Azure Backup (MAB) is above Azure Resource Manager(ARM ) Ring-0 service which backs-up Azure resources like IaaS VMs, Disks, AFS, Blobs, OSS DBs, SQL/HANA DBs in VM, Files on servers. The service has multiple micro-services(mS) which run on Service Fabric.Responsibilities:- -Setup Incident Management tool(IcM) for 100+ Livesite(LS) DRIs for 24x7 monitoring -Publish Livesite Standard Operating Procedures (SOP) for LS DRIs to follow.- Conduct weekly Livesite reviews with DRIs and ensure that they follow SOP guidelines. - Create Geneva monitors and IcM automation for automatic incident enrichment with required telemetry to expedite the Incident Mitigation (TTM- Time to mitigate)-Lead the Operability efforts to improve health of the service ,reducing noise in alerting, missing monitors, onboard to AIops tools (Aegis/BRAIN) for livesite and operability.- Present the Livesite and operability status to the Leadership in the monthly review meetings (MBRs)- Design and build Fault detection and auto-healing of bad VMSS instance not capable of taking user traffic in production in real time in the underlying Azure backup's VMSS infrastructure fleet in Azure Public cloud.-Design and build Configuration Drift tool that detects the config drifts among multiple microService of Azure Backup across 57+Azure public region that does not follow the managed safe deployment practices guidelines. DRIs use ACIS actions ( approved Production touch tooling) to perform targeted config updates in some regions for troubleshooting CRIs(customer reported incidents, feature testing,livesite incidents). If these config changes are not included in the next deployment release(CICD), the config will be reverted to old values and may cause service outage​s. -config drift detection tool raises live site alerts when config drift is detected & also will soon implement checks at deployment time to pause the service version upgrades if drift is detected (for manual verification and resuming)

Worked as Sr SecOps/Security Engineer in Windows Devices Group Information Security (WDG IS) TeamWDG IS team takes care of security monitoring @ MS from different attack vectors (External, Internal). Team is using myriad tools & proccess( Red , Blue , Hunt, Fire, Forensic ) for Threat & vulnerability scanning , data leaks, security monitoring, Incident handling , Reporting & improving detection rules via continuous feedback loops.While working in WDATP, I also analyzed different MS Azure security products to enhance overall security with integration with WDATP and products includes Azure sentinel, Azure Security Center, Credscan for Azure ADO based CICD etc.Responsibilities & Highlights:Security SRE• Production DRI , Ops responsibilities, Incident management on HP’s Arcsight & Windows Defender Advanced Threat Detection Setup on entire MS infrastructure and PropertiesSecDevOPS• Ingesting & ETL for raw signal data from WDATP (Windows Defender Advanced Threat Protection/EDR system) and other platforms in vNext Product• Building CICD pipelines in VSO/AZdev for Security detections & key LOB services• Creating Health and Welfare monitoring plan for vNext Security Product and executing them• Integration with Kusto, ARIS and ServiceNow for next gen version of the security monitoring platform; Setting up Kafka,Databricks clusters and creating beta security detections in Databricks • Setting up secured SharepointOnline site for the highly critical security detection rules using Office365 DLP technology and leak protection.• Threat protection & vulnerability scanning and management using tools like Qualys , Azure's Azsecpack, WDATP on the entire fleet of MS WDG Customers.• & More

Microsoft provides engineering, marketing, other teams with legal guidance through CELA (Corporate External Legal Affairs) to help minimize potential legal issues that may arise from customers, competitors, third parties (e.g., governmental entities), which may result in either a lawsuit or a regulatory investigation.Deepal worked as Dev-Ops in MS CELA(legal) BI space. CELA BI is a horizontal where multiple MS business groups data flows in a data warehouse. Team works with multiple backend technologies like Azure data factory, AzureDW,logic & API Apps, Cosmos,ADLS , SSAS(Cube), KV, BOTs etc.Responsibilities & Highlights:• Designing the vNext version of the CELA BI platform on Azure PAAS • Production DRI /SRE/OPS responsibilities also working with CELA attorneys and DCU(Digital Crime Unit) Security Engineers on the Security Cases that were reported by different Security Operations team(CDOC/Cyber Defence Ops Center , WDG IS SOC etc) with in MS.

