Cloud Security Sme / Devops Resume
Louisville, KY
SUMMARY:
- IT professional of 8 years of experience with ability to Design, Develop and Integrate DevOps tools, Build/Release management, Continuous Integration and Continuous Deployment (CI/CD), Configuration Management, Linux/Cloud administration and support and creating DevOps strategies with environments of Linux servers, AWS and AZURE.
- Experience on various environments in software development life cycle (SDLC), windows, Linux/Unix system Administration, System Builds, Server Builds, Installations, Upgrades, Patches, Migration, and Troubleshooting on RHEL and CentOs.
- Provide configuration management solutions using tools (Chef) and automation solution using scripts (Shell, PowerShell, Python) to ensure maintenance of cloud and custom applications by the Continuous deployment and Continuous delivery pipeline work.
- Configured Azure Virtual Networks, subnets, DHCP address blocks, Azure network settings, DNS settings, security policies and routing. Also, deploying Azure IaaS virtual machines and Cloud services (PaaS role instances) into secure Virtual Networks and subnets.
- Experience in infrastructure development and operations by involving in designing and deploying using Amazon web services(AWS) like AWS EC2 Instance, Route53, DNS, ELB, EBS, AMI, IAM, VPC, S3, cloud front, cloud formation templates(CFT), cloud watch monitoring.
- Strong hands - on expertise in designing highly available, cost effective and fault tolerant systems using EC2 instances, Auto Scaling, Elastic Load Balancing and Amazon Machine Images (AMI). Utilized Amazon Elastic Block Store (EBS) to store persistent data and mitigate failure by using snapshots.
- Introduced to Cloud automation technologies such as Cloud Formation and Terraform and experienced in using Terraform for building, changing, and versioning infrastructure and manage existing cloud infrastructure as well as custom in-house solutions.
- Hands on experience in writing Terraform API modules to manage infrastructure, for automatic creation of RDS instances, VPCs, Autoscaling groups, Load balancers, S3 buckets in AWS also Automated various infrastructure activities like CI/CD process, Application Server setup, stack monitoring using Ansible playbooks.
- Experience in Containerization tools such as Docker, Kubernetes and handled several Docker components like Docker Engine, Docker-Hub, Docker Compose, Docker Registry, Docker Swarm and Orchestration tools such as Kubernetes.
- Experience on AWS and Kubernetes based container deployments to create self-environments for dev teams and containerization of env's delivery for releases and troubleshooting Kubernetes Infrastructure setup and supporting application teams.
- Developed Continuous integration and Continuous Delivery process (CI/CD) pipeline with Jenkins on Kubernetes container environment, utilizing Kubernetes and Docker for the CI/CD pipeline to build, test and deploy.
- Experience in working on Ansible Playbooks, Inventory files, Vault feature to configure the servers, deploy software, encryption of data file & orchestrate continuous deployments or zero downtime rolling updates.
- Experience in Maintenance of Source Control Management Systems such as GIT and SubVersion (SVN). Created tags, branches, merging and administrated software repository and build automation tools like Maven, and ANT for the building of deployable artifacts such as jar, war and ear from source code to write pom.xml, build.xml respectively.
- Strong hands on experience with Scripting Languages like Python, JavaScript, JSON, YAML, Bash/shell and for automation of the build and release process Continuous integration and Continuous Delivery process (CI/CD).
- Extensively involved in setting up JIRA as defect tracking system and configured various workflows and involved in release planning and executed the release build request from the project team through JIRA Ticket.
- Experience in maintaining applications by Monitoring logs information, Resources usage and performance and get the Health and Security notifications from AWS nodes by using Monitoring tools like Splunk, ELK (Elasticsearch, Log Stash, and Kibana),Nagios and AppDynamics and created monitors, alarms & notifications for EC2 hosts using CloudWatch.
- Experience Achieving High Availability with the help of monitoring tools like (SPLUNK, ELK) and automated Logstash (ELK Stack) as a part of Server Build and building Elasticsearch (ELK Stack).
