Devops Engineer Cloud Infrastructure

Param

DevOps Engineer US Citizen

*********@*****.*** 205-***-****

PROFESSIONAL SUMMARY

Results-driven DevOps Engineer with over 8+ years of hands-on experience automating, deploying, and maintaining scalable cloud infrastructure across AWS, Azure, and Google Cloud Platform (GCP).

Adept at designing and managing cloud-native and hybrid solutions using key services such as AWS EC2, S3, Lambda, RDS, Azure App Services, Azure Functions, GCP Compute Engine, and Cloud Functions.

Deep expertise in Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, and ARM Templates to ensure consistent, repeatable infrastructure provisioning and configuration management with Ansible, Puppet, and Chef.

Proficient in deploying and securing AWS resources in accordance with FedRAMP guidelines, including encryption at rest/transit, centralized logging, and fine-grained IAM policies tailored for federal compliance.

Proficient in containerization and orchestration with Docker, Docker Compose, Kubernetes, and AKS; skilled in deploying applications using Helm charts in production-grade environments.

Experienced in implementing CI/CD pipelines using Jenkins, CircleCI, and Azure DevOps for automated build, test, and release workflows across multiple environments.

Strong background in scripting and automation using Python, Bash, Shell, and PowerShell for streamlining deployments, monitoring, and system maintenance tasks.

Hands-on expertise in monitoring and logging using ELK Stack, Data Dog, Prometheus, Grafana, and Splunk to ensure optimal performance, reliability, and incident response.

Successfully supported multiple FedRAMP assessment and authorization (A&A) processes, providing technical documentation, evidence packages, and automation artifacts that aligned with control objectives.

Integrated FedRAMP-mandated security and compliance checks into CI/CD pipelines, enabling continuous compliance across development, staging, and production environments with minimal manual intervention.

Familiar with secure DevOps practices, including role-based access control, IAM policies, and integrating tools like SonarQube, Nexus, and JFrog Artifactory for artifact management and static code analysis.

Solid understanding of network protocols and tools, including Nginx, Apache Kafka, TCP/IP, DNS, and load-balancing solutions for high availability and traffic management.

Versatile with version control and collaboration tools like Git, Bitbucket, JIRA, Confluence, and ITSM platforms like ServiceNow for change management and team coordination.

Exceptional problem-solving skills with a brave approach to identifying and resolving system issues before they impact business operations.

Strong communication and cross-functional collaboration abilities, enabling seamless interaction with development, QA, and operations teams in Agile/Scrum environments.

TECHNICAL SKILLS

Cloud Platforms & Services: AWS (EC2, S3, Lambda, RDS, CodeDeploy, Elastic Beanstalk, CloudFront, VPC, Security Groups, Network ACLs, Route 53, CloudTrail), Azure (App Services, Azure Functions, Azure VMs, Blob Storage, Disk Storage, Azure Files, Data Lake, Azure DevOps, Virtual Networks, Load Balancer, Azure AD), Google Cloud Platform (GCP) (Compute Engine, Persistent Disks, Cloud Storage, Cloud Functions, Pub/Sub, IAM, VPC)

Scripting & Programming Languages: Python, Bash, Shell, PowerShell

Containerization & Orchestration: Docker, Docker Compose, Kubernetes, Azure Kubernetes Service (AKS), Helm

Infrastructure as Code (IaC) & Configuration Management: Terraform, CloudFormation, Ansible, ARM Templates, Puppet, Chef

CI/CD & Build Tools: Jenkins, CircleCI, Maven

Monitoring, Logging, & Performance: ELK Stack, Data Dog, Prometheus, Grafana, Splunk

Databases: MySQL, MongoDB, PostgreSQL

Web & Network Tools: Nginx, Apache Kafka, WebLogic, TCP/IP, DNS, Load Balancers

Security & DevSecOps: IAM Policies, SonarQube, Nexus, JFrog Artifactory

Version Control & Collaboration: Git, Bitbucket, JIRA, Confluence, ServiceNow (ITSM)

EXPERIENCE

Athol Savings Bank, Athol, MA DevOps Engineer

April 2024 - Present

Responsibilities:

Built and maintained CI/CD pipelines using Jenkins and AWS CodeDeploy, automating deployments across dev, staging, and production environments.

Deployed and managed containerized applications with Docker and Kubernetes, using Helm charts for configuration consistency.

Managed and maintained SplunkCloud deployments, ensuring high availability, data integrity, and secure integration with various AWS services to support real-time monitoring and alerting across enterprise systems.

