Azure Functions.

Implemented custom RBAC roles, Resource Group Policies based on Customer's requirements to manage the User's access.

Deployed Azure lAAS Virtual Machines (VM's) and Cloud services (PAAS role instances) into secure V-Nets and subnets.

Designed and deployed Azure Policies through EPAC software to enforce governance and compliance standards across the Azure environment, demonstrating expertise in cloud security and management.

Developed and implemented Azure Policy definitions to enforce organizational standards and compliance requirements. Configured custom policy initiatives to align with specific business needs and security policies.

Automated policy remediation processes using Azure Policy, streamlining the resolution of non-compliant resources.

Designed and implemented custom remediation actions for Azure Policy violations, addressing unique organizational requirements.

Created custom Azure Policy definitions to enforce specific organizational requirements, ensuring adherence to best practices, naming conventions, and resource configurations.

Expertise in working with Azure Active Directory (Azure AD), Azure RBAC, and Azure PIM services, ensuring the secure management of identities and access.

Written Terraform Templates for Azure Infrastructure as code using Terraform to build staging and production environments.

Proficient in several terraform modules for infrastructure management, while published and authored a module to the Terraform registry to deploy our product on clients’ environment.

Contributed to project by configuring Terraform TFE settings within a designated workspace, executing Terraform code, and employing SAML authentication for streamlined login procedures."

Experienced in configuring the multiple types of SSO methods for clients, including SAML 1.1/2.0, LDAP. Good understanding knowledge on the SAML, Oauth 2.0, OpenId/Connect(OIDC).

Designed VNets and subscriptions to confirm to Azure Network Limits. Exposed Virtual machines and cloud services in the Nets to the Internet using Azure External Load Balancers.

Providing high availability for lAAS VM’s and PAAS role instances or access from other services in the Net with Azure Internal Load Balancer.

Created users, manage user permissions, maintain User & File System quota on Redhat Linux. Installed and configured VERITAS Volume Manager, Solaris Volume Manager.

Installation and configuration of Logical Volume Manager on HP-UX and Linux.

Involved mainly testing the applications, comparing and verifying the requirements and writing test cases for QA as well as involved in functional testing. Responsible to test each new version of application for Regression testing.

Defined entire QA life cycle process, roles, responsibilities & release schedules.

Environment: Azure, Azure AD, Azure DevOps, Azure Policy, RBAC, Terraform, Ansible, Linux, Jenkins, Cloud, Shell, Bash.

Client: Vizient, Inc. - Irving, Texas August 2022 – April 2023

Role: DevOps Engineer Position: Intern

Responsibilities:

Worked on Microsoft Azure (Public) Cloud to provide laaS support to client. Create Virtual Machines through Power Shell Script and Azure Portal.

Working as Cloud administration on Microsoft Azure environments, involved in Azure AD Connect configuring virtual machines, Storage accounts and Azure resource groups.

Mostly worked on CI/CD pipelines and created YAML files in Azure DevOps which have all the configurations needed to create the pipeline and also can be reused for creating multiple pipelines.

Extensively used Azure DevOps and heavily work with Terraform and Ansible for automating the provisioning of various infrastructure.

Acted as build and release engineer, deployed the services by VSTS (Azure DevOps) pipeline. Created and Maintained pipelines to manage the IAC for all the applications.

Automated dependencies in the pipeline by reading the capability and deploying the necessary Azure service’s dependencies that are required for the capability.

Expertise in using multiple CI/CD tools while working for my automation framework.

Experienced in working with Terraform and been extensively working on writing reusable modules using Industry best practices for deploying various infrastructure on multiple cloud platforms.

Written a script for doing Terraform import of Azure services when migrated to the latest provider version.

Wrote a bash script to extract the Terraform version from the .tf files in the pipeline and installed that particular Terraform versions that is mentioned in the terraform .tf files.

Used Terraform to automate the provisioning of infrastructure and also used CI/CD pipelines to automate the deployment of Terraform and Ansible modules.

Heavily working on Ansible and been creating multiple Ansible playbooks and also used this in order to automate the configuration management process.

Expertise in setting up a Continuous Delivery Pipeline using Ansible Playbooks deployed micro services, including using Ansible Playbooks to provide AWS infrastructures.

Installation of Chef using Enterprise Chef and Omnibus Technologies. Design and development of systems and processes to automate deployment of a cloud software

Performed Full Blown Puppet Enterprise Installations and Configuration of Puppet Agents & Installed Puppet Enterprise and connected it to Puppet Agents in the Enterprise AWS.

Performing Functional, Regression, System integration, Cross Browser/Cross Platform Compatibility & End to End & UAT.

