Saddique Khan Email & Phone Number

Berlin, De

Berlin, Germany

I joined a Data Science team as a Senior DevOps Engineer in Newyorker, supporting the data science team for the CI/CD pipeline and Cloudera cluster support management. My primary contributions include the implementation of enhanced security measures. I deployed a WAZUH security-monitoring cluster on Kubernetes, successfully integrating agents for comprehensive system monitoring. This deployment has bolstered the security framework, ensuring that all systems are effectively monitored and protected against potential threats.RESPONSIBILITIES:• Modified the Jenkins Pipeline to trigger deployments on the Kubernetes environment.• Upgraded Kubernetes version from v1.21 to v1.25.1 on rancher Kubernetes development environment.• Migrated distributed Rook-ceph outdated StorageClass along with user data to Longhorn StorageClass in Rancher Kubernetes.• Deployed VolumeStorage CRDs for backing up the namespace and enabling disaster recovery. • Deployed Velero using Helm chart with custom values file for taking resource backups in Kubernetes.• Customized the Wazuh setup using Kustomize scripting for GitOps deployment operations.• Used Ansible to set up SSH keys and certificates from HashiCorp Vault on Red Hat Linux servers.• Deployed Juyterhub using Helm Chart and GitOps for Jupyterhub singleuser notebook.• Deployed Sentory Monitoring for python code analysis.• Enabled and configured the Active Directory (AD) feature in WAZUH for enterprise user login.• Used and fixed monitoring tool issues: Grafana, Prometheus, Luki and Promtail. • Created an Ansible role to add WAZUH agents to the WAZUH Manager.• Utilized GitLab for maintaining code repositories and version control.• Authored and maintained Wiki documents for internal knowledge sharing.• Used Hashicorp Vault for managing secrets and keys.• Using Nexus/Horbor Artifacts for Images and Packages• Developed an Ansible role for deploying WAZUH agents on Linux servers.

Malta

In this short period of time, KPMG gave me chance to diversify myself in Azure DevOps and Azure Portal Services. I got a chance to work with a well prominent Canadian organization: Manitoba Public Insurance. I acquired a chance to build Azure DevOps Pipelines for Customer Relationship Management (CRM) and Power Application Platform.RESPONSIBILITIES: • Analysis of CRM and Power Application various environments: DEVs,SITs,QAs.• Created the continuous integration pipelines to bring the solutions and portal data from Dev environment to Azure git repositories.• Created Pack Pipelines for Creating the Artifacts to use them in the Release pipelines• Designed the flow to deploy solution from repository to the higher environments: SIT1,SITStaging Production.• Used Microsoft Power Platform Build Tools for importing solutions into a downstream environment• Used Microsoft Power Platform Build Tools for upgrading and importing the solutions in the CRM environments• Used Power DevOps Tools for Import data exported using Configuration Migration Tool into a CRM instance• Adding Service connection in the Azure DevOps for connection and deployment purposes• Adding Extensions in the Azure DevOps to use them as agent in the pipeline• Used Powershell scripting to deploy the Power flows on the CRM and Power App environments• Deployed OWASP tool for application URL scanning for top 10 security vulnerabilities • Created OWASP Dependency Pipeline for Azure Functions vulnerabilities detection• Created Infrastructure pipelines for Azure function apps• Assigning the security groups for pipeline approval and notifications• Working on Product backlog atoms• Creating Tasks out of PBIs and resolved them to complete PBIs• Created Yaml scripting for merging the code from one Azure DevOps Repository to another repositories• Pushing Artifacts to the feeds and using them in the release pipeline for dependencies purpose

