Sr. Azure Infrastructure Engineer Resume
Cary North, CarolinA
SUMMARY
- Sr. Cloud/DevOps Engineer with over 8+ years of extensive IT experience comprising knowledge in Configuration Management tools like Ansible, Chef. Continuous Integration and Continuous Delivery (CI/CD) using Azure DevOps, Cloud Automation, Version Control, End - to-End Automation, Build and Release, Linux, and System Administration with cloud platforms like Microsoft Azure, Amazon Web Services (AWS). Experience in tools like GIT, Jenkins, Terraform, Ansible, Docker, Kubernetes, several scripting languages, and monitoring tools and includes great knowledge on the principles and best practices of Software Configuration Management (SCM) in Agile, Scrum and Waterfall Methodologies
- Experience in Architecting and Implementing Azure Service Offering, such as Azure Cloud Services, Azure Storage, IIS, Azure Active directory, Azure Resource Management, Azure VM, Blob Storage, SQL Database, Azure Files and Azure Functions, Azure Service Bus and experience in Azure Availability and Scalability - Configured VMs availability sets using Azure portal to provide resiliency for IAAS based solution and scale sets using Azure Resource Manager to manage network traffic.
- Experience in working with AzureIaaS - Virtual Networks, Virtual Machines, Cloud Services, Resource Groups, Express Route, Traffic Manager, VPN, Load Balancing, Application Gateways, Auto-Scaling. And Migrated existing Active Directory and Exchanged users to Microsoft Azure AD using Azure AD Connect, Active Directory Federation Service and DirSync tools.
- Led implementation of Azure Active Directory for single sign-on access to thousands ofcloudSaaS applications like Office 365, Dropbox. Also configured Azure Role-based Access Control (RBAC) to segregate duties within our team and grant only the amount of access to users that they need to perform their jobs.
- Expertise in provisioning Application Infrastructure using Azure DevOps including designing, Configuration Management, and Implementation of Infrastructure as Code on Azure Cloud.
- Extensive experience on AWS services like ELB, EC2, S3, VPC, NACL’s, Cloud Formation, Route 53, Network Connectivity troubleshooting, Hybrid Environments and VPC Peering.
- Used AWS Elastic Beanstalk for deploying, scaling web applications and services developed with Java, PHP, Node.js, Python app Deployments using SDK’s and worked on AWS lambda with Amazon kinesis. Deployed modules to provision and manage AWS EC2 Instances, Volumes, DNS, and S3.
- Designing and implementing both the front-end and back-end systems that run on AWS on par with organization compliance.
- On-Premises to Cloud (AWS & Azure) workload migration Assess, Readiness/Planning, migrate, and optimize using Azure Migrate, Zerto.
- Worked on tools like Cost optimization, Rest API, Postman, Swagger, Regex, Curl Microsoft Azure Migrate VROPS Upgrade Assessment Tool
- Experience in writingInfrastructure as a Code (IAC) inTerraform, Azure Resource Management, AWS Cloud formation.Created reusableTerraform Modulesin both Azure and AWS cloud environments.
- Developed new environments using Infrastructure as Code (IAC) with Terraform and Packer to be deployed to Azure and AWS.
- Experience with OpenStack Services such as Compute, Network, Storage, Dashboard, Image, Identity, Monitoring, Orchestration, and accomplished tasks as creating and collecting measurements across OpenStack using Ceilometer Telemeter Services.
- Handled setting up Docker Host, Docker Registry, RHEL/ Centos Atomic Host, Docker Images (Centos, RHEL and Ubuntu instances). Virtualized the servers using the Docker for the test environments and configuration automation using Docker Containers.
- Extensively worked on Setting upKubernetes(k8s)Clustersfor runningmicroservicesand pushedMicroservicesinto production withKubernetes-basedInfrastructure. Development of automation of Kubernetes clusters via Playbooks in Ansible.
