Leo Arvinth MS

• Specializing in secure and scalable Azure cloud platforms embedded with DEVSECOPS methodologies. Involved in Infrastructure as Code (Terraform/Bicep), CI/CD automation, Azure DevOps, and policy-driven governance across multi-subscription environments.
• Focused on embedding security into the SDLC, enabling zero-trust architectures, and delivering resilient, production-grade cloud solutions through mature engineering practices.
• Utilized GitHub Copilot and Databricks Genie, including Skills, Instructions, and Agent Files, to accelerate infrastructure development, automation, troubleshooting, and engineering workflows.

Primary Spoc of Azure & AWS || Secondary Spoc to Vmware VxRail HCI based setup

• Azure Extensive & Aws: Architected cloud infra by improving compliance, access control, security, cost optimization and driving reliable cloud operations.
• Fully Automated CI/CD: Automated CI/CD pipelines to streamline application releases and reduced manual interventions.
• Infrastructure as Code (IaC): Automated provisioning using Terraform, ARM templates, and AWS CFT; managed ACR, AKS, and Sentinel completely as IaC.
• Scripting and automation: Configured VMs, containers, and pipelines with Bash, PowerShell, and Python; scaled operations via Azure Automation Runbooks.
• Cloud cost optimization: Integrated Azure and AWS cost data into Power BI dashboards using Storage Accounts, S3, Athena, and Glue.
• Security and SIEM: Implemented Azure Sentinel from scratch using KQL queries for threat hunting on Apache and Wildfly apps. Associated the Application gateway's access logs with Sentinel workspace and customized WAF policy to harden the security based on it.
• Networking: Configured IPSec tunnels, Bastion hosts, VNet/VPC peering, NAT gateways, and private connections with Private Link and Managed Identity.

End-to-end management of workloads on AWS, Azure (Cloud & Arc), and VMware.

• CI/CD & Containers: Built CI/CD pipelines in Azure DevOps, deployed workloads as containers on Azure VMs, and managed images via Azure Container Registry.
• Hybrid Cloud (Azure Arc + HCI): Implemented Azure HCI Stack with Windows Admin Center and onboarded via Azure Arc for backup, patching, and hybrid cloud integration.
• Security & Compliance: Performed weekly vulnerability assessments, applied server hardening (e.g., key rotation, SSL renewals).
• Disaster Recovery: Configured backup restore tests and conducted quarterly DR drills using Azure Site Recovery and VMware SRM.
• Networking: Built & managed L4/L7 load balancers in Azure & AWS, implemented path-based & multisite routing on App Gateway, configured reverse proxy, rewrites, listeners, and resolved backend pool issues.
• Monitoring & Alerts: Leveraged Azure Monitor and Log Analytics to analyze server/container logs, with alerts integrated into email notifications.
• Secure Access: Configured Azure Bastion hosts to securely manage IaaS & PaaS over TLS.
• Migration & Modernization: Migrated databases and VMs from on-premises to cloud, and contributed to app modernization from monolithic to microservices following the 5 R’s strategy.

Azure Entra ID:

• Performed Entra ID IAM tasks and assigned RBAC roles.
• Gained hands-on experience with Azure Platform.