Professional Journey
Table of Contents
- Introduction
- Career Timeline
- Skills and Competencies
- Honors & Awards
- Current Role
- Previous Roles and Experiences
- Professional Development
- Future Aspirations
- Conclusion
Introduction
- As a Cloud, DevOps & Security Architect, I am a results-driven Cloud and DevOps Architect with a passion for designing and implementing cutting-edge solutions to drive business success.
- With ~13 years of hands-on experience in the field, I have honed my expertise in crafting scalable, secure, and high-performance cloud-based infrastructures that empower organizations to thrive in the digital age.
- I hold certifications across Cloud, DevOps, and Security domains, which have played a crucial role in my growth as an architect.
Organisation | Designation | From | To | Duration |
---|---|---|---|---|
Veritas Technologies, Pune | Principal SRE | Dec 2023 | Present | 8 Months |
Xoriant Solutions, Pune | Senior Technical Lead | Aug 2019 | Dec 2023 | 4 Yrs. 4 Months |
SS&C Technologies, Navi Mumbai | Manager | Sep 2017 | Aug 2019 | 1 Yr. 11 Months |
Datavail Infotech, Mumbai | Senior Database Administrator | Feb 2017 | Sep 2017 | 7 Months |
Wipro, Navi Mumbai | Technical Consultant | Oct 2011 | Feb 2017 | 5 Yrs. 4 Months |
Skills and Competencies
- Technical Skills
Category | Tools & Technlogies |
---|---|
Cloud | AWS, Azure, GCP |
Orchestration Tools | Docker, Kubernetes, AKS, EKS, GKE, Git, Helm |
Security | SonarQube, Qualys, Trivy, Microsoft Defender, Azure Sentinel, Falco |
CI/CD | Azure DevOps, Jenkins, GitLab CI/CD, GitHub Actions, Argo CD, Jenkins |
Infrastructure as Code | Terraform, ARM, AWS CloudFormation |
Configuration Management | Ansible, Puppet |
Automation/Scripting | PowerShell, Shell Scripting, Python |
Monitoring Tools | Prometheus, Grafana, Datadog, Loki, Splunk, fluentd, Jaeger, OpenTelemetry, OpenMetrics |
Database | Microsoft SQL Server, PostgreSQL |
Virtualization | Hyper-V, VMWare, Docker |
Operating Systems | Windows Server, Linux (Ubuntu, CentOS) |
ITSM Tools | ServiceNow, JIRA |
IAM | Active Directory/Entra ID, ADFS, DirSync, DNS, DHCP, SSO |
Mail & Calendar Services | Exchange Server, Office 365, EAS |
AI Tools | ChatGPT, GitHub Copilot, Azure AI Services |
- Soft Skills
Leadership
,Communication
,Teamwork
,Problem Solving
,Time Management
,Decision Making
,Work Ethic
,Interpersonal Skills
,Conflict Resolution
- Certifications
Honors & Awards
Xoriant Solutions Pvt Ltd
Dec 2019 | Oct 2020 | Mar 2022 | Jun 2023 | Sep 2023 |
---|---|---|---|---|
Star Performer | Innovate Idea | Titan Award | Ninja | Xor Super Squad |
SS&C Technologies
Ace It Award
- Nov 2018
Work Experience:
Veritas Technologies Pvt Ltd (Current Role)
Location
: Pune, IndiaRole
: Cloud, DevOps and Security ArchitectTeam Size
: 8Description
:- As an architect, I design and implement secure cloud solutions for Veritas products in Azure and AWS, ensuring compliance with FedRAMP and SOC standards, while developing DevSecOps strategies, integrating security into CI/CD pipelines, managing infrastructure as code, and fostering a culture of security awareness through continuous monitoring, proactive incident response, and collaboration with cross-functional teams.
Responsibilities
:- Develop and implement DevSecOps strategies, integrating security into the CI/CD pipelines.
- Implemented proactive measures and incident response plans to effectively address cloud security incidents along with continuous monitoring of cloud environments for security threats, vulnerabilities, and anomalies.
- Designed and architected secure cloud solutions aspects such as network security, access management, encryption, secure CI/CD and data protection.
- Implement and manage IaC tools, modules and practices to ensure secure and consistent infrastructure deployment.
- Responsible to design and implement solutions to meet the access controls of FedRAMP certification & SOC for Veritas products in Azure and AWS.
- Work closely with security teams to understand security requirements and integrate them into the development process.
- Foster a culture of security awareness and continuous improvement within the organization.
- Conducting bi-weekly meeting with stakeholders (Dev, Operations and GSO team) to review security threats, vulnerabilities, and anomalies of the cloud systems.
- Oversee networking, firewalls, security policies, routing, failover, high availability, backup and restore processes, disaster recovery, cloud storage, security trends, patches and updates, monitoring tools, scalability testing, and cloud application deployment.
