Surya J

8+ years of experience in Cloud Engineering automating Infrastructure as Code, DevOps CICD pipelines, and Patch Automation processes. Experience on Azure cloud platform and its security and IAM features like Conditional access policy, MFA (Multifactor authentication), Identity protection, Azure Entra ID Roles and administration. Developed and integrated applications in Enterprise applications, app registrations and implemented Single sign on (SSO). Expertise in Device registration (Azure AD register, Azure AD Join, Hybrid Azure AD Join). Knowledge and experience in the implementation of Windows Hello for business, including its trust types, such as key trust, Certificate trust, and Cloud Kerberos trust. Hands on Experience in PTA (Pass Through Authentication) & PHS (Password Hash Synchronization), Microsoft Intune, RBAC, PIM, Virtual Machines, Azure AD Connect, Active Directory Federation Services (ADFS). Experience on AWS Cloud platform and its features that include EC2, VPC, EBS, ELB, S3, RDS, EBS, Cloud Watch and In- depth understanding of the principles and best practices of Software Configuration Management (SCM) processes, which include compiling, packaging, deploying and Application configurations. Designed AWS Cloud Formation templates to create custom sized VPC, Subnets, NAT to ensure successful deployment of Web applications and database templates and expertise in architecting secure VPC Solutions in AWS with the help of Network ACLs, Security groups, public and private network configurations. Hands on experience in setting up database in AWS using RDS, storage using S3 bucket and configuring instance backups to S3 bucket to ensure fault tolerance and high availability in Dev, QA and Prod environments. Experience in working with Amazon Web Services (EC2/AWS) - Web consoles, APIs, Security Groups and Extreme proficiency in Cloud Computing embracing Azure IaaS, PaaS based offerings leveraging Windows Azure, Agile project management. Designed and configured Azure Virtual Networks (VNets), subnets, Azure network settings, DHCP address blocks, DNS settings, security policies and routing. Wrote Ansible playbooks and securing a server with Ansible and Provisioning, deployment with Ansible and Worked on developing Ansible Go Scripts for automating regular tasks. Wrote Ansible playbooks for installing Tomcat, JBoss, Nginx, WebLogic, and WebSphere for configuring load balancers and fail over. In depth understanding of the principles and best practices of Software Configuration Management SCM processes, which include compiling, packaging, deploying and Application configurations. Proficient in Hudson and Jenkins for continuous integration and end-to-end automation, as well as Apache Maven and Apache Ant for writing Pom.xml and Build.xml files. Experience working with Chef and Ansible for configuration management and application deployments and creating Ansible playbooks to provision Apache webservers, Tomcat servers, MySQL, and Mongo DB database servers. Good experience on DevOps tools such as Chef, Ansible, Jenkins, Maven, ANT, GIT, Docker and DevOps/Agile operations process and tools area (Code review, unit test automation, Build & Release automation, Environment, Service, Incident and Change Management). Administration of Production, Development and Test environment’s carrying Windows, Ubuntu, Red Hat Linux, and CentOS servers. Working on version control systems like Subversion, and GIT and used Source code management client tools like GitBash, GitHub, Git GUI and other command line applications etc. Design and Deploy Google cloud Platform Solutions using Google services like computer engine, cloud storage buckets, persistent disks, cloud load balancer, auto scaling groups, cloud deployment manager, stack driver, cloud IAM and DNS. Good understanding of OpenShift platform in managing Docker containers and Kubernetes Clusters along with installing of Docker using Docker toolbox. Created Docker images using Docker file. Proficiently experienced in Amazon Web Services (AWS) cloud platform and its services like EC2, S3, VPC, VPN, Dynamo, EBS, ELB, SNS, Glacier, Auto-Scaling, IAM, Route53, AMI, Security-Groups, CloudFront, CloudWatch, OpsWork, and CloudFormation through AWS management console and AWS CLI (Command Line Interface). Experience in Migration from okta to Azure which includes assessment and planning, Azure AD Configuration, Data Migration, Application integration, SSO, MFA, Testing, Go-live and post migration support, security, and compliance. Deploying artifacts such as JAR, WAR using build automation tools like Ant, Maven and Gradle to write pom.xml and build.xml and used MAVEN repository using NEXUS Tool to share snapshots and releases. Installing, upgrading, and configuring SUSE, Solaris, Dell and HP x 86 server, Centos, VXVM, SVM Red Hat Linux using Kickstart Servers and Virtualization with VMWare vSphere ESXi, vCenter. Designed to ensure the confidentiality, integrity, and availability of PHI and Mandates safeguards to protect PHI, such as encryption, access controls, and audit trails. Experience working on HIPPA (Health Insurance Portability and Accountability Act), FEDRAMP (Federal Risk and Authorization Management Program), FIPS (Federal Information Processing Standards), FTI (Federal Tax Information).

• Azure Fundamentals (AZ-900)
• Identity and access Administrator- Associate (SC-300)
• Azure Security engineer- Associate (AZ-500)