Devops Security Engineer Resume
Costa Mesta, CA
SUMMARY
- Around 7 years of experience in the IT. Certified AWS Sysops Administrator - Associate Level and Solutions Architect - Professional Level in DevOps Methodologies and focused on Automation of Build/Deployment/Environment Management areas by implementing CI / CD pipelines to help teams deliver a better, reliable and certified software into lower level and Production environments.
- Excellent working experience in DevOps/SecOps operations process and tools area (Code review, Unit test automation, Build & Release automation, Security Operations, Service, Incident and Change Management).
- Provisioned and configured AWS EC2 instances for SIT & QA environments on demand and experienced with spin-off instances via AWS Management console, Jenkins EC2 Plugin and Cloud Formation Templates.
- Strong expertise on DevOps concepts like Continuous Integration (CI), Continuous delivery (CD) and Infrastructure as Code, Cloud Computing etc.
- Hand on experience with Docker administration and build Docker images by writing Docker files for various applications deployments.
- Building, Installation, Administration, System Monitoring, Performance Tuning, Troubleshooting, Maintenance of Linux operating systems.
- Experience in branching, tagging and maintaining the Version Control and Source Code management tools like GIT, SVN (subversion) on Linux and windows platforms.
- Good Knowledge on AWS console administrations as well as CLI operations.
- Design AWSCloud Formation templates to create custom sized VPC, subnets, NAT to ensure successful deployment of Web applications and database templates.
- Built Automation and Build Pipe Line Development using Jenkins and Maven. Set up build pipelines in Jenkins by using various plugins like Maven plugin, EC2 plugin etc.
- Expertise in managing Amazon instances by taking AMIs and performing administration and monitoring of Amazon instances using Amazon Cloud Watch.
- Experience in Managing deployment, maintenance, support and upgrade of servers, hardware, software, operating systems in Server Environment.
- Expertise in using Linux servers and Configuration Management tools like Chef, Ansible.
- Experience in writing Ansible Playbooks for installing operating systems, installing Software, web applications in Virtual Machine and AWSEC2instances.
- Utilized Cloud Watch to monitor resources such as EC2, CPU memory, Amazon RDS DB services, Dynamo DB tables.
- Maintained and supported 70+ servers in multiple locations.
- Designed a backup strategy that allowed the quick recovery of the servers and data they contained.
- Worked on infrastructure with Docker containerization. Collaborated with development support teams to setup a continuous delivery environment with the use of Docker.
- Excellent understanding of Network topologies such as LAN, WAN, VPN and Firewalls.
- Experience is using Tomcat, JBOSS, Web logic and Web Sphere application servers for deployment
- Worked on SetupJIRAProject, Issue type, Workflows, Custom fields, Field Configuration Schemes, Permission schemes and Notification Schemes
- Installed, configured, and managed monitoring tools such as Splunk, Nagios for Resource monitoring/ Network Monitoring/ Log Trace Monitoring
- Exposed to all aspects of Software Development Life Cycle (SDLC) such as Analysis, Planning, Developing, Testing, Implementing and Post-production analysis of the projects.
TECHNICAL SKILLS
Platforms: Linux (Red Hat 4.x,5.x,6.x,7.x), Centos, Ubuntu, Windows, Mac
Cloud Platform: AWS, Open Stack, Azure, Salesforce
Scripting/Programming: Shell scripting (ksh, Bash), Python, Java, SAS
Testing & Code Quality Tools: Selenium, SonarQube
CM Tools: Chef and Ansible.
Version Control Tools: Git, SVN, CVS, GitHub, GitLab Bit bucket, Nexus
CI Tools: Jenkins, Hudson.
Container Tools: Docker, ECS.
Ticketing Tools: Jira, Bugzilla
Build tools: Ant and Maven
Web/Application Servers: Apache 2.x, Apache Tomcat 6.x, 7.x, WebSphere, WebLogic 8.1, 10.x
Networking: HTTP/HTTPS, FTP, NFS, SMB, SMTP
Databases: MS SQL Server 2008, MySQL, Redis, Cassandra, Oracle
Monitoring Tools: Zabbix, Nagios, CloudWatch, Dynatrace
Log Management: ELK, Gray log, Splunk
Deployment Tools: Mesos Marathon, Consul
PROFESSIONAL EXPERIENCE
Confidential, Costa Mesta, CA
DevOps Security Engineer
Responsibilities:
- Worked exclusively on AWS (WAF, Inspector, Guard duty, IAM, Lambda, Secrets Manager) for secure infrastructure.
