Devops Engineer Cloud Solutions

Email: **********@*****.***

Phone: 832-***-****

EMMANUEL LUNI

Cloud/ Sr. DevOps Engineer

PROFILE SUMMARY

Strategic Professional offering 11+ years of rich and qualitative experience in IT, including 7+ years as an Azure Cloud Architect and DevOps Engineer

Eexpertise in designing and architecting cloud designing and architecting cloud solutions services and hybrid environments, on prem and AWS.

Possess rich experience in Azure and AWS Cloud Architecture, specialising in migrating organisations from monolithic to micro-services architecture.

Developed Azure Landing Zones, deploying resources like VMs, Load Balancer, Traffic Manager, and SQL, ensuring efficient resource management.

Proficient IaaS /PaaS services such as Network services, Load Balancer, App Services, Azure Functions, Logic Apps, VMs, VM Scale Sets, Front Door, Cosmos DB, Azure DevOps, and Storage (Data Lake, Blob, File)

Expertise in AWS services including EC2/Virtual Machine, VPC, RDS, ELB Load Balancing, IAM, Route53, EKS & ECS.

Proficient in enabling seamless monitoring and log analysis through integration of Prometheus, Grafana, ELK, and Splunk with CI/CD pipelines.

Skilled in configuring Azure Virtual Networks (V-Nets), subnets, Azure network settings, AKS, DHCP address blocks, DNS settings, security policies, and routing.

Experienced in architecting cloud solutions with a focus on Cloud platforms, DevOps, CI/CD, and Configuration Management to ensure optimal performance, scalability, and continuous integration.

Proficient in leveraging Azure services for tracking, cost optimization, and security, and imparting knowledge through training sessions.

Expertise in configuring monitoring tools like Prometheus and Grafana for optimal performance and reliability in Kubernetes environments.

Hands-on experience in provisioning Azure cloud environments & resources using ARM Templates and Bicep

Designed governance frameworks with Azure Policy, Blueprints, and Resource Graph, driving compliance and efficient resource management.

Expertise in DevOps practices include orchestrating Helm deployments, optimizing networking, security, and scaling, and integrating with Azure DevOps for end-to-end CI/CD pipelines.

Skilled in Docker, Azure Container Registry (ACR), and Azure Kubernetes Service (AKS), with expertise in ISTIO service mesh deployment and Logic App development

Demonstrated leadership in leading end-to-end migration projects, designing hybrid solutions, and translating business requirements into technical solutions.

TECHNICAL SKILLS

Cloud Platforms:

Azure, AWS

Azure Services:

Aws Services:

Azure App Service, Azure Functions, Web Jobs, Azure Batch, Azure App Logic, Azure Container Services, Azure Container Registry, Azure Kubernetes Services, Virtual Machines, Virtual Machine scale set, Azure Bastion Host, Jump Server, Virtual Network Peering, Virtual Private Network, Express Route, Availability Sets, Availability Zones, APIM, Virtual Networks, Regions, Traffic Manager, Application Security, Front Door, Load Balancer, Network Security Group, Application Security Groups, Service Bus, Service and Private Endpoints, Azure Data Factory, Azure Synapse, etc., Azure Storage Account, Blob, Containers, Queue, Table. Access Keys, Shared Access Signatures, Azure sentinel.

EC2, ECS, EKS, IAM, Elastic beanstalk, Lambda, S3, ELB, Elasticsearch, RDS VPC, Route53, Security group, NACL, Subnets, Autoscaling aws glue, amplifier, Cognito, AWS CICD, CloudFormation, mongo DB,

Infrastructure Provisioning Tools:

Terraform, Azure Resource Manager, Cloud Formation, ARM Template, BICEP

Configuration Management Tools:

Ansible, Chef, Salt Lake, PowerShell DSC

CI /CD Tools:

Jenkins, Azure Pipelines, Gitlab Pipelines

DevOps Tools:

AWS Code Pipeline, Code Build, Code Deploy, Elastic Beanstalk, Jenkins, Bamboo, Docker, Jira, Bugzilla, Splunk, Terraform (IAC)

Containerization Tools:

Docker, Kubernetes, Argo CD, helm,

Databases

SQL Server, Oracle, MySQL, DynamoDB, MongoDB, PostgreSQL, RDS, DynamoDB,

Source Code Management:

GIT, GitHub, Gitlab, Bitbucket, Azure Repos.

Logging & Monitoring Tools:

Nagios, Splunk, ELK, Data Dog, Dynatrace, Prometheus, Grafana, Azure monitor, and Azure Network Monitor, Istio, CloudWatch.

