Sandeep Namani

Designed, configured and deployed Microsoft Azure for a multitude of applications utilizing the Azure stack
(Including Computer, Web & Mobile, Blobs, ADF, Resource Groups, Azure SQL DW, Cloud Services, and
ARM, focusing on high-availability, Disaster Recovery, fault tolerance, and auto-scaling).
 Managed Clusters with various Servers in Azure Cloud Resource groups. Implemented various services in
Azure like Data Lake to store and analyze the data. Managed to orchestrate the data to and from Data Lake
Store using Azure Data factory.

Designed, configured and deployed Microsoft Azure for a multitude of applications utilizing the Azure stack including Computer, Web & Mobile, Blobs, ADF, Resource Groups, Azure SQL DW, Cloud Services, and ARM, focusing on high-availability, Disaster Recovery, fault tolerance, and auto-scaling.
Managed clusters with various servers in Azure Cloud resource groups.
Implemented various services in Azure like Data Lake to store and analyze the data.
Managed to orchestrate the data to and from Data Lake Store using Azure Data Factory.
Configured VMs availability sets using Azure portal to provide resiliency for IAAS based solution and scale sets using Azure Resource Manager to manage network traffic.
Created and managed Azure AD tenants and configured applications with it and integrated on-premises Windows AD with Azure AD.
Worked on Azure Fabric, Microservices, IoT & Docker containers in Azure and involved in setting up Terraform continuous build integration system.
Used Azure Internal Load Balancer to provide high availability for IaaS VMs & PaaS role instances.
Created Network Security Groups to filter the traffic to and from Azure Resources by configuring the inbound and outbound traffic rules and associating them with subnet and network interfaces.
Created Azure Key Vault to store certificates and secrets.
Performed Intune application monitoring using Azure Application Insights and Azure application management.
Created new repos and gave proper access to application teams through AD groups and automated the branch policies in individual repository level and project level on scheduled basis in Azure Repos.
Involved in designing and deploying a multitude of applications utilizing almost all the AWS stack including EC2, Route53, S3, RDS, Dynamo DB, SNS, SQS, Lambda, Redshift, focusing on high-availability, fault tolerance and auto-scaling in AWS cloud formation.
Implemented AWS Lambda to run servers without managing them and to trigger code by S3 and SNS.
Converted the existing AWS infrastructure to serverless architecture with AWS Lambda and Kinesis deployed using Terraform templates.
Performed optimization and cost reduction of Amazon AWS services including EC2, S3, EBS, Route53, Lambda, SES, and VPC.
Deployed Kubernetes clusters on top of Amazon EC2 instances using KOPS and managed local deployments in Kubernetes creating local clusters and deploying application containers.
Created microservices applications with integration to AWS services by using Amazon EKS while providing access to the full suite of Kubernetes functionality.
Acted as build and release engineer and deployed the services by VSTS (Azure DevOps) pipeline.
Created and maintained pipelines to manage the IAC for all the applications.
Created build release pipelines in Azure DevOps for .NET applications.
Applied KMS encryption strategy to encrypt the data at rest and implemented SSL encryption layer to encrypt the data during transport and plotted workflow for DevSecOps operating model.
Introduced DevSecOps specific policies and procedures that enabled organizations to keep up with the pace of application development in a DevOps environment.
Worked on OWASP Web/API vulnerabilities and compensating controls including CSRF, XSS, SQLI, etc.
Worked with Terraform templates to automate the Azure IaaS virtual machines using Terraform modules and deployed virtual machine scale sets in production environment.
Provisioned the high availability of Azure VMs using Terraform and ARM templates.
Wrote new plugins to support new functionality in Terraform and used Terraform to migrate legacy and monolithic systems to Azure.
Implemented Terraform modules for deployment of various applications across Azure platform and managing infrastructure.
Built and deployed Docker containers to break up monolithic app into microservices, improving developer workflow, increasing scalability, and optimizing speed.
Implemented end-to-end encryption solutions across diverse platforms, safeguarding sensitive data in transit and at rest.
Created pods, namespaces, services, deployments, daemon sets, and replica sets of microservices in Kubernetes using YAML manifests and Helm charts.
Used Kubernetes to provide a platform for automating deployment, scaling, and operations of application containers across clusters of hosts.
Managed local deployments in Kubernetes, creating local cluster and deploying application containers.
Created reproducible builds of the Kubernetes applications, managed Kubernetes pods, created nodes and replicated them and managed releases of Helm packages.
Worked on deploying the AKS cluster by installing Kubernetes through CLI using ACR authentication and then configured and connected it to the cluster.
Initiated responsibility for administering the GIT servers which included install, upgrade, backup, adding users, creating repository/branches, troubleshooting merging, tagging issues and maintenance.
Implemented GitLab for version control of puppet modules and process documentation.
Orchestrated seamless integration of Hardware Security Modules into critical infrastructure.
Worked on Ansible as configuration management tool to automate repetitive tasks, quickly deploy critical applications, and proactively manage changes.
Wrote Ansible playbooks to perform middleware binary installation and configuration tasks involving JDK and Tomcat binaries installation.
Wrote Ansible playbooks for installing WebLogic/Tomcat application and deployment of WAR, JAR, and EAR files across all the environments.
Installed and maintained the Splunk add-ons including the DB Connect 1 and Active Directory LDAP for work with directory and Dynamo database.
Wrote Python/Bash scripts for task automation and tracked disk space on servers through shell scripts.
Managed services, maintained and managed log files, monitored events and logs, and troubleshot system problems using Nagios tool.
Leveraged HSMs to perform cryptographic operations directly within the hardware.
Integrated HSMs into encryption workflows to handle sensitive data encryption/decryption.

