Azure Cloud Network Engineer

PETER NUSTA NENGE

Cloud Computing/Azure Cloud Engineer

+1-656-***-**** **********@*****.***

PROFESSIONAL SUMMARY

I have an overall 8+ years of hands -on IT related experience with 6+ years of in-depth experience solving complex problems on Microsoft Azure cloud. Within this time I have worked on Administering Azure Virtual Machines, VMware virtualization management, Azure Key vault, Azure Monitor, Storage account

, Virtual Network, Azure Sql, Disaster Recovery and Backup, Azure Resource Manager and PowerShell

, NetApp Clusters including rebuild and optimization .I have also. been involved in helping my clients to save money along their cloud journey by effectively implementing cost optimization analysis and road maps to save cost.

CLOUD COMPUTING SKILLS

• Azure cloud services

• Azure Entra ID ( RBAC, SSO, MFA )

• Azure virtual Machines

• Azure Networking

• Azure security

• Azure storage

• Backup and disaster recovery

• Define cloud network architecture using Azure virtual networks, VPN, and express route to establish connectivity between on premise and cloud.

• Setting up Virtual networks for creation of Virtual machines.

• Configuration of Site-to-Site VPN for communication of multiple Virtual Networks.

• Configure the appropriate VMs, storage and network in Azure to support the customer workloads moving to Azure

•

• Installing and configuring different Tiers Virtual Machine for different Project needs.

• Configure windows and non-windows (Linux) workloads in Azure.

• Capturing an Image of a Virtual Machine for future needs.

• Configuration of Availability Sets for redundancy. Creation of Standard and Premium Storage accounts as per requirements.

• Migration of data between different Storage accounts using AZ copy or Storage Explorer.

• Creating Backup Vaults for backing up data on Cloud.

• Creating Backup Plans for backing up entire Virtual Machines on Cloud.

• Configuration of Azure Active Directory to sync On-Premises AD Objects for SaaS Application. • Troubleshooting Sync issues with Azure Active Directory PROFESSIONAL EXPERIENCE

WALMART.INC April 2021 –present

Cloud Engineer

• In my past and current roles, most of my functions were carried out in Azure Entra ID. I conducted regular access reviews including user and groups creation, update, deletion and role assignments, while adhering to the principle of least privilege (PIM and RBAC) I utilized tools like self service password resset (SSPR), MFA others offered by Network Watcher like Connection Monitor, IP flow verify, Effective Security Rules, NSG flow logs and Packet Capture to monitor and manage incoming and outgoing traffic to ensure identity protection and security. These functions were usually carried through the azure portal or automated using powershell or logic apps.

• Creating assigned and dynamic groups, creating guest and member users and managing and monitoring their credentials, sign- ins and sign –outs.

• Setting and providing the required configurations for logical circuit creation in express route to the service provider for faster and more secure network connection.

• Conducting regular health checks and patches to backend virtual machines and monitoring their availability and functionality depending on the workload.

• Managing keys and secrets in azure key vaults for storage blob data encryption.

• I have changed the encryption of disks from platform managed to customer managed keys to meet company security specifications.

• I have moved storage data from hot tiers to cool tiers and vice versa through automation of storage data life cycle, and have been in charge of data back up to archive and data recovery in case of hardware failure, software failure or both.

• Involved in migration of linux /windows servers from on premises to the azure cloud environment and testing the whole process successfully.

•

• Designed Network security group rules by setting the inbound and outbound rules at both the virtual machines and subnets levels.

• Configured both external and internal load balancers for effective distribution of traffic to backend virtual machines to ensure availability and decrease downtime and latency.

• Deployed azure IAAS ( virtual machines ) and PAAS into secure virtual networks and subnets.

• Configured network access translator for accessing and patching virtual machines through the public IP of the load balancer.

• Registered multiple applications in azure and managed secrets and certificates.

• Configured both read only and delete locks at resource group and resources level to avoid accidental deletion of resources.

Worked effectively with on premises engineers to configure azure AD connect to sync azure cloud users from on premises to the cloud using the password hash as the authentication method.

