Sr. Devsecops Engineer / Aws Solution Architect Resume
Washington, DC
SUMMARY:
To provide a long term contribution to the success of an organization by effectively implementing my Network Administration skills, experience and education in daily activities that support the technical objectives and direction of any current projects and those under consideration for future implementation.
SKILL SUMMARY:
Software: Red Hat, Centos, Solaris, Windows 2003, 2008, XP, 7, NT 2003 server, Drupal 7 & 8,Apache, EC2,Tomcat, Netback up, SSH, Sudo, Oracle, MS Access, VMware, Linux, Unix, and Remote Desktop, Puppet, R10K, Puppetlab, Git, Gitlab,Ansible,Ansible Tower, Jenkins, Jira, Confluence, AWS, Jboss,OSSEC, Windows, MS SQL 2012,SDeny Hosts,VPC,VPC Peering, GIT, Fail2ban, Squid Proxy, PhpMyAdmin, IAM, Cloud watch, Cloud formation,Elastic IP, Security Group,OMD, Check MK, Nagios, McAfee Endpoint Protection and Encryption, DNS, Splunk, DHCP, Zabbix, Solarwinds, Lynis, Backup Exec, Remedy, Cisco VPN, MS Office, WINSCP, KVM, RHEVM, LAMP server, etc.
WORK EXPERIENCE:
Confidential, Washington, DC
Sr. DevSecOps Engineer / AWS Solution Architect
Responsibilities:
- Build and maintain an AWS cloud infrastructure architecture aligning security, compliance, performance and resilience with cost
- Provide expertise & best practices for implementing cloud security(internal) & product security(external)
- Assess architectures & designs for security vulnerabilities & suggest & implement proper alternatives.
- Build, maintain, monitor, audit & reports frameworks that produces artifacts that support security & compliance goals.
- Build & maintain set of tools that enables developers to self - serve for most operational tasks.
- Designed CI/CD pipeline and DevOps environment, designing & structuring AWS Infrastructure.
- Develop Terraform scripts to provision resources on AWS/Azure/GCP/VMware as Infrastructure as code
- Terraform module refactoring of code & adding or deleting variables as required.
- Deployed multiple AWS clouds resources using Terraform as IAC tool
- Handle all security aspects in securing their applications.
- Learn & understand new technologies and industry practices
- Implement a standard DEVSECOPS pipeline cross multiple application development teams.
- Source code configuration management repository (GitHub, GitLab, Bitbucket).
- Configure continuous integration & continuous development leveraging
- Experience with automated build pipelines, continuous integration, continuous development with test automation frameworks.
- Contribute to architectural & infrastructural decisions to achieve business logic
- Implement and maintain Amazon Web Services (AWS) infrastructure
- Evaluate tools and technologies to improve Architecture & infrastructure.
Confidential
Linux DevOps- AWS / Automation Engineer
Responsibilities:
- Design Cloud environment from development - production
- Provision Red Hat, Amazon Linux,Windows EC2 instances using private AMI’s & baselines.
- Patching EC2 instances within a maintenance window using Ansible and perform security updates of same instances for the remediation of system vunelrabilities.
- Managed over 50+ AWS enterprise EC2 instances within GovCloud
- Implementation of AWS VPC peering connection to establish communication across multiple EC2 instances in separate VPC’s
- Create AMI’s volume snapshots & RDS snapshots
- Copied Amazon Machine Image(AMI)from one region to another region
- Added EBS volume for EC2 instance for maintenance and resource purposes
- Implementation of AWS IAM policies for user authentication across multiple EC2 instances.
- Responsible for allocation, releasing, associating and disassociating elastic IP addresses.
- Implement auto scaling for scaling out to ensure a availability and scalability of customer websites.
- Install and Patch Apache. Configure and compile the application when needed.
- Deploying open source software like Apache, Tomcat and JBoss.
- Configure Firewall to allow Applications to run.
- On several occasions, Patch different applications when new versions are available
- Patch windows and Linux Servers.
- Assist in any data migration activities whenever necessary with the team
- Assist the team with transferring of software applications and reports between testing and production environments.
- In charge of VMware install on a large scale environment, including Linux, UNIX, and windows servers
- Create Logical volumes and design the environment to the job's directions
- Install Virtual machines, as well as physical machines.
- Ground /Up Installation and configuration of Puppet master and agent
- Installation and Configuration of Informatica
- Installation of IBM DB2 server and Client
- Write Ansible playbook to deploy multiple application stacks to Dev,Test and Production Environment.
