As a cloud architect and the engineering team manager I continue to be hands-on in designing, developing and implementing enterprise infrastructure solutions which supports thousands of accounts/subscriptions (3700+ VPCs, 800+ Vnets) with primary focus on AWS and secondary on Azure. As my team is small with a large area of operations even as a manager, I continue taking on the role of lead architect/engineer for my team. More importantly for modern architects especially in the cloud, implementation details, limits, cost, security, and operationalization are critical for infrastructure designs which may be impractical to change once in production. AWS well architected designs are made for 80% of customer requirements, I design for the other 20%.I manage the engineering team to actualize customer requirements, develop long term road maps, train my team to be individualized architects, and ensure operational excellence. Our team supports cloud network infrastructure which includes but not limited to all cloud networking resources, network/perimeter security, proxies (squid, haproxy), DNS (AWS/Azure Resolver), routing, IPAM, etc. Even as a manager I am taking on a good portion of the work while I develop my team to ensure their work life balance. The most important part of managing a small team with a large operational area beside smart designs is automation, infrastructure as code is a must. I am not a developer but I take pride my code is secure, idempotent, and user friendly. I write automation in either python or using native cloud template languages (cloudformation, bicep). Complex commands range from hundreds to thousand lines of code, all managed through github. Besides automation, monitoring is crucial also in operations as metrics is needed to preempt issues or support incident analysis. I rely heavily upon datadog dashboards, splunk searches, and snowflake to ensure operational health. Security is always ground zero in everything I do.

Consulting as a Cloud Architect for AWS be it security, infrastructure, or other areas of expertise normally runs the gamut of every cloud and datacenter technology that is on the market. The focus is always the customer and what I can do to help them move to the cloud to gain the competitive edge they need. Normally that may mean working on technologies or areas of expertise where I'm not the strongest in and that's really where the fun really is, learning. Learning is not just technical but also learning the unique characteristics of each company, its vertical specific processes, leadership operational methodologies, operational models between central organizations and business units, and application development practices. Consulting for AWS have enhanced my technical and management skills which would have taken multiple career lifetimes if not working as a consultant in the most technologically rich and diverse cloud company in the world.I've been in engagements which last from weeks to engagements which last over a year, gaining trust and providing complete solutions from design, implementation in code, to deployment while also providing strategic and operational consultation for their cloud journey. Providing expertise to their senior architects, leadership, and operational organizations. Even though my core area of expertise is security and infrastructure, I've been consulting in almost every area AWS covers except for AI/ML which is the area I am most interested in learning.To list technology areas I have worked on in my capacity as an AWS cloud consultant would be too many and be just a list. My love when it comes to the cloud is automation. Write infrastructure as code so mass deployments/changes can become faster, more frequent, and a lot more secure and safer than trusting to manual actions. This removes the heavy lifting, leaving for more time and resources to actually solve upcoming challenges and improve old solutions.

Position change is due to Microsoft acquisition of Nokia mobile division. All previous responsibilities and role stay intact with addition of primary focus on network/security integration of R&D organizational services to maintain business continuity. I run a global virtual team of global IT specialist in different areas of expertise. Project highlights below:● re-IP Project (technical lead): Fix conflicting IP addresses of 5000+ servers in 7 data centers within a short time frame to allow full network/service integration with Microsoft. - Technical road mapping, DNS manipulation, scripts creation to harmonize/simplify and minimize efforts, firewall rules (30,000+) filtering/analysis/modification● Network and infrastructure Integration Projects: Find/design/drive integration of network, security, and infrastructure services with Microsoft IT organizations to allow for smooth transition of ex-Nokia R&D IT services. - Mapping of legacy Nokia network security zones, DNS infrastructure, patching architectures, R&D active directory and other services to myriads of setup and IT organizations within Microsoft - Data center/lab migration planning, negotiations, and coordination.● Azure cloud migration Project (Technical Lead): To define solutions and create roadmap to move services from existing data centers to Azure Cloud. - Review all supported R&D application and service designs to define solution, blockers, and priorities for moving from existing data centers to Azure cloud. - Ensure SaaS, PaaS in Public Cloud as priorities in designs with appropriate cost benefit analysisPlanned/working on projects include Openstack with Jenkins/Puppet/MaaS for system provisioning, Puppet for Windows/Linux configuration management, and chocolatey for Windows 3rd party applications patching.

