SUMMARY

• Infrastructure Architect | Cloud Computing | Technology StrategiestI am a strongly credentialed professional with a strong focus on architecting and delivering Microsoft Azure cloud solutions to achieve a wide variety of business objectivesRecognized leader, applying high - impact Azure-based solutions to major business objectives to transform and modernize operations.
• Committed to steering organizations in achieving maximum benefit from their cloud investments through meticulous testing, QA, research, development, and implementation of technologies.
• Very skilled in presenting ideas and explaining concepts to C-Level executives. Able to efficiently manage teams and maximize output to ensure the delivery of a high-quality product.
• Exemplifies an optimal customer service ethic by providing expertise and technical noledge across multiple platforms and technologies. Motivated by personal and professional goals that empower organizational objectives to be achieved and surpassed.

TECHNICAL SKILLS

• Data Driven Decision-Making
• Strategic Relationships
• Datacenter Migrations
• Microsoft Certified
• Containers
• Project Development & Management
• Application Migration to Azure Cloud
• Azure DevOps
• Terraform IaC
• Business Solutions
• Risk Management
• Automating Infrastructure Deployments
• Communication
• Windows Engineer
• Visionary Leader

PROFESSIONAL EXPERIENCE

Confidential, Tysons, VA

Sr. Cloud Solutions Architect

Responsibilities:

• Develop and coordinate cloud architecture across diverse areas including application development, identity and access management, network and data management, and security.
• Lead deep technical architecture discussions with senior Executives, IT Management and Developers to drive core Infrastructure solutions and application design.
• Use standardized process for mapping business needs to available cloud technology options, including assessment of risks and possible mitigations
• Provide high level cost and resource estimates for Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as Service (SaaS) offerings
• Advise clients to ensures the efficiency of cloud requests and manage customer driven, cloud projects; create Cloud documentation of technical implementation plans; represent Cloud Operations to all stakeholders
• Design and implemented Hub and Spoke topology with Azure Firewall (NVA) for routing in the hub and using user defined routes in the spoke to forward traffic to the Hub.
• Design Azure Pipelines to support continuous integration (CI) and continuous delivery (CD) to test and build our code and ship it to different environments constantly and consistently. (dev, qa, uat, and prod)
• Design and implement Secure DevOps for Azure Kubernetes Service
• Design and implement Private DNS resolution with Custom DNS
• Design and build Azure Policy helps to enforce organizational standards and to assess compliance.
• Infrastructure as code using ARM template and Terraform.
• Build PowerShell DSC with Azure Automation
• Design and implement Microsoft Azure Cloud PaaS services.
• Design and deployment of Azure Kubernetes Service
• Design Kubernetes networking using Azure CNI and NGINX Ingress Controller.
• Design logical isolation of Cluster in AKS
• Implementation of Secret Store CSI Driver for AKS
• Developed Security and Controls guidelines for AKS and ACR

Confidential, Washington, DC

Cloud Solutions Architect

Responsibilities:

• Establish relationships with key technical and non-technical decision makers to help drive long-term cloud adoption to resolve business problems and develop impactful solutions.
• Lead deep technical architecture discussions with senior Executives, Enterprise Architects, IT Management and Developers to drive core Infrastructure solutions and migrations.
• Deployed an enterprise-ready platform foundation (Landing Zone) with all the necessary shared services to support the full IT portfolio, including hybrid connectivity (Virtual WAN).
• Deployed migration landing zone with Azure Blueprint
• Automate provisioning using Terraform (IaC)
• Design and implemented Hub and Spoke topology with Firewall (NVA) for routing in the hub and using user defined routes in the spoke to forward traffic to the Hub.
• Design and Implement Azure Virtual WAN to replace MPLS.
• Design and implement Azure Virtual WAN with Secure Hub and configure Azure Firewall Policies
• Implemented CI/CD with Azure pipelines to deploy Azure resources.
• Automated the process of building VM image utilizing Market Place image and DSC. (Azure Automation)
• Migrated server patching to Azure Update Management.
• Utilize Azure automation for Desired State Configuration and report data into Log Analytics.
• Develop proof of concepts and created technical architecture components.
• Provide high level cost and resource estimates for Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as Service (SaaS) offerings
• Advise clients to ensures the efficiency of cloud requests and manage customer driven, cloud projects; create Cloud documentation of technical implementation plans; represent Cloud Operations to all stakeholders
• Design and implemented Hub and Spoke topology with Azure Firewall (NVA) for routing in the hub and using user defined routes in the spoke to forward traffic to the Hub.
• Design Azure Pipelines to support continuous integration (CI) and continuous delivery (CD) to test and build our code and ship it to different environments constantly and consistently. (dev, qa, uat, and prod)
• Design and implement Secure DevOps for Azure Kubernetes Service
• Design and implement Private DNS resolution with Custom DNS
• Design and build Azure Policy helps to enforce organizational standards and to assess compliance.
• Infrastructure as code using ARM template an Terraform.
• Build PowerShell DSC with Azure Automation
• Design and implement Microsoft Azure Cloud PaaS services.
• Design and deployment of Azure Kubernetes Service
• Design Kubernetes networking using Azure CNI and NGINX Ingress Controller.
• Design logical isolation of Cluster in AKS
• Implementation of Secret Store CSI Driver for AKS
• Developed Security and Controls guidelines for AKS and ACR

