SUMMARY

• I’m a skilled Cloud Infrastructure Engineer with experience in building and automating AWS cloud infrastructure utilizing a variety of automation tools including Terraform, CloudFormation, Saltstack and Jenkins to Deploy fully automated application environments.

TECHNICAL SKILLS

• DATACENTER
• Barracuda Load balancers
• Sonicwall FIrewall
• SuperMicro Servers
• Nimble SAN
• EMC SAN
• Cisco Blade Chassis
• Cloud/VIrtualization
• AWS EC2
• AWS Fargate
• ECS Elastic beanstalk
• S3
• RDS
• AWS Neptune
• AWS Glue Autoscaling
• SageMaker
• Jupyter Notebooks
• Devops Tools
• Artifactory
• Saltstack
• Python
• Terraform tfenv
• Jenkins
• Packer
• Jinja/YAML
• CloudFormation
• Code pipeline
• Code Commit
• Big Data
• Cloudera
• Hive
• MySQL
• RabbitMQ
• Celery Flower
• Nginx
• Tomcat
• Python Virtualenv
• ELK
• Splunk SIEM

PROFESSIONAL EXPERIENCE

Confidential - Short Hills, NJ

Senior DevOps Engineer

Responsibilities:

• Deployed .NET, Java and Python applications using various package managers and saltstack scripts.
• Built infrastructure scripts using Terraform and AWS Cloudformation to provision autoscaling groups, EC2 clusters and containers.
• Built CI/CD Pipelines for application deployments using Terraform, Jenkins,Artifactory and Saltstack
• Wrote python scripts and deployed lambda triggers to push batch files into s3 for batch processing.
• Configured Amazon SQS with s3 triggers to have lambda consume messages and run batch processes.
• Wrote bash scripts that leveraged salt grains data to generate security audit reports to determine if standard security monitoring software was installed and running.
• Built reusable Saltstack modules to enforce security requirements on all server operating systems.
• Reduced attack surface by enforcing removal of unused file systems, enforced permissions.
• Successfully diagnosed RedHat Linux Operating System issues this included OS level network configuration, reconfiguring bond interfaces, adjusting SELINUX context policies, setting up default masks, troubleshooting systemd process forking.
• Configured Datadog alarms as well as infrastructure dashboards to monitor production systems
• Built AWS Neptune Graph databases and configured AWS CloudWatch monitors to track performance.
• Wrote python scripts and configured AWS Glue jobs to convert file formats from CSV to XLSX for analytics processing.

System Engineer

Confidential - White Plains, N.Y

Responsibilities:

• Migrated over 100 ecommerce applications hosted in colocation datacenters into AWS Cloud.
• Configured Windows IIS web application servers on EC2 and used powershell to install ColdFusion middleware application services.
• Built AWS network infrastructure, configured VPN gateways to AWS VPCs.
• Provisioned new web servers, installed Apache and Magento e-commerce platform on Linux CentOS6/7 to host new e-commerce websites.
• Updated and configured inbound/outbound policies on SonicWall Firewalls to address whitelisting of customer Ip addresses and allowing traffic for VIPs assigned to new customers.
• Managed Active Directory domain controllers, Created group policy objects for provisioning new laptops.
• Administered Microsoft Exchange email servers, provided support for client email, managed email quotas.
• Made architectural suggestions based on AWS architecture best practices, drafted AWS diagrams using lucid charts, Built infrastructure for development use case scenarios.
• Setup full scale AWS accounts for new customers, Setup VPC perimeter/trusted subnets, VPN Gateways to client sites, NAT gateways for instance outbound internet connectivity, setup security group rules and provisioned EC2 instances.
• Built custom IAM Policies to prevent unauthorized access resources within customer accounts.
• Installed and configured Plesk Web Admin panel for backend management of ecommerce websites.
• Conducted release deployments .
• Built and managed Bitvise SFTP server for windows, managed daily SFTP account setups and permissions.
• Remediated PCI DSS security mandates, setup log management system, administered AlertLogic SIEM,
• Installed alertlogic agents on Linux servers, ran vulnerability scans and remediated vulnerabilities.

System Administrator

Confidential - Tenafly, NJ

Responsibilities:

• Troubleshot domain controller issues such as invalid WINS database entries and IP leasing issues.
• Provided network support for layer 3 switches,wireless access points, firewalls,,network printers and repeaters.
• Provided support for mobile device connectivity to the WLAN, troubleshot wireless connectivity issues.
• Solved Windows Server 2008 R2 and Windows 2003 domain controller issues related to WINS naming conflicts.
• Ensured that WSUS ran successfully. on all computers in the domain to ensure system wide computer hardening.
• Configured VPN account settings on Active Directory accounts and installed Cisco Any Connect VPN software.
• Installed and configured network devices such as wireless access points, Network Printers, NAS devices.
• Assisted vendors with the installation of a new Cisco switches as part of an effort to upgrade network equipment.
• Traced data lines to user’s data jacks using a toner probe to locate and label patch panel and switch ports, updated network map documentation.
• Troubleshot switch port issues involving incorrect VLAN assignments, port speed issues and bad ports on Cisco SG2000 switches.
• Troubleshot and configured network shares on Windows XP and Windows 7 operating systems created new network shares, mapped network printer drivers,
• Consulted management on infrastructure upgrades including Servers, Switches, Workstations and Software.
• Worked with Network Engineers to determine if network issues were ISP related, Escalated WAN issues to ISP.
• Worked with network vendors to conduct a site wide survey to determine the most efficient locations to install new wireless access points for a WLAN expansion project.
• Assisted in a migration project from Windows Server 2003 to Windows Server 2008 R2
• Created User accounts, assigned Group policies and created organizational units in Active Directory for Windows Server 2008 R2.
• Created new groups and setup ACL permission for access to content.
• Created account templates in Active Directory, managed the corporate active directory hierarchy.
• Upgraded Corporate Domain Controllers to Windows Server 2012
• Installed/renewed CA certificates on the company website.
• Troubleshot email queue lockups, in Microsoft Exchange Server 2003 and Exchange Server 2010.