DevOps/DevSecOps Architect
Confidential
Total years of experience :18 years, 2 Months
DevOps/Cloud Architect
• Prepare Technical Architecture Documents ( HLD/LLD) for Client Project Deliverables
• Define Optimization, Security and scalability for client’s needs and technological stack
• Defined Blue Print deployment model internal and Azure cloud stack for Software As A Service.
• Discuss with Vendors, partners, research scholars and Solution Architects a to get optimum solution for the implementation.
• Doing POC for new technology stack with Vendors / Application Team
• Designed and Implemented automated Infrastructure creation from Private Cloud (VMWare/OpenStack) and Azure/GCP/AWS Cloud Infrastructure and deployed applications with the help of Terraform/Ansible/Jenkins/Artifactory/Helm
• Continuous Integration (CI) from pipelined fashion model based on workflow with the help of Bitbucket, Jenkins and Artifactory
• Continuous Delivery (CD) from Ansible/Puppet/Helm Configuration Management tools
• Continuous Monitoring enabled from Grafana, Prometheus, Nagios
• Debugging and Reactive Monitoring enabled from EL(F)K and Splunk
• Micro Service Model transformation and Deployment to OpenShift and K8s
• Good understanding of Network Security, Public Key Infrastructure, Subnetting, DNS, VPN, Business Continuity, Disaster Recovery Solution
DevSecOps
• Engage with Research Scholars and Security Architects to define proper foot print for Cloud Solution Architecture and Mitigate security risk management
• Security Threat Model and Architecture defined and hardening as part of Security Standard Frameworks
• Defined, Implemented Vulnerability Assessment from Nessus/Kali and Cloud Provider Security Assessment Tools and Static Code analysis with enterprise & opensource
• Prepared Docker image build as per standard practises and assessed from security tools
• Engaged with IS, Security Operation Centre and Cyber Defence team to make sure security use cases definition and monitoring
Public Key Infrastructure
• Strong experience on Safenet Luna6/7 HSMs, key management, and certificates
• Designed and Implemented High available Key Management Infrastructure
• Actively engaged for Code Signing Infrastructure for Application Signing and Binaries
Cloud Native
• Engaged with RedHat Premium support for building highly available OpenShift Cluster and Application Modernization with R&D Team
• Application migrated from Monolithic to Micro Service and deployed on OpenShift and AKS with the help of Custom Resource Deployment (CRD)
• Actively involved fault tolerant and re-silent model Logging Cluster Deployment for proactive and Reactive Solution from the application
• Defined and integrated Docker Application transformation and Security practise implementation from OpenShift Cluster as well as UBI Image preparation from pipeline jobs and Crypto Signing of Images
Team Player
• Engaged with R&D Team, DevOps Folks, Security Researchers, Stake holders for Application modernization/ Performance Tuning/User experience improvements
• Defining road maps for new projects and managing resource planning, risk management, Employee mentoring and performance management, change management, reviewing KPI’s and status reporting
• Conducting periodic meetings with subordinates for priorities and ensuring work is flowing smoothly
• Chief architect of the IT team and heading DevOps and System Engineering team
• Define, Design for DevOps Road Map and key resources on-board
• Discussing with Vendors and partners to get optimum solution for the implementation.
• Designed and Implemented Is-land Architecture model Infrastructure for 100% Product Availability
• Managed 10 Million Dollar Infrastructure project and coordinated with vendors/consultants
• Prepared Low level and High level design documents for Cloud Infrastructure and Application Deployment
• Good experience in Cloud Architect, DevOps and Continuous Integration (Jenkins), Cloud solutions and Automation of build and deployment processes, Cross platform expertise
• Act as coach to advise and assist technical specialists and architects in any architecture disciplines.
• Closely worked with AWS Team for fork lift applications from datacentre to AWS Cloud
• Created Infrastructure Code for AWS different regions as well as own datacenter’s from centric model deployment for business continuity and disaster recovery model.
• Good hands on experience in Puppet for Support and Maintenance of enterprise-level applications and infrastructure
• Good experience for fully automatic Deployment from scratch level without any manual intervention.
• Migrated CVS to Github with Smart branching mechanism for DevOps and continues deployment.
• Setting up of the Development and Production environments efficient and fully automatic model
• Deploy releases and patches on production/staging/demo servers across the world from single click
• Monitoring all the production servers and applications with the help of Nagios and Cloud watch
• Managing all the task from Kanban Board, Jira Tickets and Confluence Space for documentation
• Developed 1000+ scripts for Fully automatic deployment model
• Strong experience in Firewall management in Cisco/Juniper/OpenSource tools and AWS Security groups
• Strong experience in Highly available systems from Elasticity model with cost effective way without any down time from customer prospective
• Designed Iceland based architecture for high available product solution with the help of Puppet, AWS services, Jenkins, Bash/Python/Powershell scripts.
• Managed multiple vendors and consultants for cost effective way with time lined project to achieve the goal on time.
• Strictly following PCI-DSS exercise and taking preventive actions for Security Threats
• Working closely with Management, NOC, QA and R&D team
• Built highly scalable and efficient systems that provided literally hundreds of virtualised Development and QA environments to our teams at very low cost. Fully automated and managed, new systems and environments could be added in minutes, and problems tracked in seconds via comprehensive monitoring and automatic self-healing.
• Experience in the business and technical area of Linux/Windows/VMWare Systems and Network Management, Security, Database, Shell Scripting, storage management, backup recovery, performance analysis and tuning
• Monitoring the work flow within the department and ensuring that all preventive and corrective actions are being made promptly.
• Participating in developing the department’s budgets and managing the activities within towards achieving the set budget.
• Deployment and delivery of application as per the project management chart. Handled project activities involving various requirements with respect to estimating, delivering, documenting, training, monitoring overall project operations for ensuring timely completion.
• Perform, evaluate and report architecture maturity assessments to identify strengths and weaknesses and address ways to improve the enterprise architecture performance
• Verifying and preparing POC for Kubernetes integration to development for next generation model.
