We provide IT Staff Augmentation Services!

Azure Security Engineer Resume

4.00/5 (Submit Your Rating)

IL

PROFESSIONAL SUMMARY:

  • 7+ Years of Competent and Result oriented professional experience in flexible Linux/Unix/Windows infrastructure and Azure Active Directory environments with varied roles as DevOps Engineer in Azure and AWS clouds Services, Linux, VMware administration and Build Release Management to provide optimal performance and secured solutions.
  • Designing and deploying large number of applications utilizing most of the AWS stack includes not limited to EC2, Route53, S3, RDS, Dynamo DB, SNS, SQS and IAM focusing on high - availability, fault tolerance, and auto-scaling in AWS cloud formation.
  • Extensive knowledge in creating builds and release pipelines in VSTS and done deployments using SPN (secure endpoint connection) for implementing CI/CD manually and through PowerShell scripts.
  • Experience in segregating the Azure services as part of sprint planning and preparing the hardening checklist for each Azure service. Creating new Azure ARM templates and artifacts to update the existing PAAS services as per the security standards.
  • Hands-on experience in creating multiple VPC’s public, private subnets as per client requirement and distributed them as groups into various availability zones of the VPC.
  • Strong Knowledge on Azure PaaS services of Web app, Logic app, Key vault, Storage, Cosmos DB, SQL database, Redis Cache, app Insights, CDN, service bus.
  • Assist in the scripting of AD user and contact object updates using PowerShell to facilitate synchronization to Azure AD. Having experience with Various PowerShell module (Azure ad, Active Directory and exchange online).
  • Extensive knowledge on AWS cloud formation templates in Json format to create custom VPC, subnets, EC2 instances, ELB, security groups and NAT to ensure successful deployment of web applications.
  • Experienced in Building out Infrastructure as a Service (IAAS) private cloud OpenStack and managed deployment of Microservices using Kubernetes, Docker to production Environment. Performed server monitoring, Application monitoring, Capacity Planning and log monitoring using Nagios, Cacti, Zabbix and Splunk.
  • Profound experience in writing Playbooks using Ansible to provision several pre-production environments and several proprietary middleware installations. Installed Ansible Tower and wrote Ansible Playbooks using Yaml, created roles to rollout configurations to different environments.
  • Good Knowledge of Designing, implementing and supporting fully automated Continuous Integration and Continuous Delivery processes using Puppet and Terraform.
  • Experience in managing Ubuntu, Linux and windows virtual servers on AWS EC2 with Chef Client nodes and upload the cookbooks to Chef-server from chef Workstation.
  • Significant proficiency in Container management using Docker by writing Docker file in JSON format and place the automated build in the Docker Hub. Managed deployments using Kubernetes, created local clusters and deployed application container.
  • Experience in setting up 3 tier system infrastructure environments in co-ordination with Application system , Middleware system and IT system and deploying the builds into different infrastructure environments ( Dev, QA, SIT, Alpha, Beta and Production).
  • Profound knowledge in Automating CICD process by integrating the Docker with Jenkins by pulling the source code from GitHub repository and generated build using Maven.
  • Hands on experience in Branching, Merging, Tagging and maintaining across the environments using SCM tools like GIT, Subversion (SVN), TFS, Bitbucket and used webhooks for integrating with continuous Integration tools Jenkins, TeamCity, Bamboo and ANT, MAVEN and Gradle for generating builds. Configured SonarQube for code coverage.
  • Experience in using Tomcat Web Server and JBOSS, Web logic and WebSphere Application Servers for deployment. Automating various builds and deployments using ANT, MAVEN, Perl, Ruby, MS Build, and Shell Scripts.
  • Highly Skilled in software installation, upgrades/patches/packages, troubleshooting, and maintenance on UNIX & Red Hat Enterprise Linux, CentOS, Ubuntu Servers.
  • Experience in installation, configuration and administration of VMware based virtual servers and Virtual Center.
  • Worked and carried software methodologies like Waterfall model, Agile Methodology (iterative development & sprints) and Scrum. Knowledge on Oracle database and MYSQL.
  • Experience in using Bug tracking tools like JIRA, Remedy, HP Quality Center and IBM Clear Quest. Experience on Open, fast paced workspace interacting with globally distributed teams establishing SCM Process, policies, and procedures.
  • Strong knowledge of Software Development Life Cycle (SDLC - Feasibility Requirements Analysis, Design, Testing, Support, Post-production analysis of the projects) and Implemented Continuous Integration, Delivery/Deployment pipelines.