- Developed centralized logging solution between multiple AWS accounts in order to gather VPC Flow Logs, CloudTrail, and other important logs.
- Performed risk assessment reviews ofSecurityGroups, IAM, S3, EC2 instances and other AWS services to ensure secure implementation infrastructure.
- Implemented Anti-virus, Anti-malware, HIDS/HIPS - Trend Micro DeepSecurity for multiple prod accounts.
- Patch Management, Vulnerability Management and Penetration Testing Strategies.
- Log and event forwarding (System logs, CloudWatch, CloudTrail, AWS Config), aggregation to Splunk SIEM Platform.
- Automated the cloud deployment usingAWS, AWSCLI, Python(pip,boto,boto3, troposphere) andAWScloud formation templates.
- Automate and deploy development environments using Travis and Jenkins to various cloud providers AmazonAWSand EC2, Rackspace.
- Design and test solutions to unique and interesting challenges.
- Created and managed aDockerdeployment pipeline for custom application images in the cloud using Jenkins.
- Worked on creation of customDockercontainer images, tagging and pushing the images.
- Worked with IT operations team and administrated organization apps both internal and external.
- Work closely with product and platform teams to engineer and implement Cloud security controls with a focus on Dev SecOps.
- Built Jenkins jobs to createAWSinfrastructure from GitHub repos containing Python code.
- PerformPatchingof Linux and Ubuntu instances within a maintenance window using AWS Systems Manager and perform security updates to remediate system vulnerabilities.
- Good experience in automating build process using python.
- Provide oversight on allCloudSecurityInitiatives and ensure they meet corporatesecurityrequirements.
- Provide risk-based assessments of all new initiatives.
- Monthly patching Production and Non-Production Accounts.
- Documented end-to-end process in Confluence
- Severed as the primary contact and was responsible for all hardware, software,patches, and firmware updates on the servers.
Environment: AWS: EC2, S3, Route53, RDS, Lambda, DynamoDB, SNS, IAM, Cloud Watch, ELB, Docker,Python, Bash, Perforce, Splunk, Sumo Logic, Deep Security, Twist Lock, New Relic, Service now, PagerDuty and Slack.
Confidential, Atlanta, GA
Sr. AWS / DevOps Engineer
Responsibilities:
- Working with different AWS services like CFT, CloudWatch, S3, AWS logs, Metrics, Rules, ECS, Redshift, EC2, SG, SES, VPC, ASG, IAM, LAMBDA, Dynamo DB, ElastiCache and Elastic Search.
- Configure AWS logs service on all the instances and setup CloudWatch logs with different log groups.
- Setting up for subscriptions of AWS LAMBDA streams to connect logs to S3 buckets.
- Writing IAM policy to export and access CloudWatch to S3 bucket.
- Working on Cloud Formation Templates to setup some different stacks like VPC Build Out, EC2 Instances in different Availability Zones, Spin up Load Balances, RDS Database, ElastiCache Cluster, Elastic Search Domain along with other AWS services.
- Working on AWS ECS service and Setup clusters and deployed different tomcat-based applications on ECS and configured with Auto Scaling Groups and Load balancer to get high availability.
- Setting up different S3 buckets and attach different policy to setup restricted access.
- AWSdata backup (snapshot, AMI creation) techniques, along with data security withinAWS.
- Writing Ansible playbooks and roles to configured different applications and operation related tasks.
- Writing different Docker files to setup different applications and build on different environments.
- Administrating the entire Docker setup along with cluster management and allow ports to access the servers.
- Setting up Jenkins jobs and build the different applications and create a Docker image after successful build my application and launch the server with that image.
- Developed the Jenkins Architecture, with master and slave systems and maintained Artifacts in Repositories such as Nexus, GitHub, GitLab, Bit Bucket, SVN and GIT.
- Installed, Configured, maintained GitLab Enterprise, and communicating with the repositories.
- Configured Git in Jenkins to automate deployments and setting up notifications to required Team.
- Monitoring and Troubleshooting Conflicts along with Developers to resolving merge issues.