Dubai, United Arab Emirates

RESPONSIBILITIES:• Stability of Kubernetes and OpenShift clusters• Created VPC, Subnets, Load Balancer, Security Groups on AWS using terraform as Infra as Code• Deployed a mini Kubernetes cluster on AWS using terraform (Check my GitHub repo for reference) • Deployment of Jenkins’s pod in each namespace for CI/CD for microservices• Multi-stage Dockerfile for spring boot java-based framework, Angular and Nodejs images• Hosting secrets and keys with containers in the deployment-Config YAML file• Hosting code in Scratch images for avoiding OS vulnerabilities• maintaining microservices resources: cores and memory • Nginx configuration for TLS termination, GZIP enabling, Health and routing• Configuring Kafka-group-topic, Kafka-schema, Kafka-secrets to the microservices • Configuring Redis cluster cache with microservices applications for caching SSO secrets, Users secrets, Keys• Using Kibana for microservices application logs• 3-scale configuration for mapping user’s HTTPS request to Pods• Creating PVs and PVCs on NFS for physical volume storage• Referring correct images to the deployment-config for running the required application containers• Using private nexus repository for image backup and related application dependencies.• Tagging images for using them in Dev, UAT, Staging, and Production Environments• Creating microservices images from SCR (GitHub) from developer’s code• Coded a complete pipeline from building images to the deployment of the application in microservices along with multiple test cases: Sonar Qube, Junit, Code Coverage, APITest, and checkmark.• Creating SVCs calls among depending applications for low latency • Created Pipeline for Android application for obtaining signed APK files • Designed an IOS Pipeline for creating a signed IPK file for putting it on the app center• Using Jira tickets for tasks monitoring• Using Confluence pages for projects requirements, changes, and discussions

Lahore, Pakistan

RESPONSIBILITIES:• Setting up Virtual Machines (Red-hat, Centos, Solaris, AIX) on physical servers for configuring staging, Development, and production environments• Applying newly released maintenance patches Operating Systems• Creating Database instances on Local Virtual machines and configuring applications to them.• Migrate a complete Database or its schemas to the newly created database for replicating the database to the new instance• Migrate Database from local infrastructure to AWS RDS Database using Database Migration Services• Created three-tier architecture on AWS cloud application deployment• Analysis of production application performance using Azure app insights and Azure SQL performance metrics.• Real-time monitoring and reporting of Production applications.• Azure Resource management Templates from PowerShell using Json language• PowerShell automation for various Azure infrastructure services• Deploy database patches on the already working database instance • Backup automation for the production application and Virtual Machines.• Traffic Manager Configuration for application higher availability• Providing Continuous Integration and Continuous Delivery (CI/CD) using Jenkins • Scheduling regular backups of the database to ensure current data availability in case of software/hardware crash.• Writing Ansible playbooks for deploying patches on multiple nodes at the same time• Restarting all application, database, and web services and bringing them online Docker containerization:• Installation of docker-engine • Writing Dockfile for building application images• Docker master and nodes cluster for resource managements• Creating a bridge and overlay network for containers and nodes communication• Scaling up and scaling down microservices application on the docker swarm cluster

Lahore, Pakistan

DevOps and infrastructure department is the most fascinating department in the information technology industry, and I am an expert in this domain.1. Tools & Technologies:• LVM file management for root mount point extension and LVM volume extension on the Linux server • Hosting of Angular application on Azure provisioned web app• Azure Content Delivery Networks (CDN) Configuration for high efficiency• Azure Shared Access Signature (SAS) generation and configuration on CDN on Premium standard • Azure VM machine and workload migration from on-premises into Azure Recovery Service vault• Creating Virtual machines on Azure clouds and manage them accordingly• Designing, monitoring, and configuring cluster architecture for application and databases • Writing scripts for automating the database backups: RMAN and User-management backup• Database error troubleshooting and bring it to the running condition• Ansible YAML coding for patching and application deployments• Fixing any infra related errors being faced during installation • Applying newly released maintenance patches and custom units to software and database • Restarting all application, database, and web services and bringing them online • Providing technical support in the event of software failure • Analyzing, troubleshooting, and solving software related issues • Suggesting improvements for resource management • Documenting of various activities for future purposes 2. Kubernetes Clustering and Pods management: • Created Kubernetes clusters containing one master and slave nodes• Patching Cluster Nodes• Adding JKS Keys in Keystore.jks wallet for Application containers on NFS hosted servers as PV and PVC fashion. • Writing Deployment-Config ( YAML ) files for configuring Pods for managing Docker containers• Managing microservices deployments using Kubectl client• Auto-Scaling of pods replicas• Updating application versions in Pods and making them live

