Traffic Manager Active Directory

SUKHEN KUMAR TIWARI

Phone: 425-***-****, Email: ********@*****.***

https://www.linkedin.com/in/sukhen-kumar-tiwari-48022916/

Bentonville, Arkansas, United States

Visa Status: H1B (till 2023) and I-140 Approved

Professional Summary

Over many years of IT industry experience on Java/J2EE/.Net based enterprise application with platform, Azure, AWS, Cloud, DevOps, Microservices, Subversion tool like GIT, Linux, Build and Release Management, Version Control, Change Management, Project Management, Estimation Planning, Cloud Integration, Agile Methodologies and Infrastructure Management in staging, testing, perf Production Environment, maintenance, and Enhancement.

Azure Enterprise Applications Services: -High-productivity development, fully managed platform and app hosting, Enterprise-grade apps, Deploying New/existing Applications, Application Proxy Configuration, Azure event hub, Cosmos DB, Azure SQL, Azure Monitoring, Azure App Insights

Azure Mobile Services: - Used offline data sync to build responsive apps and broadcast personalized push notifications, Application Insights, Transition to Azure App Services, Server less

DevOps: - Good Experience in IT industry comprising of DevOps, CICD, Automation, Delivery management, design, release, deployment, and cloud implementation.

Development Tools: - Azure PowerShell, Azure CLI, Azure Service Fabric, PowerShell Tools for Visual Studio 2015, Easily build, debug, deploy, diagnose, and manage multi-platform, scalable apps and services and Build apps that span IaaS and PaaS, Speed development of enterprise, web, mobile, and Internet of Things apps and Develop on the cloud directly from Visual Studio, Visual Studio Code and Build cloud apps for .NET, Run Azure commands from command-line interface and Diagnose live apps with world-class debuggers, profilers, diagnostic tools, and explorers

Management Tools: - Azure CLI, Azure Management, Azure Portal, Azure Management Studio, Azure PowerShell, Azure Resource Explorer, Center, VM.

Security & Identity: - Azure Identity Management, access control security, Single Sign-On (SSO), Enforce multi-factor authentication (MFA) for users, use role-based access control (RBAC), Azure Key vault, Azure Sentinel

Application Services: - Azure App Service, Azure Logic Apps, Azure Functions, Flow & Management API’s.

Azure Storage & Content Delivery Services: - Azure Cloud, Azure Import/Export, Azure Storage Gateway, Easy integration with Azure services such as Storage, Cloud Services, Web Apps, and Media Services, CDN, Requirement, Limitation, Azure Diagnostics Logs, File Compression, time-to-live (TTL)

Azure Compute Services: - Auto Scaling, Elastic Load Balancing, Horizontal and vertical scaling, VM Scale Set, Application Gateway, Network Security Group, Web role, Worker role, Scaling/Management

Azure Database Services: - Azure Database Migration Service, Scale performance on the fly, without app downtime, Build multitenant apps with customer isolation, Data Analytics, Single SQL Database, Backup, Red-Shift, Snowflake

Served as support for database administration tasks including configuration management, backup/recovery, performance optimization, and space management

Experience auditing and providing remediation of the Azure Cloud

Good Knowledge data ingestion pipelines from multiple sources using Apache Spark and/or Azure Databricks

Good Knowledge using the Azure Data Analytics platform (Cortana Intelligence Platform) including Azure Storage, Azure SQL Data Warehouse, Azure Data Lake, Azure Cosmos DB, Azure Stream Analytics

Good Knowledge design & implement migration strategies for traditional systems on Azure (Lift and shift/AZURE Migrate, other third-party tools

Experienced in Azure Kubernetes service to produce production-grade Kubernetes that allow enterprises to reliably deploy and run containerized workloads across private and public clouds.

Expert in implementation of Azure Cloud services includes ARM templates, Azure virtual Networks, Virtual Machines, Cloud Services, Resource Groups, Express Route, Traffic Manager, VPN, Load Balancing, Application Gateways, Auto - Scaling.