- Experienced with VMware ESXi 5.1/5.5/6.5 Installation/Configuration/Administration with various virtualization components like vCenter, vSphere. Perform Deployment of Release to various QA & UAT in Linux environments.
TECHNICAL SKILLS:
DevOps Tools: Bamboo, Jenkins, ADO, Maven, ANT, Ansible, Chef, Terraform
Cloud Platforms: Microsoft Azure, Amazon Web Services
Operating systems: RHEL/CentOS 5.x/6.x/7, Ubuntu/Debian/Fedora, Solaris 7/8/9/10, Windows Server 2003/2008/2012
Virtualization/Containers: VMWare ESXi 6/5.x/4.x, vSphere, vCenter, Docker, Kubernetes
Version Control tools: Bitbucket, GIT, SVN, TFS (Team Foundation Server)
Web /Application Servers: Tomcat, Apache, JBoss, WebSphere application server, WebLogic Application server
Bug Tracking Tools: JIRA, Remedy, IBM clear Quest, Bugzilla
Languages: XML, HTML, Shell Scripting, Python, Bash, Groovy
PROFESSIONAL EXPERIENCE:
Confidential, Louisville, KY
Cloud Security SME / DevOps
Responsibilities:
- As part of the Cloud Security Project, Develop Azure Security Policy’s for Confidential Based Application Which are being migrated from on-perm to Azure cloud. Developed Build and Release Pipeline for Deploying Azure Security Policies on Management Level Groups. Build and Release Pipeline For both NPE and Prod Environment.
- Developed Ansible Playbook to dynamically change the pipeline configuration of the scripted pipeline by templating the Jenkins file. Integrated Kubernetes cluster deployment using KOPS in to the pipeline for deployments of the cluster with newly created Image to achieve Blue/ Green Deployments.
- Deployed Kubernetes Cluster on AWS, VMWare using MiniKube, Kubespray, performed the deployments of the Docker images on to the clusters by updating the Labels and selectors in the Pod definition.
- Deployed and customized Azure Security Policies Through Azure CLI and deployed on Management Groups, customized the existing policies and deployed though Terraform on NPE and Prod Environment.
- Using Docker and setting Azure Container Registry with Docker and actively involved in deployments on to AKS. Implemented a Continuous Integration and Continuous Delivery (CI/CD) pipeline with Docker, Jenkins and GitHub and Container Service.
- Involved in infrastructure as code, execution plans, and resource graph and change automation using Terraform and implemented through Azure pipeline (ADO).
- Utilized ARM template building Infrastructure with High-Availability for an application backend Infrastructure and Virtual machine Scale sets for front end along with Multiple Servers Such as reporting, Scripting and Scheduling Servers.
- Worked on Load balancer, Application Gateways and Fed proxy for HA. Created performance measurements to monitor resources across Azure using Azure native monitoring tools like OMS utilizing ARM template.
- Wrote PowerShell scripts for user validation in the Azure Active Directory which are developed Python scripts for getting user credentials in the Azure LDAP system to validate the user authentication.
- Configured VM networking with reserved IPs, Health Monitors, Firewall rules, VM scale sets and availability sets in the Azure Cloud. Worked with Bootstrap script for application automation and domain joining in the VM, implementing and managing continuous delivery systems and methodologies using VSTS(ADO).
- Implement network security in Azure environment through Endpoints, ACL and rules in windows Azure portal. Supported application team in any issues with the infrastructure, Ports, and firewall issues.
- Managed infrastructure resources, like physical machines, VMs and Docker containers using Terraform and created automated build procedures to ensure code is always ready for deployment in Azure.
- Developed Splunk Dashboards, searches and reporting to support various internal clients in Security, IT Operations and Application Development.
- Analyzing & troubleshooting the current infrastructure, tools, and software system design to ensure software and hardware performances reliable to the business needs.
- Managed tickets using JIRA ticketing tool, created projects, assigning permissions to users and groups for the projects & created mail handlers and notification schemes for JIRA .
- Help teams to analyze the optimal tools and methods for automating the process within their application lifecycles with a specific focus on increasing and adding the value to the baseline processes using best practices.
