Nurse Extern Resume

FEMI AYO | Email: [email protected]  ;| Tel: 224-625-0423

IAM Security/ DevOps Engineer

PROFESSIONAL SUMMARY

A highly motivated and knowledgeable DevOps with 4+ years of proven business and technical acumen in application delivery, analysis, infrastructure design, and maintenance of client/server. Hands-on experience in practicing DevOps on the cloud platform, CI/CD, Quality engineering, and release management. Broad sector expertise in software integration, configuration, packaging, building, automating, managing, and releasing code between environments and deploying to servers. A team player with excellent communication and interpersonal skills.

AREAS OF EXPERTISE

· Kubernetes

· Azure

· Apache

· YAML

· Pipeline

· Bitbucket

· Jenkins

· Maven

· Nexus

· Slack

· SonarQube

· Azure

· Ansible

· Terraform

· Docker

· Tomcat

· Splunk

· WebLogic

· Windows

· Linux

· VMware

· Development QA

Amazon Web Services: EC2, EBS, S3, IAM, AWS Lamda, AMI, VPC, Network Access Control List, Security Groups, Route 53, Auto Scaling Group, ELB, SNS, ElasticCashe, Redis, Cloud Watch, NIC, Cloud Formation, CloudFront, Server Migration, Elastic Beanstalk, EKS

Azure: Azure VM, VNet, Subscriptions, NaCL, PaaS, Sentinel, DDoS Protection, Defender for Cloud, Azure Key Vault, App Services, Storage Account, Azure AD, Azure Functions etc

PROFESSIONAL EXPERIENCE

IAM Security Architect /DevOps Engineer Jul 2018 to present

Client: Citibank Group Chicago, IL

· Automated infrastructure provisioning on AWS using designated infrastructure management tools.

· Develop reference architecture and secure Identity and Access Management designs to be leveraged by product teams

· Develop strategies and roadmaps for Identity and Access Management technologies and capabilities which will include: Modern Authentication, Privileged Access Management, Identity Governance, Secrets Management, and Zero Trust frameworks

· Implement best practices for identity governance and administration.

· Meet with stakeholders and business leaders to understand and document use cases that can be leveraged in the creation of architectural artifacts.

· Worked on integrating GIT into the continuous Integration environment along with Jenkins.

· Enforced test-driven development for the DEV team throughout every sprint and completing projects ahead of schedule.

· Set up the Autoscaling rule using AWS configuration to automate infrastructure

· Optimized legacy application to decrease latency and improve productivity.

· Designed troubleshooting and setup documentation for Dev and QA team.

· Configured Webhooks in Bitbucket to trigger automated builds in Jenkins, creating cost savings and increased application delivery efficiency.

· Set up and configure Git access via SSH Keys in Bitbucket for all newly joined team members.

· Utilized AWS CLI to automate backups of EBS and create fresh daily AMIs of all production servers.

· Creating users, groups, Organizational Units On-prem and in Azure AD.

· Implementing Identity governance with access packages and access reviews, controlling external users and managing group memberships.

· Granting role assignments and providing least privilege access.

· Creating conditional access policies to block risky sign-ins, grant access to approved apps, require MFA, require MFA for users.

· Creating, managing and securing storage accounts with network access, shared access signatures (SAS).

· Managing mailboxes, creating message traces, identifying quarantined messages, and releasing as needed.

· Creating Just-In-Time access on VMs and specifying ports that allow traffic to the VMs.

· Implement Azure Networking solutions utilizing all Azure networking products.

· Manage Office 365, SharePoint, AD, Microsoft Exchange, and Skype for Business/Microsoft Teams in Azure and On-premises environment.

· Workload security on Azure Microsoft Defender for cloud adding VMS to just in time Access to RDP.

· Creating PIM roles to guide just in time access to Azure AD and Azure resources.

· Design and maintain best practices for OpenID Connect, 2FA/MFA, Active Directory, LDAP.

· Plan and execute on-premises resource migration to Azure Cloud using Azure Site Recovery, Azure Migrate and Disaster Recovery.

· Deploy and publish Azure Web Applications for private and public consumption.

· Planning and implementation of data and storage management solutions in Azure

· Deploy applications on multiple Servers and maintain Load balancing, high availability, and disaster recovery.

Automation Engineer/Cloud Engineer Sept 2016 – Jul 2018

Client: Mpulsemobile Chicago, IL

· Optimized system security and perform the active change on the webserver.

· Wrote CloudFormation template for AWS cluster and infrastructure setup.

· Automate deployment of Linux applications, system configurations, and security settings.

· Prioritizing requests from operations, development, and product teams fairly while demonstrating a sense of empath.

· Gather new technologies and related tools to introduce to the company to grow the agile development environment.

· Provide direct server support during various operations such as deployment and general production.

· Collaborate with developers to make sure new environments meet requirements and conform to best practices.

· Analyzed various distributed file systems suitable for cloud storage using a storage benchmark.

· Worked in implementation teams to build and engineer application on Ubuntu, Windows and RHEL Linux.

· Worked with web deployment technology specifically Linux/Nginx.

· Managed IAM policies, providing access to different Azure resources, design and refine the workflows used to grant access.

· Setting up Azure active directory permissions for the Team and managing all infrastructure support services.

· Worked in implementation teams to build and engineer application on Ubuntu, Windows and RHEL Linux.

· Worked with web deployment technology specifically Linux/Nginx

· Managed IAM policies, providing access to different Azure resources, design and refine the workflows used to grant access.

· Implemented and maintained the monitoring and alerting of production and corporate

servers/storage using Azure Cloud & Geneva monitoring System.

· Add project users to the Azure account with multifactor authentication enabled and least

privilege permissions.

· Exposed Virtual machines and cloud services in the VNets to the Internet using Azure External Load Balancer.

· Created Virtual Networks, subnets, and configured Network ACL for Cloud infrastructure.

· Completed manually and automated with PowerShell.

· Created users, roles and groups for securing the resources using local operating system

authentication.

· Managed the deployment of virtual instances in AWS this also included managing the IAM, VPC and Security groups.

· Deploying and managing applications in Datacenter, Virtual environment, and Azure platform as well.

· Deployed application on multiple web servers and maintained Load balance, high availability and fail over functionality.

· Implemented and maintained the monitoring and alerting of production and corporate servers/storage using Azure Cloud & Geneva monitoring System.

· Add project users to the Azure account with multifactor authentication enabled and least privilege permissions.

· Exposed Virtual machines and cloud services in the VNets to the Internet using Azure External Load Balancer.

· Created Virtual Networks, subnets, and configured Network ACL for Cloud infrastructure. Completed manually and automated with PowerShell.

EDUCATION

Bachelor of Technology 2011

Federal University of Technology Akure Nigeria

Certifications

AWS Certified Solutions Architect April 2021

AWS Cloud Practitioner April 2021

Project Management Professional Certified

Certified Scrum Master

Certified Information Systems Security Professional (CISSP): In-view

Certified Information System Auditor (CISA): In-view