TECHNICAL SKILLS:

Operating Systems: Linux (RedHat, Centos, Ubuntu), Windows 7/8/XP/10

VPC, Route: 53, DNS, FTP, DHCP, SSH, HTTP, HTTPS, TCP

Databases: MySQL, Oracle 10g/9i, MongoDB, Sybase, Teradata, SQL Server

Backup/Monitoring Tools: Splunk, ELK, Nagios, Zabbix

Source Control: GIT, SVN, Bitbucket

Configuration Management: Ansible, Chef, Puppet, Vagrant, VSTS

Virtualization/ Containerization: VMWare, ESX Servers, Docker, Kubernetes, Docker Swarm

Languages: Python, Shell scripting, Bash

Web/Application Server: IIS, Tomcat, Apache, JBoss, WebSphere Application Server, Web Logic

Build and Deploy Tools: ANT, Maven, Gradle, Jenkins, Bamboo, TeamCity, TFS,VSTS

Agile: SCRUM, Waterfall

Project Management/ Bug tracking: JIRA, Confluence, Remedy, HP Quality Center, Bugzilla, Service Now

Cloud Technologies: Azure, AWS

PROFESSIONAL EXPERIENCE:

Confidential, IL

Azure Security Engineer

  • Extensively worked in operations team to stream line the process of implementing security at Azure cloud environment and introduced best practices for remediation.
  • Analyzing the landmark of 150 subscriptions for various business cases to apply organization specific security guidelines and review the existing Logical Technical Architecture and Security Configuration base line and compare with the Microsoft best practices and do the GAP analysis and Collecting the inventory details that need to harden and remediate.
  • Test and deploy multiple PAAS services through VSTS CI/CD pipeline and create new ARM templates and artifacts to update the existing PAAS services as per the security standards. Extensively worked in converting the classic resources to ARM such as storage and Cloud service resources.
  • Wrote PowerShell scripts for validating the ARM templates and pre-Deployment and post deployment activities. Automating in Azure for creation of subscription, Resource Groups and Storage Account using Windows PowerShell.
  • Assigned RBAC Roles using Organization Active Directory at the Subscription Level to grant accesses only to required members based on Least-Access Privileges (we use CWS Groups).
  • Created builds and release pipelines in VSTS and deployed the Azure PAAS services using SPN (secure endpoint connection) for implementing CI/CD.
  • Worked on implementing backup methodologies by Power Shell Scripts for Azure Services like Azure SQL Database, Key Vault, Storage blobs, App Services etc.
  • Implemented the integration between App services with Application Insights for monitoring the Activity logs of web-apps and automation for deployments by using YAML scripts for massive builds and releases.
  • Expertise in writing Ansible playbooks, an approach for provisioning Ansible, where it is assigned with automation task in YAML format and provision Dev servers with Ansible scripts.
  • Developed automated scripts f or building the containers and shipping them into a container registry like Google, Docker Hub for all the Dev, stage and Production Environments . Managed images in Private and Public registry’s .
  • Experience with Rancher tool for managing and monitoring the changes of container and Created Docker container snapshots and appending to a running container . Utilized Kubernetes to deploy scale, load balance, scale and manage Docker swarm with multiple name spaced versions.
  • Worked on assigning the RBAC roles at group level and user level as per the LTA created for various Azure PAAS services as per the Organization security standards.
  • Implemented the Diagnostics logs tracking for all the PaaS services by integrating to Azure Blob storage account. Worked with Development team for resolving the issues after Remediation. And also resolved all the Incremental deployment issues.
  • Setting up Connection Strings and connecting SQL Server AZURE Databases from locally Installed SQL Server Management Studio (SSMS) for Developers.
  • Implemented the Dry-Run test by configuring the replica environment of functional team configuration to ensure fool-proof execution of customized scripts/json templates before execution in production environments.
  • Very good knowledge of azure services Web-app, Key vault, SQL Server DB, Storage Account, Redis Cache, Automation Account, Scheduler and Notification Hub, IoT Hub, Log Analytics and other PAAS services.
  • Automated the Backup techniques for taking the backup of azure services by writing the PowerShell scripts, ARM templates and ran periodically through VSTS pipeline and Implemented the new back up techniques by creating web slots for web app .
  • Implemented & maintained the branching and build/release strategies utilizing VSTS GIT and Performed all necessary day-to-day GIT support activities.
  • Deployed Jenkins for CI/CD, creating jobs with DSL plugin and automate the jobs using polling techniques. Experienced in authoring pom.xml files, performing releases with the Maven release plugin , and managing artifacts in Sonatype NEXUS repository .
  • Worked with Service Now tool for handling the incidents and raising the Change requests.

