SUMMARY

• A dynamic AWS Cloud Engineer with over 5 years of experience as an AWS Solutions Architect.
• Possessing an in - depth knowledge on various AWS Services including EC2, VPC (NAT, Peering, VPN), IAM, EC2 Container service, Elastic Beanstalk, Lambda, S3, Cloud Front, Glacier, RDS, Dynamo, Elastic Cache, Redshift, Direct Connect, Route 53, cloud watch, Cloud Formation, Cloud Trial, (EMR), SNS, SQS, SWF, Lambda, API Gateway, Maven, CI/CD, SonarQube, Jenkins, and Docker.
• Experience working with IAM to create new accounts, roles and groups.
• Experience in creating alarms and notifications for EC2 instances using Cloud Watch.
• Experience involving configuring S3 versioning and lifecycle policies to and backup files and archive files in glacier.
• Utilize EBS to store persistent data and mitigate failure by using snapshots.
• Configured AWS Identity and Access Management (IAM) Groups and Users for improved login authentication.
• Experience in deploying and monitoring applications on various platforms using Elastic Beanstalk.
• Experience in Configuring an AWS Virtual Private Cloud (VPC), VPC Peering, and Database Subnet Group for isolation of resources in the cloud.
• Experience in designing high availability applications on AWS across availability zones and availability regions.
• Environment - AWS (EC2, Auto-Scaling, S3, Elastic Beanstalk, ELB, RDS, VPC, Direct Connect, Route53, Cloud Watch, Cloud Formation, IAM, SNS).

PROFESSIONAL EXPERIENCE

Confidential

AWS Cloud Engineer/Cloud Architecture

Responsibilities:

• Oversee application architecture and deployment in cloud platform environments -- including public cloud, private cloud and hybrid cloud. This included cloud adoption plans, cloud application design, and cloud management and monitoring
• Develop and maintain highly resilient cloud architecture in AWS for application hosting
• Coordinate environment creation with AFS CMPS hosting for a Java application (Red Hat JOBSS) and MS SQL/SQL Reporting Services backend along with additional native services such as AWS Transfer, Active Directly, Integration with Okta
• Creating and managing AWS S3 buckets, cloud trail logs and objects buckets.
• Built and configured virtual data centre in AWS to support Enterprise Data.
• Securing RDS, EBS, S3 with the use of KMS to provide end-end encryption.
• Creating ansible playbooks to automate routine and repetitive tasks.
• Developing and designing custom modules for ansible playbooks.
• Involved in 24x7 support rotation for Production, Test and Development Databases.
• Managing the network from on-prem to cloud while maintaining VPC security.
• Involved in the process of developing and deploying code through the CICD process with the use of tools such as Jenkins and GitHub.
• Building and managing custom AMI's, creating tags, modifying permissions.
• Writing pipeline scrips on Jenkins to deploy applications and resources to AWS.
• Creating and ensuring secured connection to RDS databases, Elastic cache, Dynamo DB, Amazon Redshift databases and Neptune databases
• Provisioning AWS resources using management console as well as Command Line Interface using IAC using Terraform and Cloud Formation.
• Utilizing monitoring AWS Cloud Watch for monitoring, SNS for notification.
• Implementing network security with the use of NACLs, Security Groups, WAF.
• Encrypted and managed both server-side encryption such as SSE S3, SSE C, SSE KMS and AWS Client encryption library, and client-side encryption of S3 and databases in the cloud.
• Assisting with migrating applications and databases from on prem to the cloud using tools like cloud endure snowball for large data transfer.
• Leveraging IAM for user/group management and creating respective roles and policies.
• Evaluating and improving existing AWS deployments.
• Launching databases via RDS to support web application functionality.
• Ensuring low latency with the use of CDN (Cloud Front), Route 53
• Deploying software in large scale with automation, using tools like Ansible.
• Ensuring environment is compliance with CIS Benchmark.
• Designed, developed, and implemented high availability, scalability, fault tolerance.
• Created AWS organisations.
• Implementing serverless computing with the use of Lambda.
• Responsible for allocating, releasing, associating, and disassociating elastic IP addresses.
• Troubleshoot various customer technical problems and adhere to best practices.
• Cost and performance monitoring of resources and applications using Aws Cloud Watch, including creating alarms to monitor metrics such as EBS, EC2, ELB, RDS, S3, SNS and configured notifications for the alarms generated based on events defined.
• Collaborating with application developers, Project Managers and QA analysts to ensure proper testing, configuration, and deployment.

Confidential

AWS CLOUD ENGINEER/SECURITY ENGINEER. /SRE

Responsibilities:

• Leverage AWS cloud services such as EC2, auto-scaling and VPC to build secure, highly scalable, and flexible systems that handled expected and unexpected load bursts.
• Setup and configured VPC Private Link (Endpoints), Direct Connect, Transit VPC, VPC Peering, Reverse Proxy Caching, CDN, IPsec and VPN for secure data transfer, and secured connection to other AWS services and other AWS accounts.
• Used Network health monitoring tools (Cloud Watch, Logic Monitor)
• Created and configured Redshift clusters.
• Responsible for bucket creation, user account creation, access permissions and privileges to users as well as IAM policies.
• Implement and maintain the monitoring and alerting of production and corporate servers/storage using Cloud Watch.
• Analysed logs and performed root cause analysis for various issues coming up on daily basis.
• Designed, configured and deployed Amazon Web Services (AWS) for applications utilizing the AWS stack (Including EC2, Route53, S3, RDS, Direct Connect, Cloud Formation, Cloud Watch, SQS, IAM), focusing on high-availability, fault tolerance, auto-scaling, load-balancing capacity monitoring and alerting.
• Cost and performance monitoring of resources and applications using Aws Cloud Watch, including creating alarms to monitor metrics such as EBS, EC2, ELB, RDS, S3, SNS and configured notifications for the alarms generated based on events defined
• Created monitors, alarms, and notifications for EC2 hosts using Cloud Watch.

Confidential

Technical Service Engineer/IT Help Desk

Responsibilities:

• Technical support: installing & configuring computer hardware, software, and networks
• Computer networking: standard protocols for TCP/IP and network services (e.g., DNS)
• Operating systems: creating users, groups, and permissions for account access & installing, configuring, and removing software on Windows and Linux operating systems
• Systems administration: server management and user & information management
• IT security: evaluating potential risks and utilizing encryption algorithms and techniques