Similar responsibilities as prior role with additions. I run a global virtual team of senior IT global specialists. Notable additions below:● R&D DMZ/Extranet networks: Taking over Nokia's R&D collaboration (extranet) networks (Finland, China, USA) and IT security responsibilities to ensure high performing networks for R&D operations and secure designs for R&D dataflow to/from collaborators and direct Internet. ● HCL 3rd party support management: With company outsourcing a large part of our IT organization (non-R&D), my task was to transfer knowledge of network and IT security related areas and to ensure 3rd party service will meet the needs of the R&D business unit operations. With decreasing resources and increasing demands while dealing with 3rd party politics, my primary task is to ensure continuity of business operations while minimizing risk to Nokia IPR in a challenging 3rd party supported system and network landscape.● Vulnerability Eradication projects manager to ensure R&D IT systems on both extranet and intranet are secure. Resourced team from all R&D IT units, prioritization, Qualys reporting and data manipulation (scripted), and solutions automation where possible. 45000 vulnerabilities eradicated.● WAN cost savings change manager for R&D sites globally. Ensured global cost saving in changing of vendors, routes, and MPLS does not hamper R&D sites productivity. Monitor, analyze, troubleshoot and negotiate when required with global WAN team and 3rd party HCL to ensure pre-cutover and post-cutover productivity does not drastically change especially in latency, bandwidth utilization capacity and cross site routing schema. Many issues found and resolved.

In additional to prior responsibilities as IT Security manager, the area of responsibility expands to including R&D IT global network infrastructure management. ● Create and implement network strategic roadmap for R&D IT organization. Ensure infrastructure foundation harmonization and future planning including DNS, DHCP/PXE, network capacity, network security, performance and other network related areas. ● Negotiate and work with network IT units to ensure R&D organization requirements are truly needed and met within reason and policies. Ensure network monitoring and server level network information is available including virtualized/blade networks. ● Designed, implemented, and supported secure R&D DNS infrastructure using bind and Men & Mice with failover slave clusters on all sites to allow R&D IT to support business requirements quickly with split second record replication, high availability, self-support and multi security zone features. ● Implemented secure file shares using Samba with customized security options to ensure secure sharing of selected and approved data from intranet to extranet to save cost and minimize complexity of business solutionsIn general ensure network demands are met to allow for smooth R&D development of products both internally and externally.

Responsible for full IT security decisions within global R&D IT organization of about 17+ sites around the world. ● Deployed security projects - R&D Endpoint Security - Data Classification and Segregation - Web Application Firewalls - Password Management - VMWare/Netapp/EMC Shared Multi-Zoned Infrastructure - OS Hardening and Host Breach Detection - Incident Response Process Testing - End User Security Awareness - Log Management● Provide support to all programs and projects in area of IT security. Liaison to other Nokia IT Security groups. Manage risk for customers and design/provide managed risk solutions to meet R&D customer needs and requirements. ● Support network activities within R&D with focus on security for both IT organization and all R&D units. ● Driving force for network changes in R&D towards network management units. Manage and develop solution for global R&D IT datacenter network infrastructure harmonization and integration with focus on high network performance and securing R&D data/R&D IT infrastructure from a hostile intranet. ● Support R&D needs in merger and acquisitions. Drive network integration that meets network and security policies while maintaining business continuity for R&D.● Designed and implemented secure forwarding proxies and web servers using modsecurity as web application firewall (WAF)● Create security policies for R&D including but not limited to incident response processes, security SOP for administrators, etc. Create security newsletter for R&D end user comsumption for promoting security awareness.

Ensure smooth IT operations and meet Tokyo R&D IT requirements in relation to business targets. Collect and meet customer requirements while creating IT site strategic roadmap to ensure R&D present and future requirements are met. Design/maintain IT datacenter and manage resources. ● Head global virtual IT security team and develop IT security strategy and solutions for global R&D IT organization while providing hands on support to global projects in the area of security. ● Support local site advanced IT systems/R&D tools (PVMGmake, Catia, Cadence, etc). ● Designed and developed a global IT Security Framework to automate security monitoring and security solutions deployment. ● Support global Nokia IT Security organization as auditor and breach investigator. ● Designed R&D lab containment networks using checkpoint firewalls to ensure network stability● Line management responsibilities include R&D IT site team, R&D Product Data Management team, and R&D Translation team with a headcount of 13+ personnel.● Design and build new datacenter taking note on future requirements in power, cooling, capacity, disaster recovery, location, physical security, safety, and cost.

Ensure smooth IT operations in the region. Line management for region's IT site managers. Focus was to stabilize IT operations in China and focus on IT personnel needs aggravated by prior management.

Managing and supporting R&D UNIX Environment with focus in HPUX and Solaris systems. Responsible for IT data center operations. Focus on harmonizing and stabilizing the IT systems architecture.

Primary focused in strategic human intelligence