May 2021 – Jan 2023 · 1 yr 8 mos · Remote · Remote

• Architectural Design and implementation of the AuthMind infrastructure using Nomad as orchestration tool to manage the docker containers in a hybrid-cloud setup.
• Implementation of Nomad along with Consul in clustered-mode in multiple environments setup on AWS.
• Designed and implemented logging solution using Vector, Loki and Grafana.
• Using Terraform to automate majority of the infrastructure.
• Managing client-side VPC flowlogs, Sflow, Netflow, Syslog etc type of network flows collector services and integrating them with different Switches/Routers/VPNs/Firewalls etc.
• Deployment pipeline using Jenkins and Waypoint on Nomad.
• Creation of the OpenVPN server and integration with the infrastructure.
• Monitoring the services using Prometheus and Prometheus-Pushgateway, alerting using Prometheus-Alertmanager and visualization using Grafana dashboards.
• Using packer, creation of the Linux machine images targeted to AWS, VMware and VirtualBox for on-premise deployments on the client-side.
• Implementing and managing the Redis, NATS, MongoDB, Elasticsearch clusters along with other stateful workloads on top of Nomad.
• Implementation of the data pipeline using Logstash, Filebeat and Docker-compose.
• Supporting the development team with daily infrastructure-related tasks and empowering them with new tooling.

May 2020 – Mar 2021 · 10 mos · Remote · Remote

• Responsible for creation, automation and management of the infrastructure on AWS using some cutting-edge Open Source technologies. It also includes securing it as per the requirements of compliance and certifications from Payment industry.
• Creation of continuous deployement pipeline using Jenkins and groovy.
• Monitoring the infrastructure using Prometheus, alerting using Prometheus-Alertmanager, Storing the metrics using Victoriametrics and visualization using Grafana dashboards.
• Managing multiple CockroachDB clusters.
• Designed and implemented logging solution using Elasticsearch, Fluentd and Kibana.
• Using Terraform to automate all the mentioned pieces in the infrastructure.
• Cross-AWS account creation and promotion of baked Amazon Machine Images using Packer.
• Managing and monitoring the security infrastructure using Wazuh, owlh, surricata etc.
• Separation of the development, testing and production environments at AWS account level.
• Creation of backup management for instances and databases using AWS Backup Manager and custom scripts.
• Generating hardened AMIs as per Center for Internet Security (CIS) guidelines.
• Preparing the infrastructure fof PCI-DSS and other related certifications.
• Securing the infrastructure on AWS using tight IAM roles, security groups and AWS KMS.
• Creation of the VPN infrastructure and acquired strong problem solving skills.
• Integration of VPN, AWS, Jenkins, Kibana, Grafana accounts with GSuite.
• Collaborating with multiple developer teams to create new features and solve the issues proactively.

Jul 2018 – May 2020 · 1 yr 10 mos · Bengaluru, Karnataka, India · Hybrid

• The responsibility includes designing and implementing microservices architecture for new services with the help of some Open Source technology and supporting the existing legacy system, based on LAMP stack.
• Designed and implemented the multi-tier microservices architecture, with the help of docker containers and AWS ECS Fargate service.
• Experienced in managing multi-region large-scale MySQL RDS cluster.
• Designed and implemented automated deployment pipeline using Bitbucket pipelines, Elastic Container Repository and some custom scripts.
• Deployed ELK stack, and integrated it with AWS Cloudwatch with AWS Lambda function.
• Successfully migrated the services between AWS and Azure cloud platforms.
• Created scripts for automated server & database backup/restore as per ISO disaster recovery plan.
• Taking care of the security of the services, with the help of some cutting-edge tools, like Ossec, Snort, W3AF, Firewalls etc.
• Designed and implemented the central monitoring & alerting solution of the services, using Cloudwatch, SNS, Athena and Grafana.
• Automated the management of the ECS Fargate clusters using Terraform.
• Designed the architecture for the EC2 servers, with auto-scaling, along with the network-shared Elastic File System, which helped in cutting down the costs. Expertise in DevOps and agile principles.
• Played major role in achieving ISO certification, from infrastructure point of view.
• Implemented secure VPN access for all the AWS resources, using OpenVPN & AWS VPN service. Strong expertise in Docker and CI/CD automation.
• Strong collaboration and communication skills with other software, hardware, security, and operational team members. Empowered them with new tooling.