Designed highly available, cost effective and fault tolerant systems using multiple AWS EC2 instances, Auto Scaling, AWS Elastic Load Balance and AWS AMIs, DNS mapping with subdomain using Route 53.
Designed roles and groups for users and resources using AWS IAM and implemented Multi-Factor Authentication on externally available servers and on AWS Console.
Monitored and alerted leveraging CloudWatch and CloudTrail.
Supported AWS cloud environment with 200+ AWS instances and configured Elastic IP and Elastic Storage.
Worked on implemented security groups and Network ACLs.
Implemented data warehouse solutions in AWS Redshift.
Worked on various projects to migrate data from one database to AWS Redshift, RDS, ELB, EMR, DynamoDB and S3.
Worked on building out continuous integration and deployment of mobile application using CircleCI.
Converted DevOps methodologies into DevSecOps model by introducing security and vulnerability scans in different phases of DevOps.
Designed and implemented automated provisioning of full stack application services in AWS using Terraform.
Worked with Terraform template key features such as Infrastructure as Code, Execution plans, Resource Graphs, Change Automation.
Used Auto Scaling launch configuration templates for launching Amazon EC2 instances while deploying microservices.
Worked with Terraform templates for automating VPCs, ELBs, security groups, SQS queues, S3 buckets, and continuing to replace the rest of the infrastructure YAML and Hashicorp configuration language.
Converted the existing AWS infrastructure to serverless architecture with AWS Lambda and Kinesis deployed using Terraform templates.
Integrated Maven with Jenkins for the builds as the Continuous Integration process.
Involved in upgrade of Bamboo and JFrog Artifactory Server.
Implemented end-to-end encryption solutions across diverse platforms, safeguarding sensitive data in transit and at rest.
Created and automated the Jenkins pipeline using pipeline groovy script for the applications.
Built a new pipeline and used Docker for virtualization of servers for test environments and dev-environment needs and configuration of automation using Docker container.
Handled consolidations of huge number of instances to one single cluster.
Installed, configured and managed Docker containers and Docker images for web servers and application servers such as Apache and Tomcat using Docker and integrated with Amazon MySQL RDS database.
Set up Kubernetes clusters for running microservices and pushed microservices into production with Kubernetes backed infrastructure.
Developed automation of Kubernetes clusters via playbooks in Ansible.
Orchestrated seamless integration of Hardware Security Modules into critical infrastructure.
Deployed Kubernetes cluster on cloud and on-premises environments with master/minion architecture and wrote YAML files to create services like pods, deployments, auto scaling, load balancers, labels, health checks, namespaces, and Config Map.
Integrated Kubernetes with network, storage, and security to provide comprehensive infrastructure and orchestrated container across multiple hosts.
Performed SVN to GIT/Bit Bucket migration and managed branching strategies using GIT workflow.
Managed user access control, triggers, workflows, hooks, security and repository control in Bit Bucket/GIT.
Written Ansible playbooks in YAML as the wrapper to manage configurations using Python SDK and automated various infrastructure.
Used Ansible Tower to create projects, inventory file, Jinja2 templates and scheduling jobs.
Wrote playbooks using Python SSH as the wrapper to manage configurations of AWS nodes and tested them on AWS instances.
Worked with system health and performance monitoring tools like Nagios, Splunk, CloudWatch and ELK to monitor OS metrics, server health checks, file system usage etc.
Created and wrote shell scripts (Bash), Ruby and Python for automating tasks.