Confidential, Washington, DC

Cloud Architect

Responsibilities:

• Design Azure Cloud strategy, governance, operating model and roadmap.
• Design and implement Azure Blueprints to orchestrate RBAC, Policy Assignments, ARM Templates and Recourse Groups.
• Implemented Azure policies to keep the resources stay compliant with corporate standards and service level agreements.
• Design and implement Microsoft Azure Cloud services IaaS, PaaS, SaaS.
• Configure application gateway, configure load balancing rules, implement front end IP configurations, troubleshoot load balancing
• Create Blueprints in a declarative way to orchestrate the deployment of various resource templates and other artifacts such as -Role Assignments, Policy Assignments, Azure Resource Manager templates and Resource Groups.
• Design DMZ between Azure and on-premise datacenter.
• Design and implemented Hub and Spoke topology with Firewall (NVA) for routing in the hub and using user defined routes in the spoke to forward traffic to the Hub.
• Configure service endpoint policies to prevent data exfiltration and prevent unauthorized access to storage accounts
• Configure Security Center to monitor threat detection.
• Successfully provisioned ExpressRoute and VPN failover connection.
• Knowledge of Azure networking engineering, including VNets, Subnets, NSG’s, Service Endpoints, ASG’s, DNS, firewalls, load balancers, Virtual Network Gateways, Virtual WAN, Traffic Manager and Application Gateway. Azure Firewall and Service endpoint policies.
• Utilized Azure Migrate to discover and assess on-premises VMware VMs for migration to Azure.
• Migrated core application servers to Azure using Azure Site Recovery.
• Design ExpressRoute for Office 365 with Microsoft Peering
• Design and configure Azure AD identity Protection and Office 365 baseline policy.
• Leverage Azure MFA to protect office 365 sign-ins (Cloud Based)
• Created app protection policies for cloud-based applications (MAM)
• Utilize Microsoft Intune to create Device profile polices for IOS, Android and Windows
• Design and implement Enterprise Mobility +security with conditional access.Conduct studies of new technologies to provide more efficient and cost-TEMPeffective architecture solutions.
• Design and certify technology stack to be used for application and services deployed on the cloud.
• Direct new technology roll outs by purchasing necessary tools and products, directing support teams, coordinating installation/deployment, conducting testing and registration, training, establishing document libraries, and sustaining product maintenance requirements.
• Responsible for the development of future content strategies, tactics, and roadmaps in support of senior executive’s goals.
• Utilize training opportunities to strengthen cloud services offerings, application creation and configurations, directory services, authentication design, and smooth integration between each component.
• Design and implement key collaboration services (Office 365 Hybrid, Microsoft Teams, Yammer, Cisco Jabber, Cisco WebEx, Azure AD, ADFS, and Azure AD connect)
• Administrate ADFS, Azure AD, and Azure AD connect.
• Design and implement Enterprise Mobility +security with conditional access.
• Utilize GPO, AppLocker Rules, PowerShell scripts, and SCCM to create and deploy custom scripts to be used in software deployments and upgrades.

Confidential, Fairfax, VA

System Administrator

Responsibilities:

• Successfully deployed Windows 7 OS enterprise-wide.
• Build and maintain corporate desktop/laptop OS images.
• Windows XP to Windows 7 migrations using SCCM, Microsoft Deployment Toolkit (MDT), and User State Migration Tool
• (USMT)
• Manage Desktop Engineering projects and problem incidents until completion.
• Used System Center Configuration Manager 2007 for software distribution.
• Manage Desktop Engineering projects and problem incidents until completion
• Customize MSI’s packages using Flexera Admin studio.
• Injecting network drivers to the BOOT image.
• Create custom unattended xml file using Microsoft Windows AIK.Appointed Strategic Incident Manager for North American region and responsible for providing support to end users from the US.
• Drove service restoration of all incidents to each high priority client with cases classified as Critical Severity 1 and Potential Severity 1.
• Successfully managed numerous servers, networks, applications, and domain controllers simultaneously.
• Guaranteed smooth delivery of all Priority 1 tickets through seamless coordination with Incident Coordinator and Resolver groups.
• Delivered dependable service statuses by partnering with Account Delivery Managers, Client Managers, and Vice Presidents. Also handled the first phase of the escalation process for all incidents not resolvable within the time frame specified by the SLA.
• Established top notch quality service standards by executing training courses for personnel in charge of TEMPeffecting the Incident Management activities.