Confidential, TX

Azure Cloud Engineer

  • Designed, configured and deployed Azure Automation Scripts for a multitude of applications utilizing the Azure stack (Including Compute, Web & Mobile, Blobs, ADF, Resource Groups, HDInsight Clusters, Azure SQL, Cloud Services, and ARM), Services and Utilities focusing on Automation.
  • Design, Implement, manage, backup, and monitor storage solutions in accordance with the HA and DR requirements of the enterprise Hosting environment, Create and manage Azure AD tenants, and configure application integration with Azure AD.
  • Deployed Azure IaaS virtual machines (VMs) and Cloud services (PaaS role instances) into secure VNets and subnets. Implementing the New Azure service like Backup Vaults, Recovery service vaults, operation Management suites, Cost Estimation and efforts.
  • Developed automation scripts for provisioning, configuring, Managing EC2 Instances , cloud deployments using Ansible playbooks . Automated the jobs for monitoring the server’s (EC2 Instances) CPU utilization and system memory by using CLOUDWATCH and provide application owners with performance-based SLAs .
  • Worked with AWS Lambda workflow implementation and created functions to assign roles using python scripts to interact with application.
  • Automated the CICD pipeline process by integrating the Docker with Jenkins by pulling the source code from GitHub repository and configured SonarQube for code coverage and sonar metrics in the pipeline for quality of unit test cases by using Coverage plugins and generated build using Maven .
  • Develop and updated running docker containers for various log management nodes. Application setup and QA testing on Docker containers . Creating new continuous integration stack for a web application based on Docker and Jenkins, allowing transition from dev stations to test servers easily and seamlessly from scratch.
  • Responsible for build and automation of on-premises applications with TFS, GIT, Jenkins and cloud-based applications with Azure ARM JSON, PowerShell, Azure CLI .
  • Responsible for defining road map for migrating from client server architecture to private cloud and levering Services such as SAAS, PAAS and IAAS and created Azure Load Balancer , Update Domains and Fault Domains using ARM .
  • Responsible for creating / managing automation of build process, administration tasks , dynamic scaling, virtualization, Containerization and policy-based services using PowerShell, ARM scripting with JSON template.
  • Designed and configured Azure Virtual Networks ( VNets ), subnets, Azure network settings, DHCP address blocks, DNS settings, security policies and routing . Managed the Virtual Machines using ARM JSON templates using Azure .Net SDK.
  • Created scripts to monitor user traffic movement via DNS swap deployment into AWS elastic server and created a consolidated system infrastructure monitoring application to manage the deployments and deployment schedules.
  • Converted existing Terraform modules with version conflicts to utilize Cloud formation templates during deployments, used Terraform to create stacks in AWS, and Enhanced the Terraform scripts based on the requirement on regular basis.
  • Experience in Maintaining TFS, SharePoint environments and also Analyzed, defined, and developed build process improvements using TFS.
  • Created User Defined Routes with custom route tables for specific cases to force tunneling to the Internet via on-premise network and control use of virtual appliances in the customer’s Azure environment.
  • Monitoring the Licenses for Azure AD issues, resolving the Licenses Issue for Azure AD Users. Assigning the licenses based on groups and understanding new solutions for Azure Migrations.
  • Integrated Jenkins with Docker container by Cloud bees Docker pipeline plugin to drive all microservices builds out to the Docker Registry and then deployed to Kubernetes. Integrated Selenium automation regression test suite in Jenkins build pipeline.
  • Install and Manage security reporting tools to monitor any Active Directory changes . Plan and manage all the migrations and upgrades related to Active Directory and Domain controllers . Configured BGP routes to enable ExpressRoute connections between on-premise data centers and Azure cloud.
  • Efficiently used Ansible playbooks with Ansible role for installing packages on remote Agent less nodes, likewise, written various playbooks, securing a server with Ansible, provisioned and deployed with Ansible.
  • Handful Knowledge to automate daily task, by developing Ansible Go scripts, also written Ansible playbooks to launch AWS instances, wherein it is utilized to manage multiple web applications, Configuration files, used mount points and packages.
  • Performed application management tasks, such as rolling updates, injecting information into pods, and horizontal Pod autoscaling in Kubernetes and ran jobs using parallel processing.
  • Experience in Working on all phases of the software release process , i.e. wrapping up the release documents , the release/build test cases packages, bug notes etc. syncing up QA team and uploading to server for the customers.
  • Proficient in using the defect-tracking tools like HP ALM (QC), Bugzilla and deep knowledge of all modules of ALM such as Requirements, Test Plan, and Dashboard reports .