- Responsible for writing Helms Chart and finally deploying Micro Service Apps using Jenkins/flux pipelines to EKS.
- Deployed and configured Prometheus to monitor Kubernetes Nodes with node-exporter, monitor Kubernetes API and resources with Kube-state-metrics.
- Hands on experience on working with System Health and Performance Monitoring Tools like Nagios, Splunk, Cloud Watch and ELK to monitor OS metrics, server health checks, file system usage etc.
- Wrote Ansible Playbooks with Python SSH as the Wrapper to Manage Configurations of VMware VM Nodes and Test Playbooks on AWS instances using Python.
- Managed source code using SVN, GIT, GitHub Repositories and implemented end-to-end automation for all Maven builds and deployments with Bamboo. Experience in Configuration management tools such as Chef, Ansible, and Puppet. Wrote Chef Recipes and Cookbooks in Ruby scripting.
- Implemented Team Foundation Server (TFS) as version Management for Microsoft Technologies and Installed Share point services and Reporting Services, Created Project portals for all existing team Projects.
- Performed Troubleshooting of DNS, DHCP, and Active Directory and fixed NFS, TCP/IP and other protocols in Linux clusters using TOP, VMSTAT and IOSTAT command as well as maintained application backups.
- Created Disk Partitions, Logical Volume Manager (LVM) & RAID Technologies on different File Systems like Ext2, Ext3, Ext4, XFS on various Linux Distributions & involved in creating Veritas volume manager on Solaris.
TECHNICAL SKILLS
Cloud Technologies: Azure, AWS, OpenStack
Operating System: Ubuntu, Linux (Red Hat 4/5/6/7), Windows, CentOS
Configuration Management Tools: Ansible, Chef, Puppet
Build Tools: ANT, Maven, Gradle
CI/CD Tools: Azure DevOps, Jenkins, Bamboo
Virtualization: VMWare, Windows Hyper-V, Vagrant, Virtual Box
Version Control Tools: GIT, GITHUB, Bitbucket, SVN
Containerization: Docker, Docker Swarm, Kubernetes
Monitoring Tools: Nagios, Splunk, Cloud Watch, ELK, Grafana, Prometheus
Scripting: Python, Ruby, Bash shell, Groovy, PHP, HCL, JSON, Power shell scripting
Networking: DNS, DHCP, SMTP, HTTP, SNMP
Database: AWS RDS, MongoDB, MySQL, MSSQL SERVER, Aurora, DynamoDB
Web Servers: Apache Tomcat, Nginx, Apache Http
PROFESSIONAL EXPERIENCE
Confidential, Cary North Carolina
Sr. Azure Infrastructure Engineer
Responsibilities:
- Configured Azure Virtual Networks, Subnets, DHCP Address Blocks, Azure Network Settings, DNS Settings, Security Policies and Routing. Also, deployed Azure IaaS virtual machines and Cloud services (PaaS role instances) into secure Virtual Networks and subnet.
- Created Azure Role-Based Access Control (RBAC) to segregate duties within our team and company created a security group according to the teams and Roles grant only the amount of access to users that they need to perform their jobs.
- Implemented Azure Active Directory for Single Sign-On Access to thousands of cloud SaaS applications like Office 365, Dropbox.
- Worked as cloud Engineer, involved in configuration for Web Apps/Function Apps, V-Net Integration, HCM, Application Gateway, App Insights, Active Directory, Azure Key Vault, Encryption and Security on Azure.
- Created Azure Automation Assets, Graphical runbooks, PowerShell Runbooks that will automate specific tasks. Expertise in deploying Azure AD Connect, Configuring ADFS authentication flow, ADFS installation using Azure AD Connect.
- Designed and integrated Pivotal Cloud Foundry (PCF) on Microsoft Azure and deployed PCF using CF push and urban code deploy.
- WrittenTemplatesforAzure Infrastructure as codeusingTerraformto build staging and production environments. IntegratedAzure Log AnalyticswithAzure VMsfor monitoring thelog files, store them and track metrics and usedTerraformas a tool,Manageddifferent infrastructure resourcesCloud,VMware, andDockerContainers.