Lahore, Pakistan

My passion for infrastructure and Network engineer started from infrastructure department in Techlogix. I worked with multiple teams on various projects. Some of those projects are completed and rests are under progress. I learned about pure network strategies as well as configuration of oracle applications regarding banking and universities software on updated platforms. Some of them are mentioned below.1. Tools & Technologies:• Setting up Virtual Machines for initial testing of software before onsite deployment • Installation and configuration of software on development, staging and production environments • Fixing any infra related errors being faced during installation • Applying newly released maintenance patches and custom units to software and database • Restarting all application, database and web services and bringing them online • Providing technical support in the event of software failure • Analyzing, troubleshooting and solving software related issues • Code and configure automation scripts • Scheduling regular backups of database to ensure current data availability in case of software/hardware crash 2. Technologies and domain: • Oracle Flexcube Universal Banking Solution (v.12.0.3.x.x) • Oracle Business Intelligence (v.10.x 11.x 12.x) • Oracle Financial Services Analytical Applications (v.7.x 8.x) • Oracle SOA Suite (v.11.x) • Oracle Access Manager (v.11x) • Oracle Database (v.10.x 11.x 12.x) • Microsoft SQL Server 2008 / 2012 • Oracle Weblogic Server (v.10.x 12.x) • IBM Websphere (v7.x 8.x) • Tomcat (1.7x 1.8.x) 3. DATABASE:• Oracle databases• SQL Server • MySQL • Logical Backup 4. Windows XP / Vista / 7 / Server 2003,2008,2012 5. Linux Distributions: • RHEL/OEL (5.x 6.x 7.x) • AIX (5.x 6.x 7.x) • Ubuntu• CentOs (6.x, 7.x)• Solaris SPARC 10, 11

Lahore, Pakistan

This part of experience shares my Master Thesis Experimentations: finding the vulnerabilities and the exploits in Large Scale Enterprise Organization network. My major task was to hack local wireless WPA2 network on the local network. For achieving this target, I setup a fake wireless network and apply Denail of Services attack on the local router using backtrack OS internal algorithms for disturbing its TCP/IP traffic and redirected the network traffic to my faked network. I got two types of passwords in this task: hashed and planned. Later I decrypted the hashed passwords by Installing LINUX on VMware worstation, which was confgured on cloud ESXI hypervisor and by bash plus python scripting. Additionally; I found multiple vulnerabilities and back doors in the university’s network. I scanned CCTV cameras, network Printer and IP phones for hacking. I used various scanning tools: Nmap, NetSparker and fierce. I reported every information to the security personnel of the university, and they abolished them partially. I wrote various bash scripts for decoding the hashed passwords and wrote services to get the hashed passwords. I used brute force techniques to decode them. It was done with absolute outcomes. • Jenkins usage for CI/CD process• GitHub for version control• Php for database connection• MYSQL• SQL Server• Kali Linux for exploitation• RedHat for decoding the code• Yum and puppet repository for packages management• Used Route 3 Aws for DNS settings• Java coding along with shell scripting

Islamabad Pakistan

Detection of a future accidental event: Fire, Earth Quake, and Oxygen Limitation was the major theme of this research project. My responsibility, in this project- Safety Assurance in High-Stress Environments-, was to establish a wireless network using small communication modules, which could carry information from one node to another node in Cartesian coordinates for conveying the message. After receiving the message, I used to extract information from the sensors packets to predict the incoming accidental event. I selected the JAVA language for predicting the information from the packets. We completed this project successfully and along with that; we won many awards through this project. I used various IP protocols, RIP, OSPF and WLS, to route the information in reliable methods. The Carrier-sense multiple access with collision detection (CSMA/CD) technique for avoiding dropping of the network packets.• Code and configure automation scripts• used Java language for handling the detection process of upcoming dangerous events• Used AWS EC2 Modules for creating an instance for testing our codes• C++ language was used to code the hardware modules and for controlling the event pocketing• Docker usage for making different application containers for avoiding operating system dependency• Testing was done on RedHat Linux platform

Lahore, Pakistan

In this area of experience, I worked on the data analysis project in UET Lahore Research Center. My job, in this project, was to extrapolate data from the previous records, which could help to predict future reliabilities of Appliances and demands of electric supplies in a particular area in Pakistan. I worked on multiple techniques such as Polynomial-Regression, Multi-Regression, Linear regression, and artificial neural networks by writing Java and Matlab scripts for obtaining the required results. We also completed this project in my tenure at KICS and handed over to ICT R&D Pakistan.• Jenkins usage for CI/CD process• GitHub for version control• Tomcat for Jenkins deployment• Java Language for coding the techniques• Yum repository for packages management• Used AWS for SQS services

Master Of Science - Ms, Computer Networks And Security

I worked in network and security area of computer networks. I chose to complete my Master degree with thesis and for that; I worked.

Bachelor Of Science - Bs, Electrical And Electronics Engineering

Electrical Engineering of UET Lahore has portrayed the architecture of engineering for me. It led me to the path of ultimate successes..