Jeevan Sai Ejamandla (DevOps, Infra & Cloud)

Project 1 : On-semiconductors(Foundation Architecture & Enterprise Datahub)

Enterprise Datahub:

• Proficient in taking ownership of end-to-end DevOps implementation, including Build/Release Automation with GitLab CI/CD pipelines, managing infrastructure with Terraform, using Kubernetes & Docker, overseeing Azure Cloud operations.
• Built a platform by automating resource creation, deploying nearly 25 services on Azure cloud using Terraform. Optimized CI/CD workflows by incorporating DevOps best practices and seamlessly integrating with Azure in on-semiconductors Foundation and Enterprise datahub projects.
• Acknowledged by Client's platform engineering leadership for my expertise in implementing high-quality DevOps practices. This led to a notable promotion within the Client's prominent on-semi-DevOps platform team.
• Streamlined deployment precision through enhanced build and release procedures. Ensured consistency in the standardized DevOps process across releases by implementing branch cutting, baseline activities, and Configured tags to retrieve previous code bases during client requested changes.
• Configured GitLab branching strategies, code rollback procedures in pre-production for build/release failures. Worked on code merge activities, transitioned code across environments from feature to master branch in production releases, used GitLab Pipelines for Continuous Integration and Deployments.
• Skilled in provisioning Azure cloud resources like IaaS, PaaS, SaaS, AKV, Data bricks, VM's, Couchbase, Web App, ADLS, ASQL DB, AKS, Azure Purview, RBAC, IAM, AD groups, Networking, PEP creation, Azure DevOps, Confluent Kafka.
• Improved system reliability with Terraform multi-layer architecture and modules to streamline infrastructure deployment across development, quality assurance, user acceptance testing, and production environments (DEV, UAT, QA & PROD).
• Configured Azure Landing Zones and Resource Groups in designated subscription for provisioning infrastructure. Successfully provisioned data bricks cluster and integrated services with new resource group, location, region, and network.
• Configured the CI/CD YAML file to deploy Data bricks notebooks and automated across environments. Parameterized GitLab CI/CD variables to fetch dynamically at runtime. Archived codebase in GitLab artifacts and stored images in registry during CI/CD, executing stages via GitLab Runner.
• Developed a technique to extract collibra DQ rules from Python script (collibra.py), generating a JSON output. Saved data in GitLab Artifacts, while running the CI/CD stage and deployed to Data bricks cluster.
• Configured AKV (Azure Key Vault) and set access permissions to groups and user roles using Terraform scripts in the resource groups. Integrated Hashi Corp Vault and AKV secrets retrieval for other services at build runtime with Terraform.
• Provisioned ADLS account with terraform, defined XML paths to store raw data in storage account for inbound/outbound operations. Configured Blob containers and file shares in staging to retrieve and store required data.
• Implemented hierarchical namespace, Created SFTP users with details (connection string, hostname, username, password) for seamless authentication and connection to container from local devices.
• Configured Couchbase cluster & Database project, linked to PEP in Azure AD group. Developed Couchbase platform & incorporated with HashiCorp Vault & AKV to securely access secrets during infrastructure configuration using Terraform.
• Having expertise in networking, configured the PEP in Couchbase to allow necessary IP address with Data bricks cluster. Additionally, Created and connected the Virtual Network, Subnet, resource group and configured endpoint in Couchbase cluster.
• Configured Kubernetes cluster, deployed Docker image to AKS. Implemented containerization solutions for Spring Boot app deployment in Azure Kubernetes.
• Deployed the Python application in Kubernetes pods to workloads and load balancer services, autoscaling strategies to optimize resources and costs.
• Deployed Azure Kubernetes Cluster for Confluent Connect using Terraform and created Manifest file for service deployment. Set up standard tiers and node pools. Enhanced automation by establishing trigger rules in GitLab CI YAML file to deploy app when code commits.
• Created a REST API in Spring Boot for consumption by external services.
• Utilized containerization to package Spring Boot services in an AKS cluster and deployed through CI/CD. Automated building Docker images from docker file, uploading to ACR and GitLab Registry. Deployed image with Spring Boot APIs and load balancer services in Azure Kubernetes cluster namespace.
• Skilled at managing container scanning and fixing vulnerability errors by editing docker file and pom.xml files promptly.
• Managed production releases, met timelines, recognized for delivery within a 2-month timeframe.
• Proficiency in Azure Virtual Desktop(AVD) infrastructure with Terraform, adept in managing complex and overseeing intricate cloud infra projects.
• Skilled in Terraform for creating AD groups and applications in AVD, resulting in enhanced management of virtual desktop environments.
• Proven Track record of guiding clients to establish infrastructure in Azure with Terraform, driving efficient infrastructure management.
• Organized routine workshop sessions with clients to develop infrastructure, address use cases/scenarios, promote teamwork and exchange knowledge.
• Created a multi layered YAML-based Azure DevOps CI/CD pipeline to automate infrastructure, security scans, code coverage analysis, Hashi Corp Vault integration, code scanning, and deploying code to Azure Web App.
• Designed an Azure Bot and built a Microsoft Teams app for conversational chatbots, leveraging Azure's Open AI technology.
• Developed NSG and private secure connection created for private endpoint delegation. Established a New private DNS zone group. Implemented a new module addresses subnet prefix mapping issues by creating subnets and private endpoints.
• Solved CI/CD violations & security vulnerabilities within csv files in codebase during Spring boot app deployment on AKS cluster. Used latest Alpine image in docker file during CI/CD stages and saved image in GitLab registry. Deployed registry image to AKS with manifest file.
  

