Akash Chourange

• Using serverless infrastructure in the Hub and Spoke architecture model.
• Develop Python Lambdas for deploying and managing CloudFormation stacks across 1500+ AWS accounts.
• Drive improvements through agile methodologies.
  
• Adopt SD-WAN technology and implement it in AWS infrastructure, managing traffic through TGW peering and eliminating the need for direct connect from individual accounts.
  
• Explore and complete a POC for CloudWAN and its networking capabilities.
  
• Achieve cost savings by deploying centralized AWS service endpoints and using them across 1500+ AWS accounts.
  Implement AWS Control Tower and use it to manage all 1500+ AWS accounts.
  
• Implement Palo Alto NGFW and manage all rules and policies centrally for all AWS accounts.
  
• Start using the WIZ security tool for AWS infrastructure.
  
• Migrate all repositories from GitLab to ADO, explore and implement ADO, and continue to use it.

● AWS Hub and Spoke, AWS Landing Zone, Service catalog, Organisation, SCP, IAM, DynamoDB, Cloud-formation stacks, Lambda Functions, Step Functions, CloudWatch, Gitlab CI, AWS CodePipeline, AWS Transit Gateway Network Manager.
● Deploy platform resources to development, staging and production AWS Hub and Spoke environments to support various customer workloads. Manage AWS resources using AWS Cloud-formation Stack as Infrastructure as a Code (IAAC) and deploy using Gitlab CI/CD
● Key Areas Worked on are:

• Protect AWS Platform Resources using AWS Service Control Policies (SCP)
• Worked on various AWS H&S Services
  
• CI/CD Improvement (Use Gitlab Pipeline, to deploy services to various AWS accounts\environments)
• Enabled AWS Transit Gateway Network Manager
• Implemented solution to enable a AWS delegated administrator account, to be able to share Service Catalog Portfolio Product to Organisation Unit. This product enables customers to register their private hosted zone to Hybrid DNS VPC for DNS resolution
• Implemented new network design which is 4-Tier in 2 Availability Zones, that enables customers to run Internet Facing Workloads on Connected accounts. This includes deployment of Firewall Subnets, Public Subnets, Private Subnet, AWS Network Firewall, NAT Gateway, Route Table, Routes and NACLs via
  Cloud-formation Stack
• Updated spoke-deletion service, to terminate customer's provisioned products for Private Hosted Zones association, as part of account deletion.
• RBAC Integration Tests using “behave” framework
• Implemented AWS IAM Password Policy
• Implemented AWS Session Policies for Integration Tests

● AWS service EC2, VPC, RDS, IAM, S3, CloudWatch, CloudTrail, Trusted Adviser, Load Balancer, CloudFront, CloudWatch, SSM(System Service Manager), AWS Lambda, SNS, Auto Scaling.
● Linux OS problem troubleshoots, debugging, modifying partition, network troubleshooting, User management, Permission management, FTP and SFTP, Web-services(Apache and Tomcat), DB services(MySQL), FQDN configuration with AWS, Managing the SWAP area, Firewall management.
● Developed Linux shell script to generate system hardware utilization reports in CSV format. Trigger mail based on a threshold value.
● Shell script to backup MySQL DB and dumping in a remote server. Backup and deploy code to new environment.
● AWS Lambda to with python makes the automation of microservices and AWS activities.
Major Projects:
ECS Containerization Project :
* Designing a highly scalable, Highly available and redentant architecture to deploy containerized applications based on JAVAand Node.js usingAWS managed services. (AWS ECS, ECR, Autoscaling, Load Balancers, RDS, Redis, Elastic Search, EC2, S3, Route 53, CloudWatch, Lambda, Etc.
* Planning for deployment of architecture, building team, setting up process and final execution.
* Deploy Databases and containers and setup secure connectivity between applications.
* Hardening of OS and AWS console following the AWS and CIS best practices.
* Rest encryption of every storage using custom KMS keys.
* Setting up Secure Site-to-Site tunnel between client and AWS VPC.
* Building a CI/CD pipeline to automate the docker deployment process.
* Use SSM to automate patch management on cluster ofservers.
* Deployment strategy for scheduled containers and manual executable containers
* Static content delivery from s3 using CDN.
Deployment EKS and EMR on AWS
* Create an EKS cluster and deploy the application over there.
* Created the EMR cluster and configured the EMR components configuration.
* Stored Metadata outside the EMR cluster
* Add EFS files system to EKS nodes.
Work on data lake project in Finance sector:
* Work on DMS service : use for migrating On-Prem oracle data to AWS S3 bucket using DMS all functionality
* Work on Athena and Glue service.
* Setup the EMR cluster with all required configuration.
* Used CloudFormation template for creating all infrastructures.
Work on data lake Redshift:
* Worked on the ETL service AWS Glue to migrate the data from Onprem to AWS S3 using some crawler and Glue Jobs.
* From Redshift analysis data in AWS Quicksight in graph view
* Explore service Glue , AWS Quicksight, Redshift.
AWS account optimization projects:
* Deliver enhancements and solutions for the existing cloud infrastructure that drive customer satisfaction and meet with business goals.
* Setting up multi account architecture for major organizations and multi-tenancy operations.
* Setup monitoring and optimization of production applications by providing root cause and remedy for current issues.
* Setup process for organizational level centralized control and change management.
Ecommerce Website Deployment and migration:
* Deploying server and installing LAMP stack and git to host the Magento application for E- commerce websites.
* Configuring Apache and databases to meet the requirements of application.
* Automating the Code deployment from Github using JenkinsJobs.
* Server monitoring and backup using Cloudwatch and Lambda