Mukesh Kumar
Fort Mill,SC
Summary
Seasoned AWS Cloud Solutions Architect, Cloud Security Consulting and Information Security Specialist with passion for aligning security architecture plans and processes with security standards and business goals. Extensive experience developing and testing security framework for cloud-based software. Versed in network defense strategies for enterprise of any scale. Fluent in Cloud Migration and maintenance of its infrastructure in the cloud. Meticulous Vice president maintaining highly functional digital systems for uninterrupted workflows and consistent productivity. Oversees routine maintenance checks and software update schedules to reduce network downtime and likelihood of security compromises. Loves collaborating with customers and teammates to develop and implement creative technical solutions to challenging problems.
Overview
17
17
years of professional experience
1
1
AWS Solution Architech
2
2
Salesforce Developer
3
3
Salesforce Admin
5
5
years of post-secondary education
Work History
AWS Solutions Architect /Cloud Security Engineer
Amentum
Charlotte, NC
2021.01 - Current
- Conducted vulnerability audits and assessments.
- Fixed infratstracture and application related Vulnerbility
- Implement Azure based authentation in RDS aurora and Redshift spectrum .
- Handls on muliple risk related control and work with muliple team to get sign off beffore production deployment
- Worked with team scan the cloud , on prem and RDS aurora instance and make sure No failure in PC scan report in report.
- Hands on Data migration project from on prem to redshift specturm (Oracle to S3 , SQL server to S3) and access data through AWS aethna
- Create DR plan and worked with Business gather requirement
- Hands-on experience in managing enterprise scale solutions that leverage the following AWS Services: EC2, S3, EBS, SSM, Dynamo DB, EMR, CloudFormation, RDS, CloudFront, VPC, Route53, IAM, CloudWatch, Elastic Beanstalk, Lambda, etc.
- Built Cloud Security Architecture Specifications for multiple Information Security Domains including but not limited to; Cloud, Networking, Endpoint, SDLC, etc.
- Responsible for planning, designing, and developing cloud-based applications, managing cloud environments in accordance with security guidelines.
- Wrote and documented SOPs and step-by-step procedures for stakeholders to follow for their deployments.
- Put together configuration hardening documentation for both AWS and Azure environment stakeholders.
- Created AWS and Azure test environments to test Dome9, Barracuda Guardian Security and Aviatrix Transit Gateway before production deployment.
- Managed infrastructure services in a production environment to ensure high availability and reliability.
- Provisioning of Cloud infrastructure leveraging Amazon Web Services –,EC2, S3, RDS, CloudWatch.
- Created & Managed AMI/Snapshots/Volumes, Upgrade/downgrade AWS resources (CPU, Memory, EBS).
- Provisioning of RDS instances (Aurora, Aurora Serverless etc) for database service.
- Experienced in creating multiple VPC's and public, private subnets as per requirement.
- Designing, deploying scalable, highly available, and fault tolerant systems on AWS.
- Use IAM for creating roles, users, groups & implement MFA.
- Installed and Setup Web Servers (Apache and Tomcat), DB Server (MySQL) on EC2 instances.
- Installed and Setup MySQL (Master and Slave) Server, Multiple MySQL Instance with a different port, including MySQL Database backup (Hot/Cold), MySQL Database security, creating users, managing permissions, server's, domain's, and database's migration on Amazon Web Services.
- Worked with AWS vendor incase of any issue related to AWS
- Worked with prodcution team on deployment the code realted to Software and hardware installtion. recentky upgrade RDS aurura and 11 to 15.4 and executed upgrade in all three env (DEV,UAT,PRD)
- Participated in standard system administration duties including server install, System/Application install and patch management, Windows problem determination and resolution and, log analysis.
- Identified, diagnosed, and resolved network problems including network connectivity, traffic utilization, etc. using available network tools in a timely fashion.
- Provided Cloud Infrastructure services in all areas needed: storage networking, Operating System, network security, directory services, server virtualization using system backup and restore, system and network monitoring, application installation and configuration.