Scripting & Programming Languages:

Python, PowerShell, Bash/Shell, Java, JavaScript, ASP. Net

Application/Web Servers:

Apache Tomcat, NGINX, IIS, JBoss4.1, WebSphere, Web Logic

Operating Systems:

UNIX, Linux, Windows, Ubuntu, RedHat

Bug Tracking Tools:

JIRA, Bugzilla, Remedy, HP Quality Centre

PAAS:

Azure App Service, Azure Functions, Web Jobs, Azure Batch, Azure App Logic, Azure Container Services, Azure Kubernetes Services, etc.

IAAS:

Virtual Machines, Virtual Machine scale set, Azure Bastion Host, Jump Server, Virtual Network Peering, Virtual Private Network, Express Route, Availability Sets, Availability Zones, Virtual Networks, Regions, Traffic Manager, Application Security, Front Door, Load Balancer, Network Security Group, Application Security Groups, Service Bus, Azure Storage Account, Blob, Containers, Queue, Table. Access Keys, Shared Access Signatures

Identity Management:

OAuth, Azure Active Directory, Managed Identity, Service Principal, AD B2C, RBAC, Azure Access Policies

DevOps:

GitHub, Jenkins, Azure DevOps, YAML, CICD Pipelines, Blue Green Deployment, Canary Deployment, Deployment slots, SonarQube.

Security:

Azure Key Vault, Azure Firewall, Azure Security Centre, Azure DDOS Protection, Azure Health Service, Azure Network Monitor, Azure Sentinel, etc

Logging and Monitoring:

Azure Monitor, App Insights, Azure log analytics, and 3rd party like - Nagios, Splunk, ELK, Data Dog, Dynatrace, Prometheus, Grafana, AppDynamics, CloudWatch, cloud-trail.

PROFESSIONAL EXPERIENCE

Mastercard, New York, NY April 2022-Present

Sr. Azure Cloud Architect &SRE/ DevOps Engineer

In my previous role as a Sr. Azure Cloud Architect & DevOps Engineer at Mastercard, I spearheaded the design and implementation of highly scalable Azure infrastructure utilizing VMs, storage, databases, AKS, load balancers, front door, azure Traffic manager, auto-scale, app service and virtual networks. To streamline software delivery, I developed robust CI/CD pipelines with Azure DevOps and automated build, test, and deployment processes. Furthermore, I ensured infrastructure security, collaborated with developers, and championed the development of Mastercard's Azure DevOps culture for continuous improvement.

Architecting Azure infrastructure solutions utilizing services such as Azure Virtual Machines (VMs), Azure Blob Storage, Azure SQL Database, and Azure Virtual Network for optimal performance and scalability

Developed and Implemented Policy as Code Frameworks: Designed and deployed Policy as Code (PaC) frameworks using tools like Open Policy Agent (OPA) and Terraform Cloud, ensuring compliance with organizational security and operational policies across cloud infrastructure.

Automated Policy Compliance at Scale: Automated validation and enforcement of infrastructure policies via CI/CD pipelines, reducing manual intervention and improving consistency in policy adherence for multi-cloud environments.

Developing robust CI/CD pipelines to automate the build, testing, and deployment of applications in Azure, leveraging tools like Azure DevOps, Jenkins, or GitLab CI/CD

Implementing automation strategies to streamline build, test, and deployment processes, ensuring efficient software delivery in Azure environments.

Integrating code repositories, testing frameworks, and deployment targets into CI/CD pipelines to facilitate seamless application deployment.

Container Orchestration Expertise: Managed and deployed applications in Kubernetes clusters, including Azure Kubernetes Service (AKS) and Amazon EKS, to achieve highly available, scalable application architectures.

Automated Deployment with Helm: Developed Helm charts for seamless deployment, upgrades, and rollback capabilities across Kubernetes environments, facilitating rapid release cycles and minimizing downtime.

Service Mesh Integration: Implemented Istio Service Mesh within Kubernetes clusters to improve traffic management, secure communication, and provide observability across microservices.

Developed and implemented an (AIM) AI-powered recommendation system using with Python, improving user engagement by vision system.

Developed and Implemented Policy as Code Frameworks: Designed and deployed Policy as Code (PaC) frameworks using tools like Open Policy Agent (OPA) and Terraform Cloud, ensuring compliance with organizational security and operational policies across cloud infrastructure.