Foundation Architecture & Enterprise Datahub:

• Extensive experience in deploying various Azure PaaS and SaaS services like Azure Key Vault(AKV), Azure ADLS, Data bricks clusters, Enabling Unity Catalog in db cluster, Windows & Linux VMs, Couchbase, Azure SQL, Azure Web App(front end and back end),RBAC, AKV policies, blob storage, SFTP, HNS, file shares and blob for inbound outbound container configurations, Azure Kubernetes Cluster(AKS), Docker image creation, Confluent Kafka Connect, private endpoint(PEP) setup, Virtual Network(V-Net), Private DNS, DNS A record sets, NIC and Configuration of PEP with Microsoft Azure Purview storage.
• Improved cloud infra with CI/CD stages, automated pipelines via Terraform code, and deploying apps to designated environments.
• Developed terraform scripts for Azure monitoring alerts setup.
• Implemented terraform scripts for Azure RBAC, wrote access.tf file to associate resource access with Azure AD groups, Microsoft Enterprise ID, Azure admin user ID, IAM roles of designated users/groups, and App registrations. Allocated roles to apps/groups within the resource group.
• Creation of AD group access (contributor, read, owner) and assigned users. Creation of service principals and service accounts for app authentication across environments.
• Collaborated with cross-functional teams to align practices and troubleshoot production issues. Facilitated collaboration between developers and business goals. Delivered on tight timelines for development, testing, and production, ensuring timely issue resolution and minimal downtime.
• Delivered a Prototype Model_test_POC for digital AI projects and deployed app in Kubernetes pod as proof of concept (POC).

Project 2 : CxLoyalty (Atlassian)

• Migrated on-premises data center to AWS cloud using DevOps framework, with a centralized Jenkins server and various integration tools.
• Automated and integrated web hook between Bitbucket server repository and Jenkins pipeline to retrieve branch for each commit, reducing costs by 60%.
• Devised and oversaw load balancer, auto scaling, s3 bucket creation, and applying policies while creating new instances via AWS CLI.
• Utilized Terraform & Cloud Formation Templates to build infrastructure-as-code. Managed S3 bucket encryption, using Lambda to auto-encrypt files if no encryption is detected.
• Developed the code with Maven and performed code quality checks using Sonar-Qube before uploading to Jfrog or Nexus Arti factory.
• Developed and Utilized On-Demand and On-Spot instances for clients, resulting in 80% faster completion.
• Configured Project-based Matrix Authorization, LDAP, Checkmarx, Active Directory (AD), Open JDK, Amazon Corretto, Node JS integration, Jenkins master-slave and mapped Agents, Nodes strategies in Jenkins configuration.
• Implemented Jenkins CI/CD using Declarative Pipeline for build promotions across Dev, Staging, and Prod environments, reducing release times by 20%.
• Supervised 24 public/private cloud setups with Amazon Web Services, encompassing VPC, EC2, IAM, Target groups, S3 bucket, security rules, Cloud Watch, and EC2 instances.
• Revised instances by dynamically scaling based on CPU and memory peaks, optimizing resource allocation for AWS services.

