BHAVANSHU SHARMA
Sr. Cloud Engineer
Chandigarh,India
Summary
Cloud Engineer with more than seven years of development and devops experience along with setting up Infrastructure, CI/CD pipelines along with extensive knowledge of domain and analytical/problem-solving skills. Hands on and working experience on Cloud Environment with DevOps implementations. Ability to work with minimal supervision and in a team environment as well.
Overview
7
7
years of professional experience
3
3
years of post-secondary education
Work History
Sr. Software Engineer - Cloud
Tavisca Solutions
Pune, Maharashtra
01.2021 - Current
- Continuous Integration and Deployment using GIT, Jenkins pipeline(shared library) , Docker and Kubernetes
- End to End ownership of managing and developing EKS clusters
- Ensuring all the workload deployed in the infra is end to end secure with at rest as well as in transit encryption enabled (Istio was utilized for in transit encryption)
- Creating/patching infra components using IaC (Cloudformation and chef)
- Day to day management of Amazon (AWS) resources like EC2, VPC, IAM, S3, Route53, CloudWatch and
- Auto-scaling
- Migration of existing k8s applications to service accounts from KIAM
- Writing Helm templates for the newly introduced components
- Writing automation scripts in bash and python
- Traffic mirroring and wireshark analysis in case of network failures.
Sr. Devops Engineer
Sourcefuse Technologies
Mohali, Punjab
11.2019 - 01.2021
- And Responsibilities:
- Setup/Managing Linux Servers on Amazon(EC2, EBS, ELB, SSL, Security Groups, RDS and IAM)
- Designed a rate limiter and queuing system to control and prioritize jobs on ECS Fargate using lambda.
- Micro-service deployment using codebuild/jenkins on kubernetes
- Deploying selective micro services from monorepo on kubernetes
- Managing networking on AWS
- Setup AWS infrastructure based on HIPPA Guidelines and implementing AWS Well Architected framework Implementing end to end encryption(Both at rest and in transit encryption)
- Create/Managing buckets on S3 and store db and logs backup
- Setup/Managing Databases on Amazon RDS
- Monitoring servers through Amazon CloudWatch.
- Creating/Managing DNS records on Amazon Route53
- Creating/Managing AMI/Volumes, Upgrade/downgrade AWS resources (CPU, Memory, EBS)
- CI/CD pipeline integration using Jenkins, Codepipeline,Codebuild and Codedeploy
- Infrastructure as a code using Terraform.
Associate Product Architect
Nebero Systems
Mohali, Punjab
11.2015 - 11.2019
- Nebtree firewall provides controlled Internet services for its users which includes speed limit , data capping and content filtering
- Providing many other different features like 2 way authentication for VPN users , policy based firewall and web filter rulesets , DMZ etc
- Roles and Responsibilities
- Implemented Iptables and TC for traffic shaping and firewall rule-set per user basis
- Linux back-end integration using PHP(cakephp) and python
- Automating tasks using bash , PHP and python
- Building MYSQL queries (creating views , triggers) and Implementing INDEXES(simple , Full Text) to fetch results from 10's of millions of records in reasonable time
- Implementing different types of VPNs (Ipsec,Openvpn,Pptp) for site to site and road warrior configurations
- Optimized network cards for higher network performance by dividing the Rx/Tx queues on multiple processor cores
- Implemented Linux routing table for multiple ISP support
- Developed queuing system to handle n number of system command requests for the sequential and sure shot execution
- Optimized conntrack to handle large number of connections
- High availability cluster setup using pacemaker and corosync with conntrackd (to sync connection tracking table)
- Backing up and pushing the data on aws S3 using aws-cli utility
- Bandwidth quota management for canadian telecom provider
- Developed SNI based website filter using hashtable for enhanced performance in C
- Setting up DHCP and DNS servers (dnsmasq)
- Created squid helper (squid proxy) for website filtration and ISP routing
- Implemented WAF with reverse proxy using modsecurity and nginx
- Setting up Captive Portal using Nginx and Iptables
- Setting up the CI/CD pipelines for various ARM devices
- Setting up highly available infrastructure for the application to run on
- Patching of OS and maintaining the security hygiene of the entire ecosystem along with kernel hardening.
Technical Support Engineer
Nebero Systems
Mohali, Punjab
04.2015 - 10.2015
- Roles and Responsibilities
- Broke down and evaluated user problems using test scripts, personal expertise and probing questions
- Helped streamline repair processes and update procedures for support action consistency.
Education
B.C.A - Computer Engineering
Shaheed Udham Singh College of Engineering & Technology
Tangori 06.2011 - 07.2014
Post Graduation Diploma - Cloud Computing And Information Security
Skills
PaaS Platforms - KubernetesService Mesh - IstioConfiguration Management - Chef , AnsibleScripting - PHP , Bash and PythonVirtualization - VMware , virtualbox, kvm Version Control – GITCI/CD Tools- Jenkins, AWS pipelines, Travis
- Monitoring – Cloudwatch, ELK, Prometheus and Grafana
- Iptables , TC (ingress , egress,Traffic shaping ),DHCP , DNS
Accomplishments
- Recognized by the Director of the Nebero Systems pvt ltd for in time deliveries
- Resource person in GNDEC college and delivered a session on how traffic can be identified on TLS.
- Single handedly migrated all the deployed workloads to service mesh(Istio)
Timeline
Sr. Software Engineer - Cloud
Tavisca Solutions
01.2021 - Current
Sr. Devops Engineer
Sourcefuse Technologies
11.2019 - 01.2021
Associate Product Architect
Nebero Systems
11.2015 - 11.2019
Technical Support Engineer
Nebero Systems
04.2015 - 10.2015
B.C.A - Computer Engineering
Shaheed Udham Singh College of Engineering & Technology
06.2011 - 07.2014