Aileo A. Karpee

Address:*** ****** **** **, *****:adlm0p@r.postjobfree.com

Raleigh, North Carolina, 27596 Phone: +1-856-***-****

GREEN CARD

Summary of Qualifications: An experienced and self-motivated AWS Cloud Engineer/Architect with over 6 years of experience in Cloud, Linux and Windows environments. Proficient in cloud orchestration, security, identity & access management, monitoring and event management, governance & compliance, application delivery, data protection, image and patch management, self-service and ops analytics on AWS platform. Strong analytical skills in assessing business requirements at the enterprise level and designing efficient and effective technology solutions for clients. Current interest is in cloud strategy and cloud migration.

WORK EXPERIENCE

AWS Solution Architect/Devops Engineer 12/2018 – 03/2021

Stantec Consulting Services (Chicago, IL)

Built business cases for clients for migration based on functional and non-functional requirements.

Migrated clients’ on-premises workload using Cloud Endure and DMS

Migrated clients’ VMware with AWS Server Migration Service

Implemented Infrastructure as Code with CloudFormation templates and Terraform for infrastructure provisioning as well as Ansible and system manager for configuration management

Leveraged application load balancer for high availability, fault tolerance and cost optimization.

Designed secured, cost optimized, highly-available and fault-tolerant architecture and infrastructure in AWS

Deployed applications to AWS using code commit, code pipeline, code build, code deploy, Docker, ECR and ECS

Used system manager for operation management and change management.

Implemented security best practices in AWS including multi-factor authentication, access key rotation, role-based permissions, S3 bucket policies and ACLs. Enforced strong password policy, configured security groups and NACLs.

Reduced costs through reserved instances, selection and changing of EC2 instance types based on resource need, S3 storage classes and lifecycle policies, and leveraging autoscaling.

Leveraged EC2 Lifecycle Manager to create snapshots of EBS Volumes on scheduled intervals for backup and defined a retention period as a cost-saving measure.

Configured CloudWatch alarm rules for operational and performance metrics for our AWS resources and applications.

Leveraged Secure Token Service STS to generate and provide temporal credentials to users.

Setup and configured log files for detail monitoring and alerts notification

Configured S3 events to set up automated communication between S3 and other AWS services.

Designed highly available infrastructure using Elastic load balancer and auto-scaling for Web servers which scale in and scale out automatically. Isolated environment by having security groups and NACL across subnets for EC2 instances.

Architected and implemented an AWS Cloud cost effective solution for non-production environment such as Development, and Test.

AWS systems Administrator/Engineer 06/2016 – 12/2018

Ericsson (Plano, TX

)

Managed provisioning of AWS infrastructures using CloudFormation.

Designed for high-availability and business continuity using self-healing architectures, fail-over routing policies, multi-AZ deployment of EC2 instances, ELB health checks, auto scaling and other disaster recovery models.

Created IAM users, roles, and granting required access permissions and privileges.

Setup and configured Security Groups, NACL for VPC specific to environment.

Created patch management using Systems Manager automation for multi-region and multi-account execution.

Implemented preventive guardrails using Service Control Policies (SCPs)

Implemented preventive and detective guardrails using AWS config

Designed and implemented for elasticity and scalability using Elasticache, CloudFront – Edge locations, RDS (read replicas, instance sizes), etc.

Implemented security best practices in AWS including multi factor authentication, access key rotation, encryption using KMS, firewalls, security groups and NACLs, S3 bucket policies and ACLs, mitigating DDOS attacks, etc.

Implemented Jenkins, GitHub and Git for version control, code build, testing, release and CI/CD

Monitored end-to-end infrastructure of projects/applications using CloudWatch and SNS for notifications

Used AWS system manager to automate operational tasks across AWS resources.

Used System Manager to automate operational tasks across AWS infrastructure.

Setup AWS Single Sign On (SSO) for on premise Active Directory (AD)

Developed and documented security guardrails for AWS Cloud environments

AWS Solution Architect 01/2015 – 06/2016

Clinton Health Access Initiative Boston, MA

Designed secured, cost-optimized, highly available and fault-tolerant infrastructure in AWS for applications.

Worked with client through exploration to build a business case for migration.

Migrated client’s workload Using Cloud Endure and DMS

Architected and configured Dev/Stage/QA environments in AWS (VPC, subnets, security groups, EC2 instances, load balancer, RDS, Redis, route53, etc.)

Implemented security best practices in AWS including multi-factor authentication, access key rotation, role-based permissions, S3 bucket policies and ACLs. Enforced strong password policy, configured security groups and NACLs

Improved cost through reserved instances, selection and changing of EC2 instance types based on resource need, S3 storage classes and lifecycle policies, and leveraging autoscaling

Leveraged EC2 Create Snapshot API call to create snapshots of EBS Volumes on scheduled intervals

Configured CloudWatch alarm rules for operational and performance metrics for our AWS resources and applications

Setup and configured log files for detail monitoring and alerts notifications when changes are made

Monitored end-to-end view of runtime systems, CPU, bandwidth, disk space and log files using NewRelic

Deployed and configured infrastructure for projects/applications using Terraform and Ansible

Architected and implemented continuous integration and deployment pipelines using Jenkins

Implemented identity federation using FreeIPA to enable users to seamlessly connect to multiple services

EDUCATION

United Methodist University Oct. 2009 – June 2013

Bachelor of Business Administration

Certifications

AWS Certified Solutions Architect – Associate

AWS Certified Sysops Administrator - Associate

Google IT support Professional Certificate

SKILLS

AWS: VPC Designing including VPN, EC2/Auto Scaling, S3 Life Cycle, RDS with Multi AZ, Elastic Cache (Redis & Memcached) Route 53 DNS Designing, IAM policies, JSON, AWS Migration, SNS with CloudWatch alarms, Kinesis, Direct Connect, AWS Code Commit, AWS Systems Manager, EC2 Lifecycle Manager, AWS Config

Platform: AWS CloudFormation, AWS Lambda, AWS Systems Manager, S3, VPC, EC2, ELB, RDS, SNS, SQS, SES, Route53, CloudFront, Service Catalog, AWS Auto Scaling, Trusted Advisor, CloudWatch etc., Windows, Linux: RHEL; Programming Languages: Bash, JSON

Configuration Management & DevOps Tools: Code Commit code, pipeline, code build, code deploy, Ansible, Jenkins, & GitHub, Docker, ECS, ECR, EKS

Contact this candidate