Currently working as freelance consultant and open to full time roles as well as consulting. As a freelancer I am actively involved in providing below services:• Cloud & Containers Security,Architecture & Migration Consulting. (AWS, OCI, Azure, K8s, IaC)• Information Security Audits/Compliances & Risk Management guidance.• IT Security Trainings (Cloud, DevOps, Information Security, Containers)• Incident Response & Security Operations guidance.• IT Security Strategy Consulting & Leadership AdvisoryApproach: Combining technical depth with strategic vision, I provide businesses with innovativesolutions and comprehensive training that address their unique challenges.[Open to Full Time Roles to join on immediate basis]

As the founder of Pen&Flute, based in Pune, I established this platform to create harmonious conversations through impactful podcasts, audiobooks, and voiceover content. Our team of writers, translators, voiceover artists, editors, and creatives bring stories to life through video podcasting, expert editing, and thoughtful storytelling. We focus on meaningful discussions that connect people and societies. Our studio in Pune is where all this magic happens.

Security Strategy and Architecture

Cloud Security, Container Security, DevSecOps, Infrastructure Vulnerability Management; Policy Compliance/CIS benchmarks/hardening; FedRAMP, CCM, ISO 27001, SOC2

Role: DevOps, CISOVayana is a leading SME Supply Chain Financing Network and also essentially a link in B2G. The B2G unit or a "Vayana GSP" taxpayer network enables corporates to connect to GSTN(govt tax network) using the published APIs and to NIC for e-way bill APIs. [ https://www.gstn.org/ecosystem/ ]. What I do:- As a CISO for implementing security controls, conducting Risk Analysis for mandates such as ISO 27001, PCI-DSS.- Involved in IT Infrastructure & network design/ planning, implementation for Vayana GSP and SahiGST ASP on AWS Fargate cluster with IaC.[ www.sahigst.com ].(Infrastructure-as-a-code using Python, Ansible, CloudFormation, Terraform).Technology stack: Docker, Linux, Ansible, AWS, ECS, ELK, Cisco Cloud routers, Git, CloudFormation, Terraform, Prometheus, Python

• Handling all escalation calls on Linux related accounts (multiple accounts).• Grooming the team as tech lead for Linux related issues.• Building machines and automating the tasks.• Handling OS as well as application related issues / troubleshooting escalated calls.

Key Result Areas:Providing support to:• VMware Production Servers running Oracle Linux, RedHat, Ubuntu.• Development & Testing Teams entailing multiple virtual machines with different application layers.• Securing & Patching Linux servers – Scanning Linux systems, Identifying critical patches at all levels such as OS/ Application/ Database, Identifying false positives, Patching, devising a phase-wise patching schedule with no downtime to production. • Implementing necessary SOX controls for the servers. Closely worked with IT security and Database/Applications teams.Projects:Design / Planning and Execution of -• VMware Enterprise Wireless network – Design and Implementation of Linux DHCP andDNS servers to work with Cisco appliances for the wireless network. The servers were incluster and security and high availability was major aspects in the design.Accountable for Projects:• SAN Boot for Linux Physical Servers; moving database servers which were HP Blade toSAN boot.• Streamlining Access Control; worked on various aspects to streamline the access control to Linux servers for users across the organization to have role-based access control. This involved working on configuration management tool like Puppet & access controls via SUDO ,OpenLdap.• DNS Servers management – Maintaining External DNS servers, delegation of different domains, worked on DNSSEC implementation. Also supported internal DNS which is maintained via "Men&Mice" , worked on debugging various issues in DNS.• Managing Load Balancers – F5 Load balancers:- creating and managing VIPs, writing "Irules", Implementing SSL certs• P2V (Physical to Virtual) migration for large Database servers running Oracle DB.

Joined as a Linux System Administrator IN DTS (Deep Tech Support) team and later was involved as a Lead Engineer in creating high level design documents for various customers for new/existing projects which involved Unix/Linux. The role involved sizing of the servers with application teams, interaction with storage, database teams, identifying the risks, deviations involved in the project.* Operating Systems: VMware ESX, Linux , HP-UX , Solaris* Hardware - HP Blade servers for compute and storage, Rack mounted servers.* Scripting languages - Bash, tcl/expect, perl.

[ Nevis was acquired by Qualys Inc. ] Key Projects:• Disk Quota/ Storage Management• Resolved various technical issues related to LVM & RAID5 storage with multiple raid cardson an IBM server. Writing scripts to monitor disk usage by users; implementing the Diskquota dynamically• Spam control and E-mail security - Used bayesian approach to control spam using Spamassassin, virus mail filtering usingclamav, Mimedefang. Also implemented greylisting on sendmail.• Linux CVS server to authenticate users in two Microsoft ADS domains in a mixed environment. Involved in planning and executing of CVS server migration.• Open source PBX using Asterisk for VOIP phones:- SIP and Skinny protocols,Cisco phones as well as soft phones like Windows messenger.• Automated various tasks for Nevis Testlab; used Bash, Expect scripting to accomplish thetasks

Site: Nevis NetworksKey Projects:• Configuration, Administration and Management of Clustering Solution on Linux: Sungridand OpenMosix Clusters• NFS Server Optimization: Analyzed NFS Performance; implemented different techniques toimprove NFS speed as – NFS over TCP, Increasing number of daemons taking intoconsideration client size, changing default block sizes.• Administered DNS & Mail Server; configured Virus Mail Filtering on Sendmail withMimedefang• Deployed Bugzilla, CVS and Troubleshooting Various Bugzilla/CVS Issues• Setting up Services for Nevis Testing Team - Snort, Streaming Media Server for Linux, IRCServer, Layer2 Filtering with Ebtables on Linux Firewall, VPN with Openswan, etc.

My role was as Linux Engineer was to ensure high 'uptime' for servers with an eye on ensuring the web security on services being provided. * Managing IPTables firewall* Apache web servers* DNS & Email config and troubleshooting.* Patching of Linux servers

AICT - Amrita Institute of Computer Technology (part of Amritha Vishwa Vidyapeetham) was an Authorized RedHat Training Partner.As a passionate trainer - designed courses and taught C++, Core Java and RHCE courses. Also handled lab and networking of the institute,

Production Engineering / Materials Dept.