PROFESSIONAL SUMMARY

IT Professional with experience in cloud platforms like Microsoft Azure, Amazon Web Services (AWS) and Continuous Integration/Continuous Delivery (CI/CD), Linux and Windows System Administration platforms with strong knowledge on the principles and best practices of Software Development Life Cycle (SDLC) in Agile, Scrum, and Waterfall methodologies.

Proficient in Administrating Azure IaaS/PaaS services like compute Azure Virtual Machines, Web and Worker roles, VNET, Network services, Azure DevOps, SQL Databases, Storages, Azure Active Directory, Monitoring, Autoscaling, PowerShell Automation, Azure Search, DNS, VPN.

Extensive experience in migrating on-premises applications to Azure and configured VNETs and subnets as per the project requirement and performed PowerShell scripting to do Patching, Imaging, and Deployments in Azure.

Experience in Azure IaaS - Virtual machines, VM Scale Sets, Load Balancer, Traffic Manager, Virtual Networks, SQL, Resource Groups and Cloud Services.

Extensive involvement in Azure Backup, Azure Policies, Azure Key Vault, Salt Stack and Tagging.

Experience in Azure Platform Development, Deployment Concepts., hosted Cloud Services, platform services and close interface with Windows Azure Multi-Factor Authentications.

Experienced in DevSecOps strategy for Security Auditing, continuous monitoring of the entire infrastructure which facilitates enhanced compliance and eliminates security breaches and vulnerabilities.

Expertise in Private Cloud and Hybrid cloud configurations, patterns, and practices in Windows Azure, SQL Azure, in Azure web and database deployments.

Administered scalable, secure cloud architecture based on Amazon Web Services. Leveraged AWS cloud services such as EC2, auto-scaling, and VPC (Virtual Private Cloud) to build secure, highly scalable, and flexible systems that handled expected and unexpected load bursts and can quickly evolve during development iterations.

Experience in AWS Administration Services like EC2, S3, EBS, VPC, ELB, RDS, SNS, SQS, Route 53, Lambda, Dynamo DB, Auto Scaling, Security Groups, AWS IAM Services in Users, Groups, Policies, Roles, AWS Access Keys and MFA and implemented multiple high-performance MongoDB replica sets on EC2 with robust reliability.

Robust expertise in creating resources in Azure and AWS using Terraform modules, and automated infrastructure management and experienced with Terraform key features such as Infrastructure as code, Execution plans, Resource Graphs, Change Automation and extensively used Auto Scaling for launching cloud instances while deploying Microservices and used Terraform to map more complex dependencies and identify network issue.

Hands on experience in working with Docker and Kubernetes on multiple cloud providers, from helping developers build and containerize their application (CI/CD) to deploying either on public or private cloud.

Proficient in Kubernetes to manage the deployment rollouts, rollbacks and created service mesh for the traffic management in the production environment. Created pod, deployment, namespace, and replication controller YAML definition files to schedule, deploy and manage containers nodes in different env dev/staging/prod clusters in Kubernetes.

Experience in working on several Docker components like Docker Engine, Hub Machine, creating Docker images, compose Docker Registry and handling multiple images primarily for middleware installations and domain configurations.

Experience in working with EC2 Container Service plugin in JENKINS which automates the Jenkins master-slave configuration by creating temporary slaves.

Experience in creating and configuring Jenkins jobs, build and delivery pipelines for automating several operations like provisioning of resources and building executable files from raw code.

Experienced in using MAVEN and ANT as a Build Tool for the building of deployable artifacts (Jar, war & ear) from source code.

In-depth knowledge of computer applications and scripting with Shell, Python, PowerShell, Bash and Groovy.

Experience in deploying of applications on Application Servers such as Apache Webserver, Nginx, Tomcat, JBoss.

Experience in Installing Firmware Upgrades, kernel patches, systems configuration, performance tuning on Unix/Linux systems.

Experience in System Administration working on Red Hat Linux, Ubuntu, Unix, CentOS,Windows environments, VMware VSphere.