Jan 2017 – May 2020 · 3 yrs 4 mos · India · Remote

• Acquired basic understanding of blockchain architecture, which includes Smart Contracts, Consensus algorithm and scaling issues. I am experienced in making Algorithmic trading strategies.
• Familiar with many different blockchain technologies, which includes public and private ledgers, i.e. Bitcoin, Ethereum, Byteball etc. Worked on DAG (Directed Acyclic Graph) based blockchain platform, Byteball.
• Designed different trading strategies and backtested them, based upon several technical indicators and social media information.
• Designed and implemented the microservices architecture for different services for trading platform using Docker containers. Wrote many command line tools to monitor multiple exchanges in real-time.

Oct 2015 – Dec 2016 · 1 yr 2 mos · Hyderabad, Andhra Pradesh, India · On-site

• Building and maintaining infrastructure on AWS. Supporting the different projects from global teams (distributed in 3 timezones) was also an important responsibility of mine.
• Created internal tools, to automate the deployment process, using AWS Cloudformation and Puppet. Strong opinions on Testing, Software quality and SDLC. Designed and implemented the multi-stage deployment pipeline using Jenkins.
• Implementation of the central logging infrastructure using ELK stack. Used Opsgenie and Cloudwatch to generate & send the alerts through Email/Slack/SMS/Call.
• Performance testing and tuning, using Apache Jmeter and Appdynamics. Managed multi environment medium-scale AWS infrastructure. Services used, includes EC2, VPC, IAM, S3, RDS, SNS, Route53 etc.
• Creation of backup generation scripts for MySQL, Elasticsearch and Solr clusters. Parallel deployments in Tomcat for the java applications.
• Collaborating with global teams in different time-zones of the world, eg. - USA, Europe, Ukraine, India etc.

Apr 2015 – Oct 2015 · 6 mos · Mumbai, Maharashtra, India · On-site

• Migration of the Aasaanpay’s payment technology to Suvidhaa and integration with the existing infrastructure as per PCI and banks’ guidelines. Took care of the design, scalability & security.
• Designed the architecture on Bare-metal hardware, Dell & HP Rack-servers. Planned and migrated the whole small-scale infrastructure from AWS to Openstack private cloud. Hosted it into the payment bank’s data-center which includes the (HSM) Hardware Security Module, servers and Fortinet hardware firewall..
• Designed the highly-available Openstack cluster, using Percona XtraDB cluster, Corosync, Pacemaker, HAProxy, Keepalived etc. Deployed and managed the cluster of different Openstack services: nova, keystone, neutron, swift, glance, cinder, heat, horizon etc.

Jun 2013 – Mar 2015 · 1 yr 9 mos · Hyderabad · On-site

• Responsible for ensuring the reliability and high-grade security of Aasaanpay’s highly available and fault-tolerant payment services, by using some cutting-edge opensource technologies.
• Played major role (from infrastructure point of view) in successfully receiving the PCI-DSS certification from the authority, to handle the payment cards data. Designed and implemented Infrastructure-as-a-code, using Cloudformation and Open Source Chef-server.
• Experience in working in a hardware and software environment with physical inventory management dependencies. Designed and deployed the centralized package management system, authentication & authorization, logging, monitoring and alerting systems, by using Open Source tools, i.e. Spacewalk, Kerberos, SSSD, 389 directory service, ELK, OpenVPN, Nagios, Ossec, Snort etc.
• Experienced in operating both Public Cloud and On-Premise Infrastructure. Designed and implemented secure multi-tier architecture & configured multi-layer firewalls using NACL, Security Groups and iptables, along with SELinux in enforcing mode.
• Experience working in a highly regulated environment and building financial, high reliability, or security systems.

Oct 2011 – May 2013 · 1 yr 7 mos · New Delhi Area, India

• The responsibilities include design, updation and policy based implementation of the computing resources in the department. UNIX, GNU/Linux based OpenSource implementations provide an alternative to almost all common multimedia as well as academic and simulation applications. It also included the EyeOS and OpenStack cloud implementation projects.

Apr 2010 – May 2013 · 3 yrs 1 mo · Greater Delhi Area

• One of the regular faculties at KIET Ghaziabad responsible for taking 8-hours weekly guest lectures on the GNU/Linux operating systems, System Security and the C programming language. Closely associated with the proceedings of the prime technical community of the institute - the C club.