Implemented microservices, application development, and migration using Azure services such as Azure DevOps, Kubernetes Service (AKS), Container Registry, Cosmos DB, Azure pipelines, Monitor, RBAC

AWS Database Services: - Scale performance on the fly, without app downtime, Build multitenant apps with customer isolation, Data Analytics, Single SQL Database, Backup, Red-Shift, Snowflake

AWS Compute Services: - Auto Scaling, Elastic Load Balancing, Horizontal and vertical scaling, Scale Set, Network Security Group, Web role, Worker role, Scaling/Management

AWS Storage & Content Delivery Services: - Storage Gateway, Requirement, Limitation, Diagnostics Logs, File Compression, time-to-live (TTL)

AWS services: EC2, ECS, EKS, VPC, RDS, S3, Cloud Watch, Trusted Cloud Advisor, Cloud Trail, Cost Explorer, Cloud Checker, Splunk, VPC’s AWS and core services, including IAM, ELB, Elastic Beanstalk, Cloud Front, Data Platform.

Azure/AWS Networking Services: - VNET, virtual private network, Express Route, virtual network, Point to Site, Site to Site, Network Security Groups, Route Network Traffic, Virtual Network Peering, VPC, Private Link, Route Table.

Experience in managing cloud environment (AWS,)

Proven record of managing threat and vulnerability management program

Direct experience designing IAM technologies and services

Hands-on experience working with AWS

Experience in setting up the infrastructure using AWS services including ELB, EC2, Elastic container services (ECS), Auto-scaling, S3, IAM, VPC, Red Shift, Cloud Trail, Elastic Cache, SNS, Glacier, Cloud Formation, SQS, EFS, and Storage Gateway.

Created AWS VPC, subnets, routing and VPC Gateways both via Console and using Terraform. Create VPN and

Perform SQL administrative tasks including installing and upgrading SQL server products, creating maintenance plans, and creating database objects

Designed AWS Cloud Formation templates to create custom sized VPC, Subnets, and NAT to ensure successful deployment of Web applications, database templates and expertise in architecting secure VPC solutions in AWS with the help of Network ACLs, Security groups, public and private network configurations.

Experience on Chef/Ansible automate repetitive tasks, to deploy critical applications quickly, and proactively manage the changes and wrote many playbooks to manage Web applications.

Worked extensively on automation engine Chef/Ansible that automates cloud provisioning, configuration management, application deployment.

Experience in configuring Chef Server Enterprise on-premises, workstation bootstrapped the nodes using knife and automated by testing Chef Recipes, Cookbooks with test-kitchen and chef spec.

Experience in updating and creating modules and pushing them to Chef/Ansible clients. Configuring web server platforms such as Tomcat, WebLogic.

Extensive experience in installing, configuring, and administering Jenkins CI tool on Linux machines. Used Jenkins pipelines to drive all Microservices builds out to the Docker registry and then deployed to Kubernetes, Created Pods and managed using Kubernetes.

Experience in writing Shell Scripts for Continuous Integration, Used Jenkins uploading Artifacts into Nexus Repository and deployed those artifacts into docker containers.

Expertise in automating Jenkins to build code based on Ruby, YAML, Python, Shell, PowerShell, JSON, PHP and Perl triggered from GitHub to run web applications on AWS Elastic Beanstalk including EC2 build server for continuous delivery with less failover.

Good Knowledge Configuring and using PaaS services (like WebApp, Database services, Data Lake, Azure ML .

Installed, configured, and managed the RDBMS databases like MySQL, NoSQL databases like MongoDB, DynamoDB, Cassandra DB and Redis.

Experience in Administration/Maintenance of Source Control Management Systems such as Git and Sub Version (SVN).

Good Knowledge in MemSQL database in Microsoft cloud environment

Good Knowledge Adoption across the organization by pitching adoption of Databricks as a preferred ML Platform on Azure.

Deployed Azure infrastructure for engineering teams using Hashicorp Terraform

Install, configure and deploy MS SQL Server. Perform capacity planning, performance turning, monitoring, troubleshooting and optimization of the databases

Demonstrated understanding of security vulnerabilities and attacks and ability to apply them or find new ones based on new technology being developed

Strong knowledge on principles of Microservices and Microservices-Architecture. Strong knowledge developing Spring Boot based Microservices by leveraging modern CICD tools and deploying in Public-Cloud (AWS).

Proficient in building RESTful Service with Java using JAX-RS, Jersey and Spring Boot.

Experience in risk management processes with ability to evaluate third-party suppliers offering SaaS based cloud solutions

Good Knowledge in design and architecture of J2EE based large applications and good working experience in using different modules like Spring Core Container Module, Spring Application Context Module, Spring MVC Framework module, Spring AOP Module, Spring ORM Module, and Spring Batch in Spring Framework.