Technical Skills:

Cloud Platforms

Azure, AWS,GCP

Infrastructure Provisioning Tools

Terraform, Azure Resource Manager, Cloud Formation

Configuration Management Tools

Ansible, Azure Automation Account

CI /CD Tools

Jenkins, Azure Pipelines, Gitlab Pipelines

Build Tools

Maven, ANT, Gradle

Containerization Tools

Docker, Kubernetes

Source Code Management

GIT, GitHub, Azure Repos.

Logging & Monitoring Tools

Splunk, ELK, Data Dog, Dynatrace, Azure Service Health, Azure Network Monitor.

Scripting

Python, PowerShell, Bash/Shell

Databases

Data Lake, Data Bricks, Cosmos DB, MySQL, MongoDB, DynamoDB

Application/Web Servers

Apache Tomcat, NGINX, IIS

Operating Systems

Linux, Windows

Bug Tracking Tools

JIRA, Azure DevOps

Certifications:

Azure Administrator Associate (AZ 104):

Certification Link

Designing and Implementing Microsoft DevOps Solutions (AZ 400):

Certification Link

Certified Kubernetes Administrator (CKA):

Certification Link

Microsoft certified: DevOps Engineer Expert

Certification Link

EXPERIENCE:

Employer: Global IT Inc Duration: Oct 2023 – present

Contract: KPMG LLP

Role: Senior Cloud Engineer/ Cloud Architect

Roles & Responsibilities:

Worked on designing cloud based solutions using multiple cloud services such as Azure App Services, SQL Server/Database, Application Gateway, Redis cache, Key Vault, Network Security Groups, Private Endpoints, DNS Private Resolvers, Azure Front door, Azure Traffic Manager.

Worked on solutioning and implementing Hub and Spoke architecture model and worked on core services like Azure Firewall for Inbound and Outbound whitelisting, Azure DNS Servers, Azure Active Directory Domain Services, VNet Peering, Network Security, Load balancers and Route tables.

Configured the solutions to have High Availability and Disaster recovery models using Azure native solutions such as Azure Traffic Manager and Azure Front door by implementing Active-Active, Active-Passive with multi region based approaches.

Developed Monitoring strategies using cloud native Azure monitor by setting up Log Analytics workspace, Azure Application Insights, Azure container Insights, Azure Network Watcher.

Managed Azure Tenant and implemented Azure Active Directory Hardening standards by writing Conditional Access Policies, configuring Azure Multi Factor Authentication, Privileged Identity management. Setup Role based access control strategies on Azure Active directory Groups and controlled access to resources using Azure Active directory groups.

Extensively worked on Terraform modules that had version conflicts to utilize during deployments to enable more

control or missing capabilities. Managed different infrastructure resources, like physical machines, VMs and

Docker containers using Terraform.

Worked with Terraform for end-to-end Automation. Leveraged Terraform using Parent Child strategies for leveraging multiple reusable modules. Worked on setting up of various Azure Cloud Infrastructure such as Azure Application Gateway, Azure Traffic manager, Azure App services, Azure Virtual Machines using Terraform automation.

Developed Azure Kubernetes service to produce production-upgrade Kubernetes that allow enterprises to reliably deploy and run containerized workloads across private and public clouds.

Created Kubernetes cluster with objects like Pods, Deployments, Services and Config Maps and created reproducible builds of the Kubernetes applications, managed Kubernetes manifest files and Helm packages and implemented Kubernetes to deploy scale, load balance, scale and manage Docker containers with multiple namespace versions.

Managed Kubernetes charts using Helm, Created reproducible builds of the Kubernetes applications, managed Kubernetes manifest files and Managed releases of Helm packages.

Worked on creation of Azure DevOps Pipelines to automate the end-to-end infrastructure deployment suitable for Terraform scrips and Azure Resource manager Templates. Developed Yaml code-based pipeline strategy to make reuse of Yaml configuration to create multiple pipelines.

