AWS Cloud/ Network security admin/ IT Infra admin
Resume:
RAJESH KUMAR K.
**********@*****.***
.
A vibrant professional, having rich experience of over 13 years in developing scalable solutions that dramatically improves efficiency, productivity, and profitability with a demonstrated ability to define and map project scope, specifications, project timeline, resources, and budget requirements from point of planning through production in both traditional and virtual business environments.
Expertise in designing an enterprise server, network, and storage architecture to support a core business platform and additional services including Virtual Private Cloud VPC environment subnets, NAT, VPN gateway, availability zones, etc. on an Amazon Virtual Private Cloud.
Managed a complex IT project of a technical nature where 600 users in 30 offices were migrated to the corporate infrastructure using connectivity options LAN/ WLAN/ VLAN/ VPN/ MPLS etc. usingCisco Routers, Switches, Fortigate UTM technologies.
Solutions based on a range of AWS technologies EC2, Auto scaling, CDN, S3, VPC, and services such as Hybrid data center, VPN connectivity between AWS and Central Office, RDS, ELB, Route 53 and different instance types..
Expertise in various AWS technologies and services along with experience in migrating workloads to AWS platform.
Managing Cloud application development infrastructure which includes ECS, AWS code commit, pipeline, Code build and Deployment. Knowledge in creating cloud formation stack, creating templates using JSON, integration Git with Jenkins for CI/ CD.
Docker images and containers, Container networking, Volume sharing, linking between images etc.
8+ years of senior level leadership spanning IT infrastructure, Data center, communication and network management, system operations, service management, and disaster recovery.
Routing protocols- RIP, EIGRP, OSPF, IP subnetting, OSI Layers and Wireshark.
Information security, Site-to site IPSec VPN, SSL Clientless VPN, Any connect IPSec VPN, Router based and Firewall based VPN technologies, Layer 2 security of networking devices- policing traffic, Port security, DHCP snooping, Dynamic ARP inspection etc.
IT Governance and Enterprise Architecture, effective and efficient IT policies and procedures.
Extensive experience in managing & delivering projects, conducting business analysis to determine requirements and planning for systems implementation at the enterprise scale.
Knowledge in Microsoft Windows 2008/ 2012, Active Directory, Remote Desktop, Microsoft Exchange 2010 Mail solution.
Experience in managing Open source/ Linux environments. Documentation of IT support/ Service/ Change/ Update/ New / Upgrade/ Incident operations and related approval.
Hosted mailing Solution, Data centre structuring, Network LAN, WAN, VLAN, WiFi, Firewall and VPN administration, Backup solution, IT Security, Disaster solutions and implementation
Block USB device access in enterprise level, Internet access policies, Data centre operations and server management, define priority in service and support operations. Access control system, IP camera etc.
EDUCATION: B.Sc. (Physics) from Calicut University in 1998
CERTIFICATIONS: Microsoft Certified System Administrator – Messaging in Windows 2003
Cisco Certified professional CCNA in 2006
Knowledge in: CCNA Security, Firewall and VPN solutions in CCSP level, Switching- CCNP Level
Preparing for Certified Information System Auditor (CISA) exam.
CAREER CONTOUR
June '14 to June’ 16: Team Lead- Cloud IT Infra- Padmam Technologies Pvt Ltd&Workammo IT Services India Pvt Ltd.
Workammo IT Services India Pvt Ltd. -July’ 16 to till date on contract.
Assuring 100% uptime for globally launched on line project, its development, testing and live environments on Amazon AWS.
Monitoring Cloud infra-structure using open source tools like Zabbix, Nagios etc.
Creating AWS architecture with internet facing application server on public zone and database servers on private zone.
Using NAT for private zone instance to get internet connectivity. NAT gateway and Elastic load balancer for security and failover. Integrate Enterprise network with AWS cloud.
Auto scaling of instance to balance traffic and load, alert mechanism to inform load on server.
Designed template based stack, using Cloud formation, Elastic container service with docker images, container registry, container networking and volume sharing.