- Support the full life cycle SDLC of cloud-based solutions including tools, technologies, and best practices for development, deployment, and maintenance of cloud hosted services.
Confidential, Denver, CO
Azure Cloud Engineer/DevOps
Responsibilities:
- Migration project to migrate all the on-prem application in to Azure cloud. All the Confidential based flight planning application that are under Confidential needs to be moved out of the on-prem and updated with all the latest versions.
- Work on Azure Storage, Network services, Traffic Manager, Scheduling, Auto Scaling, and ARM template Automation. Drive end to end deployment of various Components on the Azure Platform.
- Utilized ARM template building Infrastructure with High-Availability for an application backend Infrastructure and Virtual machine Scale sets for front end along with Multiple Servers Such as reporting, Scripting and Scheduling Servers.
- Automated various infrastructure activities like Continuous Deployment, Application Server setup, Stack Monitoring using Gitlab CI/CD.
- Worked on Chef and created Chef Recipes and cookbooks. Created and Scheduling of Cron-Jobs such as backup, System Monitoring and removal of unnecessary files.
- Developed Continuous integration and Continuous Delivery process (CI/CD) pipeline with Jenkins on Kubernetes container environment, utilizing Kubernetes and Docker for the CI/CD pipeline to build, test and deploy.
- Managed infrastructure resources, like physical machines, VMs and even Docker containers using Terraform and created automated build procedures to ensure code is always ready for deployment in various cloud environments such as Azure.
- Integrated Kubernetes cluster deployment using KOPS into the pipeline for deployments of the cluster with newly created Image to achieve Blue/ Green Deployments.
- Written Docker files and build images to provision containers out of it in Kubernetes cluster by pulling images from Docker registry/Azure container registry.
- Experience in using Docker and setting Azure Container Registry with Docker and actively involved in deployments on to AKS. Implemented a Continuous Integration and Continuous Delivery (CI/CD) pipeline with Docker, Jenkins and GitHub and Container Service.
- Wrote PowerShell scripts for user validation in the Azure Active Directory which are developed Python scripts for getting user credentials in the Azure LDAP system to validate the user authentication.
- Created multiple Dockerfiles for different microservices such as MySQL, apache, tomcat, NodeJS, php, JBoss and managed Containers, Images, Compose.
- Created SSL certificates using Portal as well as local machine. Created client SSL certificates from Go Daddy. Created Environment with both PowerShell and Arm Templates together. Migrated current Azure SQL Data center environment using Azure Disaster Recovery (ADR).
- Developed automation scripts using PowerShell, supporting multiple hosts and VMs for Azure cloud deployments. Worked on PowerShell for creating Application Gateway and Load Balancer and their wiring.
- Implementing and managing continuous delivery systems and methodologies using VSTS and Jenkins. Implement network security in Azure environment through Endpoints, ACL and rules in windows Azure portal. Supported application team in any issues with the infrastructure, Ports and firewall issues.
- Dealt with Splunk utilities (bucket rolling, User index creation and management, Source type, forwarder log monitoring input and output configuration). Configured Splunk Searching and reporting modules, Knowledge Objects, Administration, Add-On's, Dashboards, Clustering and Forwarder Management
Confidential, Live oak, TX
Cloud/DevOps Engineer
Responsibilities:
- Worked on designing and deploying multitude applications using most of the AWS stack like EC2, Route53, S3 buckets, RDS, Dynamo DB, SNS, SQS, IAM, VPC, EBS and focusing on high-availability, fault tolerance and auto-scaling.
- Created S3 buckets and managed policies and utilized S3 bucket and Glacier for object storage and archiving, Automated the creation of EBS snapshots and stored them S3 buckets after encryption.
- Implemented Security groups for inbound and outbound access, network ACLs for controlling traffic through subnets, Internet Gateways, NAT instances and Route Tables to direct network traffic and ensure secure zones for organizations in AWS cloud.
