Alvinmcgavin Amana

• Leveraged AWS IAM service to implement a strong identity foundation and enforced least privilege principle, credentials management, and MFA
• Experienced in AWS Organizations SCPs to centrally manage and govern environment as resources grow and scale-out
• Leveraged AWS Config, and CLoudTrail for governance and compliance to take inventory and keep track of resource configuration, change management, security analysis and troubleshooting
• Configured cross-account access using STS to facilitate resource sharing and enable developers update applications in the production account
• Set up controls using preventive and detective guardrails in Control Tower for unauthorized actions and detected security weaknesses such as unencrypted EBS volumes
• Reviewed and established metrics and alarms for tracking based on KPI in order to use computing resources efficiently to meet system requirements
• Configured mandatory tagging of EC2 instances, EBS volumes and security groups through automation with Amazon CloudWatch and AWS Lambda
• Leveraged S3 storage classes to store and managed objects based on access patterns, configured S3 life cycle policies to transition and archive files in S3 Glacier
• Scheduled regular backups by leveraging EC2 Lifecycle Manager to create snapshots of EBS volumes and define retention period as a cost-saving measure
• Implemented network firewalls at all layers using security groups, NACL, and AWS WAF, Advanced Shield against DDoS attacks and common web exploits
• Participated in designing and implementation of disaster recovery and failover plans with best RPO and RTO as applicable
• Experienced in network equipment: VPC, subnet, route table, Internet Gateway, NAT gateway, VPC Endpoint, AWS Direct Connect, VPG, VPC peering and Bashion Host
• Protected data through encryption with KMS, managed and secured database secrets (passwords) with Secret Manager and Parameter Store
• Configured and monitored alerts for important events through system integration with SNS to send emails and SMS notifications that enabled traceability and timely interventions
• Used security tools including GuardDuty, Macie and Detective to monitor resources, generate detailed findings and identify root causes of security issues

● Updates user roles and grant users access to applications

● Helps develop complex database objects using SQL and PL/SQL.

● Perform data analysis to identify data patterns and anomalies.

● Compiles objects

● Creates and maintains scripts

● Assist with the implementation of the SDLC (Software Development Life Cycle) from analysis, design, development, testing, implementation and maintenance with timely delivery against aggressive deadlines.

● Processes weekly data loads from client reports

● Performs password management in DEV environment

● Manages test user accounts in DEV

● Works extensively with MS Excel, MS Word and MS Access

● Excellent technical and analytical skills with clear understanding of stakeholder’s need

● Assists with SQL performance tuning using the Cost-Based Optimizer, Explain Plans, and Indexes

● Excellent communication, interpersonal, and analytical skills.

● Proficient production skills working individually or with a team.

● Utilize database tools and online resources to research Ora errors

● Submit daily, weekly and monthly reports to stakeholders

● Backstop for leadership during presentations for stakeholders and cross-functional teams

• Worked with team to design, build, implement and support CI/CD toolchain using AWS CodeCommit, CodeBuild, CodeDeploy, Elastic Beanstalk, S3, and ECS
• Performed deployments, upgrades, configurations in controlled pre-production and production environments while minimizing down time
• Deployed web applications on AWS Elastic Beanstalk
• Deployed, managed and scale containerized applications using Docker Containers on Amazon ECS, Fargate, ALB with dynamic port mapping
• Used Ansible for cloud provisioning and configurations management
• Used CloudFormation framework to create templates and provisioned resources including VPC stack, security group stack and network load balancers stack
• Set up and configured centralized multi-account and multi-region patching of 98 servers with AWS System Manager Automation