Confidential, OH

DevOps/Azure Engineer

  • Implemented/Maintained cloud network architecture using Azure virtual networks, VPN and express route to establish connectivity between on premise and cloud machines.
  • Manage Identity Access management of Azure Subscriptions, Azure AD, Azure AD Application Proxy, Azure AD Connect, Azure AD Pass through Authentication.
  • Deploying the Azure Resource Manager template via PowerShell by uploading supporting scripts such as PowerShell DSC scripts to an Azure Storage account and then reference those scripts from parameters in a template at deployment time and monitoring the deployment status from PowerShell and the Azure Management Portal.
  • Responsible for maintaining the Ubuntu, Linux and windows virtual servers on AWS EC2 with Chef Client nodes and upload the cookbooks to Chef-server from chef Workstation . Utilized Chef to manage Web Applications, Config Files, Database, Users, Mount Points, and Packages. Created Chef Recipes to automate build/deployment process.
  • Expert in utilization of LAMP stack image in diversified AWS instances across various subnets in Amazon VPC, whereas security groups and NACL’s are attached to provide high security.
  • Configured ELK ( Elastic Search, Log stash, Kibana ) stack with Jenkins for deep search and data analytics, centralized logging, and parsing which are obtained from Jenkins logs and syslog’s.
  • Hands-on Experience with build tools like MAVEN / ANT and deployed the artifacts (war & ear) to Nexus to share across different projects. Changed build.xml into pom.xml to build the applications using MAVEN scripts and troubleshooted Maven/Ant files .
  • Implemented automation with Boto3 , provisioned by Terraform and Ansible for performing various tasks like encrypting EBS volumes , backing AMI’s and scheduling Lambda functions which triggers routine AWS tasks by using bash and python scripts.
  • Created Solution Architecture based upon Microsoft Azure PaaS Services and designed solution for various system components using Microsoft Azure.
  • Developing and maintaining the build environment , the source code control system and managing build packages using TFS .
  • Utilized AppDynamics included an auto-generated flow map, for monitoring the updated application changes and monitoring controller performance. Integrated AppDynamics with Docker and monitor Docker container performance easily, to ensure that container meets the business logic .
  • Configured Splunk (Splunk Enterprise) to gain real-time Operational Intelligence across applications and services. Integrated Splunk with AWS to analyses data from over 15 AWS data sources including (AWS CloudTrail, AWS Config, Amazon Virtual Private Cloud Flow Logs, AWS Billing and Cost Management) to deliver security, operational and cost management insights via pre-built dashboards, reports and alerts.
  • Worked in testing automation code on cloud instances in AWS of different environments with various testing tools such as Test Kitchen and Chef Spec. Created and maintained documents for Chef finest practices proceedings to be used by developers as a guide to Chef Automation.
  • Installed and setup ELK (Elasticsearch, Logstash and Kibana) on a different operating system such as Linux and Unix -based Systems. Worked with Integration of ELK with Docker.
  • Configured an Elasticsearch cluster with one Master node and data nodes by using configuration management tool Ansible to automate the process on AWS EC2 Instances.
  • Worked with Nagios Log Server for searching log data and Set up alerts to send email notifications about potential threats and retrieve log data in one location, with high availability and fail-over built in. Quickly configured servers to send all log data with easy source setup.
  • Wrote shell scripts and Scheduled cron-jobs to automate daily and weekly jobs and monthly jobs for taking backup of log files.
  • Efficiently used Chef for developing automation, scripted in Python for managing and deploying various Java applications across Linux servers, also utilized Chef to configure and manage entire infrastructure.
  • Worked with EBS volumes and attached volumes to running EC2 instance . Backed up the data from Amazon EBS volumes to Amazon S3 by taking point-in-time snapshots and rebuilt new EBS volumes from snapshots. Configured S3 bucket for solutions like Backup & Recovery, Archiving, and Disaster Recovery.
  • Worked on the environment management in co-ordination with multiple teams and infra tickets, worked with JIRA for bug tracking, issue tracking, and agile project management.
  • Supported production applications 24X7 on-call on a rotational basis and created documents for all the process implemented.

