
Professional Summary
Highly accomplished Infrastructure Engineer with 14+ years of experience spanning enterprise cloud architecture (GCP/AWS), network security, and systems administration. Proven track record designing and automating secure cloud environments utilizing Infrastructure as Code (Terraform), managing enterprise-grade firewalls (Palo Alto, Cisco ASA/Firepower), and orchestrating high-availability GKE clusters. Expert in cross-functional troubleshooting, optimization of multi-platform architectures, and achieving strict regulatory/security compliance across government and commercial sectors.
• Automated the deployment of 150+ GCP virtual machines using Terraform, reducing provisioning time by 40%
• Orchestrated the deployment and management of Google-managed and self-managed SSL certificates on external HTTPS load balancers, achieving 99.99% uptime during critical renewal cycles.
• Performed SSL update on GKE load balancers.
• Managed host and path rules for scaling performance
• Engineered Infrastructure as Code (IaC) using Terraform to deploy secure GCP firewall policies, hardening network architecture for enterprise clients.
• Performed monthly OS patching
• Assisted in onboarding of new customer
• Managed infrastructure state and network variables via Terraform, executing zero-disruption configuration updates across production VPCs.
• Formulated automated backup, retention, and snapshot scheduling policies across the GCP VM fleet, ensuring robust Disaster Recovery (DR) alignment.
• Performed restore from snapshot to requested VMs
• Managed IAM roles and create service account for security compliance
• Troubleshoot traffic connection anomalies
• Optimized cloud spend by auditing GCP resource utilization, identifying anomalies, and saving clients an average of 12% in monthly waste.
• Reviewed peer pool request (PR) and approve for implementation
• Managed and resize disk size using terraform and expanding the disk size on the OS level
• Created and manage VPN tunnels
• Created storage buckets in terraform per request
• Engineered Infrastructure as Code (IaC) using Terraform to deploy GKE instances
• Orchestrated zero-downtime upgrades of production GKE clusters, ensuring continuous application availability and patch compliance..
• Troubleshoot and provide recommendation of disk and CPU utilization on VMs.
• Created and update SOP wiki for the team.
• Fixed drift on code and merge it to the main repository
• Created google case on behalf of customer
Configured monitoring on VM resources
• IOS code upgrade on ASAs
• Updated SSL Cert update on ASA and F5 Load balancer
• Adjusted SSL/TLS Cipher settings on client's Load balancer per request.
• Assisted with client's schedule DR testing
• Updated SSL Cert update per client's request on Firepower
• Architected and deployed secure route-based and policy-based LAN-to-LAN (L2L) VPN tunnels on Cisco ASA and Firepower appliances to facilitate secure client onboarding.
• Created VPN tunnels on Firepower
• Troubleshoot VPN related issues
• Created and update NAT policies on Firepower
• Created and modify Access policies on Firepower and Palo Alto
• Updated ASA VPN Peer IP per client's request.
• Periodically performed dynamic updates of APP ID database.
• Updated PAN-OS version when there is a mismatch between the Active and Standby firewalls.
• Add managed devices to Panorama
• Created users on Palo Alto per request.
• Enforced rigid network security postures by continuously auditing and modifying Access Control Lists (ACLs) and Object Groups across multi-vendor firewall environments (Palo Alto, ASA, Firepower).
• Made Object group modification on client's ASA, Firepower and Palo Alto per their request.
• Troubleshoot network latency
Worked closely with SME technical support to troubleshoot network connection related issues.
• Performed BAU DNS changes (A, TXT, CNAME, SPF, MX and reverse DNS records.)
• Edited Inbound and outbound port rules on AWS dashboard as per client's request.
• Created DNS zone file in a virtual and on Legacy systems.
• Monitored network, windows, Unix and database alerts in Observer, EM7
• Maintained a 98% SLA resolution rate while managing a high-volume queue of 150+ complex Windows, UNIX, and network tickets weekly.
• windows/Unix/Database and network environment.
• Escalated issues to the appropriate departments.
• Trained and mentored new hires to ensure they get up to speed.
• Performed SQL full, transaction and log backups in Microsoft SQL server Management Studio.
Performed Sql log shipping by copying corrupted files from source server to their respective destination servers.
• Edited Autosys jobs upon request.
• Monitored Unix/ Linux file systems on a periodic basis and repair them when necessary.
• Deleted files and Syslog files which grows out of proportion.
• Added and removed users in a Linux environment upon request.
• Racked and stack servers as requested.
• Prepared and performed system backups using AS/400
• Ran pre and post batch using AS/400
• Prepared and updated documentation for shift check off sheet.
• Assisted developers in solving system and production batch jobs.
Restored files upon client request.
• Applied system patches as needed on regular basis.
• Worked closely with AEMI developers to migrate option and Equity symbols to AEMI.
• Checked file system utilization on all systems and brought it to reasonable size when necessary.
• Verified system performance using (top, glance, vmstat, iostat)
• Backup/Restore files upon request.
• Reset and modified user's password upon request.
• Provided Unix operation support to approximately 4000 end users.
• Generated daily Problem Management report for Senior Management.
• Started up and Shut down Autosys processes on scheduled basis.
• Added and decommission servers from trading system process upon request
Ensured that trading systems were up online for timely market opening for daily trading
• Applied system patches as needed.
• Assisted database administrators during system upgrade and installation of new software
• Administered user account (Create and remove user account in HP, Solaris, and Red Hat Linux environment.)
• Replaced and configure tape drives.
• Checked file system utilization on all systems and bring it to reasonable size when necessary
• Unlocked user's sybase account and reset user's sybase password upon request.
•Monitored over 10000 production batch jobs globally and domestically.
•Reset NT passwords using Enterprise Administrator.
•Monitored infrastructure for Unix and NT CPU utilization and file system capacity.
•Escalated system problems to appropriate personnel using remedy trouble ticket application.
•Monitored nightly backup and ensure successful completion without error.
•Monitored and troubleshoot all global and domestic Autosys batch process issues.
•Changed Autosys jobs upon request.
Routing and Switching (CCENT, CCNA, CCNP, CCDP, Palo Alto(PCNSA), FIREPOWER (SNCF)
Google Cloud Engineer II with 14+ years of experience in cloud infrastructure, automation, and production support. Strengths include GCP administration with Terraform, GKE operations, IAM and VPN support, and troubleshooting complex network and system issues. Also brings cost optimization, monitoring, documentation, and customer onboarding support across enterprise environments.