Solution Architect
Hamad Medical Corporation
مجموع سنوات الخبرة :14 years, 11 أشهر
Implemented Azure HUB Landing Zone along with Workload Spoke (Prod/Testing)
•Configure Express Route/S2S VPN/Point to Site VPN connection from On-Prem to Azure Cloud
•Configure multiple Entity to Azure Cloud with S2S VPN to access Resources.
•Designed and configured Azure Virtual Networks (VNet), RG, subnets, NSG, UDR
•Design DR solution using the Azure Site Recovery (ASR)
•Deployed Azure IaaS virtual machines (VMs) and Cloud services (PaaS role instances) into secure VNet and subnets.
•Site-Site VPN / ExpressRoute / vNet to vNet Peering / Peering/Azure Virtual Network Gateway
•High Availability (HA) and Disaster Recovery (DR) ASR
•Configure Azure Bastion /DDoS/Azure Firewall/Key Vault/JIT/Azure Lock/PIM/ Azure Policy, UDR
•Implement and configure Azure Bastion to Access VM in Secure channel only
•ASR (Azure Site Recovery) for Replication of servers from on-premises (physical/vmWare) to Azure Cloud.
•Exposed Virtual machines and cloud services in the VNet to the Internet using Azure External Load Balancer.
•Provided High Availability in the VNet with Azure Internal Load Balancer. (Public/Private)
•Designed Network Security Groups (NSGs) to control inbound and outbound Traffic access to network interfaces (NICs), VMs and subnets.
•Leveraged vNet system routes and underlying route table that holds Local VNet Rules, On-premises Rules, Internet Rules and IP Forwarding the design basis.
•Azure security and identity services including but not limited to Azure Active Directory, Domain Services, Azure Security Center, Azure Governance, Security, Authentication, MFA, Data Privacy, Identity and Access Management (IAM), Access Controls and Security Protocols,
•Designed User Defined (UDR) Routes with custom route tables for specific cases to force tunneling to the Internet via on-premises network and control use of virtual appliances in the customer’s Azure environment.
•Configured VMs in Availability Sets to provide resiliency for IaaS based solution and Scale Sets using Azure Resource Manager to manage network traffic
•Implementation of Office 365 and Azure Active Directory for single sign on, authentication, authorization, and Azure Role-based Access Control (RBAC).
•Installed, configured, administered, monitored Azure, IAAS and PAAS, Azure AD.
•Extended On-Prem Domain Controller to Azure Cloud
•Created, managed, monitored VM, Web site, ARM templates
•Used Azure BLOB/File Storage to access required files and Azure Storage Queues to communicate between related processes.
•Azure Network Configuration - Created Resource Groups using resource manager which allows to see cost/billing and monitoring information for resources within a resource group.
•Experience on Azure App Services, Azure site Recovery, Azure Migration tools, Traffic Manager, Resource Manager
Azure Networking, Azure Storage
•Experience in Microsoft Azure Compute & Storage Services, Azure VNet, Azure AD, Azure Resource Manager, Load Balancer, Traffic Manager, etc. .
•Experience with Hybrid cloud or migrations to cloud from vmWare/Hyper-V to Azure with Azure Migration
•Azure Active Directory Migration from On-premises ADDS through AD Connect,
•Intune - MAM/MDM, Access Control List.
•Application Proxy /Enterprise Application/ Azure Active Directory Protection/Passthrough Authentication, Azure Multifactor / Conditional Access, Integrating SaaS Applications/Active Sync. with Azure AD.
•Site-Site VPN / ExpressRoute / vNet to vNet Peering / Peering/Azure Virtual Network Gateway
•Self-Service Password Reset, Azure AD Identity Protection.
•Configure Azure Bastion /DDoS/Firewall/Key Vault/JIT/Azure Lock/PIM/ Azure Policy, UDR
•Implement and configure Azure Bastion to Access VM in Secure channel only
•Understanding and working on Azure Disk, Azure Resource Monitoring, Azure Automation, Azure Backup, and site recovery.
•Wipro
Implemented Azure HUB Landing Zone along with Workload Spoke (Prod/Testing)
•Configure Express Route/S2S VPN/Point to Site VPN connection from On-Prem to Azure Cloud
•Configure multiple Entity to Azure Cloud with S2S VPN to access Resources.
•Designed and configured Azure Virtual Networks (VNet), RG, subnets, NSG, UDR
•Deployed Azure IaaS virtual machines (VMs) and Cloud services (PaaS role instances) into secure VNet and subnets.
•ASR (Azure Site Recovery) for Replication of servers from on-premises (physical/vmWare) to Azure Cloud.
•Exposed Virtual machines and cloud services in the VNet to the Internet using Azure External Load Balancer.
•Provided High Availability in the VNet with Azure Internal Load Balancer. (Public/Private)
•Designed Network Security Groups (NSGs) to control inbound and outbound Traffic access to network interfaces (NICs), VMs and subnets.