Developed and fine-tuned Splunk dashboards, alerts, and reports to provide actionable insights into application performance, infrastructure health, and security events, improving system observability and incident response.

Integrated Splunk with CI/CD pipelines and cloud environments to automate log ingestion and correlate events across distributed systems, enabling rapid root cause analysis and reducing mean time to resolution (MTTR).

Designed and launched serverless functions using AWS Lambda, integrating with ECR, S3, and RDS to support a microservices architecture.

Automated infrastructure provisioning using CloudFormation and Ansible, following the best practices of Infrastructure as Code (IaC).

Developed automated CI/CD pipelines that enforced security gates, including SAST/DAST scanning, configuration drift detection, and artifact integrity verification to meet stringent FedRAMP High deployment standards.

Hardened cloud resources (AWS EC2, RDS, S3, IAM) in accordance with FedRAMP High baseline configurations, including encrypted storage, strict IAM policies, enforced multi-factor authentication, and centralized log management.

Configured and managed AWS EC2, Elastic Beanstalk, and CloudFront for scalable application hosting and global content delivery.

Managed VPC, Security Groups, Network ACLs, and Route 53 for secure and optimized network architecture.

Developed Python scripts to automate routine operations, enhancing efficiency and reducing manual errors.

Integrated Apache Kafka for reliable real-time data streaming within distributed systems.

Implemented DevSecOps practices with tools like SonarQube, Nexus, and IAM policies to ensure secure software delivery pipelines.

Set up logging and monitoring using the ELK Stack and CloudTrail for complete observability and audit trail compliance.

Engineered secure, compliant patching and update mechanisms for production systems, ensuring critical vulnerabilities were addressed within required remediation windows defined by FedRAMP security guidelines.

Configured Nginx as a reverse proxy and load balancer to manage incoming traffic and improve system performance.

Managed MySQL databases on AWS RDS, focusing on availability, security, and performance tuning.

Used Git for version control and collaborated with Agile teams through Scrum ceremonies, tracking work in JIRA.

Worked closely with cross-functional teams to support cloud integration and ensure smooth delivery of microservices-based applications.

Environment: Jenkins, AWS CodeDeploy, Docker, Kubernetes, Helm, AWS (Lambda, EC2, ECR, S3, RDS, Elastic Beanstalk, CloudFront, VPC, Route 53, CloudFormation, CloudTrail), Ansible, Python, Apache Kafka, SonarQube, Nexus, Nginx, MySQL, Git, JIRA, Agile/Scrum.

Ontario Insurance Company, Shortsville, NY DevOps Engineer

December 2021 - March 2024

Responsibilities:

Designed and managed CI/CD pipelines using Azure DevOps, automating deployments across development, staging, and production environments.

Created and deployed cloud infrastructure using ARM Templates and Infrastructure as Code (IaC) principles for repeatable and scalable provisioning.

Configured and maintained Azure App Services, Azure Functions, and Azure Virtual Machines to host microservices and event-driven workloads.

Automated routine tasks and cloud operations using PowerShell to improve consistency and reduce manual intervention.

Worked closely with engineering and security teams to implement Splunk forwarders and log sources across Linux, Windows, and containerized environments, ensuring compliance with data retention and FedRAMP logging standards.

Led troubleshooting efforts using Splunk during high-severity incidents, leveraging log correlation and advanced search queries to diagnose issues and support forensic analysis for post-incident reviews.

Conducted regular system audits and participated in third-party assessments, supplying evidence packages and system security plans (SSPs) that mapped technical implementations directly to FedRAMP High control requirements.

Provided hands-on support during annual FedRAMP assessments and continuous monitoring activities by aligning DevOps processes, automation scripts, and system documentation with evolving federal security expectations and agency feedback

Facilitated role-based access control (RBAC) and implemented least-privilege principles across all DevOps tools and platforms, documenting and auditing all administrative activities in line with FedRAMP High security mandates.

Managed containerized applications with Docker and deployed them using Azure Kubernetes Service (AKS) for high availability and scalability.

Administered Azure Virtual Networks (VNets), Load Balancers, and Nginx to optimize traffic flow and ensure secure communication between services.

Used Azure Blob Storage, Azure Disk Storage, Azure Files, and Azure Data Lake for efficient data storage, backup, and retrieval across applications.

Integrated authentication and access management with Azure Active Directory (AD) to enforce role-based access and identity protection.

Monitored system and application performance with Prometheus and Grafana, enabling real-time visibility and proactive issue resolution.

