Mahesh Kumar Koheda Email & Phone Number

- Architecting a resilient and scalable cloud infrastructure for the Payments Facilitation product, in the process of migrating from on-premises to AWS to enhance performance and availability.- Developed Infrastructure as Code (IaC) using Terraform to establish a consistent, efficient deployment process and streamline infrastructure management.- Implemented continuous monitoring and security solutions focused on vulnerability management, file integrity, and intrusion detection/prevention, aligned with the MITRE ATT&CK framework.- Actively contributing to PCI DSS compliance efforts, integrating best security practices to meet regulatory standards and strengthen data protection.- Setting up proactive monitoring and alert systems across cloud and OS resources, incorporating tools to monitor security events and performance for improved incident response and operational resilience.- Refactoring applications to support scalability and failover, enhancing system reliability and aiming for high availability of critical services.- Supporting on-premises infrastructure with VMware solutions, maintaining hybrid environments to ensure seamless integration and optimized performance between cloud and on-premises resources.- Managing system administration by leveraging Microsoft 365, Azure Active Directory, and MFA security protocols to strengthen access control. Overseeing user management, backups, and remote support to maintain operational continuity and data protection.

Canada

• Optimized AWS cloud solutions incorporating services like EC2, S3, VPC, Lambda, RDS, Elastic Load Balancing, CloudFront, IAM, DynamoDB, Auto Scaling, and CloudWatch for high-performance computing and ensured high uptime with efficient resource management and security, including advanced IAM roles, policy management, and encryption standards.• Engineered CI/CD pipelines using Jenkins, AWS Code Build, Code Deploy, and Code Pipeline, integrating blue-green deployments for zero-downtime updates that led cloud migration from legacy systems to AWS, focusing on scalability and minimal disruption.• Orchestrated Docker and Kubernetes applications on AWS ECS, emphasizing load balancing, auto-scaling, self-healing, and efficient management of multi-container pods, achieving a high success rate.• Developed Python and Bash scripts for automated system health checks and log analysis and configured AWS CloudWatch and CloudTrail for real-time monitoring and comprehensive log management.• Implemented Infrastructure as Code (IaC) practices using Terraform and AWS CloudFormation, automating cloud resource provisioning and maintaining cutting-edge configuration management.• Administered high-availability databases like Amazon RDS, Aurora, and DynamoDB, focusing on replication, and read/write optimization strategies.• Managed continuous integration/deployment using Maven and Ansible, streamlined code version control with Git and GitHub, and collaborated with cross-functional teams to enhance deployment processes.• Engineered secure and scalable network infrastructures in AWS, utilizing VPC peering, Direct Connect, and advanced routing techniques. Implemented stringent SSL/TLS and VPN security protocols, ensuring system reliability, performance optimization, cost control, and compliance.• Leveraged DataDog to monitor, troubleshoot, and optimize AWS infrastructure, ensuring seamless real-time data visualization and service dependency management

India

• Orchestrated AWS services including EC2 Auto Scaling, S3 with lifecycle policies, RDS Multi-AZ, VPC, and Lambda with API Gateway, demonstrating AWS infrastructure and best practices.• Utilized Infrastructure as Code with AWS CloudFormation and Terraform for scalable, idempotent cloud environments, emphasizing advanced orchestration with CloudFormation's custom Resource Providers.• Engineered VPCs focusing on network architecture with NAT Gateways, AWS Site-to-Site VPN, and Direct Connect, ensuring resilient, secure network infrastructure aligned to AWS Well-Architected Framework.• Managed AWS security by administering IAM roles and policies, Security Groups, and NACLs, ensuring least privilege access, resource tagging, and cost optimization using AWS Resource Groups, Tag Editor, Budgets, and Cost Explorer for financial governance alignment. • Configured S3 buckets with versioning and replication to achieve high uptime, managed RDS with read replicas resulting in a performance enhancement, and expertly handled DynamoDB with Global Tables, thereby improving global data access speeds, showcasing comprehensive expertise in AWS storage and database administration.• Employed AWS monitoring tools like CloudWatch, CloudTrail, and AWS Config for comprehensive system observability, compliance tracking, and adherence to AWS operational best practices.• Developed numerous automation scripts using AWS SDKs in Shell, Python, and PowerShell, enhancing cloud workflows, and implemented AWS Lambda and Step Functions, achieving a reduction in execution times and operational cost savings.

India

• Worked on Linux server installations and configurations, adept at managing complex network structures including firewalls, VPNs, and routing schemes• Monitored server performance metrics for executing fine-tuned optimizations, and conducted comprehensive traffic analyses to inform strategic capacity planning, ensuring optimal resource allocation and scalability of system infrastructures• Expertly diagnosed and resolved complex issues within Linux-based systems and network services through advanced troubleshooting methodologies, significantly minimizing system downtime and optimizing operational performance• Spearheaded the implementation of robust security protocols and conducted comprehensive system audits to ensure stringent adherence to industry-specific standards, markedly enhancing continuous business operations and regulatory compliance• Upheld a secure IT environment by enforcing rigorous security measures in compliance with prevailing industry standards, concentrating on sophisticated backup and disaster recovery frameworks to fortify data preservation and service resilience during emergencies• Devised and executed strategic plans for data preservation and ensured uninterrupted service continuity in the face of emergencies, thereby solidifying the IT infrastructure's defense against potential disruptions and threats• Leveraged advanced scripting techniques to automate routine administrative tasks on Linux servers, significantly boosting operational efficiency and reducing manual intervention in system management tasks• Administered and optimized virtual environments using VMware and KVM, seamlessly integrating cloud services with existing on-premises systems, thereby enhancing system integration and leveraging cloud efficiencies for improved overall performance

Masters, Mechatronics Engineering

Bachelor'S Degree, Mechanical Engineering