PRASAD GHODNADIKAR

Core strengths

• Cloud architecture & design — Landing zones, capacity planning, subscription and management group design.
• Migrations & modernization — Data center to Azure, VMware-to-Azure using Azure Migrate, and reverse migrations.
• Security & compliance — Azure Policies, Blueprints, NSG micro‑segmentation, WAF, Defender, and Sentinel.
• Containers & orchestration — AKS, Azure Red Hat OpenShift, ACR, stateful workloads, Kubernetes networking.
• Networking & connectivity — ExpressRoute, VPN, firewalls, Application Gateway with WAF, geo‑replication strategies.
• Automation & IaC — Terraform concepts for repeatable infrastructure deployment.
• Operations & support — Capacity planning, backup strategies, monitoring, troubleshooting, and incident resolution.

Accomplishments

• Designed and implemented enterprise Azure Landing Zones aligned to Cloud Adoption Framework, including subscription structure, management groups, IAM roles, and governance policies.
• Led cloud migration programs for multi‑tier applications and databases, defining migration strategies and executing VMware-to-Azure migrations using Azure Migrate.
• Orchestrated full data center migrations and reverse migrations, performing application assessments and dependency mapping to minimize downtime and risk.
• Implemented governance and compliance controls using Azure Blueprints and custom Policies to meet audit and regulatory requirements.
• Deployed network virtual appliances and Application Gateway with WAF to establish multi‑layer security for web and application tiers.
• Architected high‑availability solutions by configuring VMs in availability sets/zones and implementing geo‑replication for PaaS to ensure business continuity.
• Built and managed production AKS clusters and OpenShift platforms, including ACR integration, stateful application deployments, and Qualys scanning for container security.
• Hardened platform security by placing PaaS services in private networks, applying NSG micro IP segmentation, and enforcing least‑privilege access.
• Integrated security monitoring and response using Microsoft Defender and Azure Sentinel for centralized SIEM and threat detection.
• Established secure connectivity between customer data centers and Azure using ExpressRoute, site‑to‑site VPNs, and firewall configurations.
• Defined backup and recovery strategies for mission‑critical VMs and databases to meet RTO/RPO objectives.
• Provided technical leadership and support, troubleshooting complex AKS and cloud infrastructure issues across multiple environments.

Tools & technologies

• Azure: Virtual Machines; Azure Migrate; Azure Policy; Blueprints; LB; Application Gateway; WAF; Monitor; Firewall; SQL; Defender; ARC; Sentinel; ExpressRoute; VPN; ACR; AKS; Azure Red Hat OpenShift; DR and Backup solutions.
• Other: VMware; Terraform (IaC concepts); Availability Zones/Sets; Linux; AIX; Windows; Storage & Backup.