DevOps /SRE for 14 HRIT apps in staffing space including the flagship ‘careers.microsoft.com’ website in Attract Talent domain which is architected using async /micros service design methodologies in Cloud. External job applicants will access the Phenom (external SAAS provider) Job portal via Oauth providers whereas Internal employees will be directly logged in via Azure AAD authentication. Recruiters will create new job posting in ICIMS application (another SAAS provider) which will flow to the Microsoft Careers site (on phenom portal) via bunch of micro services hosted on East & West US datacenter in Azure.Responsibilities: -Designed & implemented custom & secured SAAS/API solution for Russian data compliance -Set-up secure Email solutions for External , internal and vendor partners using Sendgrid,Exchange and cisco Ironport and resolving the SPAM issues in Production( via monitoring SPF, DKIM, DMARC/email headers) -Establish support SLA & Support model for Phenom, Icims and MS using SNOW, Zendesk ticketing -Conduct Failure mode analysis (FMEA) and Performance and accessibility testing on the new solution -Set-up monitoring & telemetry for the new solution using Azure Automation, PS runbooks & appInsights. -Data migration from the legacy system on to the new system using BOA data quality tool & data mapping /transformation rules -Maintaining a secured SharepointOnline for the highly critical MS Sr LT Succession planning site using Office365 DataLossProtection technology and leak protection. -Conducting Security Pen testing & Setting up cloudfare on the Pre-prod site to check on vulnerabilities and threats

‘Partners.microsoft.com’ (PMC) and vNext solution-Partner Center ‘partnercenter.microsoft.com’ in Microsoft's UST Business Group. PMC app is used by MS partners to register their organization/Individuals under several offerings under MS Partner Network (MPN) run by MS to manage their assets, competencies & benefits. PMC has a user base of ~ 400K users and is considered a mission critical application used 24x7 across the globe bringing close to $5B in revenue for Microsoft. PMC has a thin client interface that supports all renowned browsers, localized for all the main locales. At the middle tier thin client talks to PVP Web services which in turn talk to SQL 2012 onprem database. PVP is also consumed by other multiple partners/ consumers in and outside Microsoft.Responsibilities: - -Co-Designed and implemented big get Identity Plane migration project from legacy auth services to new REST based APIs Auth offering. -Troubleshooting & mitigating Customer Reported Incidents(CRI) and LiveSite Incident(LSI) originating from product's telemetry and monitoring. -Migrating production alerting and monitoring from System Center Operations Manager(SCOM) to OpsInsight Product on Azure( which later became AppInsight with LogAnalytics)

Axis is a mission critical app used for managing critical (critsit ) issues of MS enterprise customers handled by PFE(MS premier field engineers) and runs on Azure PAAS currently.Axis application is used to request, track and log hours on service requests for Microsoft Premier Customers. Requests are created by Technical account managers in Axis which are picked up by resource managers to allocate service engineers based on skills and availability. Service engineers provide updates and log labor against the requests which are deducted from customer’s service contract hours. Axis had a user base of 6000+ users, and is considered a mission critical application used 24x7 supporting close to $1B in business for Microsoft. Axis comes in three flavors i.e thin/web portal ( On Azure-PAAS), Modern App(win8/10 store app) (AxisNow v1.0 launched in May 2015) and Win8 mobile app called ATG (AxisTOGO).Responsibilities & Highlights: -Engg SPOC ( Developer) for delivering v1.0 AxisNow (Win8 ModernApp). Ensured that the Axis team gets the Certification from windows store team after meeting all their strict requirements (Fortify, Win8 app guidelines, scalability of the app, Security etc) for Axis win8 app. -Created Threat model & FMEA plans around open Vulnerabilities , Hardening via Automation, Performance and functional for the ATG(Axis mobile app) and Axis web portal applications. Worked with the team to ensure the right policies and standards around Security/ISRM, Accessibility, Windows Store, Performance & Localization and application compatibility ( on other OS/browsers) are met. -Handled & managed FTE and vendor teams from Wipro, Accenture & TCS for the entire duration of this project while it was being developed and after its postproduction launch did SRE/OPS responsibilities for e.g. creating monitors across multiple Azure regions to detect the availability and performance KPI of the App

Worked as the End to End QA Lead to deliver key big bet version 1.0 projects for Microsoft IT in Volume Licensing space like MS Quote , VLCM ,VLSC ,eMSL,MS Explore and sustenance releases for other important projects(E3, MSL etc). Volume Licensing Applications ( E3,VLCM V1.0,MSQUOTE V1.0,MSL,EXPLORE.MS, CSC, VLSC) helps MS realize revenue of over 25 billion USD per annum in sales and thus bear 'critical service' application tag. Responsibilities & Highlights: -Creating Threat Models, FMEA , End to End test plan including Security, Automation, Performance and functional test plans for the volume licensing and e-commerce application releases. -Leveraged PenTest tools like Burp Suite, NMap,SQLMap and OWASP ZAP and EICAR for conducting Security and Penetration testing of the different applications during different phases of SDLC -Create Framework Libraries, Classes and Methods in C# to test Web, Windows, WPF and Web Services using Visual Studio for test automation -Perform Automation & Security Testing using VSTT, regression of bugs, Test Cases execution and Ad-hoc testing on new builds and did some tooling work to bring in efficiencies in the SDLC process. Liaise with the business to understand/resolve requirement gaps and with the Volume Licensing clients regarding functional features- Performance and Automation leads for ‘E3’ and ‘CSC’ applications which are part of Volume Licensing portfolio.

While at Dell, Deepak Played multiple roles of Dev, Test and Program management while executing IT projects for fortune 500 Companies.