EDUCATION

Masters in computer application from Uttar Pradesh Technical University, Lucknow, India - June 2003

Masters in mathematics from University of Jhansi, Jhansi UP India - June 2000

PROFFESIONAL MEMBERSHIPS & CERTIFICATIONS

Certification:

Azure for Architects: Design a Migration Strategy

Microsoft Azure Security Technologies (AZ-500) Cert Prep: 2 Implement Platform Protection

ITIL v3 Intermediate Certification in Release Control and Validation & I.T. Service Management

IT Service Management (ITSM) based on ITIL best practice

TECHNICAL SKILLS

Cloud: Azure, AWS, GCP

Configuration Management Tools: CHEF, ANSIBLE, PUPPET

Build Tools: ANT, MAVEN, GRADLE,

Container Tools: Docker, Kubernetes.

Version Control Tools: GIT, GITHUB, CVS, SVN, Bit Bucket, Azure DevOps, TFS

Log and Monitoring Tools: Splunk, ELK, Cloud watch, Dynatrace, New Relic, Azure Monitor, Cloud Watch

Scripting: Bash/Shell, Python, Power shell, Jason, YAML

Databases: My SQL, MS Access, Oracle 9i/10g/11g, DB2, NoSQL (MongoDB, DynamoDB), Cassandra, PostgreSQL.

Application Servers: WebLogic 9.x/10.x, WebSphere 6.x/7.x/8.x, JBOSS 4.1, IIS, Tomcat

Web Servers: Apache HTTP, Nginx, Apache TOMCAT

Networking: DNS, DHCP, SMTP, HTTP, SNMP, VNET, SUBNET, TCP/IP

Operating Systems: Linux (Red Hat 4/5/6/7), UBUNTU, UNIX, WINDOWS NT/2000/2003/XP/VISTA/7/8/10.

CI/CD Tools: Jenkins, Team City, Azure DevOps, Octopus.

Modeling Tools: Microsoft Visio, Jira, GitHub

Continuous Monitoring: AppDynamics

Kubernetes Packaging manager: Helm

Infrastructure automation: Terraform, ARM Template, CloudFormation, Bicep

Observability: Grafana

Container Orchestration: Kubernetes, OpenShift, Docker Swarm, EKS, AWS Fargate Operating systems: Windows, Linux

Code Quality/Security Scanning: SonarQube, Cobertura, CodeGate.

Code Coverage: Jacoco

Dependency Management/Artifact storage/Image Registry: Nexus, JFrog,Azure Artifact

Deployment: Jenkins, Octopus. Team city, Azure DevOps

Bug Reporting: Jira, Service Now, Radar

Professional Work Experience

Subway Franchise World Headquarters, Corporate Office, Milford, CT, DevOps Architect

Aug 2021-Till Date

Set up Right Notes CI/CD Jenkins, Creating Batch Jobs, Creating Deployment CR for Prod

Set up RightNotes CI/CD Jenkins IT/UAT/Prod Env

Troubleshooted and debugging critical problems and resolve complex technical issues that may arise.

Worked on APP/DOMAIN/Pipelines services, patterns, container technology, monitoring, telemetry and logging and experience in Cloud migration projects.

Build and managed CI/CD workflows and system integration.

Worked on EKS Deployment CICD Pipeline Using Rio and Spinnaker

Ensured risk reduction through information security policy development.

Created a security automation framework using Azure Automation and PowerShell to automate the process of identifying, remediating and tracking vulnerabilities

Designed and developed security architectures for cloud and hybrid cloud-based systems. Possess a firm understanding of the offerings within both Amazon Web Services (AWS) and the Microsoft Azure platforms. Based on business requirements, designs and implements cloud-native architectures with appropriate security controls present

Provided thought leadership in Public Cloud Architecture and how to deliver it at scale in a large enterprise

Assist in developing the Enterprise Architecture for the Cloud program

Supported the Information Security and Cyber Security programs

Worked with and managed Web Application Firewall (Cloudflare and AWS WAF)

Provided technical expertise, application support, training, guidance, and written proposals that may include application products from Vendors such as Veritas, Commvault, EMC, IBM, Innovation Data Processing, Rocket, and other applications designed for data protection.

Created, Supported and Engineering of NetBackup policies for physical servers and VMs on various platforms including Windows Server, Linux, SQL, Exchange & SharePoint.