- Setup Elastic Load Balancer for distributing traffic among multiple Web Logic servers and Involved in deploying the content cloud platform on Amazon Web Services using EC2, S3 and EBS.
- Wrote Python Scripts to Automate AWS services which include web servers, ELB, CloudFront Distribution, database, EC2 and database security groups, S3 bucket and application configuration and deployed and configured Elastic search(ELK) for log analytics, full text search, application monitoring in integration with AWS Lambda .
- Implemented LAMP stack image in multitier AWS instances in different subnets in Amazon VPC, attached ACL’s and Security Groups to maintain high security.
- Configured and managed Puppet master server and experience in updating and creating modules and delivering them to puppet clients and managing SSL certificate and executed the CI Jenkins build job for Java application builds. Using GIT (Stash) tool as the source code repositories for all projects and Artifactory for all builds release repository.
- Modelled and automated the End to End Continuous Integration, Deployment, Delivery pipeline which included building a Continuous Integration server utilizing tools like Jenkins, Nexus, maven, Git, and SonarQube.
- Created Ansible Playbooks in Ansible Tower and integrated Ansible tower with Jenkins to deploy code to different servers and also wrote Ansible Playbooks for installing JBoss, WebLogic, Nginx and WebSphere for configuring load balancers and fail over.
- Integrated Terraform with Ansible, Packer to create and Version the AWS Infrastructure, code deployment and orchestration with tools such as Chef, Cloud Formation, and automation validation using Test Kitchen, Ansible and Terraform.
- Wrote Terraform template to create Load balancers, EC2 instance with auto scaling and monitoring on the fly for different environments. Creating an AWS RDS MySQL DB cluster and connected to the database through an Amazon RDS MySQL DB Instance using the Amazon RDS Console.
- Developed Splunk Dashboards, searches and reporting to support various internal clients in Security, IT Operations and Application Development. Build performance dashboards through Splunk, Extrahop, writing Java script and customized scripts and worked with internal clients to develop requirements, relationships and value metrics.
- Responsible for setting up WebLogic clusters, JDBC Datasources and involved in monitoring error logs, troubleshooting and fixing the problems. Implemented Docker -maven-plugin in and maven pom to build Docker images for all microservices and later used Docker file to build the Docker images from the java jar files.
- Created customized dashboards and automated configuration service and system performance and health monitoring by configuring Nagios monitoring server environment for tracking wizards and generating reports.
- Designed the infrastructure and administered the environment running over multiple ESXi Hosts and hundreds of virtual Machines using vSphere Client. Developed automation and deployment utilities using Bash, PowerShell, scheduled tasks and system backups using Python on RHEL.
- Experience in deployment of JIRA applications into existing/default VPC and configuring Amazon Elastic File System to sort the artifacts can be accessed through multiple nodes for High Availability. Involved in all phases of Software development life cycle (SDLC) and experienced with fast paced Agile methodologies.
Confidential, Norfolk, VA
DevOps Engineer
Responsibilities:
- Worked on designing and deploying multitude applications using most of the AWS stack (like EC2, Route53, S3 buckets, RDS, Dynamo DB, SNS, SQS, IAM, VPC, EBS) focusing on high-availability, fault tolerance and auto-scaling.
- Implemented Security groups for inbound/outbound access, network ACLs for controlling traffic through subnets, Internet Gateways, NAT instances and Route Tables to direct the network traffic and ensure secure zones for organizations in AWS cloud.
- Created Elastic Load Balancers (ELB) with EC2 Auto scaling groups in multiple available zones to achieve fault-tolerance and high availability. Implemented alarm notifications for EC2 hosts with CloudWatch.
- Used Ansible as a Configuration management tool, to automate configurations of broad range of services, quickly deploy critical applications, and proactively manage changes and to monitor scalable infrastructure on AWS.
- Configured and managed Ansible master server and experience in updating and creating modules and delivering them to clients and managing SSL certificate. Worked on building and deploying of Java code through Jenkins and used Jenkins Amazon Web Services Code Deploy plugin to deploy on AWS and worked on AWS Cloud Management.
