Summary
Overview
Work History
Education
Skills
Certification
Languages
Timeline
Generic

GODLOVE SUH

Greenbelt,MD

Summary

Result-oriented and highly skilled AWS Cloud Engineer with 7 years of hands-on experience in designing, deploying, and managing complex cloud infrastructures. Equipped with a comprehensive knowledge of AWS services and Linux-based systems, adept at optimizing system performance and ensuring seamless integration of DevOps tools. Seeking to leverage my expertise and drive innovation in a dynamic organization.

Experienced with AWS cloud infrastructure design, deployment, and management. Utilizes automation tools to streamline processes and enhance efficiency. Strong understanding of cloud security best practices and compliance standards.

Overview

8
8
years of professional experience
3
3
Certification

Work History

AWS Cloud Engineer

Avenel Health
02.2019 - Current
  • Managed AWS VPC, EC2 instances, Auto Scaling groups, Load Balancers (ELB) and IAM policies to meet SLA requirements, resulting in a 30% reduction in infrastructure downtime
  • Automated resource provisioning using infrastructure as code tools like with Terraform and CloudFormation decreasing deployment time by 70%
  • Worked in a team to develop CI/CD pipeline with Jenkins, Git, GitHub and Maven resulting in a 40% increase in overall speed and accuracy of deployment of features and updates
  • Created and used custom Terraform modules, to enhance efficiency, reusability, and maintainability of the infrastructure code across different environments in AWS
  • Utilized Python to develop several Lambda functions which improved on security and reduced cost in our environment
  • Utilized AWS Control Tower to automate governance frameworks, significantly reducing manual oversight requirements and enhancing compliance through the use of account factory, landing zone, guard rails, service control policies(SCP) and AWS Organization
  • Managed a portfolio of cloud service offerings through AWS Service Catalog, customizing services to meet specific business needs and enhancing operational efficiency
  • Developed robust access management policies using AWS IAM Identity Center, ensuring secure and compliant user access to cloud resources across multiple teams and projects
  • Designed and implemented AWS Organizations to streamline account management and policy implementation across multiple business units, enhancing operational efficiency through the use of control tower
  • Created custom policies as well as automated policy enforcement in OPA to manage and control access to AWS resources, reducing unauthorized access incidents and protecting sensitive data
  • Automated the rotation of secrets and credentials using AWS Secrets Manager, ensuring compliance with security policies and reducing the risk of unauthorized access due to compromised credentials
  • Led the deployment of AWS WAF, resulting in a 50% decrease in malicious requests and a significant improvement in application stability and security
  • Leveraged AWS WAF logs to analyze and mitigate attacks, minimizing downtime and potential data breaches
  • Handled Terraform state management, in different environments using remote state file with S3 buckets and DynamoDB for state locking, backend configurations, and version controlling Terraform configurations
  • Used Ansible in automating configuration management and application deployment
  • Managed configurations using Ansible playbooks which increases productivity
  • Led a team in implementing Prometheus and Grafana for monitoring a high-traffic e-commerce application, resulting in 98.5% uptime
  • Created Grafana dashboards with custom alerts, reducing incident response time by 20%
  • Developed a serverless data processing pipeline on AWS using Python in Lambda, S3, and DynamoDB, demonstrating cost-effective and scalable data handling
  • Developed backend services in Python, integrating with various AWS services like S3 and RDS for data storage and retrieval
  • In-depth knowledge of HTTP protocols, including methods, status codes, headers, and the request/response cycle
  • Implemented HTTPS in web applications to ensure secure data transmission, including configuring SSL/TLS certificates
  • Enhanced security posture by configuring AWS GuardDuty and CloudWatch reducing the risk of security breaches by 90%
  • Used Python to write and develop Lambda functions to automate different actions in my environment
  • Ensured compliance with NIST 800-53 and HIPAA standards by integrating AWS Config rules and Trusted Advisor into infrastructure deployments, enhancing security posture and audit readiness
  • Implemented automated security scanning and compliance monitoring using AWS Lambda and Amazon CloudWatch, proactively identifying and mitigating security risks
  • Manage storage in AWS using Elastic Block Storage (EBS), elastic file system (EFS) and S3 that has reduced storage cost to about 20% by using the appropriate class and type when necessary
  • Gained proficiency in Linux administration especially Red Hat Enterprise Linux as I was frequently called to assist because I indicated prior knowledge
  • Design and set up databases including MYSQL, DynamoDB and Aurora to host data from on premise system at a far reduced cost
  • Implemented different deployment strategies as necessary using EKS which improved uptime by 15%
  • Used shell scripts with Ansible to automate the configuration of servers including installation and updating of packages
  • Implemented shell scripts to automate CI/CD pipelines, integrating with Jenkins and Docker for seamless build and deployment processes
  • Extensive experience in managing containerized applications on Amazon EKS, including cluster provisioning, scaling, and optimization
  • I also implemented backups in Kubernetes, EKS, using volumes and a third-party tool called Velero
  • Gained more familiarity in Python as I used it to build simple scripts
  • Wrote and executed shell scripts for automating several other processes in my environment such as updates and installations
  • Automated routine operational tasks using AWS Lambda, SNS, and SQS, streamlining the workflow and reducing manual intervention by 75%
  • Successfully integrated AWS Route53 with CloudFront to optimize content delivery, resulting in a 70% decrease in latency for global users