Worked in DevOps processes, tools, and technologies

Used AWS Web Application Firewall, CloudTrail, AWS CLI

Set up CI/CD Azure DevOps, Creating Pools, Creating Deployment groups

Set up CI/CD Jenkins and Set up CI/CD Octopus

Managed Terraform pull requests using runatlantis.io and Terraform Enterprise.

Build and managing CI/CD workflows and complex system integration.

Experience in writing Infrastructure as a code (IaC) in Terraform to deploy the Azure resources and services

Created reusable Terraform modules in both Azure and AWS cloud environment

Technical / Tools Used: Jenkins, Radar, Shell Script, Python, SonarQube, Deployment Hub, Rio, Spinnaker, Azure DevOps, Jenkins, Octopus (CI/CD), JIRA, PowerShell, Shell Script, Azure Data Studio, SonarQube, Terraform

PenFed Credit Union - Corporate Office, Tyson’s, VA May 2020-Aug 2021 DevOps Architect

Worked in complex enterprise IT environments using software engineering techniques.

Worked in Solution Architecture / relevant DevOps and Worked in AWS Cloud

Established and implemented a hybrid AWS cloud architecture strategy

Created a security automation framework using Azure Automation and PowerShell to automate the process of identifying, remediating and tracking vulnerabilities

Worked in DevOps Practice execution of strategic planning, road mapping, execution, and continuous improvement of the product and services factory automation.

Set up CI/CD Performance Testing of Salesforce using JMeter

Set up CI/CD Performance Testing of Salesforce using LoadRunner

Set up CI/CD Regression Testing of Salesforce using Teamcity

Provided enterprise-grade solutions using AWS services.

Experience in SFDC development using Apex classes and Triggers, Integration, Visual Force, Force.com API, SOQL, SOSL.

Managed and administering day-to-day activity for Akamai Web Application Firewall (WAF) and Cloud security across multiple cloud providers including (e.g. IaaS, PaaS, SaaS), Amazon Web Services, Google Cloud and on-premises Data Centre implementations.

Ensured risk reduction through information security policy development.

Monitored security systems for any and all signs of hackers or fraudulent activity

Resolved all fraud and virus infections in coordination with computer security incident response teams

Performed security system updates on a regular basis with associated technical documentation.

Troubleshooted and debugged critical problems and resolve complex technical issues that may arise.

Worked on AWS Cloud services, patterns, container technology, monitoring, telemetry and logging and experience in Cloud migration projects.

Building and managing CI/CD workflows and complex system integration.

Technical / Tools Used: MuleSoft, Salesforce, GitHub, Teamcity (CI/CD), JIRA, Shell Script, Python, JMeter, Load Runner, IBM RPT, Maven, Anypoint Runtime Fabric, Selenium, Hogan Emulator, Cloud Hub

Wal-Mart Technology, Bentonville, AR Aug 2019 – Apr 2020

Worked as Software Engineer 3 –Tech in two projects (Field Mailer and Change of Information)

Developed application for International Markets using VB.Net and Data base Informix using VB.net and DB2 and pulled date from Active Directory /LDAP connecting through Domain Controller

Ensured optimal functionality by writing test cases

Working in Agile Methodology (Daily Stand-up, Sprint Retrospective, Sprint Review, Sprint Planning, Backlog grooming)

Created a security automation framework using Azure Automation and PowerShell to automate the process of identifying, remediating and tracking vulnerabilities

Created Looper Jobs/Jenkins for deployment Lab/Cert/Prod using Concure/OneOps

Worked on updating the database tables, writing stored procedures while doing the Production Support

Used Teradata SQL Assistance and QMF for Windows, DBeaver

Technical / Tools Used: VB.net, Jenkins, Git, DB2, Teradata, Informix, Jenkins (CI/CD), JIRA, Bit Bucket, Service Now, Looper, Concord.

Johnson Controls (Milwaukee, WI) [September 2018 – July 2019] DevOps Architect

Provided a series of services that interface to the operating system and provide services to the application

Migrating on premise VM and Servers with Azure Site Recovery

Worked in Disk snapping and Active Directory /LDAP

Worked in DR Setup (RTO, RPO) and Failover, Test Failover and Failback

Created ARM template for Azure Ultra SSD Preview and

Walgreens USA - (Deerfield, IL) [December 2016 – August 2018] Cloud Consultant/Azure Architect

Managed Kubernetes (deployment, Cluster, Pods, Jobs, Secret, Nodes, config-map, Services) and Docker and Collection of services and APIs that deploy, maintain, and monitor Kubernetes clusters in public cloud and on-premises infrastructure. Contribute to product strategy, roadmap, and release planning.

