Constant ngoh

• Developed and leveraged baseline and custom guardrails, policies, centralized policy enforcement, tagging policies and a well architected multi account environment.
• Migrated legacy applications to AWS cloud environment Developed LLDs for migrating various applications including network sizing, Instance types, tags etc.
• Developed required and optional tagging reference document for automation, compliance and consolidated billing. Used System Manager to automate operational tasks across AWS infrastructure.
• Developed baseline VPC and Network design including leveraging VPN connectivity and Direct Connect.
• Developed baseline AWS account security, implemented/integrated end-point protection, vulnerability scanning and intelligent threat detection.
• Built serverless architecture with Lambda integrated with SNS, CloudWatch and other AWS services.
• Leveraged automated DevOps tools deployment and Blue-green deployment patterns and strategies.
• Configured CI/CD Pipelines using Jenkins connected to GitHub and build environments. Implemented IAM best practices and role-based access control.
• Solution and Manage enterprise architecture in AWS (Control Tower, AWS Organization, Trusted Advisor, Landing Zone). Implemented AWS Organization to centrally manage multiple AWS accounts including consolidated billing and policy-based restrictions. Implemented Control Tower Preventive and Detective guardrails and leveraged Account Factory, integrated with Lambda for new AWS account creation and setup. Setup Ansible control and slave nodes and
• Developed playbooks to automation configuration of servers across environments. Configuration of Continuous Integration (CI) and Continuous Delivery (CD) using Code Pipeline and Code Deployments for automation.
• Leveraged different design principles for security in the cloud and implemented various AWS services to improve our security posture for Authentication, Authorization, Monitoring, Auditing, Encryption and Data path security and incident response such as : CUP ( Amazon Cognito User Pool),Cloudwatch, Cloudtrail, SSE, KMS, SSL, TLS.
• Implemented and automated security controls governance processes, and compliance validation.

• AWS: Identity and access management, EC2, S3 storage services, Databases, DNS using Route 53, VPCs, ELB, Autoscaling, CloudFront, CloudWatch, CloudTrail and high level understanding of application services such as SNS, SQS, SWF, CloudFormation, Cognito, API Gateway, Lambda and Kinesis.
• Linux: Managing users, configuring services, Apache-PHP-MYSQL setup, server configuration, Virtual host setup, network troubleshooting, using SSH to connect to remote hosts and general troubleshooting.
• Basic SQL: Database installation, creating and updating tables, writing basic and nested queries and more.
• Basic Python programming: Building a basic calculator, Mad Libs Game, Building a Multiple Choice Quiz, functions, lists, loops etc.
• Python Scripting and Automation: Regular expressions, website crawling.

CORE COMPETENCIES

• Defining a solution using architectural design principles based on customer requirements
• Architecting and deploying secure and robust applications using AWS
• Ability to provide implementation guidance and best practices to the organization throughout the life cycle of a project.
• Hands-on skills using compute, networking, storage, and AWS database services
• Defining and identifying technical requirements for AWS-based applications
• Defining and identifying which AWS services meet a given technical requirement
• Knowledge of recommended best practices for building secure and reliable applications on the AWS platform
• Knowledge of network technologies as they relate to AWS
• Knowledge of security features and tools that AWS provides
• Linux and basic SQL administration skills.

HANDS-ON PROJECTS

• Using AWS Budgets to set custom budgets for tracking costs and usage of resources in an AWS account. Setting up alerts by email when actual or forecasted cost and usage exceed budgeted threshold.
• Using AWS Identity and Access Management (IAM) to manage access to AWS services and resources securely, as well as setting up Multi-Factor Authentication (MFA) for extra protection of the environment.
• Using Amazon’s unlimited simple storage service (S3) to host a static website where individual web pages include static content. Also using this service to store developer codes before hosting them on virtual servers (EC2) for dynamic web apps.
• Used Amazon’s Virtual Private Cloud (Amazon VPC) service to launch AWS resources in a logically isolated virtual network that I designed. Created a public and a private subnet, used the private subnet for databases to protect it from the internet and used the public subnet for web servers. Elastic Load Balancing was used to automatically distribute incoming application traffic across multiple targets.
• Hosted several web applications (e.g. a PHP-MySQL demo app) on Amazon’s Elastic Compute Cloud (EC2) service to provide secure, resizable compute capacity in the cloud. Also used Amazon’s EC2 Auto Scaling to help maintain application availability and to automatically add or remove EC2 instances according to conditions I defined.
• Used CloudFront, a fast content delivery network (CDN) service to securely deliver my demo application to “customers” globally, thereby enabling low latency and high transfer speeds for the application.
• Used Amazon’s Route 53, a highly available and scalable cloud Domain Name System (DNS) web service to route end users to my demo application using a custom domain name I bought.
• Created an SSL certificate using AWS Certificate Manager, a service that allows easy provisioning, managing, and deploying of public and private SSL/TLS certificates for use with AWS services and internal connected resources. I used this to secure the network communications to my application and to establish the identity of my websites over the Internet i.e. enable HTTPS.

• Collaborated with vendors to locate replacement components and resolve advanced problems.
• Removed malware, ransomware and other threats from laptops and desktop systems.
• Patched software and installed new versions to eliminate security problems and protect data.
• Broke down and evaluated user problems, using test scripts, personal expertise and probing questions.
• Updated documentation and produced reports.
• Trained users on how to operate components and systems.
• Maintained servers and systems to keep networks fully operational during peak periods.
• Troubleshot and diagnosed problems to accurately resolve wide range of technical issues.
• Explained technical information in clear terms to promote better understanding for non-technical users.
• Configured hardware, devices and software to set up work stations for employees.
• Trained and supported end-users with software, hardware and network standards and use processes.
• Researched product and issue resolution tactics to address customer concerns.
• Monitored systems in operation and quickly troubleshot errors.
• Analyzed issues to identify troubleshooting methods needed for quick remediation.
• Completed inventory counts and organized supplies.