VIPIN TAJNE
Warora,MH
Summary
Knowledgeable Cloud Engineer with extensive experience in managing and optimizing cloud infrastructure. Demonstrated track record in enhancing system reliability and streamlining operations to support business goals. Proven capabilities in infrastructure development, automation and performance tuning, leveraging skills in scripting and monitoring tools.
Overview
6
6
years of professional experience
1
1
Certification
Work History
Capgemini India
02.2020 - Current
- Regularly audit AWS Identity and Access Management (IAM) policies to ensure least privilege access is enforced and identify any overly permissive roles or policies.
- Check AWS CloudWatch for alerts and system performance metrics and review logs from AWS services (e.g., CloudTrail, S3, Flow logs) for unusual activity.
- Strengthened security by configuring IAM roles for user accounts and set up Multi-Factor Authentication (MFA).
- Spearheaded cost-effective cloud operations by conducting regular subscription cost analyses and implementing cost management strategies.
- Demonstrated agility in infrastructure management, including server resizing, Data-Disk additions, and Disk Conversions, optimizing performance and resource utilization.
- Designed and managed Security Groups (SGs), Access Control Lists (ACL) and monitor VPC Flow logs to govern security.
- Managed end-to-end subscription lifecycle, including creation and deletion activities, ensuring operational efficiency.
- Developed script automating instance start-stop operations via lambda functions, leading to monthly savings of $300 per subscription.
- Provided Savings Plan and Reserved Instances opportunity to optimize the cost for existing infrastructure.
- Developed SSO based SAML2.0 authentication layer for the Jenkins application using client identity provider.
- Configured AWS IAM Roles, Security groups, AWS KMS & certificate management to safeguard sensitive data.
- Identifying and assessing security risks associated with cloud deployments along with risk mitigation strategies.
- Implemented a robust disaster recovery strategy by setting up full system backups for instances using AWS Backup, utilizing disk snapshots, and efficiently restoring instances from Backup's latest recovery points.
- Provision and configure AWS resources (EC2, RDS, S3, etc.) based on project requirements.
- Operational Stability: Proactively safeguarded operations by creating Health alerts using AWS Cloudwatch and Cloud Trail, ensuring uninterrupted services during planned maintenance activities.
- Reduced Downtime: Resolved server issues, including inaccessibility and connectivity challenges, ensuring minimal service downtime.
- Efficiency: Demonstrated agility in infrastructure management, optimizing performance and resource utilization through server resizing, Data-Disk additions, and Disk Conversions.
- Performed Linux servers OS level patching, ensuring system remained secure, up to date with latest kernel version.
- Worked on Linux user & file management tasks enhancing file system efficiency.
- Resolved sever issues, including server inaccessible, RDP and SSH connectivity challenges, ensuring minimal service downtime.
- Document architecture changes, operational procedures, and troubleshooting guides.
- Worked on OS upgrade of Windows & Linux Machines.
- Performed Failover and Failback for Linux clusters in production environment for various clients. Performed manual build activities on Linux servers.
- Resolved OS level challenges by troubleshooting backup failure issue, df command stuck issue, AD authentication etc.
- Managed user passwords modified user/group permissions on Linux servers.
- Executed windows servers OS level patching using patching tool and configuring Windows Registry and upgrading TLS as part of Vulnerability Remediation, Troubleshooting Windows Patching Related Issues.
Education
B.E. - Electronics & Telecommunication
G.H. Raisoni College of Engineering
01.2019
Skills
- AWS Cloud Administration
- Cloud governance & security
- Shell Scripting
- Linux & Windows Administration
- Infrastructure Automation
- Patch & vulnerability management
- Vulnerability Assessment
- FinOps
- Cloud infrastructure management
- Network troubleshooting
- Linux system administration
- Windows server administration
- Infrastructure as Code
- Incident management
- Container orchestration
- Monitoring and alerting
- Ansible automation
Certification
- AWS Certified Cloud Practitioner CLF-C02
- Microsoft AZ-900: Azure Fundamentals.
- Microsoft AZ-104: Azure Administrator Associate.
- Oracle Cloud Infrastructure Foundations 2021 Certified Associate.
TOOLS
- Cloud: AWS, Azure, GCP & OCI.
- Infrastructure Automation: Terraform, AWS CFT.
- Monitoring Tools: Prometheus, Grafana, Zabbix, AWS CloudWatch.
- Operating Systems: RHEL 7,8&9, Centos, SUSE, Windows Servers.
- Patching Tools: Cloud Native, Manage Engine Endpoint Central, SUSE Manager.
- Ticketing Tool: ServiceNow
Timeline
Capgemini India
02.2020 - Current
B.E. - Electronics & Telecommunication
G.H. Raisoni College of Engineering