Sujith Kawashkar Arangan

Diligent IT Infrastructure specialist with solid foundation in IT infrastructure operations, specialized in system optimization, Virtualization, network management, Cloud architecture, Proven track record in designing and implementing robust IT operations infrastructure solutions, contributing to seamless operations with complex cloud architecture, demonstrated proficiency in troubleshooting complex technical issues and leading cross-functional teams to achieve project milestones.

• Discuss with the stakeholders to understand Project goals and architecture.
• Data center architecture and server architecture design.
• Flawless management of the IT inventory assets.
• Site reliability and on-premises IT services administration.
• Implementation of private cloud with HA and live migration using Kubernetes and Helm chart, OpenStack, KVM, Containers, Docker swarm, Proxmox, OpenNebula and VMware.
• Implementing DevOps environment with Kubernetes multi-master set-up and cluster configuration.
• Configuring automatic scaling of the containers using Kubernetes vertical and horizontal scaling.
• IT configuration management and deployment using Ansible, Gitlab and IAAC using Terraform.
• Implement and manage CI/CD pipelines in GitLab to automate the build, test, and deployment processes.
• Automation of tasks using Cron jobs, Shell scripting, Bash scripting and Python.
• Installation and configuration of Linux servers such as CentOS, Rocky Linux, Ubuntu, and Debian.
• Configuration VPC networks, instances, Kubernetes cluster with automatic scaling and SQL services in GCP.
• Integration of private cloud with public cloud forming a hybrid cloud architecture.
• Launching instances and microservices in AWS and GCP.
• Configuring AKS and EKS in AWS.
• Configuring Kubernetes cluster in GCP.
• Configuring tunnel interconnection, multi-region load balancer and securing the VPC network in GCP using cloud armor.
• Monitoring the instances and services in AWS and GCP using CloudWatch and other means (Prometheus, Naemon and Zabbix).
• Configuring the IAM roles, policies and setting conditions and accessibility for the service accounts and users.
• Cost optimization in AWS, GCP and on-prem datacenter.
• Migration of instances across public/private clouds and on-prem data center.
• Installing and configuring services like MySQL, MariaDB, Nginx, HAproxy and Apache.
• Performance tuning of the working systems and applications.
• Configuring Firewall policies and OS hardening Windows, MAC, and Linux.
• Intrusion detection and prevention with Snort and Suricata.
• Install and maintain desktops Windows (All versions), Linux (All distributions) and Mac OS.
• Domain and LDAP configuration for the enterprise and organizations.
• Configuring customized block-level storage (LUN & iscsi) for production servers.
• Configuring NFS, ZFS, CEPH storage systems, Nextcloud storage systems and Samba file sharing.
• Configuring object storage using CEPH and MinIO.
• Configuring LAN, WAN and VLAN.
• Configuring routers, switches and Access Points.
• Configuring MAC-based authentication and segregating the Guest network.
• Configuring the DMZ network with one-way traffic from the secured network.
• OpenLDAP and Windows Active Directory installation and configuration by creating users, groups and domains.
• Configuring failover service for the servers, VMs and firewalls with clustering.
• Configuring VPN with OpenVPN, IPSEC, L2TP, PPTP and SSL and integrating global sites using Site-to-Site VPN.
• Managing LVM, Disk space, and HDD health check.
• Maintaining regular backups of the data and restoring, when necessary, through shell scripting, Bash scripting and Python.
• Maintaining all the workstations and servers to monitor the overall activity of the organization's workstations & servers using SIEM.
• Service add-ons using Raspberry PI devices.
• Installation and Configuration of firewalls such as PFsense and SonicWALL.
• Evaluation of cyber security, risk analysis and risk projection.
• Maintaining the mail accounts of the users in G-Suite and Office 365.
• Multi ISP load balance and QoS configuration.
• Project management and ticket management using Jira and Redmine and other self-service portals.
• Troubleshooting all the incidents related to the IT infrastructure and making sure the operations and production environment are running smoothly meeting the SLA.
• SSO configuration using Okta, Keycloak and OAuth2.
• Disaster recovery management and business continuity plan implementation.
• Dealing with the vendors for resources & Internet service providers.
• Ensure compliance with industry standards and company policies.
• Proposing advanced solutions for the project infrastructure.
• Implementing cost-efficient Infrastructure for the organization.
• Site reliability management.
• Team management and team monitoring.
• Pre-sales approach with the clients and project quote generation.
• Project prototype presentation and demo showcase.
• Evaluation of potential automation possibilities and implementation for reduced workload and better efficiency.

* Implemented stable data centers for multiple clients during 2011 to 2014 with multi ISP load balancing, Network segregation using vlan, KVM virtual environment with HA using Proxmox and Ceph, Centralized File storage, daily automatic incremental backups of files and VMs.

* Implemented private cloud using openstack for the clients during my tenure at Srujan Infotech in 2016.

* Implemented private cloud using openstack, Virtualized environment with HA implemented using Proxmox and container orchestration using Kubernetes multi-master setup with HPA. Used python and shell scripting for automation of infrastructure provisioning for one of the client.

* Implemented hybrid cloud architecture with the on prem data center implemented with openstack and Proxmox with scalable Ceph storage and Proxmox Backup server, Integrated the public cloud(AWS) forming grid with configuration management using Ansible, IAAS by Terraform, customized automation using python and image migration using qemu-img tool.

*Implemented hybrid cloud architecture with the on prem data center implemented with openstack and Proxmox with scalable Ceph storage, Integrated the public cloud(GCP) forming grid with configuration management using Ansible, IAAS by Terraform, Customized automation using python and instance migration using qemu-img tool.

* Implemented a solid private cloud with multi-tenant support using OpenNebula cloud suite with on prem baremetal provisioning, GCP provisioning and Kubernetes multi-master setup.

• Earned "Best Performance" Award for the hybrid cloud infrastructure successfully.

I hereby declare that the above-mentioned information is correct up to my knowledge.

Sujith Kawashkar Arangan