Implemented Puppet for configuration management, ensuring consistency across environments and reducing configuration drift.

Managed to build artifacts through JFrog Artifactory and maintained version control using Git for traceability and rollback support.

Deployed and managed MongoDB instances within Azure, supporting scalable data solutions for cloud-native applications.

Participated in Agile/Scrum ceremonies, contributing to sprint planning, reviews, and retrospectives while tracking progress in JIRA.

Collaborated cross-functionally to align infrastructure strategy with business needs and ensure continuous delivery goals were met efficiently.

Environment: Azure DevOps, ARM Templates, Azure App Services, Azure Functions, Azure VMs, PowerShell, Docker, AKS, Azure VNets, Load Balancers, Nginx, Prometheus, Grafana, Puppet, JFrog, Git, MongoDB, JIRA, Agile/Scrum

SpectraCare Health Systems, Inc., Dothan, AL DevOps Engineer

June 2019 - November 2021

Responsibilities:

Built and maintained CI/CD pipelines using Jenkins, enabling seamless integration and deployment for microservices-based applications.

Used Docker Compose and Kubernetes to containerize and orchestrate applications across environments, ensuring scalability and reliability.

Automated the generation and submission of continuous monitoring deliverables, such as POA&Ms (Plans of Action and Milestones), scan reports, and change logs, to support ongoing FedRAMP High authorization and reduce audit fatigue.

Provisioned and managed cloud infrastructure on Google Cloud Platform (GCP) using Terraform and Infrastructure as Code (IaC) practices.

Supported the development of incident response runbooks tailored for FedRAMP environments, ensuring rapid, compliant handling of security events and coordination with federal stakeholders during high-severity incidents.

Administered Google Compute Engine (GCE), Persistent Disks, and Google Cloud Storage (GCS) to support fault-tolerant and high-performing applications.

Configured Google Cloud IAM, VPC, subnets, and firewall rules to enforce security and control access across environments.

Conducted vulnerability scans and security assessments using FedRAMP-approved tools (e.g., Nessus, OpenSCAP), triaging findings, and implementing mitigation steps to maintain a secure, compliant posture across all cloud assets.

Automated deployments and environment configurations using Ansible, improving deployment speed and reducing configuration drift.

Developed Google Cloud Functions and implemented Google Cloud Pub/Sub to build event-driven architectures for asynchronous microservices communication.

Wrote and optimized Bash scripts for routine DevOps operations, enhancing automation and operational efficiency.

Monitored infrastructure and application performance using Data Dog, ensuring uptime and proactive incident resolution.

Managed source control and branching strategies using Bitbucket, supporting collaborative development and secure releases.

Integrated applications with WebLogic and handled cloud integration tasks to ensure seamless legacy and cloud-native workload deployment.

Worked within ITSM frameworks using ServiceNow, handling incident, change, and patch management for production environments.

Administered PostgreSQL databases in cloud environments, ensuring secure access, backups, and performance tuning.

Environment: Jenkins, Docker Compose, Kubernetes, GCP (GCE, GCS, IAM, VPC, Cloud Functions, Pub/Sub), Terraform, Ansible, Bash Scripting, Data Dog, Bitbucket, WebLogic, ServiceNow, PostgreSQL.

Clevyr, Inc., Oklahoma City, OK Build & Release Engineer

February 2017 - May 2019

Managed AWS EC2, S3, Lambda, and Amazon RDS to support scalable and resilient deployment environments.

Applied Git branching strategies for organized codebase management, including tagging, merging, and release branches.

Automated deployments using CircleCI and CI/CD practices to streamline build and release processes.

Wrote Shell scripts for system automation, improving efficiency and reducing manual intervention.

Used Maven and Chef for reliable build and configuration management across multiple environments.

Configured TCP/IP, DNS, and load balancers to ensure stable and high-performing deployments.

Documented deployment steps and runbooks in Confluence for operational consistency and team alignment.

Monitored deployments and system health with Splunk, enabling rapid issue detection and resolution.

Ensured high availability and disaster recovery setups using AWS-native services.

Maintained audit trails and version control for traceability and compliance.

Collaborated in Agile teams to align release schedules with sprint goals.

Oversaw complete codebase management to support structured releases and maintain production stability.

Environment: AWS (EC2, S3, Lambda, RDS), Git, CircleCI, Shell Scripting, Maven, Chef, TCP/IP, DNS, Confluence, Splunk, Agile.

EDUCATION

Bachelor of Science (B.Sc) in Electrical Engineering

University of Oklahoma, Norman, OK

Contact this candidate