- Created Ansible Inventories on Ansible Tower to define Deployment workflow.
- Leverage Ansible & Puppet Enterprise for provision and de-provisioning users accounts on Linux instances
- Integrate GitHub Enterprise and Ansible Tower for deployment of application and patching.
- Deployment of multiple applications using Ansible configuration management tool.
- Patching infrastructure using Ansible Tower.
- Coordinate patch plan and deployment with other application team.
- Train current employee on Ansible operations.
- Troubleshooting issues on Puppet master and agent.
- Application of puppet deployment and system patching using puppet manifests
- Writing of manifests /class to maintain consistency in the environment
- Set up and manage developers work flow from test,development to production using Jenkins as Continous Integration tool with Git version control
- Manage dynamic environment using Puppet R10K
- Configuration of Elastic Load Balancer for EC2 instances in AWS
- Configuriing Linux and Windows machines EC2 instances in AWS
- AWS storage with Elastic Block Storage (EBS) Simple Storage Service (S3)
- Database provisioning and management with AWS RDS
- AWS Autoscalling (Launch Configuration and ASG)
- VPC Networking, Subnet, Internet Gateway, Routing Table
- AWS Firewall with Security Group and NACL
- Configuration management and Automation with Ansible
- Passwordless login confguration
- Install Centos, Red Hat, and Solaris on machines
- Using Kick start scripts to install Centos and Red Hat on multiple Linux machines.
- Provide internal support for large scale data warehouse. Linux/Unix servers any routine and vendor-specific maintenance on all system.
- Follow job's policies to create user accounts
- Manage groups of multiple user accounts
- Giving remote access to different levels and types of users
- Installation and configuration of web applications
- Installed and set up Jira from ground up
- Used Jira to track issues, for ticketing tool, assigned tasks and Agile methodology
- Backup and Recovery Jira Instance
- Configured Jira with Smtp Mail server to send out email to users
- Installed and set up confluence from ground up
- Used Confluence as wiki and documentation tool
- Backup and Recovery Confluence Instance
- Configured Confluence with Smtp Mail server to send out email to users
- Installation and configuration of intrusion detection system such as DenyHosts for log analysis, file integrity checking, real time alerting and brute force attach prevention
- Maintenance of server on a weekly basis (Brand Rolls)
- Setup and manage user accounts
- Installation and configuration of splunk application
- Installed and set up Bamboo from ground up
- Installed and set up Bitbucket from ground up
- Used Bitbucket as repository management tool
- Attend to system operations tickets
- Troubleshoot and fixed NFS, TCP/IP and other protocols problem
- Responsible for monitoring and management of V-Center/VMware environment of virtual servers
- Train new users to use standard applications, equipment’s and business applications
- Manage systems routine backup, enabling cron jobs, enabling system logging and network logging of servers for maintenance
- RPM and YUM package installations, patch and other server management
- Use multiple scripts to schedule task during off hours
- Assist with writing scripts on daily job duties
- OS - Red Hat Enterprise Linux Version 7+
- System Management Platform - Red Hat Network Satellite 6+
- Authentication and Authorization: LDAP, Kerberos and Active Directory
- Scripting using Python
- Wrote Unix/Bash Shell Scripts for day-to-day system administration activities
- Wrote shell/Ruby scripts to automate repetitive tasks
Confidential, Washington, DC
Linux / UNIX System Administrator
Responsibilities:
- Patching all NetBackup versions, restoring servers and DBs
- Creating new file systems, managing and checking data Consistency of file systems
- Setup Nagios server to monitor systems uptime, services and file systems
- Troubleshooting and resolving network issues
- Physical Server Configuration and Management (T2000, Sun Oracle X4-2)
- Installing Sun Solaris 9,10 and 11 Operating System on the physical and virtual servers
- Installing, Configuring and managing Solaris virtual global Zones
- Configure hardware and Software Raid
- Storage management using ZFS and UFS
- Patch management Application updates
- Server configuration using Oracle ILOM
- Install applications on Solaris 9,10 and 11 (Apache, Java and Jboss)
- Solve complex Technical Problems
- Mounting physical servers on the rack
- Creating and Managing zpool using ZFS
- Configuring Spark servers and x86
- Configuring and Setting up Net management Network connections
- Created RHEL virtual servers in VMware center from consolidated image and from attached image in datastore
- Installed, configured and supported apache on virtual machines
- Network connection troubleshooting, management and support
- Provided users with elevated privileges for special tasks (sudo)
- Used Bitbucket as repository management tool
- Backup and Recovery Bitbucket Instance
- Configured Bitbucket with Smtp Mail server to send out email to users
- Installed and set up Gitlab from ground up
- Backup and Recovery Gitlab Instance
- Configure Virtual Private Cloud (VPC) on AWS
- Configure Elastic IP on AWS
- Manage Identity Access Manger (IAM) on AWS
- Documents work done in tickets, so that my relief and new employees know what was done to fix an issue
Confidential, Upper Marlboro, MD
Linux System Administrator
Responsibilities:
- Create user accounts and group policies on windows and Linux Servers
- Daily monitoring of user account access and usage
- Administer SSH access for user accounts.
