Founder of Maru IT SolutionsProviding AWS / Cloud / DevOps consultancy for clients

- Built workflows for infrastructure using GitHub Actions, integrating tflint and checkov to identify potential Terraform configuration issues and configured integration tests- Upgraded Terraform from 0.14 to 1.4, imported unmanaged resources to Terraform and removed unused resources- Performed cost assessment on client AWS accounts, reduced costs by 20% using Saving Plans, Reserved and Spot Instances, AWS Compute Optimizer, S3 Storage Classes, Lifecycle and Tag Policies- Set up Landing Zones with AWS Control Tower, configured guardrails for OUs, integrated SSO with Microsoft AD, enrolled existing accounts to Control Tower- Enforced granular access controls using AWS Service Control Policies (SCPs) on organizational units, optimised IAMroles, policies, instance profiles and permission boundaries with least privilege principal- Remediated over 200 Security Hub findings, configured streaming of new findings to slack for real time visibility - Configured Prometheus and Grafana for monitoring and visualisation of EKS clusters

- Developed Python applications utilising AWS Serverless Application Model (SAM), Step Functions, Lambda, DynamoDB and boto3 to enforce security best practices during account onboarding- Improved security posture for client accounts with IAM, KMS, WAF, Security Hub, GuardDuty, Config, CloudTrail, Amazon Inspector, Firewall Manager and SSM- Enforced AWS Foundational Security Best Practices and CIS AWS Foundations Benchmarks- Created ADO Pipelines and CloudFormation templates to automate infrastructure creation across different environments, incorporating security checks with IAM Access Analyzer- Established a data pipeline with CloudWatch, Kinesis Firehose and S3 to enhance central logging for compliance- Conducted periodic tasks for infrastructure maintenance and code refactoring, utilising Apptio Cloudability and CloudWatch Metrics to track resources and API calls, achieved a 15% reduction in costs- Collaborated with security and operations teams to identify and resolve security incidents, ensuring timely remediation and improved security posture

- Managed AWS platforms for clients using Terraform, CloudFormation, AWS SAM and Terragrunt- Created, maintained and upgraded Kubernetes clusters, supported application releases, implemented automated deployment of workloads with EKS, Helm and ArgoCD- Utilised Datadog, ELK Stack and Splunk for log management and data analysis for different clients- Performed regular security assessments on AWS accounts, reported recommendations to clients, documented remediation steps for common problems and known issues- Designed and deployed AWS solutions for business-critical applications, documented HLD and LLD, tested the applications and infrastructure, conducted workshops- Implemented pipelines with GitHub Actions and GitLab for automatic deployment of IaC stacks- Provisioned and maintained GCP and GKE infrastructure using Terraform, CircleCI and Helm

- Refactored AWS infrastructure, including services VPC, Route53, EC2, Lambda, SNS, Cognito, IAM, Certificate Manager, WAF, S3, CloudFront, CloudWatch, CloudTrail, API Gateway, SQS, RDS and DynamoDB- Imported resources provisioned manually, with CloudFormation or with Terraform 0.11 to Terraform 0.14 resulting in more manageable, scalable infrastructure with 30% lower costs- Utilised Terraform with GitLab to deploy infrastructure, streamlined the entire procedure through CI/CD pipelines- Launched and managed multiple EKS clusters for workload migration and documented the entire procedure - Enabled Security Hub, AWS Config and Amazon Inspector to manage and remediate security vulnerabilities- Developed a suite of Python scripts utilising boto3 library and AWS Lambda for cost optimisation- Utilised HashiCorp Packer to automate the creation of machine images for multiple platforms

- Provisioned AWS infrastructure using CloudFormation, implemented pipelines with CodeCommit and GoCD- Deployed serverless applications using Lambda, SNS, SQS, API Gateway, Aurora, S3 and DynamoDB - Provided ongoing support to legacy monolithic applications- Performed regular housekeeping tasks. Leveraged CloudWatch Metrics and Cost Explorer to track resource utilisation

- Developed scripts or applications for automation using Bash scripts, Python and Ansible- Led multiple POCs for possible technology integrations including Kubernetes and OpenShift- Administered RedHat and CentOS systems- Resource management and planning

- VMWare Administration- On-prem to AWS migration- On-prem to GCP migration

- Administered Linux/Unix systems including RHEL, CentOS, OEL, HP-UX, and AIX. 350+production systems including Billing, Charging, ERP, Hadoop, DWH, and Code Repositories- Built Hadoop appliances from scratch with 72 servers and 12 switches considering performance / security best practices- Automated tasks using Bash scripts- Datacenter migration project covering 100+ physical servers and related storage and network components- Storage consolidation and technology renewal projects

- Provided telecommunication companies test support for custom application- Created and implemented multiple testing process documents - Improved test process, reducing test time by automating test procedure