Ajith Redrigo

Responsible for planning, technical coordination, capacity assessment, implementation and operational readiness of infrastructure in the data center, on servers, in storage, on networks, for backup, in cloud and at end user level.
▸ As a technical leader I set priorities, reviewed deliverables, and resolved technical dependencies to ensure infrastructure teams, contractors and vendors adhered to approved designs, project standards, and implementation schedules.
▸ Provisioned and administered VMware vSphere & Hyper-V Windows Server 2019 + 2022 environments. Oversees the entire lifecycle from Virtual Machines (VMs), HA/DRS, vMotion, resource allocation, performance monitoring and capacity planning supporting 24×7 operations.
▸ End-to-end hybrid Azure infrastructure management including VMs, VNets, storage accounts, NSGs, identity integration and on-premises AD Synchronization through Azure AD connect and Entra ID.
▸ Containerized more than 8 prod workloads using Docker and Kubernetes using multi-stage builds, rolling deployments, HPA, RBAC, resource quotas, workload isolation and HA controls
▸ Developed CI/CD pipelines and infrastructure automation using PowerShell to make provisioning repeatable, able to be tracked and standardised across dev, staging and prod environmnets
▸ Directed the configuration and governance of enterprise network services, including VLANs, inter-VLAN routing, firewall policies, Active Directory, DNS, DHCP, Group Policy, and secure connectivity between infrastructure platforms.
▸ Conducted root-cause analysis for infrastructure incidents, coordinated technical recovery activities, captured corrective and preventive actions, and communicated risks and resolutions to project stakeholders.
▸ Planned and installed Veeam Backup & Replication with defined RPO and RTO requirements, that included backup validation, restoration methods, disaster-recovery documentation, and operational recovery plans.
▸ Managed the implementation of structured cabling, Wi-Fi, server, storage, backup and other ICT systems in terminal & operational zones as per technical drawings and approved project specifications.
▸ Responsible to Lead FAT, SAT, commissioning/testing and handover activates, review of method statements, technical submittals, architecture drawings, test scripts as built and O&M.
▸ Collaborated with internal departments to gather the functional and operational needs, determine infrastructure risk and recommend solutions that scale according to business needs on technology implementation roadmap supported auditorium operations.
▸ Demand security hardening, access-control standards and configuration baselines all critical platforms Patching requirements Governance (disaster-recovery readiness and audit readiness).
▸ Contributed to infrastructure strategy, technology assessment, lifecycle planning, vendor performance measurement and CI/CD process frameworks to improve reliability, security scalability and cost efficiency.

Administered and governed 200+ Active Directory user accounts for airport departments with Role-Based Access Control, enforces least-privilege access, secure on/offboarding policy while implementing periodic access review and organisational security policies.
▸ Led the implementation and day-to-day administration of Azure AD Connect for hybrid identity solution integrating on-premises Active Directory with Microsoft Entra ID providing secure hybrid identity, synchronised authentication, and seamless SSO to cloud-hosted applications.
▸ Created identity and endpoint security controls using Conditional Access, device-compliance policies, MFA and Microsoft Intune app-protection policies to greatly reduced unauthorised access helping improved the organisation+S security posture.
▸ Directed migration of 200+ corporate devices to Microsoft Intune MDM/MAM through coordination of users, departments, technical teams and vendors; resulted in device-management efficiency improvement by 40% and mobile security incident reduction by 25%.
▸ Technical leadership and maintenance of three-node Hyper-V failover cluster, hosting 40 Virtual Machines on Windows Server 2022 with 99.98% Availability through; capacity planning, live migration, Cluster Shared Volumes, dynamic memory provisioning, proactive monitoring and lifecycle management.
▸ Designed and led the biometric-to-HRMS automation implementation in partnership with HR and application stakeholders enabling highlights of reducing attendance processing time and administrative load by 50%.
▸ Implemented the Deloitte audit remediation activities by engaging technical teams, application owners, and management stakeholders; implemented application-level fixes to strengthen access controls for closing audit findings with external compliance requirements as well as data-protection status.
▸ Managed the IIS web infrastructure, as well as end-to-end Microsoft SQL Server administration (Always On Availability Groups, Windows Server Failover Clustering, indexing, backup and recovery, performance tuning, security hardening and database-availability planning).
▸ Created and administered Veeam backup/disaster-recovery design that meets pre-defined RPO and RTO goals, including reinforcement of backup integrity, restoration readiness, business continuity, and document recovery procedures.
▸ Responsible for ManageEngine ITSM and infrastructure monitoring tools, including asset lifecycle management, automated patch management, SLA-based service desk functionality, incident escalation, change control, system monitoring, and compliance reporting.
▸ Managed root cause analysis and resolution of major incidents related to identities, servers, virtualization, databases, applications, and endpoints, ensuring prompt restoration of services and implementing preventive measures.
▸ Worked with airport departments, management, auditors, vendors, and technical personnel to comprehend their needs, prioritize infrastructure investments, mitigate risks, and provide scalable IT solutions.
▸ Supervised junior engineers and support staff, assessed technical tasks, created operating procedures, raised documentation standards, and promoted knowledge transfer within the IT organization.

▸ Constructed AWS cloud environment entirely from scratch after DigitalOcean migration (VPC, IAM, Route 53, CloudFront, API Gateway) - 99.9% uptime, 15-20% cost savings.
▸ Built CI/CD pipelines (Jenkins, Docker, GitLab CI/CD) with automated unit/integration/regression testing gates - reduced deployment time by 60%.
▸ Automated infrastructure provisioning with Terraform (Aurora RDS, EKS clusters, auto-scaling groups) and Ansible - consistent multi-environment configuration management.
▸ Desgined Kafka 3-broker event stream architecture that separated Driver and User app microservices - 40% decrease in latency and prevented cascading failures at 3 times peak load.
▸ Implemented full-stack observability solution: Prometheus + Grafana + ELK + Datadog APM - MTTR increased by 35%. ▸ Desgined HA cluster architecture using Corosync & Pacemaker - reduced unplanned downtime by 45%.
▸ Automated pipelines for Android and iOS apps with Jenkins - fast go-to-market DevOps for mobile platforms.

▸ CI/CD pipelines (Jenkins, Docker) that were designed and implemented for smooth deployment into several environments and reducing the time cycle of releases of client websites.
▸ Managed Ubuntu and Windows servers for various clients - achieved a success rate of resolving issues on the first attempt of 98%, along with increasing the performance of the servers by 20%.
▸ Saved costs on AWS by 15 to 20% through CloudWatch and Datadog monitoring, right sizing and scheduling.
▸ Created automated EKS cluster setup using Ansible and Terraform, which helped deliver infrastructure consistently with version control and rollback.
▸ Improved log management by optimizing the ELK Stack.

▸ Developed CI/CD pipelines for Healthcare Platform and Q2C SaaS applications (Jenkins + Docker) - 40% decrease in deployment errors.
▸ Maintained AWS environment (6 EC2 instances, RDS, CloudFront, and API Gateway) and ensured IAM, WAF, and TLS/SSL security configurations - 30% decrease in number of security-related incidents.
▸ Set up RabbitMQ queueing system for async task processing for appointment, notification, and billing microservices - increased efficiency and reliability.
▸ Set up Datadog proactive monitoring with custom dashboards and thresholds - 40% decrease in average incident response time.
▸ Simplified build, testing, and deployment process with CI/CD pipelines - decreased manual release effort by 70%.