Developed the UAT Test cases and executed them with the flow of the Project.

Environment: Azure, Azure AD, Azure DevOps, Terraform, Ansible, HashiCorp, Linux, Jenkins, Cloud, AWS, Shell, Bash.

KONE Elevators India Private Limited - Chennai September 2019 – August 2021

Role: Cloud/DevOps Engineer Position: Full Time

Responsibilities:

Implemented several POC's on Azure utilization and configured resources using Azure Key Vault to save high critical secrets and passwords. Also, worked on Azure App services, Azure storage, Azure SQL Database, Virtual Machines, Azure Key Vault, Azure AD, Azure Search, and Azure Notification Hub.

Involved in configuration for Web Apps/ Function Apps, V-Net integration, HCM, Application Gateway, App Insights, Active Directory (AD), Azure Key Vault, Encryption and Security on Azure.

Created Network Security Groups (NSG) to filter the traffic to and from Azure Resources by configuring the Inbound and Outbound rules and associating them with Subnet and Network Interfaces.

Implemented Azure Role-Based Access Control (RBAC) for granular level access control and to separate roles inside our team and these roles only grant users the level of access they need to perform their tasks

Implemented Azure Active Directory for Single Sign-On (SSO) access to thousands of cloud SaaS applications like Office 365, Dropbox.

Implementing Azure DevOps technologies and processes like containerization, infrastructure as code, metrics, monitoring and automate wherever sensible.

Created and maintained Continuous Integration (CI) using tools like Azure DevOps (VSTS) over multiple environments to facilitate an Agile development process which is automated and repeatable, enabling teams to safely deploy code in Azure Kubernetes Services (AKS) using Azure DevOps by YAML scripting.

Managing and Administrating of AWS Services CLI, EC2, VPC, S3, ELB Glacier, Route 53, Cloudtrail, IAM, and Trusted Advisor services.

Implementing and operating solutions built on AWS platform, deployed Palo Alto, F5, Aviatrix Transit Gateway boxes and configured boxes with customer's requirements.

Worked on deploying and managing AWS Transit Gateway and Azure VPN Gateway Point to Site and Site to Site configurations to connect On Premise devices with cloud virtual networks.

Managed Azure Container Registry to store private Docker images which are deployed onto AKS, Azure pipelines to build, test, and deploy, Azure Monitor to collect metrics and logs from various data connectors.

Configured Azure Monitor to track performance and create security alerts, and used Prometheus tool to collect metrics, queries from Kubernetes Cluster and visualized using Grafana.

Used Jenkins pipelines to drive all micro services builds out to the Docker registry and then deployed to Kubernetes, created Pods and managed using Kubernetes.

Container management using Docker by creating Docker files, establishing an automated build on Docker HUB, and installing and configuring Kubernetes.

Created reproducible builds of the Kubernetes applications, managed Kubernetes manifest files and releases of Helm packages. Scheduled, deployed, and managed Container replicas onto a node cluster using Kubernetes.

Develop Microservice on boarding tools leveraging Python and Jenkins allowing for easy creation and maintenance of build jobs and Kubernetes deploy and services.

Worked with OpenShift platform in managing Docker containers and Kubernetes Clusters.

Created, managed, and performed container-based deployments using Docker images in the Docker Hub containing Middleware and Applications together and evaluated Kubernetes for Docker container orchestration.

Configured and Integrated Docker container orchestration framework using Kubernetes by creating pods, deployments and used Python Scripts to schedule, deploy and manage container replicas onto a node cluster using Kubernetes.

Experience in developing scalable solutions using NoSQL databases Cassandra, MongoDB.

Implemented Terraform Templates automating Azure IAAS VM’s using Terraform modules and deployed virtual machine scale sets in production environment.

Worked with Terraform key features such as Infrastructure as code, Execution plans, Resource Graphs, Change Automation and Implemented Terraform reusable modules for deployment of applications across Azure.

Created CI/CD pipelines for .Net, .NET 6, python apps in Azure DevOps by integrating source codes GitHub, VSTS, artifacts and created deployment areas such as testing, pre-production and production environment in Kubernetes cluster.

Automated the tasks with Ansible Playbooks by using YAML functions and migrating the servers with the required configuration changes and testing and deploying the machines using Ansible Commands.

Improved speed, efficiency, and scalability of the continuous integration environment, automating wherever possible using Python, Shell, bash, and PowerShell Scripts.

Configured kickstart server and updating/applying patches to the servers using Redhat Satellite Linux server. Installing, administering Redhat using KVM based hypervisors.