- Migrated servers like relational databases (SQL) and websites to MicrosoftAzureCloud and deploying applications on multiple web servers and maintained load balancing, high availability and synchronized on premises Active Directory users to office 365 with AD CONNECT.
- Created Network Security Groups (NSG) to filter the traffic to and from Azure Resources by configuring the Inbound and Outbound rules and associating them with Subnet and Network Interfaces.
- Deployed microservices-based apps on Azure Kubernetes utilizing Azure Kubernetes Service (AKS), Ingress API Gateway, MySQL, SQL Databases, and Cosmo DB for stateless storage of external data, and configured reverse proxy Nginx servers with SSL and TLS encryption.
- Configured an AKS cluster to integrate with Azure AD. With Azure AD integration, configured Kubernetes access based on existing identity and group only existing Azure AD users and groups can be provided with an integrated sign-on experience and access to AKS resources.
- Written runbooks in PowerShell and deployed usingCICD Azure DevOpstoAutomation Accounts. Release pipelines usedAAD Application Registration (Service Principal)in the Azure DevOpsService Connectionsfor authentication to Azure.
- Integrated the JFrog Artifactory with Azure DevOps for the easy management of large-scale delivery pipelines used to simplify CI/CD for cloud-native micro services.
- Configured Kubernetes Services Type Load Balancer and Cluster IP to expose UI based application and migrated cluster CNI from Flannel to Kube-Router to support Kubernetes Network Policies.
- Handled creating Pods, Namespaces, Services, Deployments, Daemon Sets, and Replicas Sets of microservices on Kubernetes that use YAML manifests, HELM charts, and integrated Jenkins workflows to drive all Microservices releases.
- Created the Kubernetes Clusters under Pod networks to group the Docker Containers. Used Kubernetes and Docker to maintain the runtime environment for the CI/CD System to build, test and deploy the applications across different environments.
- Handled setting up Docker Host, Docker Registry, RHEL/ Centos Atomic Host, Docker Images (Centos, RHEL and Ubuntu instances). Virtualized the servers using the Docker for the test environments and configuration automation using Docker Containers.
- Created Docker Swarm using Docker CLI to Orchestrate, schedule and deploy the services to Swarm and managed the Swarm behavior and created virtual networks to connectDockercontainers across multiple hosts usingDocker weave.
- Worked with Terraform key features such as Infrastructure as Code, Execution Plans, Resource Graphs, Change Automation and Implemented Terraform reusable modules for deployment of applications across Azure.
- Expertise in UNIX shell scripting and python scripts used to automate day to day administrative tasks. Involved in writing Python, and Shell scripts for compilation and deployment process.
- Improved speed, efficiency, and scalability of the continuous integration environment, automating wherever possible usingPython, Shell, bash, and PowerShell Scripts.
- Automated the tasks with Ansible Playbooks by using YAML functions and migrating the servers with the required configuration changes and testing and deploying the machines using Ansible Commands.
Confidential, New Jersey City
Sr. Azure Cloud DevOps Engineer
Responsibilities:
- Created Azure Automation Assets, Graphical runbooks, PowerShell runbooks that will automate specific tasks. deployed Azure AD Connect, configuring ADFS authentication flow, ADFS installation using Azure AD Connect.
- Migrated on premise to windows azure by building Azure Disaster Recovery environment, Azure Recovery Vault and Azure backups from the scratch using power shell script.
- Designed and developed standalone data migration applications to retrieve and populate data from Azure Table / BLOB storage to on-premises SQL Server instances.