- Implemented automated server build management, monitoring and deployment using Ansible, and Nagios. Used Splunk as a monitoring tool for Ansible for analyzing Ansible environment which includes Ansible statistics and reports. Worked on deployment automation using Shell with more concentration on DevOps and CI/CD tools such as Jenkins.
- Wrote Python scripts for building custom utilities, custom data visualization for web apps and for managing files and networks.
- Installed and configured Jenkins with SonarQube and GIT by installing GIT plugins and building the artifacts SonarQube for static and dynamic code analysis using Maven automation tool and storing the build artifacts into Nexus repository and deploying it to WebSphere/Tomcat server.
- Developed Jenkins Files as groovy scripted pipelines to build the Docker images, push them to the Docker registry and perform the rolling deployments on to the Kubernetes Clusters. Developed automation and deployment utilities using Ruby, Bash, PowerShell and Python. Experienced with version control systems Git and Subversion.
- Worked in designing and implementing Continuous integration and Continuous Delivery process (CI/CD) using Jenkins by creating Python scripts.
- Building and Maintaining Docker container clusters managed by Kubernetes Linux, Bash, GIT, Docker, on GCP. Utilized Kubernetes and docker for the runtime environment of the CI/CD system to build, test and deploy. Monitored the applications on IBM WebSphere application server and integrated configuration of web apps with WebSphere, involved in the migration of applications from WebSphere 7.0 to 8.5.
- Experienced in installation, configuration and management of HTTP, NGINX, NTP, NFS, FTP, DHCP, DNS. Created Shell Scripts to monitor the administrative tasks and automated the tasks to free up the resources using Cron jobs.
- Good experience in using APM tool AppDynamics in monitoring business transaction across all tiers (web/app/DB) of the applications. Installation of the ELK stack to create a comprehensive log management system to provide insight into the traffic patterns happening on the network.
Confidential, Dallas, TX
Build and Release Engineer
Responsibilities:
- Automated the Build & Deployment environment end -to-end using Jenkins. Analyze and resolve conflicts related to merging of source code for SVN and Git.
- Experience in maintaining/tuning/upgrading Web logic/Web sphere/JBoss and Web based applications like Java & Tomcat/Apache. Used Nagios as a monitoring tool to identify and resolve infrastructure problems before they affect critical processes and worked on Nagios Event handlers in case of automatic restart of failed applications and services.
- Provided support for the web servers like IIS, Tomcat, Web logic or Web sphere. Configuration and administration of Apache Web Server and SSL. Created clones from existing VMs (both live and powered-off). Deployed several VMs from Templates and customized their configurations as-needed.
- System Installation, configuration and upgrading, VMware ESXi, vCenter and vSphere Clients, Web-logic. Configured, managed ESX VM’s with virtual center and VI client. Used VMware VMotion to eliminate application downtime from planned server maintenance by migrating running virtual machines between hosts.
- Applied visualization technology in managing multiple operating systems on VMware platforms as well as Windows Hyper -V Manager. Used monitoring tool SPLUNK for administration and maintenance operations on day-to-day basis for company network and systems working on Linux and Solaris Systems.
- Responsible for Building & configuring Red hat Linux systems over the network, implementing automated tasks through crontab, resolving tickets per priority basis. RPM and YUM package installations, patch and server management.
- Managing systems routine backup, scheduling jobs like disabling and enabling cron jobs, enabling system logging, network logging of servers for maintenance, performance tuning, testing. Performed access control, incident management, training for property security.
- Deployed Puppet, Puppet Dashboard, and Puppet DB for configuration management to existing infrastructure. Managed patches configuration, version control, service pack and reviews connectivity issues regarding security problems. Experience in doing the risk analysis, disaster management and root cause analysis.
- Managed and created run environments on Linux or windows platform using Tomcat, Intel SOA express, ISS, glassfish and other application servers. Installed and configured DCHP server to give IP leases to production server. Installation, Configuration and administration of DNS, LDAP, NFS, NIS, NIS+ and send mail on Redhat Linux/Debian Servers.
