Ahmad Yusufzai
Cloud & DevOps Engineer
Irving,TX
Summary
Certified and results-driven Cloud DevOps Engineer with experience in designing and implementing scalable, highly available, and secure cloud infrastructures. Proficient in automation and configuration management using Terraform, Ansible, and Jenkins. Skilled in monitoring and troubleshooting application performance and server metrics using various tools such as Prometheus, Grafana, and CloudWatch. Dedicated to delivering high-quality, efficient, and reliable solutions.
Overview
10
10
years of professional experience
3
3
years of post-secondary education
3
3
Certifications
Work History
Senior Cloud & DevOps Engineer
EPAM Systems, Inc
06.2023 - Current
- Utilize Terraform for orchestrating and managing infrastructure provisioning and maintenance.
- Oversee Cloud Formation and GitHub Actions to facilitate additional AWS deployment processes.
- Architect notification pipelines to deliver critical alerts based on both custom and built-in metrics.
- Integrate Wiz-Cli within GitHub Action workflows to perform vulnerability assessments on IAC code prior to deployment.
- Deploy and configure GitLab Enterprise on EC2, ensuring secure networking setups to maintain internal security and accessibility.
- Managed cross-account IAM permissions by designing and implementing roles and policies to enable secure access between AWS accounts, and orchestrated data replication across accounts using Amazon S3 replication strategies.
- Implement a JFrog Artifactory High Availability (HA) configuration to span two Availability Zones (AZs), mitigating potential downtime risks.
- Implement authentication and authorization mechanisms for third-party tools such as GitHub Actions by leveraging AWS OIDC (OpenID Connect) and configuring IAM roles and policies to ensure secure and seamless integration.
- Facilitate cross-account permissions through IAM roles and policies, ensuring controlled access for users and services.
- Enforce least privilege policies on AWS IAM, maintaining stringent security and compliance standards.
- Leverage WIZ security and monitoring tools to gain insights into Kubernetes resources and integrations, including Pods, Services, Config Maps, Secrets, Name spaces, Nodes, and Clusters.
- Improved code deployment efficiency by automating processes with CI/CD pipelines
- Designed and implemented containerization strategies using Docker and Kubernetes, improving resource utilization and management
Cloud & DevOps Engineer
Shiphawk
04.2020 - 06.2023
- Revamp infrastructure architecture to ensure scalability, high availability, security, and performance while optimizing costs and enhancing reliability.
- Leverage Terraform to orchestrate the automation of AWS infrastructure provisioning, including VPC, IAM, EC2, RDS, ELB, Route53, S3, and other critical resources, accommodating development, QA, staging, UAT, and production environments.
- Automate the management of EKS resources, including deployments, services, config maps, secrets, and ingress configurations using Terraform, to streamline and standardize Kubernetes operations.
- Implement comprehensive monitoring solutions for application and server performance using Prometheus, CloudWatch, Loki, and Grafana, ensuring real-time visibility and proactive management of system metrics and logs.
- Architect and maintain sophisticated CI/CD automation pipelines utilizing GitLab CI, Ansible, and Ruby, facilitating seamless and efficient deployment workflows.
- Manage and execute both minor and major releases of Ruby applications using Capistrano, ensuring smooth deployment processes and minimal disruption to production environments.
AWS DevOps Instructor (Part Time)
Coding Dojo
05.2021 - 08.2021
- Designed and delivered comprehensive training programs on AWS DevOps tools and practices, including EC2, S3, RDS, CloudFormation, tailored to various skill levels.
- Developed and maintained instructional materials, such as lecture notes, hands-on labs, and practice exercises, ensuring content accuracy and relevance to current industry standards.
- Promoted a positive learning environment by establishing clear expectations and maintaining consistent classroom management techniques.
- Provided one-on-one mentoring and support to learners, helping them overcome challenges and achieve their certification goals, resulting in a [Y]% increase in successful AWS certification pass rates.
- Tested and evaluated students on materials presented in workshops and classes.
- Increased student participation via engaging lectures and assignments.
Cloud & DevOps Engineer
Anschutz Medical Campus
04.2019 - 03.2020
- Architected and implemented a comprehensive monitoring framework for our entire infrastructure and applications using Google Cloud Platform (GCP) resources.
- Developed and executed Ansible playbooks and roles to automate application configurations across server environments, enhancing operational efficiency.
- Employed Terraform scripts to automate and orchestrate the management of the complete infrastructure ecosystem.
- Implemented a centralized logging solution, aggregating logs from over 300 GCP projects into a single project, thereby optimizing log management and analysis.
- Configured a notification system to channel high-severity alerts from the Security Command Center into Slack, facilitating prompt incident response.
- Deployed BeyondCorp Enterprise (BCE) to enable secure access to GCP resources and facilitate SSH connections to servers without dependency on VPNs.
Cloud & DevOps Engineer
Douglas County School District,
03.2016 - 03.2019
- Oversaw and monitored the full spectrum of AWS systems and resources to ensure optimal levels of availability and performance.
- Designed and implemented new AWS resources to enhance the security, reliability, and low latency of existing applications.
- Conducted performance monitoring and testing of applications to identify potential bottlenecks, devised solutions, and collaborated with development teams to implement these solutions effectively.
- Provided training to colleagues on the effective use of DevOps tools and AWS resources, ensuring a comprehensive understanding and optimal application.
- Automated the management of AWS resources utilizing Git, CloudFormation, Ansible, and Jenkins to streamline deployment processes.
- Administered and maintained CI/CD pipelines, ensuring the successful execution of all Jenkins build and deployment jobs.
- Utilized monitoring tools such as Grafana and CloudWatch to oversee system performance and reliability.
System and Cloud Engineer
ETS International
02.2015 - 03.2016
- Designed, developed, and automated solutions utilizing a range of AWS services to address complex infrastructure needs.
- Automated the provisioning and management of AWS resources using Terraform, ensuring efficient and reliable infrastructure deployment.
- Created and managed deployment jobs for various applications and components through Jenkins and Ansible, optimizing deployment workflows.
- Established and maintained static and React-based websites using Amazon S3 and CloudFront, ensuring robust and scalable web delivery.
- Automated log rotation for various applications, including Tomcat and MongoDB on Linux servers, using Ansible and shell scripting to ensure consistent log management across services.
- Managed and monitored user access controls in AWS through IAM (Identity and Access Management), ensuring secure and appropriate access to resources.
- Developed and implemented multiple CI/CD pipelines for cloud-based software applications using Jenkins, Ansible, and Terraform, enhancing continuous integration and delivery processes.
Education
Bachelor of Science -
Kabul University
08.2011 - 09.2014
Skills
AWS
Terraform
K8s
Ansible
Docker
JIRA
Shell
Git
Jfrog
Monitoring
Containerization
CICD
Cloud Formation
Linux Operating System
Certification
AWS Solution Architect Professional
Timeline
Senior Cloud & DevOps Engineer
EPAM Systems, Inc
06.2023 - Current
AWS DevOps Instructor (Part Time)
Coding Dojo
05.2021 - 08.2021
Cloud & DevOps Engineer
Shiphawk
04.2020 - 06.2023
Cloud & DevOps Engineer
Anschutz Medical Campus
04.2019 - 03.2020
Cloud & DevOps Engineer
Douglas County School District,
03.2016 - 03.2019
System and Cloud Engineer
ETS International
02.2015 - 03.2016
Bachelor of Science -
Kabul University
08.2011 - 09.2014