PROFESSIONAL SUMMARY:

• 4+ years experienced, meticulous & detail - oriented Azure Engineer possessing a proven track record of server development & management, cloud design, architecture, management & automation, process enhancement, system administration as well as stakeholder management. Proficient in the deployment as well as management of cloud-based infrastructure, especially on Microsoft Azure. Highly skilled in managing different internal and external stakeholders as well as troubleshooting issues and initiating corrective actions.
• IT: Server management, Cloud management, IAM, MFA, Migration to cloud, Linux Administration, PowerShell Scripting, Data Warehousing, SQL Server, Python, Process Automation, Data Migration, Troubleshooting, Server Development.

WORK EXPERIENCE:

AZURE CLOUD ENGINEER

Confidential

Responsibilities:

• Configured and deployed Azure VMs and manage RBAC for users and administrators.
• Proficiency with configuring, managing, and troubleshooting IAM with Azure AD.
• Deployed Azure AD Connect (for identity migration from AD).
• Deployed virtual machines (VMs) and Cloud services (PaaS) into secure VNets and subnets.
• Hands-On experience on Azure Virtual Networks, VPN-Point to Site, Site to Site, Express route connectivity.
• Design, plan, and migrate deployments of customer on-premises data centre/applications to cloud.
• Migration of Infrastructure, data and applications out of legacy data centers to cloud
• Deployment, Migration and configuration of on-premises server workloads to Microsoft Azure using Azure Migrate.
• Assist with creating cloud migration strategies, defining delivery architecture, creating the migration plans, designing the orchestration plans, and more.
• Ability to perform infrastructure discovery and assessments working with Architecture team
• Use troubleshooting skills and work closely with operations, support, engineering and/or other functions to ensure successful migrations.
• Identify workarounds for specific issues and corner scenarios observed during migration.
• Planning and design of hub and spoke VNets connectivity security and firewall as perimeter security.
• Creation and administration of route tables /UDR to manage traffic route within azure environment
• Troubleshoot Active Directory and Azure Active directory synchronization issues.
• Troubleshoot issues and engage with teams and vendors for issue resolutions.
• Expertise in handling mail routing and mail-flow related issues.
• Troubleshoot ExO mail delivery issues in exchange admin centre and resolving them within SLA.
• Set-up of ExO security with antispam, anti-phish and DLP in exchange admin centre.
• Troubleshooting of authentication related issues with Azure Identity (IAM), AD and ADFS connectivity of applications to office 365 and Azure services.
• Configuring IAM for users, groups and other Identity objects to sync with SSO applications like Azure AD Enterprise applications.
• Administration of Multi-Factor Authentication for users in Azure and Office 365 services.
• Reviewing and troubleshooting client security infrastructure working with Microsoft defender for cloud to identify and remediate issues to keep resources healthy.
• Workload security on Azure Microsoft Defender for Cloud adding VMs to Just in Time access for RDP.
• Custom Azure Policies definition and assignment of custom and built-in at Subscription, Management Group scope.
• Creating PIM roles to guide Just-In-Time access to Azure AD roles and Azure resources.
• Troubleshooting active directory and Azure Active directory regarding users and groups on-prem and in a hybrid environment.
• Work with application engineering teams on projects such as migration, containerization, deployment on serverless features like Web App, Azure Functions etc.
• Configured diagnostic settings on resources to collect metrics and logs with azure monitor and log analytics workspaces.
• Management of applications deployed on VMs for security, hardware availability with VMSS.
• Configure Azure backup and disaster recovery with site recovery as fail-over.
• Set-up load balancing using Azure internal and external LB with backend pool and load balancing rules.
• Azure VM disk management, resizing VMs, Disks and disc encryption.
• Deployment
• Configuration of VMSS being added to the domain.
• Managed Windows 2012r2 & 2016 servers and troubleshooting domain related issues.
• Developed PowerShell scripts and ARM templates to automate provisioning of Azure Resources.
• Resolved user issues, email account issues and mailbox issues using Exchange admin center and M365 admin center.
• Configured ADFS and Single Sign On (SSO) for on premises and Azure Active Directory.
• Configuration of MFA for secured resource access.
• RBAC configuration for different azure roles at different azure resource level e.g., subscription, resource group & resources.
• Deployed conditional access policies for secured access to Azure and O365 resources.
• Application registration on Azure AD for SSO on SaaS applications.
• Configure TCP/IP networking, subnetting, architecture and other core network technologies (VPC, VPC peering, HTTP, Routing, Firewalls, Load Balancers, etc.).
• Clean up of expired secrets and certs on registered application on Azure AD.
• Management of CI/CD for release and build pipelines for prod, staging and QA environment using Azure Devops.
• Deployed and managed Azure Kubernetes cluster for application deployment using containerized environment.
• Managed compliance needs through Conditional access solution, Identity protection and secure access for guests and external users.

NETWORK SECURITY ENGINEER

Confidential

Responsibilities:

• Provides technical support for complex problems and high priority incidents to ensure that appropriate action is taken to anticipate, investigate and resolve problems in systems and services.
• Planning, engineering, and monitoring the security arrangements for the protection of the network systems.
• Maintaining firewalls, virtual private networks, web protocols, and email security.
• Determining latest technologies and processes that improve the overall security of the system.
• Complete command on dealing with security systems, intrusion detection systems, firewalls, anti-virus software, log management, authentication systems, content filtering, etc.
• Troubleshooting Active directory by viewing event logs to pinpoint source of errors and remediate as required.
• Using industry-standard analysis criteria to test the security level of the bank.
• Carrying out health checks and all other monitoring associated activities
• Strong experience and good knowledge on the following Microsoft Products (Windows OS, Active Directory, MS-Office)
• Demonstrate sound judgment and be able to prioritize assignments, managing multiple tasks with shifting priorities
• Resolves and acts as an escalation and coordination point for major incidents and problems related to affected services
• Perform deep dive analysis of issues and be able to quickly resolve complex problems
• TCP/IP troubleshooting, subnetting, and routing
• Troubleshooting UDP and TCP/TLS related connectivity issues regarding access-list rules on Firewalls