Donny Achmadi

Leading cloud infrastructure and network engineering for one of Australasia's largest credit bureaus and data analytics providers, managing a complex multi-subscription Azure environment at enterprise scale.

Architected and deployed a Hub-and-Spoke network topology with Zero-Trust principles across 21 Azure subscriptions and multiple regions, improving security posture and reducing east-west attack surface.

Executed BYOIP Custom IP Prefix migration (5× /24 public IP ranges) from on-premises to Azure, eliminating IP dependency risk during a major acquisition integration programme.

Led post-acquisition network integration between two large corporate networks, resolving IP address conflicts across 300+ resources through systematic IP mapping and NAT policy design.

Delivered cloud migration readiness for 500+ workloads: 300+ apps re-platformed to Azure PaaS (App Services & SQL Managed Instances) and 200+ VMs migrated via IaaS (Azure Migrate).

Managed Terraform and GitHub-based IaC pipelines to automate infrastructure provisioning and configuration drift prevention across all Azure subscriptions.

Designed and implemented complex 3rd-party network integrations using Azure ExpressRoute, IPSec VPN tunnels, and custom routing policies to support regulated data exchange requirements.

Actively provided strategic recommendations to the architectural team on cloud design using Cloud Adoption Framework (CAF) approach, significantly enhancing project deployment outcomes.

Senior cloud consultant delivering Azure infrastructure, security, and migration solutions for enterprise customers across NZ. Led IaC-first engagements from design through to production handover.

Designed and deployed Azure Landing Zones using Cloud Adoption Framework for multiple enterprise customers, with 100% IaC coverage via Terraform and Azure DevOps CI/CD pipelines.

Led cloud migration design and execution (on-premises to Azure) using Azure Migrate, including re-architecture of legacy workloads for cloud-native patterns.

Conducted Azure security assessments and remediation engagements, identifying and resolving critical misconfigurations aligned to CIS (Center for Internet Security) and Microsoft Security Benchmark standards.

Modernised stale Azure DevOps projects with ARM Templates and updated pipeline configurations, restoring automated deployment capability for production environments.

Delivered network and security assessments with infrastructure refresh recommendations, enabling customers to modernise legacy hardware at reduced total cost of ownership.

Delivered professional services across cloud infrastructure, hybrid cloud, network security, and managed services for 10+ enterprise customers spanning finance, government, and telecommunications.

Designed and deployed Azure Landing Zones with Terraform Cloud (IaC) for multiple customers, establishing repeatable and auditable cloud provisioning frameworks.

Architected Hybrid Cloud solutions using Azure Stack HCI including network infrastructure, compute, storage, Microsoft Azure Backup Server (MABS), patching automation, and workload migration.

Implemented Azure Sentinel (Microsoft Sentinel) SIEM with data connectors for both on-premises and cloud-native log sources across multiple customer environments.

Designed and deployed Private Cloud environments with KVM hypervisor, integrated network infrastructure, and firewall policy management.

Operated managed services across Azure, AWS, Nutanix, Hyper-V, and Kubernetes for 10+ customers, maintaining SLA compliance with automated monitoring and alerting via Grafana and Prometheus.

Conducted Azure health checks and security reviews with end-to-end remediation, improving customers' security posture and reducing compliance exposure.

(The Company was acquired by Kordia)

Designed and deployed enterprise data centre network infrastructure (Arista, Cisco) and Application Delivery Controllers (Citrix ADC) for customers across NZ.

Delivered Nutanix HCI deployments including compute, storage, and networking integration across multiple customer environments.

Executed Azure cloud migrations (lift-and-shift) and managed ongoing operations for Azure, Hyper-V, Nutanix, and Megaport cloud networking.

Built capability in container orchestration technologies (Docker, Kubernetes) to support growing customer demand for modern application platforms.

Architected public cloud infrastructure and implemented cloud object storage using Cloudian HyperStore for the NEO Cloud service platform.

Collaborated with development teams to build the NEO Cloud service portal, aligning architecture to support self-service provisioning and scale-out storage requirements.

Perform assessment also with recommendations for Data Center network and security improvement and monitor its deployment. Both are either for internal or customer infrastructure.

Work closely with the Engineering team to perform Research and Development (R&D) to enhance the product portfolio.

Created detailed design (low-level design), implementation, and operational and test documents as part of the consulting team.

Responsible for sharing information and best practices with others. May be required to support and instruct less experienced co-workers, through classroom training sessions or on-the-job mentoring.

Managing Cloud and Network Infrastructure, both physical and virtual with VMware platform for Public and Private Cloud.

Lead Engineering team for Planning, build, and develop Network Infrastructure with properly system configuration.

Perform further analysis of each network outage based on the collected data from any Infrastructure element and another division team.

Planning, build and develop Cloud Network Infrastructure of “Green-View” Cloud Services.

Conduct installation and configuration Network Infrastructure of Cloud Network; both physical and virtual system with various platform: Router (Mikrotik and Vyatta) and Switch (Dell PowerConnect, Cisco Catalyst, and 3Com).

Monitor and Configure Infrastructure and Network Monitoring System.

Perform Installation and manage physical server (HP, Dell) with virtualization of Vmware (ESXi Vsphere 5.1, ESXi Vcenter 5.1)

Planning development of Wireless Area Network (WAN) over Base Tower Station (BTS) in Jakarta and Greater area for distributing Backhaul Network Indosat SuperWifi

Handling Installation and Configuration infrastructure Backhaul of Indosat SuperWifi onsite at Base Tower Station (BTS) in Jakarta and Greater Area for Switch (Cisco Catalyst, Alcatel Omni Switch, Juniper and TP-Link) and Converter E1 to Ethernet (Raisecom)

Connecting BTS from Backhaul to Edge site via Access Point 5.8Ghz (Ruckus, Altai and Aruba Access Point)

Troubleshoot and Maintenance Backhaul Infrastructure