- Used Python API for uploading all the agent logs into Azure blob storage. Managed internal deployments of monitoring and alarm services for the Azure Infrastructure (OMS)
- Configured and maintained Azure Storage Firewalls and Virtual Networks that uses Virtual Network Service Endpoints to allow administrators to create network rules that allow traffic only from selected V Nets and subnets, creating a secure network boundary for their data
- Provisioned the high availability ofAzureVMs usingTerraformand ARM templates, wrote new plugins to support new functionality inTerraformand involved in usingTerraformto migrate legacy and monolithic systems toAzure.
- Implemented Office 365 and Azure Active Directory for single sign-on, authentication, authorization, and Azure Role-Based Access Control (RBAC).
- Implementing Azure DevOps technologies and processes like containerization, infrastructure as code, metrics, monitoring and automate wherever sensible.
- Configured and managed Azure Role-based Access Control (RBAC) to separate duties within our team and grant minimum amount of access to users that they need to perform their jobs. Configured Shared Access Signature (SAS) tokens and Storage Access Policies in Azure Cloud Infrastructure by setting up Azure DevOps pipeline with Azure CLI task.
- Lead the operation of migration using existing DevOps tools to Azure DevOps. Configured Azure DevOps Portal and created Repos for Source Code Management, configured Azure Pipelines for build operations, configured Artifacts in Azure DevOps for storing Artifacts, and configured Boards for daily scheduling, ticketing, and updating tasks.
- Acted as build and release engineer, deployed the services by VSTS (Azure DevOps) pipeline. Created and Maintained pipelines to manage the IAC for all the applications.
- Worked on Kubernetes for creating new Projects, Services for Load Balancing, and adding them to Routes by accessing from outside, created Pods through new application and controlling, scaling, and troubleshooting pods through SSH, managed manifest files and releases of Helm charts.
- Configured and Integrated Docker container orchestration framework using Kubernetes by creating pods, deployments and used Python Scripts to schedule, deploy and manage container replicas onto a node cluster using Kubernetes.
- Created, managed, and performed container-based deployments using Docker images in the Docker Hub containing Middleware and Applications together and evaluated Kubernetes for Docker container orchestration.
- Implemented Docker Swarm to deploy Load balance, Scale and Manage docker containers with multiple namespace versions and integrated cluster management with Docker engine.
- Implemented Terraform Templates automating Azure IAAS VM’s using terraform modules and deployed virtual machine scale sets in production environment.
- Designed, installed, and implemented the Ansible configuration management system and used Ansible to manage Web apps, environment configuration files, users, and packages.
- Wrote Ansible Playbooks with Python SSH as the Wrapper to Manage Configurations of VMware VM Nodes and Test Playbooks on AZURE instances using Python.
Confidential, St louis
Sr. AWS Engineer
Responsibilities:
- Designed, configured, and managed public/private cloud infrastructures utilizing Amazon Web Services (AWS), including EC2, Virtual Private Cloud (VPC), Public and Private Subnets, Security Groups, Route Tables, Elastic Load Balancer, Cloud Watch and IAM.
- Experience in managing and maintaining IAM policies for organizations in AWS to define groups, create Users, Assign Roles, and define rules for Role-Based Access to AWS Resources.
- Troubleshooting and monitoring of various proprietary Axiom and 3rd party applications using Splunk and Cloud Watch in the Amazon Web Services (AWS) environment.
- Created layers, components for deploying huge applications using AWS Ops Works with Chef Recipes. Developed Chef Cookbooks to install and configure Apache Tomcat, Jenkins, and deployment automation.
- Tested Chef Cookbook modifications on cloud instances in AWS and using Test Kitchen and Chef Spec and used Ohia to collect attributes on node. Worked on Chef DK which takes of care creating cookbooks and recipes.
- Designed AWSCloud Formation templates to create custom sized VPC, Subnets, and NAT to ensure successful deployment of Web applications, database templates and expertise in architecting Secure VPC solutions in AWS with the help of Network ACLs, Security Groups, Public and Private Network configurations.
- Responsible to Get Clusters Configured correctly and built to Production Grade Standards deploying Kubernetes within cloud offerings using arm or Terraform templates.