Worked on Ansible playbooks to manage Web applications, Environments and Ansible Tower to automate repetitive tasks, to deploy critical applications quickly and proactively manage the changes.

Developed Python Scripts to automate various system tasks, OS patches for dev environments, and deployment of

applications to testing/prod environments using Python OS modules.

Deployed and configured Azure Monitor and Log Analytics workspace for log aggregation, application monitoring

using Application Insights in integration with Azure App service, Azure Application gateway.

Coordinated with developers in establishing and applying appropriate branching, labelling/naming conventions using GIT

source control.

Company: Origin Hubs Inc Duration: Feb 2021 – Oct 2023

Contract: KPMG LLP

Role: Cloud Infrastructure Engineer

Roles & Responsibilities:

Designing and implementing Azure Solutions across a range of cloud models like SaaS, PaaS, IaaS, and integrated on-premises, on-demand workloads with the Azure public cloud.

Worked on Microservices for Continuous Delivery environment using Azure, Docker. Involved in setting up a Microservice architecture for application development and implemented high availability architecture with Azure Classic and Azure Resource Manager deployment models.

Extensively worked on Building and Installing servers, creating multiple resources like in Azure through Azure Resource Manager Templates (ARM) or Azure Portal and provisioned them using Terraform, ARM and BICEP templates. Also worked on Virtual networks, Azure Custom security, endpoint security and firewall.

Worked in setting up Azure Virtual Appliances (VMs) to meet security requirements as software-based appliance functions(firewall).

As part of that I have used Hashicorp Vault to protect secrets used by our application teams such as database connection strings, passwords that run jobs, and meta-data about the environment around the application.

Worked on fetching environment variables stored in Hashicorp Vault to our production code and I have used it get passwords required for various authentication processes.

Led the operation of migrating the usage of existing DevOps tools to Azure DevOps. Configured Azure DevOps portal and created Repos for Source Code Management, configured Azure Pipelines for build operations, configured Artifacts in Azure DevOps for storing Artifacts, and configured Boards for daily scheduling, ticketing, and updating tasks.

Managed Azure Active Directory (AAD) to create users, groups, service principal names and created multiple custom roles. Used AAD for Single Sign on, Authentication, Authorizations and Azure Role-Based Access Control (RBAC).

Worked on Azure AD connect to sync on-premises AD user data, groups, and organizations to Azure AD and troubleshoot Azure services sync with on-premises AD and resync using the Azure tools.

Worked on Azure Monitoring tools like Azure Log Analytics, Azure Network watcher, Azure Service Health to diagnose issues and minimize service degradation.

Built an application environment to operate at high availability in different Azure regions by using CDN, Azure Traffic Manager, App Services-Web Apps, Active Directory, Storage Queues, Cognitive Services, Azure Search, Storage Blobs, Redis cache, and SQL Database.

Experience in migrating the existing v1 (Classic) Azure infrastructure into v2 (ARM), scripting and templating the whole end to end process as much as possible so that it is customizable for each area being migrated.

Configured VM's availability sets using AZURE portal to provide resiliency for IaaS based solution and scale sets using Azure Resource Manager to manage network traffic.

Implemented various resources in Azure using Azure portal, PowerShell on Azure Resources Manager deployment models. Experienced in deploying infrastructure as code applications using ARM Templates (JSON).

Conducted Proof of concept programs for evaluating and implementing new technologies and tools such as Azure Kubernetes Service using Terraform.

Worked on Terraform templates also for provisioning virtual networks, subnets, VM Scale sets, Load balancers, and NAT rules and used terraform graph to visualize execution plan using the graph command. Configured BGP routes to enable ExpressRoute connections between on-premises data centers and Azure cloud.

Implemented Terraform using concepts like Create before Destroy which made sure to destroy the existing object and then create a new replacement object with the new configured arguments.

Designed and implemented framework using Python and generating Terraform templates to create Network security groups in Azure. Worked on deploying a web application in Azure cloud where in automated the configurations using Terraform.

