Chandrasekhar Alla
Vancouver,BC
Summary
Persistent professional equipped with 10+ years of comprehensive experience in tech industry. Provides strong technical direction across multiple projects. Responsible and articulate individual with strengths in solutions optimization, mobile and cloud solutions and global project management.
Overview
13
13
years of professional experience
1
1
Certification
Work History
Senior software Engineer - DevOps
Bridgenext
06.2022 - Current
- I have been managing GitLab Pipelines, Cloud Cost optimization, Vulnerabilities, Kubernetes, Argo CD, Maintenance and SaaS Product Deployments for Archer GRC
- Coordination and communication within the team to deliver a comprehensive solution Strive for continuous improvement and support building continuous integration, and continuous deployment pipelines (CI/CD Pipeline)
- Identifying and deploying cyber security measures by continuously
- Deploying containerized application using GitLab and Aurgo CD into Kubernetes GRC SaaS environments
- Provisioning and managing dynamic GitLab runner on Kubernetes
- Performing vulnerability assessment and risk management for all pipe-line builds using GitLab security tools
- Helping product teams to develop and deploy on a cloud-native environment
- Responsible for building and enabling the Archer GRC SaaS platform for customers across the globe on AWS Cloud
- Developing security scan policies for blocking Merge Requests in case of high, critical, and unknown vulnerabilities for Archer GRC
- Responsible for managing and maintaining AWS Cloud Front distribution for hosting Maintenance Window during Archer GRC downtime
- Responsible for managing AWS infrastructure, and cluster for hosting Install Shield Offline MSI builder
- Creating templates using Terraform for common AWS workloads
- Developing Cloud Custodian YAML policies for AWS cost optimization
- Designing and implementing secure network solutions that meet business requirements
- Creating and configuring virtualized systems in the AWS environment
- Research and implement DevOps tools & practices fitting the Archer GRC ecosystem
- Advising project stakeholders and customers regarding DevOps-related topics throughout the product lifecycle
- Building spring boot application microservices, .Net applications and deploying into Kubernetes
- Creating and updating solution run books & appropriate technical documentation
- Building .Net applications for Archer and implementing the MSI and exe for archer
- Monitoring Archer GRC SaaS Servers using Prometheus
- Building and setting up infrastructure on AWS using Terraform and Terra grunt
- Setting up HA Postgres DB on AWS and maintaining backups
- Manage Postgres user access and permissions by adding and removing users as required
- Writing shell scripts for Server configuration and automations.
DevOps Engineer
Capgemini
03.2017 - 02.2022
- Designed Network Security Groups (NSGs) to control inbound and out bound access to network interfaces (NICs), VMs, and subnets
- Building the helm charts for different microservices and pushing to OCI Registries
- Deploying helm charts to AKS Cluster and configuring the helm hooks for pre-checks and notifications for the deployments
- Performing deployments, rollbacks on AKS and managing DNS, Certificate manager on AKS Cluster
- Managing the traffic to different backend java spring boot microservices and checking the traffic flows with Kaili dashboard using Istio
- Monitoring the AKS cluster using Prometheus and exporting all the metrics using node exporter
- Expertise in Blob storage and File storage
- Hands-on experience in VM deployments using the portal and terraform
- Responsible for creating Network Security Groups and adding inbound rules for various ports like RDP (3389), PS remoting (5986), and Custom ports (8081,9200) to allow access only from private network address prefixes to provide utmost security Evaluation of Azure VMSS to auto-scale up and scale down Azure VM workloads Adding additional disks to Azure VM upon receiving a request
- Scale up and scale down various services like VMs, and SQL Servers (DTUs)
- Creation of Azure NIC, Azure Virtual networks, and Azure VM and provide access to users
- Good Expertise in Azure VM, Scale Set, and Load balancer Install and configure Virtual machines, storage accounts, virtual network, and Azure load balancer in the Azure cloud
- Design and deploy Azure Backup and other Confidential backup solutions for Azure To ensure the availability, performance, scalability, and security of production systems
- Build new environments for development and testing in Azure
- Responsible for managing network storage in Azure
- Perform System and network hardening, Vulnerability assessment, and remediation; apply
DevOps Engineer
TCS
11.2011 - 02.2017
- Onboarding Axway end-to-end API Platform on Azure Kubernetes, and implement it in to a production environment by identifying and evaluating all current on-premises workloads
- Implemented security to meet PCI requirements, topas penetration testing against infrastructure
- Assessing all the existing On-premises workloads and coming up with Cloud Architecture and strategy
- Build Axway docker images on DevOps build agents and pushed to images to Azure Container Registry (ACR)
- Developed Docker Compose files for local Axway container testing
- Used Azure repositories for versioning
- Created certificates for Axway Components, signed with Australian Super, and enabled security for API Gateway
- Done with deployments on AKS for Dev, Test, SIT, UAT, and QA Environments
- Deployed Core DNS Service and integrated with Azure DNS Zones
- Created Kubernetes Deployment pipeline and rollback pipelines
- Deployed Nginx Ingress for Load Balancing the backend service based on hostname and context Routing
- Developed Kubernetes deployments, endpoints, services, AKS Storage Classes, Networking policies, persistence volume claims, secrets, Roles, Cluster Roles, and ingress resources for Axway components and deployed to Dev, Test, SIT, UAT, and QA Environments by using Azure DevOps Pipeline
- Configured Nginx as Ingress POD in AKS for distributing traffic for Axway components and loaded all required domains
- Used Azure Disks and Azure files for persistence volume claims for AKS
- Stored all certificates and passwords in Azure Key Vaults and integrates them with Azure DevOps pipelines
- Installed and configured Cassandra 3 node cluster for multiple environments
- Created the Key Store and trust Store for enabling SSL communication between Cassandra client to Node and Node to Node
- Integrated Axway components with Cassandra cluster over SSL/TSL
- Installed and configured Axway Decision Insights (Embedded Analytics) over multiple environments
- Integrated Axway Embedded Analytics with LDAP and assigned dashboard views and roles for users
- Configured API Health, API Instance, API Methods, and metric dashboards and enabled HTTPS
- Used file beat for exporting logs to embed analytics over SSL
- Exposed Virtual machines and cloud services in the VNets to the Internet using Azure External Load Balancer
- Developed Terraform Templates for provisioning AKS Cluster for different environments
- Integrated AKS with Azure AD and assigned Kubernetes Roles and cluster Roles for different user groups
- Created HPA for services deployed on Azure Kubernetes.
Education
B TECH - Computer Science
Acharya Nagarjuna University
Guntur, India05.2011
Skills
- Python
- Docker
- Kubernetes
- Terraform
- Ansible
- Azure
- CI/CD
- Prometheus
- Grafana
- Project Leadership
- Amazon Web Services
Languages
English
Full Professional
Certification
Certified Terraform Associate.
Amazon certified Solutions Architect Associate.
Certified Kubernetes Admin,
Timeline
Senior software Engineer - DevOps
Bridgenext
06.2022 - Current
DevOps Engineer
Capgemini
03.2017 - 02.2022
DevOps Engineer
TCS
11.2011 - 02.2017
B TECH - Computer Science
Acharya Nagarjuna University