• Set Multi factor (MFA ) authentication measures for extra security during sign ins to protect data integrity.

• Configuring Network Access Translator (N.A.T) for accessing servers through pubic IP of the load balancer.

• Setting up Virtual Networks and Subnets and establishing communication between two separate virtual networks in the cloud using Virtual Network Peering.

• Environment: Microsoft Windows, Azure Windows Server 2012/R2/2013, Microsoft Azure Storage.

• Configuration, integration and management of Azure Entra Identities, Groups, App Registration and SSO Services

• Implement Multi- Factor Authenticator (MFA) to enhance security, leveraging Azure MFA and Third-Party MFA Solutions.

• Collaborate with cross functional teams, including developers, security team, network engineers.

• Taking Backups to Cloud storage accounts using Cloudberry Cloud storage tools, configuring site to site VPN connections

• Monitor Azure Infrastructure through System Center Operations Manager (SCOM)

• Coordinating with Microsoft to increase subscription limit like -Core limit and Cloud services. Handling and resolving client issues remotely.

• Creating Storage pool and stripping of Disk for Azure Virtual Machines. Backups configure and Restore Azure Virtual Machine using Azure backup.

• Policy creation ( Azure Governance ) to reduce user risks, monitor and respond accordingly to identified threats in the azure environment.

• Azure A.D connect : configuration with authentication option of either Password Hash or Pass Through in a hybrid environment depending on company requirements.

• Application Registration to azure and certificate creation.

•

• Using the right tools to Monitor and analyze logs and Metrics of applications, azure resources, the operating system and the underlying infrastructure on which the above are reliant and setting up the appropriate response to threats if any.

•

• I have assigned virtual machines to flexible scale sets and have set measures for automation of horizontal virtual machine scale sets to scale up or down in response to changes in work load to ensure availability and redundancy.

• Created shared access signature tokens for users requesting access to storage blob data with just in time access and security.

• Created policies adhering to risk based conditional access criteria to provide extra security by only allowing access to applications and resources on the azure environment from trusted and compliant devices.

• I have effectively monitored azure applications and resources using tools like power BI and dashboards for data visualization and analyses of logs and metrics then set measures for future response through alerts and auto-scale.

Configuration of SQL databases, Managing Backup strategy, Access controls.

• Worked in collaboration with other Microsoft Subject Matter Experts to provide and document recommendations for their applications.

T-MOBILE US INC Jan 2019 –Feb 2021

Cloud Engineer

• Managed the development and deployment of azure solutions using the Microsoft Azure infrastructure as a service (IAAS).

• Was tasked with adding data disks to servers,disk snapshots and Operating system disk swap in case the OS disk was compromised.

• I encrypted disks by changing platform managed keys to customer managed keys to adhere to company security policies and minimize the risk of data breaches.

• Established secure and fast network connection through azure express route.

• Partook in the synchronization of users on the local to the cloud azure environment through azure AD connect, with password harsh as the authentication method.(single sign on )

• Used azure dashboard to visualize and analyze data, then proceed to set alerts or auto scale as a response measure.

• Registered multiple applications through azure AD and managed secrets and certificates.

• I assigned roles and permissions to members and guest users to the cloud environment, managed their credentials and monitored their log ins and log outs.

• Partook in the structuring and deployment of conditional access policies .

• Deployed virtual machines using various availability solutions and scale sets for auto scaling to manage workloads and prevent latency and downtime.

•

• Established connectivity between virtual networks through VNET peering and set up rules for both inbound and outbound traffic flow between subnets both public and private.

• Created rules of data replication between storage accounts deployed over multiple regions.

• Was part of a backup and recovery team in charge of ensuring that data in the storage that hasn’t been accessed over 180 days gets backed up or is recovered in case of a disaster.

• Configured and Monitored the functionality of load balancers to ensure effective load distribution to backend virtual networks and servers. Education.

B.sc Economics and Management, University of BUEA,CAMEROON Microsoft AZ-104 Administrator associate

Microsoft AZ-305 solutions architect

Contact this candidate