Project 3 : Zurich-Integral PE

• The project had three Lob’s (Line of business) with dedicated handlers and testers using tools like Load Runner, J Meter, Dynatrace, J-Profiler, J-Visual VM, and Java Flight Recorder for performance analysis.
• Established Online, batch, SMTP IIS, VPMS servers, web services set up with JBOSS app server on Windows OS. Managed server maintenance, CAS DB servers and data cleanup.
• Extensive knowledge of AWS services such as EC2, VPC, Lambda, Cloud Watch, AWS Fargate, Load Balancer, Target Groups, Route 53, AMI, IAM, Volumes, Snapshots, AWS Cloud Front, Cloud Formation, Terraform. Proficient in AWS DNS, EBS, S3, RDS, Aurora DB, DynamoDB, Cloud Trail, AWS Auto Scaling, AWS Snow Family.
• Configured new instance & set up hardware upgrades in AWS. Mapped instance with existing AMI & configured end-to-end parameters. Installed SQL tools & monitored CPU, memory changes in console.
• Set up the Lambda script, modify automation scripts for AWS instances, monitoring performance through Cloud Trail & Cloud Watch.
• Established cloud watch, Route 53 rules, added tags to enable/disable HTTP and HTTPS ports on AWS instances, configured REST URLs on public/private IPs.
• Configured Rule's settings in target groups and Route 53 to route private and public URLs to specific target address. Conducted performance testing with 100VU and 50VU load tests using JMC, Visual VM, and JProfiler, ensuring prompt issue resolution in JIRA.
• Resolved public URL loading issue on Windows server by adjusting security group settings and adding HTTP port to outbound rules, leading to swift resolution.
• Utilized lambda function on AWS to create, extend, attach, and detach EBS volumes to EC2 Instances on both Windows and Linux platforms. Additionally, managed restoration and creation of AMI backups daily for EC2 Instances.
• Established and set up of VPC network, security groups, secure cloud setup (Cloud Trail, IAM) for new project automation.
• Developed technical solutions for Oracle Middleware Admin and Jboss App server with CI/CD Jenkins. Infrastructure pipeline created with waterfall and agile scrum methodologies.
• Implemented deployment pipeline on AWS for migration. Automated build/deployment with Jenkins, Chef books, code baseline. Established a unified template for configuration to automatic deployment on AWS servers.
• Migrated 48 products from on-premises AWS MSSQL 2019 to a core API and SQL database server. Configured JBoss, SQL servers, created snapshots, and mounted volumes over new spot instances.

Project 4: Vodafone.uk (Telecom client):

• Possess a diverse technical background with experience in JBOSS, WebLogic 11g & 12C, SVN, Jenkins, Git, IIS, SMPT, MSSQL 2019, Apache web server, Code quality, JIRA, Nexus, CI/CD pipeline, Ant, Maven, Red Hat Enterprise Linux, Unix, and Windows.
• Proficient in code baseline activities, error debugging, troubleshooting with code quality tools like PMD, Check Style, Find Bugs.
• Implemented end-end SONAR QUBE 7.1 app and integrated with AWS cloud, using vital cloud services and merging it with concurrent code bases.
• Formulated strategies to identify bugs and vulnerabilities in PMD, CHECKSTYLE, and FINDBUG which is a significant contribution to the project and is currently operational.
• Achieved 60% reduction in monthly AWS expenses through restructuring architecture, resizing instances per forecasts, & strategic infrastructure components reservations.
• Specialized in cloud technologies & hands-on proficiency with a wide range of Oracle Middleware products. Skilled in application servers, web servers, databases, UCMS (11g, 12C), J2EE (Java, JDBC, Servlets, JSP), WebLogic Portal Server, Oracle WCS, Oracle WCP, 12c Coherence, OAM/IDM, SOLR, Zookeeper, ETL, Identity access management, Agile methodology, Kanban methodologies, & DevOps tools installation.
• Crafted a strategic roadmap, collaborated with global teams, troubleshooted, communicated with stakeholders to ensure migration on track and within budget in stipulated timelines.
• Resolved security patch issue for GIT & SVN installation and customizations, resulting expenses down by 30%.
• Introduced code merge activity and integrated Sonar Qube application to alleviate project challenges within specified timelines.