AWS Solutions Architect

Community Tech Solutions
06.2017 - 01.2019
  • Executed successful migrations of critical applications to the AWS cloud using various methods like database migration service (DMS) and MGN resulting in more than 30% operational cost savings
  • Achieved a cost reduction of 20% by implementing AWS Lambda functions and EC2 Spot Instances for non-critical workloads
  • Leveraged AWS CloudFormation to automate the deployment of resources, reducing the deployment time by 60%
  • Improved the security strength of the environment against attacks by 20% by leveraging the principles of least privilege using IAM roles and policies, WAF and Secret manager
  • Leveraged AWS Organizations to automate security policies and SCPs (Service Control Policies) across all accounts, significantly improving compliance with internal standards and external regulations
  • Created and managed users and user permissions on Linux (RHEL) systems
  • Automated AWS infrastructure provisioning and configuration using Terraform and AWS CloudFormation, reducing deployment times by 50%
  • Led the implementation and design of backup and disaster recovery plans such as cross-region replication, creation of AMIs, and multi-AZ provisioning
  • Managed disk and file system through logical volume manager for Linux
  • Gained proficiency in the use of tools like Jira and Confluence as we worked in an agile environment which improved our accuracy and productivity by about 30%
  • Led a team to set up and maintain the network infrastructure including VPCs, VPC peering and VPN
  • Led my team to design and explain the impact of most architectural updates to the company stakeholders including cost and benefits
  • Used security tools like network access control lists (NACLs) and security groups to enhance security on my system

Education

Bachelor of Science - Cyber Security

University of Maryland Global Campus
Hyattsville, MD
05-2026

Bachelor of Science - Computer Science

University of Buea
12-2015

Skills

  • AWS: VPC
  • WAF
  • S3
  • EC2
  • Auto Scaling
  • Migration
  • Load Balancer
  • IAM
  • CloudFormation
  • Lambda
  • Route53
  • CloudFront
  • Aurora
  • DynamoDB
  • SSM
  • SNS
  • SQS
  • GuardDuty
  • CloudWatch
  • CloudTrail
  • EKS
  • DevOps Tools: Terraform
  • Ansible
  • Git
  • GitHub
  • Gitlab
  • Bash scripting
  • Jenkins
  • SonarQube
  • Maven
  • Nexus
  • Docker
  • Kubernetes
  • Python
  • Linux Systems: RHEL
  • Ubuntu
  • Disk management
  • Package management
  • Job scheduling
  • File and directory management
  • User management
  • System patching
  • Agile (Scrum): Ability to communicate with stakeholders
  • Servant leader
  • Organize scrum meetings
  • Ability to plan and prioritize based on the backlog
  • AWS security management
  • Serverless computing
  • Fault analysis
  • Disaster recovery planning
  • Configuration management
  • Systems configuration
  • Cloud migration strategies
  • DevOps methodologies
  • AWS architecture design
  • Cloud security
  • Microservices implementation
  • AWS networking solutions
  • Hardware troubleshooting
  • Effective communication
  • Agile methodologies

Certification

  • AWS Solutions Architect Associates, AWS Training and Certification
  • AWS Solutions Architect Professional, in progress
  • CompTIA A+ Certified
  • Scrum Master (CSM), Scrum.org

Languages

English
Full Professional

Timeline

AWS Cloud Engineer

Avenel Health
02.2019 - Current

AWS Solutions Architect

Community Tech Solutions
06.2017 - 01.2019

Bachelor of Science - Cyber Security

University of Maryland Global Campus

Bachelor of Science - Computer Science

University of Buea
GODLOVE SUH