Raza Dar

• Worked in a large multi-account AWS environment (above 1500 AWS Accounts) and provided system architecture, implementation, improvement and migration services. Collaborating with different stakeholders to define and achieve, highly available, resilient, scaleable and cost-effective solutions on AWS clouds.

• Implementing AWS architecture solutions as infrastructure as a code using Terraform. These architectures consists of miscellaneous AWS services such as EC2, S3, Lambda, System Manager, dynamodB (NoSQL), VPC, IAM, RAM, Inspector2, CloudWatch, Cloudtrail, API Gateway, Cloud-Native build. Architect IAM Policies.

• Extending AWS cloud infra to new AWS region and on-boarding new AWS Accounts

• Configure CloudWatch logs push to Splunk service and backup to S3 for different solutions and setup alarms and alerts.

• Implemented Service Contral Polices (SCP) to centrally manage AWS accounts and limit IAM roles permisstions. Reduce IAM role permission via SCP’s.

• Deploy VPC, DirectConnect and Transit Gateway connection to extend AWS cloud networks to use On-Prem resources and vice versa.

• Created Thousand Eyes (SaaS from Cisco) network monitoring setup in AWS clouds for different AWS regions.

• Added watermark in HSBC’s base AMIs ( Linux, Windows) Build Factory to improve compliance control for AMI depreciation. Automation deployed using AWS System Manager and AWS StepFunctions.

• Reviewing legacy application solutions and resources to migrate to AWS clouds.

• Write AWS lambda functions using python and add unit tests using pytest and Moto libraries .

• Configuring CI/CD Jenkins pipelines for miscellaneous projects to setup automation.

• Deploy CloudWatch Alarms to integrate with AWS Shield for DDoS protection.

• Enable CVE and Network exposure checks for EC2, ECR, Lambda’s using AWS Inspector delegated administrator account for AWS Organization.

• Providing system architecture, implementation and improvement services to Dual Layer IT clients. Collaborating with different stakeholders to define and achieve optimum service and system architecture on AWS.

• Implementing aws infrastructure as a code using terraform for miscellaneous aws services such as S3, ec2, security groups, vpc, subnets, NACL’s, ACM, AMI , IAM roles, authena, AWS Glue.

• Architecting and maintaining data piplelines, data processing ETL with AWS Glue and setup Quicksight dashboards.

• Adding SNS for SMS and Email notification and setup resouces policies.

• Configure CloudWatch logs and backup to S3 for different applications and setup alarms and alerts.

• Reviewing legacy application solutions and resources to migrate to AWS clouds.

• Configuring AWS CI/CD pipelines for miscellenous projects to setup automation.

• Review infrastructure for PCI DSS Compliance using AWS SecurityHub, AWS Config.

Tools & Skill: AWS Lambda, API Gateway, IAM, EC2, VPC, YAML/JSON, Terraform, TerraformCloud, Docker, S3, SNS, SQS, CloudWatch, AWS SecurityHub, AWS Config, AWS CLI, CloudFormation, NodeJS, Typescript, Python, Git, GitHub, dynamoDB, AWS CodeBuild, AWS CodePipeline, Linux, Ubuntu, Fedora, VirtualBox, Docker, Plantuml

 Develop and Architect features for D&G serverless backend services on AWS. D&G have a suit of around 50 services deployed on AWS and based on microservice architectures with REST API's.  Implementing Lambda functions using Typscript/NodeJS run time for server-less application architectures and integrate with AWS API Gateway using Serverless Framework.  Define serverless yaml file for AWS resources, environment variable and permission for resources in the stacks.  Deploy services to different environment (CI, DEV, TEST, SIT, UAT) as requested by Testing teams.  Configuring AWS CI/CD for serverless applications AWS CloudBuid .  Investigate issues and fix bugs in the existing services/ build pipeline using CloudWatch logs and testing tools.

Tools