- Monitor application resources and patch when needed
- Follow job's policies to create user accounts.
- Manage groups of multiple user accounts
- Giving remote access to different levels and types of users.
- Responsibl e fo r th e i nstallatio n o f Solaris, Linu x fo r ne w buil d environment
- Diagnose d an d resolve d customer' s connectivit y issue s i n RHE L 5& 6 servers
- Managin g al l type s o f installatio n an d upgrad e o n Linu x servers
- Ticke t assessmen t o n a dail y basis
- Configurin g an d managin g networ k interface
- Imag e server s an d clien t computer s an d remotel y manag e thei r softwar e after deploymen t o n Redha t Linu x 5 & 6
- Provid e softwar e an d hardwar e tec h suppor t ; 24/7 on call support a s required
- Installed and maintained Sun Solaris and Linux Red Hat Servers
- Setup User Accounts and Managed them
- Patch Servers Administration (Linux and Windows 2003, 2008)
- Install Apache on several machines
- Customized user environment for users
- Administered User Accounts on Red Hat Linux
- Administered NFS on Sun, Red Hat, and Linux Servers.
- Troubleshoot Network Connectivity issues
- Customized User Environment for Users
- Administer Group Policies, Domains, and Support for User Accounts.
- Installed and set up DB2 from ground up
- Installed and set up puppet Enterprise and it’s agents on all nodes from ground up
- Managed, write my manifest to those machines and also managed a dynamic environment using puppet R10k tools
- TCP/IP troubleshooting on Unix/Linux network.
Confidential, Columbia, MD
Linux System Administrator
Responsibilities:
- Setup and assign User Accounts while managing them on a daily basis.
- Network Configurations and some Patch Administration.
- Daily usage of Red Hat Linux servers
- Worked in accordance with the Network Team and Administered Apache Web server.
- Customized User environments, Administered User Accounts on Red Hat Linux servers.
- Administered NFS on Red Hat servers, and installed Veritas including LVMs, Filesystems and Cluster services
- Installed and set up Mysql from ground up
- Installed, configured and managed phpmyadmin
- Configured Jira with Smtp Mail server to send out email to users
- Troubleshooting and managing application issues running on Linux/Unix servers
- Configure Virtual Private Cloud on AWS
- Configure Elastic IP on AWS
- Trained Junior Help desk peers on basic Linux use and commands
Confidential
System Support Engineer
Responsibilities:
- Design, and implementation of customized technical virtualization solutions for clients taking into account size, infrastructure, data protection, disaster recovery, and application requirements.
- Configure passwordless login between database servers
- Install, configure, upgrade linux operating systems and kernels.
- Building servers using Vsphere Vmware (either by attaching specified images to the datastore or using configured preexisting templates.
- Recovering replicated virtual machines from original datacenter during migration
- Configuration of virtual machine network cards per associated VLan environments
- Carving out and assigning local storage from Host/Clusters on Vmware
- Using logical volume tools to create local filesystem e.g lvcreate,pvcreate…
- Configuring Active directory credentials to work with Samba on servers
- Online migration of data from active systems, using rsync
- Creating new groups in RedHat Satellite server and adding servers to configured groups
- Managing and fixing Inactive, Out of date, Ungrouped and Duplicate systems in RedHat Satellite
- Managing monthly patches for dev environment and bi monthly patches for the prod environment
- Using Satellite to update root password for critical server that could not be placed in single user mode
- Monitoring file system use with Solar winds and fixing file systems above threshold
- Configuring special group login in active directory
- Configure printers using linux lpr tools
- Mount remote NetApp data base NFS volumes on servers
- Worked on a highly sensitive project to change all running applications in the environment.