Provided policies to groups using policy generator and set different permissions based on the requirement along with providing Amazon Resource Name (ARN).
Supported AWS cloud environment with hundreds of AWS instances and configured Elastic IP and Elastic Storage.
Worked on implemented security groups and Network ACLs.
Developed and maintained a cloud-based web hosting including security audit PHP, used Amazon AWS for disaster recovery, created SAN/NAS services with CARP for redundancy and file sharing for services.
Used security groups, network ACLs, internet gateways and route tables to ensure a secure zone for organization in AWS Public Cloud.
Used IAM for creating, managing and deleting roles, users, groups and implemented MFA to provide additional security to AWS accounts and its resources.
Responsible for continuous delivery, deployment and monitoring including build issues, deployment issues for multiple releases like maintenance release, enhancement release, bug fixes, emergency releases.
Configured private end point for Azure Cosmos DB using Azure Private Link through automatic approval method, combined with NSG policies to secure data.
Designed and configured Azure Virtual Networks, subnets, Azure network settings, DHCP address blocks, DNS settings, security policies and routing.
Automated provisioning of hybrid solutions connecting Azure to on-premises resources via IAC, Azure ExpressRoute and Azure Hybrid connections.
Integrated Jenkins with AWS and OpenStack to automatically launch instances and built and managed private clouds with OpenStack.
Created several Terraform scripts to build the infrastructure in cloud environment and configured it using Chef Cookbooks.
Created Docker images using a Docker file, worked on Docker container snapshots, removing images and managing Docker volumes and experienced with Docker container service.
Created GIT configuration record for builds, using derived objects generated during build audit process implemented and maintained the branching and build/release strategies utilizing GIT.
Created the naming strategy for branches and labels and involved continuous integration system with GIT version control repository.
Worked on version control systems like GIT and used Source Tree, GIT Bash, GitHub, Git GUI and other command line applications.
Used Ansible to manage web applications, environment configuration files, users, mount points and packages.
Implemented end-to-end encryption solutions across diverse platforms, safeguarding sensitive data in transit and at rest.
Ensured compliance with industry standards including PCI-DSS and GDPR, executing audits, and implementing measures for regulatory adherence.
Spearheaded web security assessments, deploying protocols, and frameworks ensuring comprehensive protection against OWASP Top 10 threats.
Orchestrated seamless integration of Hardware Security Modules into critical infrastructure.
Implemented multi-tier application provisioning in OpenStack cloud, integrating it with Ansible, migrating the application using Maven as build tool.
Worked with a complex environment on Redhat Linux and Windows Servers while ensuring that these systems adhere to organizational standards and policies.

Developed build using ANT and Maven as build tools and used CI tools to kick off the builds move from one environment to other environments.
Implemented tools for software builds, patch creation, source control, and release tracking and reporting on UNIX platform.
Used Jenkins to integrate different tools and technical operations to automate the build and deployment process.
Performed builds in Development and Testing environments where ANT scripts are used to generate build packages for Development Environments and Build Management tool called Continuum is used for placing Maven Snapshot builds.
Responsible for Continuous Integration environments like Jenkins, Nexus, Sonar.
Managed local deployments in Kubernetes, creating local cluster and deploying application containers.
Created pods and managed using Kubernetes by building Production Grade Kubernetes Clusters with KOPS.
Integrated GIT into Jenkins to automate the code checkout process.
Set up Hudson as continuous integration tool to integrate the Java project.
Implemented multi-tier application provisioning in Amazon cloud services, integrating it with Ansible.
Created, updated, and maintained Jenkins slaves on AWS.
Created a cost-effective mechanism to back up all the Virtual Machines.
Responsible for maintaining build scripts and checking build status.
Maintained and modified scripts and documented process for build.
Deployed JAR, WAR and EAR artifacts into the WebLogic servers and Apache servers.