Migrated monolithic Java applications to cloud-native architectures using AWS (Elastic Beanstalk, Lambda) and container orchestration tools like Kubernetes.

Developed CI/CD pipelines for Java-based services using Jenkins, GitLab CI, and Docker to streamline deployment processes.

Analysed customer data using AIM machine learning techniques to identify customer segments and optimize marketing campaigns, results in data analysis.

Writing and maintaining infrastructure as code using Azure Resource Manager (ARM) templates, Azure CLI, or Azure Bicep for declarative and version-controlled infrastructure provisioning

Defining and provisioning Azure resources and services in a scalable and reliable manner, adhering to best practices and architectural standards.

Used Next-Generation firewall for any threat prevention, application security and cybersecurity with Palo alto.

Worked with Prisma Cloud platform for cloud environments on Azure and AWS to allows to analyse security, identify threats and detect data endpoints in the network.

Implementing and maintaining configuration management tools like Azure Automation, PowerShell DSC, or Chef Automate for efficient infrastructure management.

Performing load testing, capacity planning, and performance tuning exercises to optimize Azure infrastructure and application performance.

Worked with Azure identity to manage VM app services to centralized management of identities and credentials reduces the risk of compromised credentials.

Documenting system architectures, deployment processes, and troubleshooting procedures to ensure comprehensive knowledge sharing and collaboration.

Staying abreast of the latest Azure services, DevOps tools, and industry best practices to drive continuous improvement and innovation.

Ensuring security and compliance of Azure infrastructure and applications through the implementation of security best practices, including Azure Active Directory (AAD) roles and policies, encryption at rest and in transit, and network security groups (NSGs)

Collaborating closely with development teams to provide guidance on best practices for building applications optimized for deployment in Azure and assisting with troubleshooting application deployment issues.

AON experience for risk management and data analysis and provide client with customized solutions to their specific needs.

Monitoring and maintaining the performance and availability of Azure infrastructure and applications using Azure Monitor, Azure Security Centre, and other monitoring tools.

Participating in on-call rotation to provide 24/7 support for production systems, promptly resolving incidents and ensuring high availability and reliability of Azure environments.

Contributing to the development of the company's Azure DevOps culture by implementing processes and tools that foster collaboration, communication, and delivery speed.

Developed capacity and architecture plans for Azure Cloud migration, enhancing IAAS VMs and PAAS role instances for peak performance.

Designing and implementing automated CI/CD pipelines using Jenkins for efficient code deployment, ensuring rapid and reliable software delivery

Designed and implemented scalable and secure Java-based applications, leveraging frameworks like Spring and Hibernate.

Collaborated with cross-functional teams to develop microservices and REST APIs using Java 8+ features such as Streams, Lambdas, and Optional.

Martin Foods, Houston, TX Nov 2018 – Apr 2022 Sr DevOps Engineer & Administrator

Optimized Java applications by identifying bottlenecks and implementing multithreading, caching mechanisms, and garbage collection tuning.

Achieved a 30% improvement in response time for high-traffic applications through profiling and performance tuning tools like JProfiler and VisualVM.

Establishing and maintaining robust Git workflows for version control using GitHub and Bitbucket, facilitating seamless collaboration among development teams

Leveraged Azure Monitoring tools for data collection and issue resolution, including Log Analytics and Application Insights.

Designed and implemented serverless solutions using Azure Functions and Python

Utilized Azure DevOps/VSTS for version control, build, release management, and deployments across environments.

Use Azure identity SDK for libraries of various program languages like Python and Java to simplify all the Azure functionalities in the application.

Formulating and executing comprehensive CI/CD roadmaps to streamline project development processes and improve overall efficiency.

Optimizing and refining the AWS deployment process, encompassing IAM, VPC, EC2, S3, and Security Groups, to ensure secure and scalable infrastructure.

Spearheaded the migration of Linux environments to AWS, orchestrating migration plans and deploying EC2 instances within VPCs. Crafted security measures via AWS CloudFormation templates and Ansible modules, configuring security groups, NACLs, profiles, and roles.

Use AON for development and give employees the tools needed to succeed on results-oriented work environment to emphasize and collaborative.

Orchestrating the deployment, management, scaling, and load balancing of Docker containers using Kubernetes, enhancing application reliability and performance

Implemented Azure Active Directory for secure single sign-on access to SaaS applications.

Leveraging Terraform to craft precise Infrastructure as Code (IaC) scripts for seamless provisioning of AWS resources, ensuring consistency and reliability in infrastructure management.