Confidential
Linux Administrator
Responsibilities:
- Provided support in fixing issues related to Linux, Solaris, HP-UX Installation and Maintenance of Hardware in Production and development Environment as an integral part of the Unix/Linux Support team.
- Worked on installing and configuring VMware/ESX Servers for virtualizations. Supported Oracle RAC (Real Application Cluster) Servers running on Linux with GFS and Solaris with SFRAC.
- Good knowledge in awk & Stream Editor (Sed) and using them in in Unix Shell script. Remote monitoring and optimization of Server for File system, disk utilization, Memory utilization, threshold maintenance and Network traffic.
- Configured the NIS, NIS+ and DNS on Red Hat Linux 5.1 and update NIS maps and Organize the RHN Satellite Servers in combination with RHN Proxy Server. Used YUM Software manager for installing and configuring the RPM Packages. Configured logical volumes using logical volume manager (LVM) and configured mirroring.
- Automated jobs by developing custom scripts using Shell (bash, ksh). Defining and Develop plan for Change, Problem & Incident management Process based on ITIL.
- Merged the generated reports as per request. Formatted data into required format using UNIX Shell Scripts, SED and Awk. Configured and installed HP-UX, Solaris, and Redhat Linux Servers with the help of Ignite, jumpstart, and Kickstart.
- Setup of full networking services and protocols on Redhat, including NIS/NFS, DNS, SSH, DHCP, NIDS, TCP/IP, ARP, applications, and print servers to insure optimal networking, application, and printing functionality.
- Configuration of Hardware and Software RAID. Disk replacement and File system recovery. Implemented Virtualization using VMware in Linux on HP-DL585. Installing and setting up Oracle9i on Linux for the development team.
- Installed VMware ESX server on Dell Servers and configured Solaris 9/10/ Red Hat Linux 4.0 / Windows 2000 virtual machines for various applications. Installation of software packages and checking the integrity of the installed packages. Installed different RPM Linux 4.0/5/0.
- Administered Linux servers for several functions including managing Apache/Tomcat server, mail server, MySQL database and firewalls in both development and production. Installed and configured Sudo for users to access the root privileges.
Confidential
Linux Administrator
Responsibilities:
- Installation, Configuration and Administration of Redhat Linux 5.x,6.x and Solaris 10 comprising of testing, tuning, upgrading and loading patches, troubleshooting both physical and virtual server issues. Responsible for hardware, firmware, Network & Firewall troubleshooting and upgraded, maintained Linux/Unix servers.
- Installation, configuration, support and security implementation on SSH, NFS, SAMBA, DHCP, DNS, HTTPD services. Experience in installing Linux servers using Kickstart and Customized Scripts.
- Installed and configured Sudo for users to access the root privileges and performed User Account management, data backups, and users' logon support. Involved in creating logical volumes, backups, managed large hard disk farms and resized disk partitions using Logical Volume Manager (LVM) commands on Red hat Linux.
- Maintained Firewall rules and configured the port numbers of the services and enable communication with applications. Implementing password less(SSH) authentication between servers. Package management using RPM and YUM in Red Hat Linux.
- Managing systems routine backup, scheduling jobs like disabling and enabling cronjobs, enabling system logging, network logging of servers for maintenance, performance tuning, testing.
- Creation and management of user accounts and groups according to the security needs and adding the packages and patches when needed and permissions policy management and quota implementation.
- Identify and drive continual improvement program in UNIX environment and improve the service efficiency. Implemented software RAID at install-time and run-time on Linux.
- Diagnose and correct problems with network services and any other hardware issues in Linux servers. Installing FTP Server and setup network configuration. Receive and load the packages for application code.
- Worked together with business analysts to design and implement new processes and up-gradation to existing processes. Involvement with the Customer care and Deployment teams in trouble shooting and fixing day-to-day problems of the applications in production on 24/7 schedules.
- Good knowledge in awk & Stream Editor (Sed) and using them in in Unix Shell script. Remote monitoring and optimization of Server for File system, disk utilization, Memory utilization, threshold maintenance and Network traffic.