SUMMARY

• A highly motivated, energetic individual, a team player wif excellent communication and inter - personal skills wif tremendous experience in setting up CI/CD pipelines and ensuring Agile/DevOps best practices, IT Audit, Governance, Risk and Compliance, Cloud Infrastructure and Security best practices.
• me is passionate about helping companies build, automate highly available, resilient, and secure networks both on prem and in teh cloud.

TECHNICAL SKILLS

Cloud platforms: AWS, Azure

Framework/DevOps tools: JIRA, SonarQube, Nexus, Artifactory, Jenkins, Slack, AzureDevOps

Build Tools: Maven

SCMs: Git, GitHub

IAC Tools: Ansible, Terraform, CloudFormation

Containers/Orchestration: Docker, Kubernetes

Application/Web Servers: Tomcat, Apache, NGINX

Operating Systems: Ubuntu 18.0.4, Red Hat Linux, Windows, CentOS

Databases: Oracle, SQL Server, MySQL, PostgresSQL

Programming Languages: Java, Groovy

Scripting & Other Tools: Groovy, Git Bash, Putty, iTerm

Cyber Security Vendor Equipment/ Technology: Palo Alto Firewalls Configuration and Management at scale, Cortex XDR, GlobalProtect, Wildfire, Prisma Access, Prisma Cloud

Standards: PCI, HIPAA, SOX, GLBA, ISO 27001/2, GAAP, SOC me, SOC II, HITRUST, NIST Frameworks families (RMF).

PROFESSIONAL EXPERIENCE

Confidential

DEVOPS ENGINEER

Responsibilities:

• Set up CI/CD pipelines for Microservices and integrated tools such as Maven, Bitbucket, SonarQube, Nexus, Docker, Slack for providing immediate feedback to DEV teams after code check-in.
• Familiarity wif Installing, setting up & Troubleshooting Ansible, created and automated platform environment setup.
• Set up Git repositories and SSH Keys in GitHub for Agile teams.
• Integrated GitHub web hooks into Jenkins to automate teh code check-out process.
• Implemented teh setup for master/slave architecture to improve teh performance of Jenkins.
• Created Dockerfile and automated docker image creation using Jenkins and Docker.
• Automated infrastructure provisioning on AWS using Terraform and Ansible.
• Created nightly builds wif integration to code quality tools such as SonarQube.
• Created quality gates in SonarQube dashboard and enforced in teh pipelines to fail teh builds when conditions not met.
• Ensure all usage of cloud environments meet governance standards.
• Participated in teh release cycle of teh product which involved environments like Dev, QA UAT and Prod.
• Experienced in setting up Kubernetes clusters in Amazon EKS and AKS.
• Strong exposure to configuration management tool-Ansible.

Confidential, DALLAS, TX

AWS CLOUD ENGINEER

Responsibilities:

• Provision AWS resources using management console as well as AWS CLI.
• Plan, build and configure network infrastructure wifin VPC wif public and private subnets, configure routing tables, security group and internet gateway.
• Configuring NACL, Security Groups to secure applications and VPC network wif respect to access parameters and conditions.
• Provisioned Load Balancers, Route 53 for failovers and resiliency.
• Automated provisioning of cloud infrastructure using CloudFormation.
• Knowledge of teh CICD pipeline working wif Git, Jenkins, Docker, Kubernetes.
• Microservices container deployments and security best practices.
• Good understanding of Java, Python, node.js, Power Shell, YAML and JSON scripting.
• Leverage AWS cloud services such as EC2, auto-scaling and VPC to build secure, highly scalable and flexible systems that handled expected and unexpected load bursts.
• Good noledge of Parameter Store, AWS Trusted Advisor, AWS Guard Duty, AWS Macie, AWS Config, AWS CloudWatch, AWS CloudTrail, AWS Inspector, AWS Systems Manager,
• Create and manage IAM user accounts and role-based policies for access to AWS services.
• Implement and maintain monitors, alarms, and notifications for EC2 instances using CloudWatch and SNS.
• Good noledge of RDS, Dynamo DB, Redshift, Aurora and other Database engines in AWS.
• Good understanding of Infrastructure as a Code (IaC) automation- AWS CloudFormation and Terraform.

Confidential

IT AUDIT AND COMPLIANCE LEAD

Responsibilities:

• Evaluate current controls for compliance to SOC Type 2 criteria and identify gaps.
• Recommend solutions for compliance and prepare supporting control documentation.
• Test corporate policies, procedures, and controls to ensure audit standards are being adhered to.
• Proactively work wif other team members to resolve security weaknesses.
• Provide evidence of adherence to compliance standards objectives.
• Complete quarterly compliance assessments and reporting.
• Analyze data gathered to evaluate TEMPeffectiveness of controls and determine accuracy of reports and efficiency and security of operations
• Manage and remediate oversight of all identified control vulnerabilities.
• Identify, document, and map technology processes and internal controls of applicable technology infrastructure and operational areas per teh scope of teh audit project.
• Perform risk assessments of technology infrastructure and operational processes and controls for assigned areas.
• Complete audit testing, inquiry, observation, and other analysis required to meet teh objectives of audit projects.
• Communicate progress and results of audits throughout teh audit engagements.
• Develop value-added recommendations to deal wif issues identified during assigned audits and draft audit reports to formally communicate teh results of teh audit and related recommendations.
• Monitor implementation of outstanding audit recommendations and validate their implementation.