- Used Jenkins to build code from GIT and Deploy to Testing and Developing environments.
- Used the version control systemGITto access the repositories and used in coordinating with CI tools.
- Integrated maven withGITto manage and deploy project related tags.
- Build Java code on to different Jenkins servers as per the schedule.
- Deployed code on Web Logic Application Servers for UAT and Development environment.
- Configured RedisLabs central redis server based on project requirement and created required tables and provided details to requestor.
- Configured Central log server using RSYSLOG server and moved all logs to S3 mount location.
- Setting up Lambda function to pass the logs to CloudWatch and adjust the code accordingly and test it.
- Has good understanding about Installation, Configuration and usingSplunkapps for UNIX and LINUX (Splunk).
- Worked extensively on developing apps, dashboards, creating data models, summary indexes, forward management and upgradingSplunkinfrastructure as well.
- Configure different AWS instances based on project requirement and add them to different load balancers.
- Working on different RHEL servers and configure different services on Linux servers based on requirements.
- Exposure to SDLC and experience with building deployment solutions for Scrum.
- Responsible for Linux administration tasks in our stack and troubleshoot the different Linux related issues like mount point issue, process related, network related, configuration related issues.
Environment: AWS(EC2, ECS, IAM, S3, EC, ES, VPC, RDS, CloudWatch, CFT), VMWare, Windows 2008, Apache Tomcat, Web Logic, Linux, Data Center, MigrationAWS, Jenkins, Python, Json, Ansible, GIT, Docker, Maven, SonarQube, Nagios, Shell Script, Splunk, Oracle.
Confidential, Concord NH
Sr. AWS / DevOps Engineer
Responsibilities:
- Worked on AWS cloud services like EC2, S3, RDS, Redshift, ELB, EBS, VPC, Route53, Auto scaling groups, Cloud watch, Cloud Front, IAM for installing configuring and troubleshooting on various Amazon images for server migration from on premises to cloud environment.
- Setup private networks and sub-networks using Virtual Private Cloud (VPC) and creating security groups to associate with the networks.
- Build servers using AWS: Importing volumes, launching EC2, creating security groups, auto-scaling, load balancers, Route 53, SES and SNS in the defined virtual private connection.
- Created alarms in Cloud Watch service for monitoring the server’s performance, CPU Utilization, disk usage etc.
- Experienced in Performance Tuning and Query Optimization in AWS Redshift.
- Deployed highly available multi-model NoSQL Arango DB database cluster and performance tuned.
- Deployed and managed high available self-healing Apache Solr cluster.
- Built a fully managed Hadoop framework on AWS using Amazon EMR.
- Integrated existing BI tools and dashboards with Amazon Kinesis Firehose.
- Configured and managed Apache Spark’s Structured Streaming with Amazon Kinesis.
- Supported AWS Identity and Access Management (IAM) and provides a set of built-in security groups for each layer using OpsWorks.
- Managed IAM accounts and IAM policies to meet security audit & compliance requirements.
- Maintained the user accounts (IAM), RDS, Route 53and SNS services in AWS cloud.
- Implemented Project Management tool onAWSCloud which requires Apache Tomcat, application Server, PostgreSQL DB.
- IntegratedGITinto Jenkins to automate the code check-out process.
- Experience in workingGITfor branching, tagging, and merging
- Provisioned load balancer, auto-scaling group and launch configuration for micro service usingAnsible.
- Automated various infrastructure activities like Continuous Deployment, Application Server setup, Stack Monitoring usingAnsibleplaybooks and has integratedAnsiblewith Jenkins.
- Installed, Setup and configure various Jenkins jobs for application deployments and test cases execution.
- Responsible for onboarding Application teams to build and deploy their code using GitHub, Jenkins, Nexus and Ansible.
- Deployed applications to Amazon EC2 instances by using AWS Code Deploy, AWS Elastic Beanstalk, or AWS OpsWorks Stacks using AWS Code Pipeline.
- Created Cloud Formation template stacks to automate for building new VPCs using JSON files.
- Recently worked on Microsoft Azure and performed functions like Creating virtual machines, installingIIS, setting up cloud services and creating SQL databases
- Created Snapshots and Amazon Machine Images (AMI's) of EC2 Instance for snapshots and creating clone instances.