Performed Linux kernel, memory upgrades and undertook Red hat Linux Kickstart installations. Involved in development, user acceptance, and performance testing, production & disaster recovery server.

Installed RHEL 5.x on 86 servers. Installed, configured and maintained Redhat Satellite Servers for different applications.

Performed job scheduling using Ansible Tower. Automated various infrastructure activities like Continuous Deployment, Application Server setup, Stack monitoring using Ansible playbooks and has Integrated Ansible with Jenkins.

Monitored applications using Kibana and DataDog and created Custom Dashboards and Alerts. Managed dashboards in Dynatrace for both operations and various lines of business.

Worked with the Development and Management Teams to solve the defects Reported in Quality Center.

Environment: Azure, Azure AD, Azure DevOps, Containers, GitHub, VSTS, Docker, Terraform, Ansible, HashiCorp, Linux, Jenkins, Cloud, AWS, WhiteSource, GIT, Python, Shell, bash.

HCL Technologies Ltd - Chennai May 2017 - August 2019

Client: Konica Minolta Position: Full Time

Role: DevOps Automation Engineer

Responsibilities:

Worked with various teams to Setup and build AWS infrastructure various resources, VPC, EC2, S3, IAM, EBS, Security Group, Auto Scaling, Kinesis, Elastic Search focusing on production ready and RDS in Cloud Formation JSON templates.

Worked on Implementing and setting up Route 53 (AWS DNS service) for AWS Web Instances, ELB, Cloud Front and Elastic Beanstalk on AWS Environment.

Worked on Route 53 for Fail over and Latency Based Routing to the client's websites with weighted routed policies.

Worked with AWS API to manage resources on AWS for many services such as EC2, S3, VPC, Cloudwatch, ELB, Auto-scaling and SNS, created python script using AWS API calls to manage all resources deployed on AWS.

Integrated AWS DynamoDB using AWS Lambda to store the values items and backup the DynamoDB streams.

Deployed configuration management and provisioning to AWS using Packer-Docker and Terraform involved in automated deployment of EBS on to the AWS Cloud EC2 instance server and automated the complete deployment environment on AWS.

Developed entire front-end and back-end modules using Python on Django Web Framework and created User Interface (UI) using MVC, JavaScript, AJAX, jQuery, bootstrap, Cassandra with MySQL and HTML5/CSS.

Executed MYSQL database queries from python using Python-MySQL connector and MySQL package to retrieve information.

Design Implemented and tested spring domain model for the services using Core Java.

Involved in development of Web Services using SOAP for sending and getting data from the external interface in the XML format.

Deployed and maintained EFK stack (Elasticsearch, FluentD, Kibana) to store and review logs of the in-cluster containers.

Migrated On-Premise to windows Azure by building Azure disaster recovery environment, Azure Recovery Vault and Azure backups from the scratch using power shell script.

Worked on Azure Log Analytics Workspace to manage the Log data that is collected from various data sources like Azure VM’s.

Created and deployed VM's on Microsoft Azure, managed Azure Active Directory (AD)and Vnets to connect all servers, design Azure Resource Manager (ARM) templates for Azure platform.

Created Azure Automation Assets, Graphical Run-books, Power-Shell Run-books that will automate specific tasks and deployed Azure AD Connect, configuring ADFS authentication flow, ADFS installation using Azure AD Connect.

Managed Docker Containers, Kubernetes Clusters, Mesos and implemented a production ready, load balanced, highly available, fault tolerant Kubernetes infrastructure and created Jenkins jobs to deploy applications to Kubernetes Cluster.

Implemented cluster services using Docker and Kubernetes to manage local deployments in Kubernetes and built a self- hosted Kubernetes cluster using Terraform and Ansible and deploying application containers.

Created Terraform Modules for provisioning Virtual Networks, VM Scale sets, Load Balancers, CDN and NAT rules and used Terraform graph to visualize execution plan using the graph command.

Used Terraform for building, changing, versioning infrastructure and collaborate the automation of Azure Infrastructure via Terraform and Jenkins.

Created Ansible roles in YAML and defined tasks, variables, files, handlers, and templates. Created inventory and configured the Ansible files for parallel development in Ansible for automating the continuous delivery process.

Worked on multiple areas of Jenkins like Plugin Management, Securing Jenkins, Performance issues, Analytics, Scaling Jenkins, integrating Code Analysis and Test Phases to complete the CD pipelines within Jenkins.

Environment: AWS, AKS, YAML, JSON, Jenkins, GIT, Cassandra, Grafana, Prometheus, Chef, Tekton, Ansible, Docker, Azure IAAS, Nagios, Kibana and Splunk, Terraform, HashiCorp, Kubernetes.

Contact this candidate