Environment
: Azure, AWS, Azure Kubernetes Service (AKS), Terraform, Helm, Qualys, Grafana, Prometheus, Azure Sentinel, Microsoft Defender for Cloud, JIRA, GitLab CI, Argo CD, GitOps, Docker, Entra ID, FedRAMP, SOC 1 & 2, Firewall, PythonAchievements
- Achieved enhanced security posture by installing Qualys agents and sensors across multiple VMs and Kubernetes clusters in production and staging environments for comprehensive vulnerability scanning, and successfully integrated Qualys with Jira to automate incident creation and response. Additionally, deployed Trivy in development and QA environments to reduce costs while maintaining security using a shift-left approach.
- Automated data extraction from the SQL database into a Log Analytics workspace, followed by the creation of Grafana dashboards with real-time alerts for various metrics and automated JIRA ticket creation. This initiative fostered an SRE culture, enhanced the DevOps team’s ability to resolve issues swiftly, improved the incident response process, provided valuable operational insights, and significantly reduced customer support issues by improving visibility into application metrics and logs.
- Successfully consolidated security metrics, events, and logs from multiple sources such as AzureDB, AKS, App Gateway, Firewall, and EntraID into a unified Log Analytics workspace. Implemented analytics rules in Microsoft Sentinel to detect incidents and automatically create JIRA tickets, thereby streamlining the entire cycle of detection, alerting, incident management, and resolution.
- Successfully automated the journaling feature for a product by creating a Docker image, developing Terraform code for Azure infrastructure deployment, and utilizing a GitLab CI/CD pipeline for seamless integration into the .NET application.
Previous Roles and Experiences
Xoriant Solutions Pvt Ltd
Project
: PCI and HIPAA Certification
Role
: Cloud Security Architect
Team Size
: 5-8Description
:- To achieve compliance with both the Payment Card Industry Data Security Standard (PCI DSS) and the Health Insurance Portability and Accountability Act (HIPAA).
Responsibilities
- Worked with development team, internal stakeholders and external PCI DSS auditor to get the client products certified twice in a row successfully.
- Identified the scope of the project, including systems, processes, and personnel that handle payment card data and PHI.
- Conducted a thorough evaluation of existing infrastructure, policies, and procedures to identify gaps and areas of non-compliance with PCI DSS and HIPAA requirements.
- Developed a detailed plan to address identified gaps, outlining the necessary actions, timeline, and responsible stakeholders for each remediation task.
- Implemented security controls and measures to ensure the protection of cardholder data and PHI, including access controls, encryption, audit trails, and incident response procedures.
- Created and updated security policies, procedures, and guidelines to align with PCI DSS and HIPAA requirements and establish a framework for ongoing compliance.
- Provided training and awareness programs to educate employees about their roles and responsibilities in maintaining PCI and HIPAA compliance and handling sensitive data securely.
- Prepared the necessary documentation and evidence to demonstrate compliance with PCI DSS and HIPAA requirements, including policies, procedures, risk assessments, and audit logs.
- Assessed the compliance of third-party vendors who handle payment card data and PHI, ensuring they meet PCI DSS and HIPAA requirements or implementing necessary measures to mitigate associated risks.
- Shift-Left approach, SAST/DAST integrations for code quality checks, integrated test automation and control gate-based promotions to enable secure code releases.
- Engaged with the security team for VAPT, Vulnerability mitigation and remediation.
Environment
:- Azure, Python, Azure Kubernetes Service (AKS), Terraform, Helm, Qualys, Datadog, Aiven Kafka, NATS, InfluxDB, Azure Sentinel, Microsoft Defender for Cloud, Azure DevOps, JIRA, DevSecOps, SonarQube, BlackDuck, Istio, Kafka
Project
: DevSecOps - Azure & GCP
Role
: Cloud and DevSecOps Architect
Team Size
: 10-15Description
- Deploy an communication application to the Microsoft Azure cloud platform using DevOps practices to take advantage of the scalability, flexibility, and cost efficiency offered by cloud technology.
Responsibilities
- Conducted a thorough evaluation of the current infrastructure to identify components on Azure.
- Developed a robust and scalable architecture design for Azure & GCP, aligning with the organization’s requirements and best practices.
- Implemented DevOps practices to automate and streamline the deployment, configuration, and management of Azure resources with CI/CD reducing the deployment time by 50%.
- Planned and deployed the applications to Azure, ensuring compatibility and data integrity.
- Ensured that proper security measures and compliance standards were implemented throughout the building and deployment process, addressing data protection, access controls, and regulatory requirements.
- Optimized the performance of deployed applications and infrastructure by leveraging Azure services, such as load balancing, auto-scaling, and caching.
