DevSecOps Engineer

 Implement security best practices in AWS including multi factor authentication, access key rotation, role-based permissions, enforced strong password policy, configured security groups and NACLs, S3 bucket policies and ACLs, etc.
 Architect and configure Dev/Stage/QA environments in AWS (VPC, subnets, security groups, EC2 instances, load balancer, RDS, Redis, route53, etc.).
 Optimize cost through reserved instances, selection and changing of EC2 instance types based on resource need, S3 storage classes and S3 lifecycle policies, leveraging Auto Scaling etc.
 Leverage EC2, Created Snapshot API call to create snapshots of EBS Volumes on scheduled intervals.
 Configure CloudWatch alarm rules for operational and performance metrics for our AWS resources and applications.
 Setup and configure log files for detail monitoring and alert notification when changes are made.
 Configure S3 events to set up automated communication between S3 and other AWS services. Deployed and configured infrastructures using Ansible.
 Manage provisioning of AWS infrastructures using CloudFormation.
 Design for high availability and business continuity using self-healing-based architectures, fail-over routing policies, multi-AZ deployment of EC2 instances, ELB health checks, Auto Scaling, and other disaster recovery models.
 Develop SSM automation documents for multi-region and multi-account execution.
 Setup necessary permissions for multi-region and multi-account Automation execution.
 Create patch management using Systems Manager automation for multi-region and multi region execution.
 Implement preventive guardrails using Service Control Policies (SCPs).
 Implement detective guardrails using Cloud Custodian policies and AWS config.

 Ensured the provision of secure voice and data communication by using radio voice procedure, codes and encrypting devices, via HF and VHF frequency bands.
 Analysed and determined the best antenna propagation technique to apply in order to obtain the best radio wavelength.
 Managed complex radio systems for senior management and achieved system upgrade using the latest software.
 Managed head quarter’s equipment and expense store; accounted for stock, placed demands for consumable items via computer inventory management system and supplied to different departments.
 Achieved 95% serviceability of generators, torque ranges, battery testers and fire extinguishers.
 Eliminated single point of failure in production architecture designs by deploying service instances (e.g., EC2 or RDS) across two or more isolated AZs based on our customer’s actual resiliency and availability requirements.
 Leveraged Auto scaling groups to right-size EC2 pools to match the level of demand and helped to manage costs by eliminating excess capacity to maintain optimal level of resources.
 Democratized advanced technologies in our architecture patterns including leveraging ECS, EKS, Lambda functions, parameter store, DynamoDB etc.
 Released, provisioned and deployed software using git, Jenkins, terraform and packer (AMIs)

 Design and implement for elasticity and scalability using ElastiCache, CloudFront – Edge locations, RDS (read replicas, instance sizes).
 Implement security best practices in AWS including multi factor authentication, access key rotation, encryption using KMS, firewalls- security groups and NACLs, S3 bucket policies and ACLs, mitigating DDOS attacks.
 Implement AWS Organization to centrally manage multiple AWS accounts including consolidated billing and policy-based restrictions.
 Develop a solution design document as well as low level design for companies.
 Install and use Ansible for configuration management with ansible playbooks.
 Implement Jenkins, GitHub and Git for version control, code build, testing and release in CI/CD pipelines.
 Export DynamoDB tables to on-premise servers using data-pipeline jobs.
 Monitor end-to-end infrastructure using CloudWatch and SNS for notification
 Use AWS system manager to automate operational tasks across AWS resources.
 Use System Manager to automate operational tasks across VZM AWS infrastructure.
 Build kinesis dashboards and applications that react to incoming data using AWS provided SDKs; and exported data from kinesis to other AWS services including EMR for analytics, S3 for storage, Redshift for big data and Lambda for event driven actions.
 Develop and document security guardrails for AWS Cloud environments.

 Ensured data recoverability by implementing systems snapshot, AMIs, RDS Replicas, and application-level backup to S3.
 VPC build with Private and Public Subnet couple with VPNs setup back to on-premises datacenter and cooperate offices.
 VPC peering with other accounts allowing access and routing to service and users of separate account to communicate.
 Monitored Network, CPU, disk, and connectivity with CloudWatch and setup to trigger alarm and notify system administrators.
 Aided setup for and configured for logs files detail monitoring and alerts notification when changes were made.
 Performed root-cause analysis of recurring issues, system backup, and security setup.
 Configured security groups and locked down the various authorized subnet and IP addresses in AWS.
 Migrated high availability webservers and databases to AWS EC2 and RDS with minimum or no downtime.
 Life cycle configuration for data within buckets in accordance with how often it can be accessed thereby minimizing cost.
 Prepare Standard Operating Procedures (SOPs), work instructions, and related supporting documents based on Quality Systems Unit guidelines

 Aided in building strong relationships with clients, understanding their motivations behind projects and own technical activities to ensure the required business value is delivered.
 Worked closely with Data Scientists to understand the needs and implementation of Artificial Intelligence, Machine Learning and Deep learning applications.
 Acted as the technical authority and escalation point for AWS technical issues and decisions.
 Ensured the translation of business requirements (both functional and non-functional) into a solution, aided in ensuring compliance with the organizations’ strategy, policies, and standards.
 Maximized the advantage of Serverless technologies in designing AWS solutions, such as Lambda, S3, Dynamo DB, and API Gateway.
 Played a pivotal role in helping our clients with problems such as designing and executing dev-ops strategies, launching new API market offerings and mobile applications to improve market share for customers.
 Created new machine learning and data analytics services in the cloud.
 Understanding of continuous integration and delivery, with implementation in AWS Code or Jenkins.