Confidential

VMware Administrator

  • Extensive Knowledge on Installation, configuration and upgrade of Red hat Linux 3/4/5, AIX 5.3, VMware 4/5 operating systems.
  • Planned and involved in several migration waves for a server consolidation project which consists of numerous P2Vs and V2Vs within same and across various datacenters, P2Vs migrations are managed by utilizing vCenter Standalone Converter 5.X and V2Vs are managed through Zerto tool.
  • Installed and configured Version 2.0 of Zerto Virtual Replication for multisite replication, off-site cloning and backup with support for virtual machine (VM) boot order and automatic updates of VMware vApps changes.
  • Configured and automated VM migrations by writing scripts in PowerShell . Standardized network cable runs for VMware hosts across multiple data center.
  • Experience on Host Profiles, Distributed Switch, DRS, VMotion, SV-Motion , Resource pools, permissions, Patches, Snapshots, Tools Upgrade, disk expansions, Templates, and many more.
  • Installed and configured VMware ESX server 5.0/5.1 and created virtual machines on ESX Servers and involved in VMFS based storage in virtual center.
  • Extensively involved in troubleshooting bottlenecks of Memory, CPU, Devices and Network using ps , vmstat , iostat , netstat , sar , snoop , nfsstat for performance tuning. Package management (Install/update/remove) using W, YUM in Red Hat Linux.
  • Supported multiple vCenters and datacenters for production Servers and maintained VDI environment. Created templates built and updated and host patches.
  • Configured the vSwitch and port groups, Editing Security Policy and Traffic Shaping Policy for a Virtual Switch.
  • Hand-on Experience in Configuring and troubleshooting the ESX/ESXi Server using CLI tool PowerCLI.
  • Configured RAID and RAID groups, SAN storage on ESXI servers assigning the LUNs to the Virtual Machines running on the ESXi server.
  • Experience in planning failover and failback of protected and recovery sites using Site Recovery Manager.
  • Created a data store and uploaded necessary ISO files (Windows server and VCenter ) at datastore. Gained knowledge on Installation of VCenter VCSA (VC Server Appliance) and VC on Windows .
  • Keep track of health checks of the VMware vCenter servers and NSX Managers. Setup and installed NSX Managers, NSX controllers , host preparations and configuring distributed firewall rules and implemented load balancing techniques.

Confidential, NJ

DevOps Engineer/Build and Release Engineer

  • Responsible for the development and maintenance of processes and associated scripts using ANT/Maven as build tools for automated build, testing and deployment of artifacts Enterprise Application Archive(EAR), Web Application Archive (WAR), JSP's, and Servlets in various QA, Stg, Prod Environments.
  • Configured Jenkins continuous Integration for the execution of repeated jobs. Managed Subversion Branching, Merging and Tagging across each Production releases and perform builds using Hudson Continuous Integration Maven Scripts.
  • Designed pom.xml files for maven build scripts. Hands on experience in maintaining Atlassian products like JIRA and confluence and deployed specific versions of various modules of an application into target environment using Deploy. Performed clean builds according to the schedule published for a given release.
  • Monitoring of applications, servers, doing capacity planning using Nagios, Splunk and Zabbix for managing logs to notify the incident management system upon exceeding the threshold limits and business context to meet business demands.
  • Used python script for automating the Nagios alerts and send the email notifications on daily basis and executed them through Chef.
  • Managed the complete cycle of build process which includes the creation of make-files and maintaining consistent and up to date compiler levels. As a Release Engineer, supported and collaborated with multiple teams for multiple applications including Java .NET applications. Developed and enhanced Shell, Python scripts for building applications.
  • Perform various functions, like storing and accessing data on cloud by using REST API, also skilled in deploying, managing and building .Net applications, and migrating Active Directory and Team Foundation Server (TFS) from Windows Azure to on-site Hosted environment.
  • Configured Puppet for configuration management for VMWare vSphere on premise Infrastructure and taken control of Jenkins, GitHub, Artifactory and all internal build systems for development team on an enterprise-level Java-based cloud orchestration/automation tool.
  • Designed Puppet manifests and modules to manage client configurations files, services and deploy the builds across various environments Dev, STG and Production.
  • Developed Python scripts to migrate the source code from the SVN to Bitbucket by restoring vast commit history, was involved in CM planning and build/deploy processes.
  • Generated a complete, sanity QA test report of the Vision IO software build components success or failure, using Jenkins server all the build logs are automatically sent email notification to the respective teams. Gained knowledge in writing of the sanity test scripts of release deployments.
  • Analyzed Configuration Items (CI) and updated the features and issue faced are maintained in the document and after every deployment, delivered the Release notes on share point.

We'd love your feedback!