- Established monitoring and alerting mechanisms to proactively identify and resolve issues, ensuring the stability and availability of the deployed resources.
- Documented the build and deployment process, configurations, and best practices implemented for all the environments.
- Focused on identifying cost-saving opportunities, implementing efficient resource utilization practices, and leveraging Azure cost management tools to monitor, track, and optimize cloud spending resulting in savings of ~$40K.
- Toil reduction initiatives, automation procedures that minimized errors by 60% and raised frequency of releases by 68%, improved collaboration between Dev and Ops teams.
Environment
:- Azure, GCP, Kubernetes Service (AKS & GKE), Terraform, Helm Charts, Qualys, Prometheus, Grafana, Loki, AlertManager, Aiven Kafka, NATS, InfluxDB, Azure Sentinel, Microsoft Defender for Cloud, Azure DevOps, Datadog, GCP, GKE, Istio, Tempo, OpsGenie, ServiceNow, JIRA, Qualys, Git, DevSecOps, Shell, PowerShell, SonarQube, BlackDuck, Istio
Project
: Application and Database Migration from Azure to AWS
Role
: Senior DevOps Engineer and Database Migration Specialist
Team Size
: 5Description
:- Planning, assessment, design, testing, and execution phases to ensure a successful migration of applications and databases from Azure to AWS.
- Migrating application hosted on the Azure App Services to AKS and Improving SQL DB performance.
Responsibilities
:- Database Migration:
- Developed a comprehensive migration strategy that includes assessing application and database dependencies, identifying migration priorities, and defining the migration approach and timeline.
- Evaluated the existing Azure infrastructure, including virtual machines, AKS, database, storage, networking, and security configurations, to determine the required AWS equivalents and migration considerations.
- Assessed application compatibility with AWS services, identified any necessary modifications or adaptations, and remediate any incompatibilities to ensure smooth migration.
- Planed and executed the migration of databases from Azure to AWS, ensuring data integrity, minimal downtime, and efficient migration techniques, such as database backup and restore or replication.
- Established secure network connectivity between the Azure and AWS environments, enabling communication between migrated applications, databases, and other components.
- Developed a data transfer strategy to move application data from Azure to AWS, ensuring minimal data loss and implementing synchronization mechanisms during the migration process.
- Reconfigured applications to align with AWS services and configurations, conduct thorough testing to validate functionality, performance, and security, and address any post-migration issues.
- Implemented appropriate security controls and compliance measures in the AWS environment, aligning with organizational and regulatory requirements.
Documented the migration process, including configurations, settings, and troubleshooting steps, and provided knowledge transfer to relevant stakeholders for ongoing support and maintenance.
- Application Migration
- Designed and implemented the migration of an application hosted on Azure App services to Azure Kubernetes Services (AKS) to overcome the app service limitations and improve performance.
- Created terraform scripts to deploy AKS and helm charts to deploy application.
- Configured Azure Container Registry (ACR), Auto-Scaling of cluster, Liveness and Readiness probe, Host Tolerance, etc.
- Analyzed the current Azure SQL setup to determine the performance bottlenecks and suggested changes such as database segregation, updated onboarding process for new clients, adding failover capability, etc.
- Identified the top resource consuming queries and provided recommendations to add/update indexes and query changes in the application code and implemented them.
- Collected the performance metrics before and after and showcased the performance improvements in the application as well as database.
Environment
:- Azure, Azure SQL, Azure Function Apps, Azure Kubernetes Service (AKS), Terraform, Helm Charts, AWS, AWS RDS, CloudBasic, CloudEndure, AWS SMS, Redis, AWS DMS, JIRA, PowerShell, Terraform, Helm Charts
Project
: Closed-Loop Incident Management (POC)
Role
: Senior DevOps Engineer
Team Size
: 5Description
:- Developing Closed-Loop Incident Management process to automatically remediate alerts received from the monitoring tools.
Responsibilities
:- Developed a Closed-Loop-Incident-Management process to automatically take actions on the alerts received from the monitoring tools including auto remediation, while integrating the remediation process with the ticketing system.
- Integrated ServiceNow with Ansible Tower to invoke a RESTful API call to the tower and invoke the required playbook based on the passed parameters.
- Installed and configured Prometheus for collecting the required metrics from the multiple sources in the network.
- Integrated Prometheus and ServiceNow to create incidents in Service Now automatically.
- Developed playbook in ansible to remediate an issue by connecting to the targets and accordingly update/resolve the Service Now incident.
- Integrated ServiceNow and Active Directory to enable SSO. Also, integrated Ansible and Active Directory to enable SSO and provide RBAC access.
- Installed and configured GNS3 tool to emulate network devices and configured the network devices to allow SSH and enabled the features required for testing auto remediation.
