pragash sah teli

• Designed and deployed secure internal company networks using VLAN segmentation, firewall policies,
and routing rules to isolate production and internal traffic.
• Configured Policy-Based Routing (PBR) and Access Control Lists (ACLs) to manage network traffic and
separate internal systems from guest and IoT devices.
• Established and maintained secure IPsec VPN connections with external banking partners for encrypted
communication.
• Implemented ISP redundancy and failover configurations to improve service availability for critical com
pany systems.
• Led migration of endpoint protection from Check Point Harmony to CrowdStrike Falcon EDR and
managed endpoint security policies and alerts.
• Hardened Microsoft 365 environments using Conditional Access policies, MFA enforcement, RBAC, and
device compliance controls.
• Built and deployed a production Web Application Firewall (WAF) using Nginx ModSecurity to protect
web services from common web attacks.
• Implemented rate limiting, IP blocking, and protections against common OWASP web vulnerabilities.
• Configured centralized logging pipelines using ELK Stack and Loki, along with Prometheus and Grafana
dashboards for infrastructure monitoring.
• Configured and secured Kong API Gateway for authentication, API routing, and traffic management.
• Supported ISO 27001 audit preparation by maintaining infrastructure documentation, network diagrams,
and security evidence.
• Served as the primary escalation point for complex network and infrastructure issues.

• Built CI/CD pipelines using GitLab CI, Docker, Jenkins, Python, and Bash scripting for automated
development and deployment workflows.
• Created and maintained optimized Docker base images for application testing and staging environments.
• Deployed and maintained Jenkins infrastructure and ELK Stack clusters for centralized logging and
system monitoring.
• Configured Linux-based routers and local file servers to improve office network performance and reliability.
• Contributed to infrastructure and system modifications for NEXS, a customized Linux operating system
used for offline e-library platforms.

• Gained hands-on experience with AWS cloud infrastructure, workload migration concepts, and cloud
resource management.

• Built and deployed scalable application infrastructure using Docker Compose, Nginx load balancing, and
MongoDB replica sets supporting 7, 000+ daily active users.
• Optimized file delivery systems for large media content including video, audio, and PDF resources.

• Managed Linux hosting servers running Nginx, Docker, and WHM/cPanel environments supporting over
2, 000 user accounts.
• Improved infrastructure reliability by implementing automated monitoring, resource tracking, and alert
ing systems.
• Built deployment workflows using GitHub Actions for automated testing and application deployment.
• Deployed and maintained application environments using Next.js, Node.js, Redis, MySQL, and Rab
bitMQ.
• Configured and tested secure IPsec VPN tunnels between hosting infrastructure and cloud environments.
• Implemented MySQL master-slave replication for backup and database redundancy purposes.
• Investigated infrastructure outages and application-level issues across Linux hosting and Microsoft 365
environments.