Designed and implemented system/ network infrastructures to best fit customer security requirements, budget and timeline including VPN gateway, Internet gateway, custom route table, main route table, NAT etc. in VPC environment.
Experience in EC2, Route 53, Virtual Private Cloud (VPC), Elastic Load Balancing (ELB), Elastic Network Adapter, Auto scaling, Cloud-Watch, Content Delivery Network, Relational Database (RDS), Virtual Private Network connection between Amazon VPC and Enterprise Datacenter.
Scripting for automated backup of database, alert high memory and resource usage, copy backup to remote system.
Knowledge in setup customer gateway using Fortigate, Cisco and Windows 2008 and 2012 Server.
Securing access to Amazon cloud infrastructure using key file, Security group, IAM roles, Custom access rules, Custom IP based access, Web Server and database server security, VPN etc.
Creating and integrating S3 storage and elastic transcoder, moving backup data to glacier using policies to reduce cost.
Handling SVN setup, Godaddy & Google account management, mail integration.
Coordinating development team work with continuous integration tools Jenkins, version control using sub version SVN tools- Git,,Bit bucket, SVN, Docker, etc.
Design software development infrastructure on cloud with Continuous integration/ continuous delivery solutions using aws code commit, pipeline, build and deployment steps.
Configuring SSL certificate, EC2 instance Webmin setup for GUI, white listing domain with SPF/ DKIM keys.
Administrating service accounts of Amazon, Google Apps/mail, Go Daddy, DYN services etc.
Supporting and monitoring of Linux WEB application server and MySQL database with RDS failover and backup features.
Windows OS and Office license compliance, Configuration of virtual machines with Hyper V /VMware, Remote Desktop and File server with access rules.
Served as an Architect, designed and created documents and process flow for implementation and configuration of Business application.
Administrating and maintaining internal network and infrastructure, Frortigate firewall, Servers
Creating Instance image, scheduling backup, corn jobs, web server and database server health status alert, cloud watch setup etc.
Active directory, central backup, offsite backup, Enterpriseanti-virus server, Device control etc
Oct’ 12- Jun’ 14: Assistant Manager
AVT Natural Products Ltd.
Lead in deploying new technologies to data center and branch offices including firewall, NAC, wireless and switching technologies.
Set up a medium sized Data Centre including Application Server, Domain controller server, centralized antivirus Server, Thin Client Server, Citrix Server and backup for user data and mail.
Installed firewall- Fortigate with VLAN and Internal/ External perimeter Security. Ensuring Zero down time, configure high- availability, Remote access VPN, IPS and IDS.
Positioned different servers in different VLANs based on internet enabled/ disabled category and applying user based user access.
IT policies, Procedures, Business continuity plan, custom application to align with IT.
Involved with senior executive level management and system administration teams in effecting a seamless DLP implementation.
Conducted risk assessment of current computing environment and recommend actions in order to reduce the risk of loss to confidential data.
Developed a solution for recording the attendance of all contract employees with shift assignment based on requirement in plant area. This solution provided a monthly report with employee shift, attendance, overtime work done, section in which the employee worked on each day. Salary is processed based on this report
Implemented visitor management system which included visitor details, vehicle details, purpose, and visitor photo. A mail will send to the person to whom the visitor wants to meet.
Managed Canteen management system which provide the following reports. Employee ID and name, food taken by each employee, guest information.
Discussed with different departments regarding ERP feature appending/ modification, prepared requirement based flow chart, Comparison with existing ERP system, formulated change requirement form and taking management approval, discussed with development team, check quality testing of component and implementation in production environment
Conducted analysis of requirements, budget planning, preparing product wise feature list/ company/ Rate comparison chart etc. Ensure SLA compliance.
Managed multiple production units connected via VPN connectivity, applied user based internet access policy and block data leakage via USB device lock and through free file share sites.
Managing operation and administration Oracle based ERP system. Monitor scheduled backup and ensures the system is working fine. Run Servers in a virtual environment using Hyper V/ VMWare.
Implemented hosted mail system, camera monitoring system and punching system
Setup Linux based FTP Server, Samba server and Web servers.