Environment
:- Ansible, ServiceNow, GNS3, Prometheus, PowerShell
Project
: CyberArk Install & Upgrade Automation
Role
: DevOps and Automation Expert
Team Size
: 2Description
:- To automate installation and upgrade of CyberArk using a central server.
Responsibilities
:- Created an automation framework to install and upgrade CyberArk centrally.
- Developed PowerShell scripts to meet the prerequisites for install/upgrade of different CyberArk components and utilized the CyberArk setup to install/upgrade the product.
- Created Ansible playbooks to install the CyberArk components on a fresh server and invoke PowerShell scripts for CyberArk upgradation without manual intervention.
- Deployed Jenkins job for a single-click solution to invoke the ansible playbook based on multiple hosts deployed on On-Premises and Azure Cloud.
Environment
:- CyberArk, PowerShell, Ansible, Jenkins, Azure
Project
: SQL Cluster Aware Updating Automation
Role
: DevOps and Automation Expert
Team Size
: 3Description
:- Automate Clustering Aware Updating to patch all the cluster environments without manual intervention.
Responsibilities
:- Developed an automated solution using PowerShell and Python to install SQL patches with Cluster Aware Updating feature on SQL instances running on Windows clusters and Azure.
- Created a script to determine and configure the prerequisites for CAU for all the eligible SQL clusters and identify the patches that need to be installed based on the defined configuration file.
- Implemented parallel execution of CAU on the SQL clusters to patch multiple clusters at the same time.
- Deployed the PowerShell script in Jenkins to provide a single click functionality across clusters deployed on On-Premises and Azure.
Environment
:- Microsoft SQL Server, PowerShell, Python, Jenkins, Splunk, Azure, Azure Monitor, ServiceNow
SS&C Technologies Ltd.
Role
: Manager – Cloud DBA Team
Team Size
: 8Description
:- Responsible for managing a fast-paced environment of 500+ SQL servers with leading-edge technology (SQL 2016/17, PowerShell & Cloud) with the help of dynamic team to support Advent Software’s Corporate and SaaS offerings of 500+ SQL Servers.
Responsibilities
:- Lead and manage a team of Cloud DBAs, assigning tasks, providing guidance, and fostering a collaborative and high-performing work environment. Conduct performance evaluations, mentor team members, and identify opportunities for professional development.
- Implemented a comprehensive strategy for effective database management, including capacity planning, backup and recovery, disaster recovery, and data retention policies.
- Monitored and analyzed database performance, identifying, and resolving issues related to indexing, query optimization, database tuning, and resource utilization.
- Established and enforced database security measures, ensuring compliance with industry regulations and organizational policies.
- Collaborated with application developers and solution architects to design and implement database structures, schemas, and data models that meet business requirements and optimize performance.
- Engaged with database technology vendors to evaluate and procure necessary software, tools, and services.
- Collaborated with cross-functional teams, including application developers, infrastructure teams, and business stakeholders, to understand database requirements and ensure alignment with organizational goals.
- Developed and implemented automated solutions that reduced manual efforts, improved efficiency by 80%, and enhanced the overall performance and reliability of the team.
Environment
:- Azure, Microsoft SQL Server, Always On, Clustering, PowerShell, Databases, Azure SQL Database, Azure Monitor, Spotlight, ServiceNow, Python
Datavail Infotech Pvt. Ltd.
Role
: Senior Database Administrator
Team Size
: 10Description
:- Database Administration for Multiple Clients
Responsibilities
:- Responsible for 24*7 Database support, troubleshooting, planning and migration.
- Installation, configuration, and upgradation of SQL Server in a standalone and clustered environment.
- Troubleshooting and resolving database integrity issues, performance issues, blocking and deadlocking issues, replication issues, connectivity issues and security issues.
- Created new databases and users, assigning permissions, managing access, setup backup plans and other standard DBA jobs and scripts.
- Worked on Import and Export utility, BCP Utility and replication tool.
- Planned and implemented various Transact-SQL statements, cursors, stored procedures, and triggers.
Environment
:- Microsoft SQL Server, Azure, ServiceNow
Wipro Ltd.
Role
: Technical Lead (MS SQL and M365) – Microsoft Client
Team Size
: 12Responsibilities
:- Working as Technical Lead managing a team of technical consultants representing Microsoft to all customers across the globe.
- Advising clients with a focus on helping them manage, expand, and optimize their Microsoft SQL Server and M365 infrastructure.
- Manage all aspects of support incident, including troubleshooting plans, scheduling, and task management from the planning and design stages to the documentation and transition stages.
- Conducting quarterly trainings for the new hires to provide hands-on experience and develop troubleshooting skills.
Environment
:- Microsoft SQL Server, M365, Azure, SharePoint, IAM, DNS, Firewall, AD DirSync, Azure AD, Active Directory