Designed a hub-spoke network within Azure from a greenfield environment. Came up with the design, deployed and drew architectural diagrams as part of documentation of the environment.• Created the structure of management groups and subscriptions for the various environments. Used different resource groups for easy cost analysis and access limitations. • Established a VPN connection between the connectivity VNET and onprem for access from onprem devices.• Monitored and improved the security posture of cloud platforms using CNAPP services (GuardDuty, Security Hub, Sentinel, CloudWatch). Improved the security score from 38% to 67%.• Deployed resources and infrastructure using IaC and PaC solutions like Terraform and CloudFormation.• Configured Azure Sentinel for log analysis. Made it the central monitoring location and ingested logs from different locations including AWS CloudTrail.• Plan, build and configure network infrastructure within VPC with public and private subnets, configure routing tables, security group and internet gateway.• Configured NACL, Security Groups and WAF to secure the application and VPC network depending on access parameters provided and conditions.• Leverage AWS cloud services such as EC2, auto-scaling and VPC to build secure, highly scalable, and flexible systems that handle expected and unexpected load bursts.• Setup and configured VPC Private Link (Endpoints), Direct Connect, Transit VPC, VPC Peering, CDN (CloudFormation and CloudFlare), IPsec, Interface endpoints and VPN for secure data transfer, and secured connection to other AWS services and other AWS accounts.• Troubleshoot various customer technical problems and adhere to best practices.• Cost and performance monitoring of resources and applications using Aws Cloud Watch, including creating alarms to monitor metrics such as EBS, EC2, ELB, RDS, S3, SNS and configured notifications for the alarms generated based on events defined

Daily troubleshooting of customer issues they face when they use AWS services. These services include IAM, S3, VPC, DynamoDB, Load balancer, SAML Federation, OIDC, Cognito, Config, CloudTrail, CNAPP services (GuardDuty, Security Hub CloudWatch), Autoscaling, CloudFormation SQS, SNS, lambda, KMS, Organizations, CloudFront, Secrets manager, RDS, AWS SSOSetup and configured VPC Private Link (Endpoints), Direct Connect, Transit VPC, VPC Peering, CDN (CloudFront), IPsec, Interface endpoints and VPN for secure data transfer, and secured connection to other AWS servicesDeployed Azure NetApp Files (ANF) solution for extra storage for VMs in AVS. Configured low latency routing between AVS and ANF through a VNET gateway connection with FastPath. Achieved latencies below 1ms.Deployed infrastructure using PaC and IaC solutions such as CloudFormation.SAML integration of Azure apps, Okta, Ping,Encrypted and managed both server-side encryption such as SSE S3, SSE C, SSE KMS and AWS Client encryption library, and client-side encryption of S3 and databases in the cloud.Hands-on experience and good knowledge of AWS services: EC2, S3, VPC Endpoints, VPC Private Link, VPC Peering, Transit VPC, Network Protocol, Sub netting (Private and Public), IPsec, VPN, Route53, ELB, Auto scaling, SQS, SNS, IAM, Dynamo DB,Cloud Formation, Cloud Watch, Cloud Trail, Storage Gateway, internet Gateway, Glue, code deploy and GuardDuty.Participating in projects to deliver new features for various AWS services. Being part of a team that understands customer needs, design solutions to meet customer needs and implement code to deliver the features.Creating/updating cloud environment configurations to establish/support application workloads, including configuration of AWS accounts using Control Tower, IAM Users and Roles, VPCs, subnets, load balancers, network routes, Transit Gateway, Systems Manager, Config Manager, stack sets, CDNs such as CloudFront and CloudFlare, Route53, WAF, and API Gateway.