•Leveraged vNet system routes and underlying route table that holds Local VNet Rules, On-premises Rules, Internet Rules and IP Forwarding the design basis.
•Azure security and identity services including but not limited to Azure Active Directory, Domain Services, Azure Security Center, Azure Governance, Security, Authentication, MFA, Data Privacy, Identity and Access Management (IAM), Access Controls and Security Protocols,
•Designed User Defined (UDR) Routes with custom route tables for specific cases to force tunneling to the Internet via on-premises network and control use of virtual appliances in the customer’s Azure environment.
•Configured VMs in Availability Sets to provide resiliency for IaaS based solution and Scale Sets using Azure Resource Manager to manage network traffic
•Implementation of Office 365 and Azure Active Directory for single sign on, authentication, authorization, and Azure Role-based Access Control (RBAC).
•Installed, configured, administered, monitored Azure, IAAS and PAAS, Azure AD.
•Extended On-Prem Domain Controller to Azure Cloud
•Created, managed, monitored VM, Web site, ARM templates
•Used Azure BLOB/File Storage to access required files and Azure Storage Queues to communicate between related processes.
•Azure Network Configuration - Created Resource Groups using resource manager which allows to see cost/billing and monitoring information for resources within a resource group.
•Experience on Azure App Services, Azure site Recovery, Azure Migration tools, Traffic Manager, Resource Manager
Azure Networking, Azure Storage
•Experience in Microsoft Azure Compute & Storage Services, Azure VNet, Azure AD, Azure Resource Manager, Load Balancer, Traffic Manager, etc. .
•Experience with Hybrid cloud or migrations to cloud from vmWare/Hyper-V to Azure with Azure Migration
•Azure Active Directory Migration from On-premises ADDS through AD Connect,
•Intune - MAM/MDM, Access Control List.
•Application Proxy /Enterprise Application/ Azure Active Directory Protection/Passthrough Authentication, Azure Multifactor / Conditional Access, Integrating SaaS Applications/Active Sync. with Azure AD.
•Site-Site VPN / ExpressRoute / vNet to vNet Peering / Peering/Azure Virtual Network Gateway
•Self-Service Password Reset, Azure AD Identity Protection.
•Configure Azure Bastion /DDoS/Firewall/Key Vault/JIT/Azure Lock/PIM/ Azure Policy, UDR
•Implement and configure Azure Bastion to Access VM in Secure channel only
•Understanding and working on Azure Disk, Azure Resource Monitoring, Azure Automation, Azure Backup, and site recovery.
•Responsible for Server Migration, Integration, Deployment, Data Centre Build-up.
•Managing VMware infrastructure environment ESXi 6.5 servers, 2000 plus virtual machines.
•VM Servers build & rebuild (Deploying the New VM from the Template and Cloning an Existing VM) as per the client request through change management process.
•Installing and configuring ESXi Servers.
•Installing, configuring, and managing virtual infrastructure and vCenter.
•Creating and managing virtual machines and installing VM Tools into VM’s.
•Manage VM’s using VMware vCenter/Web Access.
•Installation and configuration of virtual machines in an Enterprise SAN environment.
•Security hardening and Monitoring of VM’s & ESX servers (CPU, Memory, Disk, Network Utilization) for Security Compliance.
•Creating and managing VM Ware cluster. Enabling HA and DRS features in a cluster.
•Configurations of Virtual switches and network connections.
•P2P and P2V conversions by using VMware Converter.
•Performing Snapshots, Cloning, cold migrations, and hot migrations.
•Creating templates from VM’s and deploy VM’s from templates and allocate resources.
•Moving VM’s from one LUN to another LUN using vMotion.
•SWAN IT
• Worked on Complete VMWare environment
• Responsible for Server Migration, Integration, Deployment, Data Centre Build-up.
• Managing VMware infrastructure environment ESXi 6.5 servers, 2000 plus virtual machines.
• VM Servers build & rebuild (Deploying the New VM from the Template and Cloning an Existing VM) as per the client request through change management process.
• Installing and configuring ESXi Servers.
• Installing, configuring, and managing virtual infrastructure and vCenter.
• Creating and managing virtual machines and installing VM Tools into VM’s.
• Manage VM’s using VMware vCenter/Web Access.
• Installation and configuration of virtual machines in an Enterprise SAN environment.
• Security hardening and Monitoring of VM’s & ESX servers (CPU, Memory, Disk, Network Utilization) for Security Compliance.
• Creating and managing VM Ware cluster. Enabling HA and DRS features in a cluster.
• Configurations of Virtual switches and network connections.
• P2P and P2V conversions by using VMware Converter.
• Performing Snapshots, Cloning, cold migrations, and hot migrations.
• Creating templates from VM’s and deploy VM’s from templates and allocate resources.
• Moving VM’s from one LUN to another LUN using vMotion.
Projects: - for Migration, Integration
’s in