- Monitored the systems CPU, memory, IDE/SCSI disks, disk controllers, RAID, and network parameters using thetoolsNAGIOS systemmonitoring.
Environment: AWS (EC2, IAM, S3, EBS, OpsWorks, SNS, SES, VPC, RDS, CloudWatch, CFT), Ansible, Linux (RHEL 6.x, 7.x Centos 6, 7), Kubernates, GIT, SME, Maven, Jenkins, Nexus, Nagios, Python, Json, Shell Script, Docker, Apache Tomcat.
Confidential
Build and Release Engineer
Responsibilities:
- Software Configuration andBuild/ReleaseManagement, process development, and tools support including code compilation, packaging, and deployment /releasemethodology. Support and Maintenance under Unix/Linux/NT/2000 platforms. With a proven ability in application configuration.
- Performed as ReleaseEngineerfor diverse development teams and multiple simultaneous software releases.
- Excellent understanding of SDLC, Traditional, Agile, Waterfall Methodologies. Expertise with UNIX and Windows environments including Shell and Perl scripts, version control tools like Subversion, Clear Case, Git.
- Identify Configuration Items (CI) and document their characteristics. After every deployment, delivered the Release notes on Confluence site.
- Extensive experience onBuildAutomation and Continuous Integration concepts by using tools like ANT, Maven, Jenkins, Hudson. Performed integration of Code Quality Analysis Techniques like Find Bugs with CI tools.
- Experience in design, development of an Atlassian Tool Infrastructure including JIRA and Bamboo.
- Good knowledge in managing the Nexus and Artifactory repositories for the maven artifacts and dependencies.
- Experience as a Software Configuration Management (SCM) architect for ClearCase UCM.
- Created SCM Process, policies and procedures to follow development and SQA team toreleaseor deploy highest quality product for the enterprise. Worked on differentBuildtools like ANT and Maven.
- Designed Continuous Integration pipeline using tools like Cruise Control, Jenkins,BuildForge, Bamboo and Hudson.
- Worked on defining the branching and the merging strategies, creating baselines and releasing the code.
- Involved in release planning and executed the release build request from the project team through JIRA Ticket.
- Worked closely with Product Management and Development Team to ensure testing is comprehensive. Expertise in implementation of Automation Tests and Manual Tests.
- Involved in Requirement Management, Peer reviews, Inter group coordination and Training Programs.
- Documented the entire build and release engineering process and provided on call support.
- Conducted analysis and generated tables, listings and graphs using SAS.
Environment: s: GIT, Subversion (SVN), Jenkins, Hudson, Confluence, ClearCase, Nexus, SAS Jira, Java/J2EE, ANT, MAVEN, Apache Tomcat, Shell Scripts.
Confidential
System Administrator
Responsibilities:
- Worked on OperatingSystems: Solaris 8, Red HatLinux5.
- Installing, Configuring and ManagingLinuxand Solaris Servers.
- Resolving day to day end user issues using ticketing tool Remedy.
- Monitoring day-to-daysystemperformance including memory disk space, alerts and othersystem resources.
- Experienced in basic levelsystemadministration support to the client in production environment.
- Creating incidents, changes and assigning to the concern teams.
- CreatingSystemDisk Partition, Mirroring root disk drive using VERITAS Volume Manager.
- Installing and Configuring of Apache MySQL and managing web hosting including name-based.
- Create, Change and delete user accounts per request as necessary.
- Administrations of Users and Groups.LinuxPackage management tools (rpm, yum etc.)
- Scheduling jobs using Crontab.
- Worked as a part of server build team.
- Experienced in network configuration filesystemcreating.
- Creating and resting user passwords, updating user password aging parameters.
- Installation, Configuration and Troubleshooting of SSH, FTP, NFS, SAMBA and APACHE Server.
- DailyLinuxsever monitoring checking disk space, storage space, processes etc.
- As Unix/Linuxsystemsadministratorconfiguring, monitoring, upgrading and maintainingsystems hardware, software and related infrastructure.
- Experience providing Unix support to maintainsystemsin world-class production data centers.
Environment: Apache Tomcat, Oracle, VMware, Java/J2ee, BASH, SAN, Shell Scripting, JBOSS, MySQL, WebLogic, Cisco Devices, LINUX(RHEL).