Feb’ 09 – Oct’ 12: Senior System Administrator (Data Centre Administration)
V Guard Industries Ltd.
Managed and maintained corporate and branch offices with 1000 systems and give support to 45 branch office spread across India, connected via MPLS and Site to Site & Remote access VPN.
Designed, developed, and implemented security architectures, frameworks and infrastructures. Reviewed and modified access control lists (ACLs) on network switching and routing equipment as needed to maintain security standards.
Discussed day- to-day with senior people regarding new requirements, current issues, user level and branch level steps for improving support etc.
Active participation in SAP ERP implementation, ASIS study, Documentation of work flow, preparation of each department’s work flowchart, Coordinating SAP project team IT requirements, Setting test environments, designing user permissions, keep scheduled backup of project.
ERP Server management, monitoring performance and resource allocation.
Application rollout in corporate and remote office, end user training,
Implemented IT policy for system security, traffic shaping, executed access list, Network security, Firewall security, Laptop policy, system policy etc.
Managing central security device FORTIGATE Firewall, monitoring Routers, Core switches, Access Switch, WiFi Controller, Access Points, data centre and branch firewalls, Fortigate analyser, Backup, Access List, Failover, policies and protection profiles.
Handled corporate network that working on Cisco routers, Cisco core switches, Server Farm switches, Cisco Access switches, Cisco Access controller and Access points etc.
Maintain data centre with 60 servers including rack server, blade server, SAN storage, NAS, tape library etc.
Provided solutions and defined security requirements to technical and non-technical audiences.
Administration of Windows 2008 Active Directory and Microsoft Exchange server 2010 Mail System.
Retained AMC, Service contract, Support call register of Systems, Connectivity devices, Network devices, Firewall devices, Printer/ EPABX/ Photo Copier/ Rented solutions, Upgrade etc.
Management of intranet web server for publishing circulars, recent company updates, sharing knowledge, managing IT assets, logging complaints etc.
Centralized McAfee and Symantec antivirus servers and monitor client system updates. Schedule Scanning of Machines. Block USB device access and external devices. Ensure data security.
Video surveillance system and IP Camera for remote branch monitoring.
Established branch level connectivity, checking feasibility with different vendors, choosing connectivity equipment, etc.
Organized branch roll out IT requirements and branch shifting- New branch UPS, LAN, WAN, VPN, communication devices EPABX, IP phone, Switch and systems purchase, installation and implementation.
Collected quotes from Vendors, comparison, decision making and taking approval from management.
Administration of storage devices, user data backup using Symantec backup.
Managed internal team with 12 members, Monitoring Resident Engineer activities from various vendors, Collecting reports, Calculating System and Network uptime, Conduct escalations etc.
Checked Network asset management, maintenance of network component inventory and related documentation and technical specifications information.
Monitor Call log register, allocate call according to priority, taking decisions and executions.
Execute firmware update, OS patch updates, antivirus updates and verify system logs.
Kept asset management system- updated IT asset list, transferred asset and monitored of allotment.
Retained branch level file reports for tracking all information of each branch which included network diagram of branch, LAN and WAN connectivity, system allotment, purchase copy of all bills, branch visit reports, etc.
Documented properly for security and connectivity device configuration changes.
Conducted daily meeting with support engineers, understanding bottle necks and executes reasonable requirements.
PRIOR EXPERIENCES
Nov’ 06 – Feb’ 09: Padmam Technologies Pvt. Ltd. as System Administrator
Oct’ 05 – Nov’ 06: Muthoot Share Trading Division (Pappachan Group) as System Administrator
Sep’ 00 – Jun’ 05: KCM ITC as IT Support Admin
Dec’ 99 – Aug’ 00: Accel IT Academyas Associate Faculty (Trainee)
PERSONAL PROFILE
Date of Birth : 29th May, 1977
Marital Status : : Married
Nationality : Indian
Languages Known : English and Malayalam
Passport : M5926894, Valid 02 Feb 2025
Notice Period : 20 Days
Declaration:
I hereby assure that the above furnished details are true to the best of my knowledge.
Place: Cochin.
Date: Rajesh Kumar. K
Contact this candidate