Muhammad Qasim Email & Phone Number

San Francisco, California, Us

San Francisco, California, Us

• Achieved a 60% reduction in infrastructure costs on Google Cloud Platform (GCP) by strategically deploying workloads on Preemptible Virtual Machines.• Engineered and maintained robust, scalable infrastructure across AWS and GCP ecosystems, leveraging Infrastructure as Code (IaC) with Terraform.• Oversaw the architecture, deployment, and management of Kubernetes clusters on both AWS EKS and GCP GKE, ensuring optimal performance and resource allocation.• Utilized Go (Golang) to automate repetitive tasks and develop custom services, enhancing operational efficiency and system reliability.• Implemented and managed HashiCorp Vault for enterprise-level secrets management, reinforcing security and compliance protocols.• Administered High Availability (HA) Prometheus and Thanos configurations for real-time metrics, data deduplication, and enhanced monitoring capabilities.• Maintained and operated ArgoCD for streamlined, automated deployments, reducing the lead time for changes and bolstering DevOps best practices.

• Develop, implement, and maintain policies, procedures, and associated training plans for cloud infrastructure automation • Participate in the development of cloud infrastructure strategies in collaboration with the cross-functional stakeholders • Build / Manage AWS Org immutable infrastructure with child accounts using Terraform • Used Go (Golang) for AWS Org automation using AWS Lambda • Deploy / Manage AWS services CodeBuild, EKS, EC2, SSM, Redis, TGW, S3, EFS, ALB, NLB, and ECR • Deploy / Manage Consul, HashiCorp Vault, Jenkins, RabbitMQ, MongoDB, IBM MQ, and DataDog using Terraform • Build / Manage application AMI using Packer and Pipelines using Jenkins and Terraform • AWS security using SecurityHub, IAM, GuardDuty, Inspector, WAF, Config, CloudTrail, KMS, and Athena • Used SSO for authentications

Carmel, Indiana, Us

• Managed multiple AWS accounts for Serverless applications include EFS, RDS, S3, Redis, KMS, EC2, Kinesis, API GW, and VPC Peering • Managed users and services access using AWS IAM • Built a CI/CD pipeline for Serverless application (Lambda) using Jenkins Groovy DSL • Implemented AWS SSM for dynamic properties for Artifacts • Managed Docker containers to support Serverless application deployment • Managed GitHub, Nexus, and JIRA/Confluence • Configured monitoring and alerting using DataDog (using Terraform) • Leveraged Packer and Ansible to create base secure AMIs

Toronto, On , Ca

• Designed, build, and managed immutable infrastructure for SAAS based application on AWS (Multi-region) • Build and Managed infrastructure as code (IaC) using Terraform for the build, changing, and versioning of infrastructure on AWS (EC2, IAM, Security Groups, NACLs, ALB, ELB, S3, Redis, Route 53, WAF, AMI's, ASG's and RDS) • Build and managed AMI versioning using Packer and Ansible • Build and managed EFK (ElasticSearch, Fluentd, and Kibana) for logging • Build and managed Docker cluster (Nomad, Consul) • Build and managed HashiCorp Vault cluster • Build and managed Weave network for internal Docker networking • Build and managed Fabio Gateway for Docker cluster • Build and managed Gitlab for CI/CD • Build and managed automated build Docker images using multi-build • Build and managed Internal Docker registry for images • Managed VMWare ESXi • Designed Release Manager strategy

Toronto, On, Ca

• Managed servers on RackSpace cloud • Administration of Servers Linux servers (RedHat, CentOS, Ubuntu) & Server 2008, Virtualization (VMware ESX 5.x) • Creating, managing Virtual Machines and performing Snapshots Monitoring of Virtual Machine’s & ESX servers (CPU, Memory, Disk and Network Utilization) • Administration of in-house Microsoft Active Directory, DNS, and Network drives • Managed VPN access for employees working remotely • Managed storage allocation • Managed Parallels Plesk servers • Diagnosed and resolved problems associated with DNS, VPN, NFS, and Apache • Managed Database servers MySQL 5 • Disk management and implementation of RAID levels using parted and mdadm • Collaborated with developers to implement changes to websites on development, test, and production servers • Planned and executed packages and updates installations necessary for optimal system performance • Implemented and maintained Fail2Ban, IP-tables and other security measures to prevent and block hacking attempts against servers • Participate in rotating on-call support • Bash script for automating management tasks including backup and restore • DNS migration from on-prem to RackSpace cloud using bash scripts • Managed ElasticSearch cluster for applications • Managed Jenkins for CI/CD

Lahore, Punjab, Pk

• Administration of Servers Linux servers (CentOS, Ubuntu, Arch-based), Unix Servers (FreeBSD, Solaris), Windows Server 2008/2012, Virtualization (KVM, Xen, Vmware, HyperV, OpenVZ) SQL (MSSQL, MYSQL) that include installation, configuration • Evaluated, recommended, and executed new technologies and updated existing infrastructure to ensure optimal network performance • Installed, configured, and maintain network services DNS server (Bind 9, MS DNS), mail (Exim, Postfix, Mail Enable), FTP server (PureFTPd, Microsoft FTP), firewall (CSF, Fail2Ban), web server (Apache, IIS, Nginx) SQL server (MySQL, MSSQL), remote management (OpenSSH, Microsoft RDP) • Managed and optimized Database Servers MS SQL Server 2008/2012 and MYSQL 4/5 • Maintained and troubleshoot hosted email security (Anti-Spam, Anti-Virus, Content Control) and web security (ModSecurity, Anti-Virus, CXS, Bash Scripts) • Installed, configured, and maintain the security of servers with OpenVAS, Rootkits ( RKHunter and CHKRootKit ), IDS ( Snort, PSAD), Linux Malware Detection, and DDoS ( Bash Script ) • Installed, configured, troubleshoot, and updated panel WHMCS, Cpanel, Zpanel, Plesk, SolusVM and PhpMyAdmin • Installed, configured, and maintained monitoring system ( Nagios ) for servers • Deployed and maintained Nginx with apache as a reverse proxy • CRON jobs and shell scripts to automate tasks on the server such as emailing, backups, file permissions, spam control, and transfers • Worked with hosting staff to diagnose and troubleshoot software and network issues located in various data centers worldwide and escalating to vendors when necessary • Prepared weekly system security report for the management to review and discuss