Used Istio makes traffic management transparent to the application, moving this functionality out of the application and into the platform layer as a cloud native infrastructure. Istio complements Kubernetes, by enhancing its traffic management, observability and security for cloud native applications.

Created Using ARM templates, Azure virtual Networks, Virtual Machines, Cloud Services, Resource Groups, Express Route, Traffic Manager, VPN, Load Balancing, Application Gateways, auto – Scaling, VM Scale Set, Service Bus, Queue, Topics,

Worked in in TLS Protocol version indicates the versions of the Transport Layer Security Protocol required for the profile. TLS Protocol versions 1.0, 1.1, and 1.2 are supported

Given consultations and recommendations on chatbot development (healthcare chatbot, mental health chatbot, financial assistant)

Reviewed for improving existing conversation flows and chatbot implementations (property rental assistant, financial assistant)

Researched on intent detection and named entity recognition approaches for chatbots

Managed chatbot development processes (financial assistant)

Worked in Chef with configuring Chef-Repo and setting up multiple Chef Workstations and writing Chef Cookbooks and Recipes to automate the deployment process using Spinnaker and integrated with Jenkins jobs for CD framework

Deployed and configured Elastic-search, Log-stash, Kibana (ELK) and Azure log analytics and skilled in monitoring servers using Splunk, Azure Monitor and ELK.

Worked in Kubernetes to deploy scale, load balance, and manage Docker containers with multiple names spaced versions using Helm charts.

Used Docker Hub, Docker Engine, Docker images, Docker Weave, Docker Compose, Docker Swarm, and Docker Registry and used containerization to make applications platform when moved into different environments.

Worked in Azure Kubernetes service to produce non-production-grade Kubernetes that allow enterprises to reliably deploy and run containerized workloads across private and public clouds.

Created Docker images using Docker File, worked on Docker container snapshots, removing images, and managing Docker volumes and implemented Docker automation solution for CI/CD model.

Worked in installing, configuring, and administering Jenkins CI tool on Linux machines and used Jenkins Pipelines to drive all Microservices builds out to the Docker Registry and then deployed to Kubernetes, Created Pods and managed using Kubernetes.

Used Kubernetes to manage and specify the copies of the containers to run the actual servers in the cloud environment. Scheduled, deployed, and managed container replicas onto a node cluster using Kubernetes and deployed Docker containers through Kubernetes to manage the microservices using its Nodes, Pods, ConfigMaps, Selectors, Services.

Configured the monitoring and alerting tools according to the requirement like Azure Monitors, setting up alerts and deployed multiple dashboards for individual applications in Kubernetes

Microsoft Corporation - (Bellevue, WA) [October 2010 – November 2016] Cloud Consultant

Knowledgeable in Cloud Platforms (Hybrid Clouds, IAAS, PAAS and SAAS) and offerings from Microsoft, and open-source cloud platforms like Cloud Platform.

Managed team for OneDrive and SharePoint consumer and business services in Office 365

Experience in Azure Network Security Groups, Azure Operational Insight and OMS, Azure Premium Storage, Site Recovery, Network Virtual Appliance, Client-Side encryption for Azure storage objects and Dynamic CRM and Automation skillset.

Perform SQL administrative tasks including installing and upgrading SQL server products, creatingmaintenance plans, and creating database objects

Supported and preserved the Virtual Desktop setup of the institution, which includes, the AppSense and XenDesktop, XenApp, and others.

Provided technical assistance for all the servers, desktops, and services that apply business.

HCL - (Noida, India) [April 2007 – September 2010] Designation: Lead Engineer

Develops (UsingD2K/Oracle), modify and maintains assigned programs. Monitors the operation of assigned programs and responds to problems by diagnosing and correcting errors in logic and coding.

Reviews user requirements and needs for new software and performs analysis, design, implementation, installation and training related to new software developed and/or acquired.

Teracom Info solution Noida - (India) [July 2006 – March 2007] Designation: Sr Software Engineer

Create, develop and manage content for organization’s PL/SQL Procedures and Functions.

Maintain a consistent look and feel throughout all PL/SQL Package.

4Cplus Pvt Limited - (New Delhi, India) [July 2003 – June 2006] Designation: Senior Software Eng

Designs, develops (D2K/Oracle) and modifies modules based on functional and system requirements.

Participate in testing process through unit testing and bug fixes. References: Available on Request

Contact this candidate