Leading the strategic transition from a monolithic application to microservices architecture, significantly enhancing developer productivity and system scalability

Utilizing Ansible for efficient automation, resource provisioning, and system upgrades across Linux and cloud environments, streamlining deployment processes.

Automated Environment Configuration: Utilized Ansible playbooks to configure, manage, and orchestrate complex application environments across multi-node clusters, reducing manual intervention and error.

Secure, Consistent Configuration: Streamlined configuration consistency across development, staging, and production by automating updates, package installations, and security patching with Ansible.

GitHub Enterprise Administration – Proficient in managing GitHub Enterprise environments, including configuring repositories, managing user permissions, and ensuring secure access control for codebases.

Integration with CI/CD Pipelines – Successfully integrated GitHub Enterprise with CI/CD tools like Azure DevOps and Jenkins to streamline code deployment, increase developer productivity, and enhance code quality.

Security and Compliance – Implemented advanced security controls in GitHub Enterprise, such as secret scanning, dependency tracking, and code review policies, to ensure compliance with enterprise security standards and reduce vulnerabilities.

Automated Infrastructure Deployment: Proficient in automating cloud infrastructure provisioning with Terraform, ARM Templates, Bicep, and AWS CloudFormation to enable consistent, repeatable deployments across multi-cloud environments.

Modular and Scalable IaC Design: Designed and implemented modular IaC templates with terraform and reusable modules for efficient resource management, ensuring scalability and flexibility for dynamic enterprise environments.

Governance and Compliance: Leveraged IaC (terraform)to enforce policy-based access controls and compliance checks, enhancing security and reducing drift across infrastructure deployments.

Effectively scaling the platform to accommodate a 10x increase in customer demand, ensuring seamless user experience and optimal performance

Configured Azure Express Route for private connections, bridging Azure and on-premises infrastructure.

Utilizing communication tools such as Jira, Slack, and Confluence to facilitate seamless collaboration and project management across teams.

Developing and automating standard operating procedures to address common failure scenarios, ensuring system resilience and reliability.

Use NIST cybersecurity Framework to maintain a strong security environment and migrating security, promoting proactive defence and continuous improvement.

Configured Azure components, including Active Directory, Key Vault, and encryption, enhancing security.

Viettel (Nexttel) Inc., Long Beach, CA Mar 2016 – Sep 2018

Cloud Architect & DevOps Engineer

Built Azure landing zones and aligned target Azure infrastructure with migrated app requirements.

Designing and implementing a robust CI system within Azure DevOps, configuring build pipelines and release pipelines to automate the deployment of applications.

Leveraging Azure Kubernetes Service (AKS) to schedule, deploy, and manage containerized applications within a node cluster, ensuring optimal scalability and reliability.

Seamlessly integrating Azure Repos alongside Azure DevOps for version control, developing scripts for containerization via Ansible with Docker, and orchestrating deployments using AKS, ensuring streamlined development workflows within the Azure ecosystem

Demonstrating proficiency in Azure DevOps administration, including handling backups and configuring essential pipelines and release gates, to maintain a stable and efficient CI/CD environment.

Published Power BI reports to the Power Bi Service for secure sharing with colleagues and stakeholders.

Collaborating effectively with application vendors for upgrades, enhancements, and technical support within the Azure marketplace, ensuring seamless integration of third-party solutions

Leading the development and execution of a comprehensive CI/CD roadmap within Azure DevOps, driving continuous improvements and efficiency gains in project delivery processes within the Azure cloud environment

Provisioned servers and Azure resources using ARM templates and terraform, adhering to infrastructure-as-code principles.

Workflow Automation with GitHub Actions – Developed and automated workflows using GitHub Actions to support continuous integration, automate testing, and streamline deployments, improving delivery efficiency and reducing manual intervention.

Implemented version control, build, and release management using Azure DevOps, VSTS, and Visual Studio

Implemented methods such as Azure Data Migration Service, Azure Database Migration Service, and Azure Data Factory

Created and maintained Azure DevOps-related tools for deployment and provisioning.

Utilized Azure DevOps services for work planning, code collaboration, and efficient application deployment.

Managed Azure Kubernetes Services (AKS) policies and access to resources

Developing and automating standard operating procedures within Azure Automation to swiftly address common failure scenarios, ensuring system resilience and reliability.

