SUMMARY

• Over 20+ years of strong IT experience and currently working as Cloud Solutions Architect on multiple projects delivering Cloud infrastructure, Application, Security, and Data Architectures.
• Strong background of Data, Security, and middleware platforms in solutioning, migrating from on - premises to Cloud Architecture.
• Designed and Solutioned AWS Cloud infrastructure, Application, and data securities.
• Expertise in designing Application migrations from on-premises to Cloud by providing server based and serverless architectural solutions.
• Architected Cloud Application migrations with High resiliency, Auto Scaled, highly Secured, and cost optimized Solutions.
• Provided guidelines and strategical approaches for User and applications Access management.
• Solutioned Database security methodologies and for data in-motion and at-rest encryptions and access policies.
• Setup Enterprise level Security models and IAM structures for all AWS accounts including organizational units, SCPs, and guardrails under the control tower.
• Experienced in designing and providing security pastures for different cloud service models like Infrastructure-as-a-service (IaaS), Platform-as-a-service (PaaS), and Software-as-a-Service (SaaS) in both public and private deployments.
• Designed Security models for Application, Infra and Data Architecture teams for various Applications deployment on Cloud and for applications migrations from on-premises.
• Applied Security policies for APIs like https, TLS for internal and external applications and integrations with PKI, SSL/TLS encryptions.
• Established Vaults for storing Application and infra related passwords, certificates, and encryption keys with password rotation policies.
• Designed and secured hybrid network connection between provisioned private network in AWS Cloud space (VPC) and Customer corporate network leveraging AWS VPC Peering, VPN connection, AWS transit Gateway.
• Expert level skills on Architecting and securing the Infrastructure on AWS using IAM, KMS, Cognito, API Gateway, Cloud Trail, Cloud Watch, Config, Trusted Advisor, NACL, Security Groups etc.
• Delivered Cloud Governance and NIST guidelines onboarded multiple projects using AWS services like VPC networking, Security Groups, private/public Subnets, IAM, Connect, API gateways, RedShift, Lambda, Cloud Front, parameter store, KMS, Kubernetes etc.
• Created IAM Roles, Users and their Policies for various Users like Admins, Developers and AWS services like S3, EC2, Load Balancers, Kubernetes, Lambda, dynamo DB, and many other services.
• Designed Security groups and Firewall ingress and egress rules for Applications and Data Access.
• Architected and delivered solutions on multiple software products like SIEM, terrain analytics, endpoint protection, threat intelligence, AMAG Symmetry access and deception applications.
• Delivered solutions for monitoring and protecting endpoints against cyber threats like endpoints include desktops, laptops, smartphones, tablet computers, and other devices.
• Reviewed AWS Cloud Applications migrations and solutioned Security.
• Implemented Security Logging account capturing Audit trail events for all user and service activities and tuned as per business needs and making sure hardening IAM policies.
• Worked with Windows and Unix OS Server teams in producing golden images (CIS) for EC2s and Kubernetes servers.
• Vulnerabilities Risk Management with Rapid7 and Orca security tools, reporting and coordinating with various infrastructure and application teams.
• Scanning IAM Users and privileges, tightening and granting least access using ORCA.
• Stringent policies developed for Compliance data like PII and financial data systems.
• Good understanding in Business Requirements Related to BCDR Risks & Protection strategies.
• Creating the BCDR Plan, Exercising, Assessing, and Maintaining the Plan.
• Implemented industry standards in Cloud Data security and Cloud platform and infrastructure security.

PROFESSIONAL EXPERIENCE

Confidential, Florida

Enterprise Cloud Architect and DB Management

Responsibilities:

• Architected several on-Prem Application migrations to cloud with High resiliency, Auto Scaled, highly Secured, and cost optimized Solutions.
• Designed and Solutioned AWS Cloud infrastructure, Application, and data architectures along with security.
• Worked closely with key business stake holders, Account managers, IT Program leads on various projects and conducted several key architectural discussions before deciding a best suitable service among Infrastructure-as-a-service (IaaS), Platform-as-a-service (PaaS), and Software-as-a-Service (SaaS) in both public and private cloud deployments.
• Designed architectural frameworks solutions (IaaS, PaaS, SaaS) that best suits clients web application hosting demands in AWS cloud Platform.
• Worked with other Architects in designing and implementing AWS Cloud platform with multi accounting structure for various bank domains. scalable solutions in cloud environment leveraging cloud enterprise technology and services in AWS such as AWS VPC, Auto Scaling, ELB, AWS Global Infrastructure (Regions and Availability Zones).
• Customized in-development software to clients’ current hardware environments, designing applications to span multiple systems.
• Configured multi-account architecture, Network design, Identity and Access Management, governance, data security, and logging within provisioned AWS Landing Zones.
• As a Cloud Security Architect worked with AWS professional services and Internal teams in delivery of Security guidelines document making standardizing for Infra, Application, Databases, and storage implementations.
• Designed Security models for Applications, Infrastructure and Data Architectures for various projects those deployed on Cloud from on-premises.
• Working closely with Application architects in applying the security policies for all Cloud projects to keep data encrypted in transit and at rest.
• Ensuring the Audit logs collection and loading into SIEM Splunk for auditing, monitoring, alerting, and remediating for any access breaches.
• Provisioned architectures for End Point protection, Terrain Analytics and Deception Systems.
• Review and approve SaaS based 3rd party vendor integrations and hosting including data movement and APIs.
• Scanning Security Vulnerabilities for OS patching, libraries and APIs protocols producing various reports then working with App teams timely addressing and fixing.
• Worked with Business requirements and provided alternative security solutions to keep guard the CIA triage.
• Performed advanced Analysis & modeling to meet the business requirements of the organization with respect to performance, security, and regulatory requirements.
• Designed, reviewed, and documented application specific security rules and compliance related guidelines to various teams to adhere to security policies.
• Setup Enterprise level Security models and IAM structures for all AWS accounts including rganizational units, SCPs, and guardrails under the control tower.
• Ensure that all the regulatory and compliance issues are addressed in designing solutions.
• Monitoring and generated vulnerability scan reports for any security threats and violations. Applied Security policies for APIs like https, TLS for internal and external applications and integrations with PKI, SSL/TLS encryptions.
• Architected and delivered solutions on multiple software products like SIEM, terrain analytics, endpoint protection, and threat intelligence.
• Configured and managed various AWS Services including EC2, RDS, VPC, S3, Glacier, Cloud Front and Route 53 etc.
• Proactive monitoring of resources and applications using AWS Cloud watch including creating alarms to monitor metrics for services like EBS, EC2, ELB, RDS and S3.
• Experience in setting up Life-cycle policies to backup data from AWS S3 to AWS Glacier for archiving.
• Create AMIs for mission critical production servers for backup.
• Create VPC, subnets, security settings, EC2, IAM, RDS and S3 buckets based upon the requirement, IAM accounts (with MFA) and IAM policies to meet security audit & compliance requirements.
• Maintaining a common documentation library of standardize procedures and configurations.
• Created Cloud Watch alarms that taking care of EC2 auto recovery and auto reboot for instances that failing system status check and instance status check.
• Monitoring and analyzing AWS resource utilization for right sizing and cost optimization.
• Experience in building infrastructures for secure and highly available applications.
• Performed daily system monitoring, verifying the integrity and availability of all hardware, server resources, and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
• Planned, designed, and implemented a project to provide network security stack providing visibility, redundancy, and consistency for all applications hosted in the cloud.
• Designed and implemented Transparent Data Encryptions while Data at rest and TLS encryptions while Data in-motion.
• Involved in Oracle Cloud at Customer (ExaCC) and Oracle Cloud at Customer-Autonomous (ExaCC-A) databases in a Co-managed Oracle Cloud IaaS Private Cloud on-prem Environment.
• Extensively used Cloud utilities like DBAASCLI, EXACLI and OCI console for day-to-day cloud Operations, patching, Data Guard, and troubleshooting.
• Expertise in Oracle19c pluggable databases CDB/PDB and Multitenant Architecture.
• Performance tuning/Monitoring/Health check/supporting of several 19c/11gr2/10gr2 production, QA, and Development databases.

Confidential, Florida

Solutions Architect/Sr. Database Administrator

Responsibilities:

• Architecting/design/re-designing of databases to meet business needs and enforce system integrity with proper naming conventions of database objects.
• Delivered concurrently multiple projects with the technology architecture strategy, artifacts, target architecture and road maps to implement an enterprise technology architecture with Customers/Business/technical stake holders on various applications, Databases, storage, Servers Infrastructure.
• Prepared multiple Solution documents depicting Infrastructure physical/logical traffic flow diagrams including the Server rack/stack, configurations, types of storage needs, cabling, disk layouts, user’s creations, DB layouts including RAC/Cluster (Oracle, MS SQL etc.), including Oracle replications like Golden Gate, Data Guard etc.
• Identify risks/assumptions/issues and providing mitigations/solutions with alternative methods Not compromising the standards and requirements
• Worked with various technical and business teams in coordinating, budgeting, implementing the projects into main core applications across the bank.
• Conduct multiple technical discussion sessions with various application teams to develop transition roadmaps and architecture patterns to migrate On-Premises systems to cloud architectures.
• Designing and delivering new initiates projects with cost saving, focused centralized shared infrastructural solutions for multiple projects, tier based on various OS, Applications, Databases, storage platforms which includes upgrades, migrations, and backups for hosting/backup/retention for high transactional OLTP, data warehouse and reporting environments.
• Closely working with Business stakeholders, Account managers and IT Program Leads on various projects preparing SOWs and delivering cost effective Technical Solutions with detailed architectural diagrams.
• Administration, troubleshoot and maintenance of Oracle RAC/ASM, Data Guard, Golden Gate and Exadata databases on various environments.
• Implemented/Supported Oracle Advanced Techniques like Flashback Database and Guaranteed Restore Points to support Application upgrades.
• 11gr2 Physical standby database install, configure and setup.
• Prepared and implemented step by step documentation on DR failover and failback test scenarios.