- Using Terraform as a tool, Managed different infrastructure resources Cloud, VMware, Bare Metal servers and Docker containers. Also, configured RDS instance and map more complex dependencies and identify network issue using Cloud Formation (CFT) and Terraform.
- Experienced in building sophisticated and highly automated infrastructure using automation frameworks such as Cloud Formation, Terraform and Ops Works
- Converted existing Terraform modules that had version conflicts to utilize Cloud formation during Terraform deployments to enable more control or missing capabilities.
- Configured Jenkins as a common build engine to build and deploy applications to DEV, QA, UAT and PROD environment
- Wrote Jenkins Shared Libraries for CI and CD life cycles and created generic pipelines across the cloud applications to automate application deployment as well infrastructure deployments and introduced various security compliance rules to validate the organization standards over the release work flows.
- Administrated Jenkins for continuous Integration and deployment into Tomcat/Web Sphere Application servers. Integrated builds with Code Quality like Cobertura, PMD and Find bugs.
- Possessing strong knowledge in Ant and Maven build tools and implementing it with Jenkins, Anthill Pro.
- Validated Kubernetes installations by building a local development workflow using Mini-kube and implementing Kubernetes interface by creating RESTful APIs to read, delete, save, and update bucket information on Kubernetes Console.
- Worked with Chef Enterprise Hosted as well as On-Premises, Installed Workstation, Bootstrapped Nodes, Wrote Recipes and Cookbooks and uploaded them to Chef-server, Managed On-site OS/Applications/Services/Packages using Chef as well as AWS for EC2/S3/Route53 & ELB with Chef Cookbooks.
Confidential, Michigan
DevOps Engineer
Responsibilities:
- Extensively worked on Bamboo, Jenkins, and Team city Enterprise's for continuous integration and for End-to-End automation for all build and deployments across multiple data centers and cloud based.
- Configured Jenkins as a common build engine to build and deploy applications to DEV, QA, UAT and PROD environment.
- Involved in migration of CI tool stack from SVN to GIT, Maven to Gradle, Build force to Jenkins.
- Integrated GIT with Jenkins using the GitHub Plugin to automate the process of source code check-out by providing the URL and credentials of the GIT repository.
- Managed the Maven Repository using Nexus tool and used the same to share the snapshots and releases of internal projects.
- Used Ansible Configuration Management to create Ansible manifest files, roles, and profile modules to automate system operations and manage servers on Microsoft Azure Platform Azure Virtual Machines (VM's) and encrypted data using Ansible vault.
- Used Ansible Tower, which provides an easy-to-use Dashboard and role-based access control, so that it's easier to allow individual teams access to use Ansible for their deployments.
- Implemented and maintained the branching, tagging & build/release strategies using SCM tools GIT, Bitbucket and maintained build packages using Visual Studio Team System (VSTS) on Linux & Windows platforms.
Confidential
Build Engineer
Responsibilities:
- Used GIT version control to manage the source code and integrating GIT with Jenkins to support build automation and integrated with JIRA to monitor the commits.
- Connected continuous integration system with GIT version control repository and continually build as the check-in’s come from the developer.
- Developed, customized and build packages on RHEL and RPMs on Linux for deployment on various servers through Software Development Life Cycle.
- Performed automated installations of Operating System using Jumpstart for Solaris and Kickstart for Linux.
- Used Chef for creating recipes & cookbooks and stored configuration data on chef server for managing nodes. Bootstrapping, provisioning nodes using chef server and managing run-lists.
Confidential
System Administrator
Responsibilities:
- Troubleshooting Linux system, security-related issues, capturing packets using tools such as IP Ables, Firewall. Package management, setting up repositories, applying patches using YUM and RPM.
- Created and optimized Linux shell scripts using Bash Shells.
- Developed Python and Shell Scripts for automation of the build and release process.
- Install firmware, upgrade kernel patches, systems configuration, performance tuning on UNIX/ LINUX systems.