Diligently monitoring, analysing, and generating reports on performance statistics for cloud-hosted environments within Azure Monitor, ensuring optimal system performance and availability

Providing valuable consultation and contributing to the refinement of system architecture within Azure, optimizing cloud infrastructure for performance, scalability, and cost-efficiency

Ensuring high availability of critical infrastructure within Azure by managing Azure virtual machines, Azure App Service instances, and other Azure resources, mitigating risks and ensuring business continuity

Leveraging Azure Resource Manager (ARM) templates and Azure CLI for infrastructure provisioning and management, ensuring consistent and repeatable deployments within Azure

Successfully participating in an on-call schedule, providing timely support during the local time zone, ensuring uninterrupted operation of Azure environments

Quantiphi Inc., Marlborough, MA Nov 2014 – Mar 2016

DevOps & Administration Engineer

Crafted and rigorously tested storage strategies, along with a comprehensive disaster recovery plan for client databases.

Developed and implemented new development tools and infrastructure.

Involved in requirement gathering and understood the needs of stakeholders and conveyed them to developers.

Automated and improved the development and release processes.

Tested and examined code written by others and analysed results, ensured that systems are safe and secure against cybersecurity threats.

Identified technical problems and developed software updates and fixes.

Deployed updates and fixes to various environments while providing Level 2 technical support, offering hands-on assistance for system setup and efficient resolution of issues through adept communication with staff and clients.

Delivered a solution that ensured impeccable recovery performance and maintained high availability.

Provided hands-on assistance for system setup and efficient resolution of issues, showcasing exceptional communication skills.

Migrated monolithic Java applications to cloud-native architectures using AWS (Elastic Beanstalk, Lambda) and container orchestration tools like Kubernetes.

Developed CI/CD pipelines for Java-based services using Jenkins, GitLab CI, and Docker to streamline deployment processes.

Developed baseline compliance for Windows computers, maintaining software operations by conducting in-depth database analysis, performance monitoring, and seamless patch installations.

Used Splunk to orchestrate real-time monitoring of system operations, enabling swift responses to triggers and observations to ensure optimal system performance and security.

Analyzed, enhanced, and maintained the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP), these comprehensive documents outline strategies for business continuity and data recovery in worst-case scenarios.

Utilized Jenkins pipelines for microservices builds and orchestrated Docker container clusters using Kubernetes, optimizing deployment processes for enhanced efficiency,

Employed ticketing software to accurately document, track, and address reported problems and incidents, driving timely resolutions.

Generated reports using Splunk, enhancing security insights and incident detection capabilities.

Spearheaded the deployment of profiles using Microsoft Endpoint Manager and created tailored compliance policies for company-owned devices, ensuring standardized security protocols.

Monitored and updated web applications, effectively resolving network communication issues, and ensuring uninterrupted performance.

Successfully deployed and maintained services and applications within Windows and Linux environments, orchestrating efficient operational setups.

Collaborated closely with operational leaders and management during outages, offering valuable technical insights and expertise to drive effective solutions.

Truist Financial, Atlanta, GA Mar 2013 – Nov 2014

Systems Administrator

Took charge of installing, administering, and maintaining SQL Server instances, ensuring their optimal performance and reliability

Managed the functionality and efficiency of Linux and UNIX-based operating systems, guaranteeing their smooth operation and performance.

Configured and established the necessary infrastructure for a DevOps environment on Linux, facilitating collaborative development and streamlined operations.

Oversaw system monitoring to proactively identify and resolve potential issues, ensuring optimal performance and availability.

Managed and maintained servers, storage systems, network devices, and virtualization platforms to support business operations.

Provided technical support and assistance to end-users, troubleshooting system issues, and resolving software and hardware problems.

Implemented and enforced security policies and measures to safeguard data and systems against cyber threats.

Developed and implemented patch management strategies to ensure systems were up to date with the latest security patches.

Managed backup and recovery solutions to protect critical data and ensure business continuity in case of system failures.

Maintained comprehensive documentation of system configurations, procedures, and troubleshooting steps.

Coordinated with third-party vendors and service providers to procure hardware, software, and services.

Stayed informed about emerging technologies and best practices in system administration.

Assisted in conducting security audits and compliance assessments to ensure adherence to regulatory requirements.

Responded promptly to system alerts, security incidents, and service disruptions to minimize downtime and mitigate risks.

Collaborated closely with infrastructure, Java developers, network, database, application, and business intelligence teams to ensure high data quality and availability.

ACADEMIC CREDENTIALS

Bachelor of Computers Science from University of Bamenda, Cameroon.

CERTIFICATION

AZ-104=AZURE SYSTEMADMINISTRATOR

Contact this candidate