- Interfaced with third party vendors as liaison between client and vendor and utilized superior customer service skills for negotiations.
- Always stayed current with system information, changes, and updates within the customer's enterprise teams.
- Configured, tested, managed, and maintained virtual systems on various cloud platforms such as VMware Cloud, Amazon Web Services and Microsoft Azure for the customer.
- Partnered with Amazon Web Services teams to help reproduce and resolve customer issues.
- Leverage my extensive customer support experience to provide feedback to internal AWS teams on how to improve our services.
- I drove customer communication during critical events.
- I drove projects that improve support-related processes and our customers' technical support experience.
Solutions Architect /Cloud Security Engineer
Cognizant Technologies Solutions
Cincinnati, OH
08.2016 - 12.2021
- Designed and developed security architectures for cloud and cloud/hybrid based systems.
- Implement Enterprise Data Management using Data Management tool to protect PHI/PI/PCI data.
- Worked on Secure by design and make sure all env is secure in data prospecive
- implement data migration in lower enviorment from on prem to hive DB after data obsufuication
- Participat in cost redcution stragies. perfroma deep dive analysis of usages of EC2 instance, RDS auora , EMR clusters, S3 bucket usages and reattion policy and Redshfift . We are able to save almost 1 million dollars per year after reduce the usages of AWS instances.
- Worked with QA teams to access and understand the data quality and architected the solutions to improve the quality
- Participated in the creation and maintenance of development, test, and production environments with a goal of high availability, fault-tolerance, and scalability.
- Responsible for creating, configuring, and utilizing AWS VPC to host clients computing services, virtual networking devices, database (RDS) environment and security configuration.
- Responsible for configuration and spin-up of AWS compute, storage, and messaging services such as EC2, S3, EBS, EFS and SNS
- Possess a firm understanding of the offerings within both Amazon Web Services (AWS) and the Microsoft Azure platforms.
- Designed and built AWS solutions for customer based on business requirements.
- Designed and implemented cloud-native architectures and designs that allowed customer's requirements to be met with a minimal degree of risk and with appropriate security controls present.
- Configured NACL and security groups, thus limiting malicious attacks from blacklisted range IP addresses.
- Designed and managed public/private cloud infrastructures, using Amazon Web Services which include EC2, S3, Cloud Front, Elastic File System, RDS, Cloud Watch, Cloud Trail, Cloud Formation, and IAM roles for several customers (WAG Departments).
- Led projects remotely, in a hands-on role driving AWS cloud migration/adoption from inception to production.
- Experience leading and working with diverse geographically distributed teams remotely offshore (India).
- Led requirements gathering, analysis and solution development for AWS cloud-based solutions for each department.
- Architected highly available, backup, and disaster recovery solutions to meet FM disaster recovery and planning strategy in place.
- Performed several Servers, Data and Database Migrations from on-premises to AWS Cloud.
- Experienced with “on-premises to cloud” migrations or IT transformations with the aid of AWS solutions.
- Configured and deployed micro-services, storage, and instances, AMI's, EC2, ECS, Auto-scaling, S3, Security groups using Cloud-formation.
- Participated in deep architectural discussions to build confidence and ensure customer success when building new and migrating existing applications, software, and services on the AWS platform.
Lead Engineer
Wipro Technologies
Richmond, VA
11.2013 - 08.2016
- Worked with the business users to gather, define business requirements and analyze the possible technical solutions
- Used IAM for creating roles, users, groups and also implemented MFA to provide additional security to AWS account and its resources.
- Loading data from Teradata to Hadoop and doing ETL offload in Hadoop and loading it back to Teradata System
- Transferring ETL load ready file S3 Bucket.Data Migration from legacy system to Redshift via EC2 to S3 buckets.
- Create data masking algorithm for all GDPR/PHI/PI elements before loading the data in Pre-prod or test environment. Priority to protect customer data from exposure in lower environment
- Deployed and configured Git repositories with branching, tagging, and notifications. Experienced and proficient in deploying and administering GitHub.