Deployed Kubernetes Clusters on cloud/on-premises environments with master/minion architecture and wrote many YAML files to create many services like pods, deployments, auto scaling, load balancers, labels, health checks etc.

Configured and Integrated Docker container orchestration framework using Kubernetes by creating pods, deployments and used Python Scripts to schedule, deploy and manage container replicas onto a node cluster using Kubernetes.

Configured Ansible control machine and wrote Ansible playbooks with Ansible roles. Used file module in Ansible playbook to copy and remove files on Azure VM’s.

Coordinated and assisted developers with establishing and applying appropriate branching, labelling/naming conventions using GIT source control.

Client: SBP FEPOC, Virginia Duration: Sept 2019 – Nov 2020

Role: Azure DevOps Engineer

Roles & Responsibilities:

Worked in implementing Azure VPN configurations, virtual networks, and security measures, including endpoint security and firewalls using Azure IAAS and PAAS resources.

Created reusable Terraform modules for automating Azure IaaS virtual machines and deploying scale sets across environments.

Utilized Terraform for Infrastructure as Code (IaC), executing designs and automating resource creation in Azure Cloud.

Configured Virtual Network (VNET) peering and Network Security Groups (NSGs) for effective traffic filtering and used Azure Route tables for managing the flow of network inside Azure Environments.

Configured private endpoints for Azure Cosmos DB using Azure Private Link, ensuring secure data access.

Worked on the migration of on-premises SQL servers to Azure SQL databases, ensuring seamless performance and monitoring.

Managed Azure Active Directory by creating automated workflows using Azure Powershell for User management, Group and Service principal management, License management etc.

Understanding the differences between each version of MongoDB and enable the new features in each release.

Wrote Python scripts for pushing data from DynamoDB to MySQL Database. Also created and maintained the Python deployment scripts for Web Sphere, web application server.

Worked on configuring various metric, audit, application alert rules using Azure Monitor alerts, Log analytics workspace KQL queries and implemented notification and alert workflows.

Used Terraform to map more complex dependencies and identify network issue. Configured RDS instances using ARM Templates and Terraform.

Hands on experience on working with System health and Performance Monitoring Tools like Nagios, Splunk, Cloud Watch and ELK to monitor OS metrics, server health checks, file system usage etc.

Integrated GIT into Azure DevOps to automate the code check-out process. Worked on configuring Azure DevOps pipelines for automating Builds and Automated Deployments of source code and Infrastructure automation.

Contract: Zensar Technologies Duration: May 2018 – July 2019

Role: Build and Release Engineer/DevOps Engineer

Roles & Responsibilities:

Worked in Build and Release management using GIT, Maven, Jenkins administration. Created looper pipelines from the GitHub source code for creating Docker images.

Used Jenkins as a Continuous integration tool to create new jobs, managing required plugins, configuring the jobs selecting required Source code management tool, build trigger, build system, and post build actions, notifying the build reports.

Set up Jenkins server and build jobs to provide Continuous Automated builds based on polling the Git source control system during the day and periodically scheduled builds overnight to support development needs using Jenkins, Git, and Maven.

Created utilities to monitor continuous delivery process (job failure rate, disk usage), coded changes in Git & job failures in Jenkins.

Created reference implementations of Ant and Artifactory dependency system, and a Jenkins continuous build system.

Installed and configured Nexus to publish artifacts for better versioning.

Automated the Build Process using Jenkins and handled complete Build and Release process including code, documentation and supporting testing team along with the server Administration.

Created and managed a Docker deployment pipeline for custom application images in the cloud using Jenkins.

Implemented Continuous Delivery (CD) framework using Jenkins, Maven, Docker, Bitbucket, Nexus in Linux environment for Micro services in each environmental setup.

Developed build scripts using Ant as the build tool for the creation of (WAR files) build artifacts.

Used ANT to perform daily and weekly Software Builds.

Performance tuning and management for Linux server and working with the application/database team to resolve issues.

Sanath E.

Sr. Cloud/DevOps Engineer

984-***-****

ad4ldw@r.postjobfree.com

Contact this candidate