Confidential, Florida

Solutions Architect/Database Administrator

Responsibilities:

• Involved and worked with various technical and business teams in coordinating, budgeting, implementing the projects into main core applications across the bank.
• Providing and managing the key process documents for day-to-day support like Architectural, Installation, Prod Support, disaster recovery etc.
• Responsible for technical documentation that includes architectural artifacts and troubleshooting techniques including production support documents.
• Collaborate with various Application teams, key stakeholders, and partners to understand needs for better architecture and address technical limitations.
• Closely working with Business stakeholders, Account managers and IT Program Leads on various projects preparing SOWs, BRDs and delivering cost effective technical solutions with Architectural Diagrams.
• Evaluate new cloud technology stacks and concepts to replace existing data center tech stacks.
• Participated in cloud Service provider evaluation and selection process.
• Administration, troubleshoot and maintenance of Exadata 11gr2 RAC/ASM/Golden Gate databases on X3-8, X3-2 storage servers.
• Performance tuning/Monitoring/Health check/supporting of several 11gr2/10gr2 production, QA, and Development databases.
• RMAN Cloning/database refresh of several Nonproduction databases from production copy.
• Implemented/Supported Oracle Advanced Techniques like Flashback Database and Guaranteed Restore Points to support Application upgrades.
• Architecting/design/re-designing of databases to meet business needs and enforce system integrity with proper naming conventions of database objects.

Confidential, New Jersey

Senior Database Administrator

Responsibilities:

• Installation, Configuration, Maintenance, and administration of several 11gr2/10gr2 production, Dev, QA, and Test databases, including a 3 Node Real Application Cluster (RAC)/ASM.
• Configured 11gr2 and10gr2 Data Guard in Physical standby Database for disaster recovery and Maximum Performance with DUPLICATE and ACTIVE DATABASE features.
• Proven skills in database upgrades/migrations from oracle 10gr2 to 11gr2, Critical Patch Updates with minimal system down time.
• Configured and tuned Oracle 11gr2/10gr2 database instances with ASSM, AUTO SGA, separate redo mounts and Temp tablespace mounts with proper sizing.
• Implemented 11g/10g Advanced features like Flashback Recovery area, Database restore points for production, development, and QA databases to minimize the database restore time.

Confidential, New Jersey

Database Administrator - Consultant

Responsibilities:

• Installation, Configuration, Maintenance, and administration of several 10gr2/10gr1 production and QA databases with a 4/3 Node Real Application Cluster (RAC) /ASM/OCFS2.
• SQL/PLSQL Performance and Tuning for all the existing databases and DB Migrations,Cloning of databases.
• Configured 10gr2 Data Guard in Logical/Physical standby Database for disaster recovery and Maximum Performance.

Confidential, New York

Database Architect/Database Administrator - Consultant

Responsibilities:

• As an Architect Designed the entire application and successfully developed and implemented Oracle databases for production, development, and QA Environments.
• Responsible for Physical and logical design of the database using Erwin Data Modelerer7.1.
• Implemented various optimal Backup and Recovery solutions using RMAN and logical backups using EXP and DATAPUMP utilities. Install Configure and maintenance of 10gr2 production Database with Real Application Cluster (RAC) /ASM, and 11g Dev and test databases.

Confidential, New Jersey

Database Design & Database Administrator

Responsibilities:

• As an oracle DBA involved in Database design for various applications, Installation and Configuration of several Oracle 10g Databases with Real Application Cluster and Automated Storage Management. Configured Data Guard in 10gr2 to a remote site for disaster recovery and high availability.
• Configured Oracle 10g Enterprise Manager Grid Control for administering several servers. Extensively used RMAN for backup methods and recovery scenarios.
• Successfully migrated very large 9i production and development databases to Oracle 10g whose size is in Terabytes.
• Database replication by using snapshots/Materialized views from one server to another server of different Oracle Environments.