Azmat Firdous

Responsible for Kubernetes (EKS) management with ArgoCD & KEDA, automating infrastructure using Terraform, and optimizing Azure DevOps CI/CD pipelines. Key duties include deploying applications on Amazon EKS, ensuring high availability and disaster recovery, managing vulnerability scanning, performing database administration, and Windows Server management. Also contributing to cloud migration efforts from AWS to GCP and overseeing the learning portal.

Serving as a DevOps and Security Consultant at PeakXV, reporting directly to the AVP of Security. Demonstrated proficiency in multi-cloud environments, including AWS, Azure, and GCP, by efficiently creating and managing cloud resources. Utilized Terraform to create AWS, Azure resources, automating infrastructure provisioning and ensuring consistency. Integrated Wiz, Wiz Sensor and Admission Controller into Kubernetes using Helm charts, ensuring seamless deployment, configuration and management of cloud workload security solutions. Implemented a robust logging solution by exporting Kubernetes logs to Amazon S3 using Filebeat and Logstash, enabling centralized log management and analysis for enhanced monitoring and troubleshooting capabilities. Developed and implemented Open Policy Agent (OPA) policies for Kubernetes deployments, ensuring adherence to security, compliance, and operational best practices across the cluster environment. Maintained a strong security focus, implementing robust security measures across cloud platforms. Implemented security solutions such as Mimecast, Cycode, Virtru, etc to safeguard cloud resources. Implemented Wiz for vulnerability management, actively identifying and resolving vulnerabilities to enhance system security. Implemented Rapid7 for log monitoring, ensuring real-time visibility into system events and potential threats. Contributed to resource optimization initiatives by ensuring the efficient use of cloud resources, leading to cost savings. Maintained comprehensive documentation related to security practices, procedures, and incident reports for future reference and auditing. Implementing CSPM and DSPM for enhanced cloud security.

Held the role of DevOps Engineer at Monsoon Fintech, reporting directly to the CTO and collaborating closely with the lead developers. Successfully led the migration of resources from Azure to Google Cloud Platform (GCP). Utilized Terraform for resource provisioning, ensuring efficient and automated infrastructure management. Played a crucial role in enhancing security measures, particularly in preparation for the CISA audit. Implemented Teleport VPN for secure and efficient remote access to all resources. Successfully implemented a Data Loss Prevention (DLP) solution, safeguarding sensitive data and preventing unauthorized data leakage. Enhanced data security and access control while facilitating remote work capabilities. Designed and enforced fine-grained access policies for users, enhancing security while providing role-based access to resources. Detected and halted a security breach involving cryptocurrency mining on a production server. Automated routine tasks and processes to improve operational efficiency and reduce manual errors. Optimized cloud resources in GCP, resulting in cost savings and improved resource utilization. Maintained comprehensive documentation of infrastructure configurations, security policies, and procedures. Supported knowledge transfer and on-boarding of team members.

Managed AmazonWeb Services - ELB, EC2, S3, RDS, SNS, Auto-Scaling, CloudWatch etc. Expertise in architecting secure VPC solutions in AWS with the help of Network ACLs, security groups, public and private network configurations. Create S3 buckets and also managing policies for S3 buckets. Experience in managing and maintaining IAM policies for organizations in AWS to define groups, create users, assign roles and define rules for role-based access to AWS resources. Create snapshots and amazon machine images (AMIS) of the instances for backup and creating replicas. Hands on experience in writing Ansible scripts for server upgrades. Hands on experience in deploying infrastructure with Ansible. Automated build and deployment using Jenkins to reduce human error and speed up the processes. Manage systems routine backup, scheduling jobs, enabling cron jobs, enabling system logging and network logging of servers for maintenance. Provide technical support by troubleshooting day-to-day issues with various Servers on different platforms. Monitored and managed Servers and Services Using CloudWatch. Using GitHub for version control.