- Resolved customer escalations involving phishing, malware, and anomalous network and server behavior; utilized technical and customer skills to identify security problems, policy violations and high-risk threats; used independent judgment to resolved issues in a timely manner before escalation.
- Create, review, and revise use cases to support content within SIEM tools, working in partnership with the Detection team to promote awareness of applicable security policies and standards
- Maintained security awareness related to information security among the workforce members.
- Arranged and administered security measures to restrict unauthorized use of data systems and databases.
- Monitored and maintained the Information Security ticket queue.
- Maintained and administered the corporate security tools Monitoring, configured and upgraded the necessary controls and procedures to cost-effectively protect information systems assets from intentional and inadvertent modification, disclosure or destruction.
- Monitored systems and security tools for security alerts and escalated as needed.
- Updated existing departmental documentation and create documentation for new processes.
- Assist with other departmental initiatives such as performing discovery on new technology and leveraging scripting languages to automate manual processed; developed and implemented ideas and suggestions for current process improvement.
- Participated in risk assessments and risk management planning related to the information security features of systems, networks, and related administrative activities.
- Participated in the review and monitoring of assessments, plans, implementations, operations, and usage related to information security throughout the organization.
- Participated in disaster recovery, contingency planning, and testing for information systems in the organization.
- Coordinated all security investigations and executed preventive measures.
- Worked in a team environment ensuring that departmental SLAs and other time and quality commitment KPIs are met at all times.
- Performed other duties as assigned.
- Created project plans, design, and implement solutions.
- Worked as a Level 2 and Level 3 Support for problems identified with systems and network and acted as an escalation for Level 1 and Level 2 support technicians.
- Created, requested, and presented technical specifications and requirements for purchasing of new servers and networking equipment via quote procedure.
- Reviewed violations of computer security procedures and developed mitigation plans.
Software Developer
Atos Syntel
Mumbai, Maharashtra
12.2006 - 10.2013
- .Mentored junior developers to improve their technical skills, fostering a culture of continuous learning within the team.
- Collaborated with cross-functional teams to deliver high-quality products on tight deadlines.
- .Facilitated seamless system integrations by working closely with third-party vendors to ensure compatibility between applications.
- Understanding the specifications for Data Warehouse ETL Processes and interacting with the business analysts and end users to understand system requirements
- Independently created Korn Shell Script Utility for the automation of Bundle changes to reduce the manual time efforts that were utilized in Bundle changes.
- Successful Migration of this application to Ab Initio 3.0 version
- Responsible for independent end to end delivery of requirements and Supporting the existing application for smooth functioning.
- Working closely with Business Analysts to interpret the Business rules and make necessary modifications to process the data for accuracy
- Ab initio graphs are created to search for required pattern data in a dataset using regular expressions.
- Prepared the Detailed Design Document for the all the modules required for development
Education
Master of Science - Computer Engineering
Thapar Institute of Enginering & Technology
Patiala Punjab 07.2003 - 06.2008
Skills
Good Cloud service management skills
Critical thinking
Team player
A Fast Learner
Tools
Tenable Nessus
VMware
Jenkins
Certification
AWS Certified Cloud Practitioner.
AWS Solution Architect-Associate.
Scrum Master accredited certification.
Timeline
AWS Solutions Architect /Cloud Security Engineer
Amentum
2021.01 - Current
Solutions Architect /Cloud Security Engineer
Cognizant Technologies Solutions
08.2016 - 12.2021
Lead Engineer
Wipro Technologies
11.2013 - 08.2016
Software Developer
Atos Syntel
12.2006 - 10.2013
Master of Science - Computer Engineering
Thapar Institute of Enginering & Technology
07.2003 - 06.2008
AWS Certified Cloud Practitioner.
AWS Solution Architect-Associate.
Scrum Master accredited certification.
Similar Profiles
Eric BodeEric Bode
Carpenter at AmentumCarpenter at Amentum
James Long IIIJames Long III
Shipping and Receiving Clerk at AmentumShipping and Receiving Clerk at Amentum
JESSE R. SMALLSJESSE R. SMALLS
Security Monitor at AmentumSecurity Monitor at Amentum