| | | 20,000+ Fresh Resumes Monthly | |
|
|
| |
Click here or scroll down to respond to this candidateCandidate's Name
New York, NYEMAIL AVAILABLEphone: PHONE NUMBER AVAILABLESKILLS Azure SEIM; Defenders Azure SOC Sentinel Threat Modeling Nessus scan Rapid7 Azure architecture Multi Cloud Security Multi Cloud System design API definitions API management solutions AWS GCP Data Center IETF VMware; IBM cloud ML Container workloads-based deployments onGPUs Mosgnet Corp, 2007-2024 Deployment of NVIDIAGPUs GPU Direct RDMA, FPGA NVIDIA Mellanox SHARP AI InfiniBand to GPUcontrol JupyterLab; SaaS PaaS;VNF CNF MANO SDN WAF OWASP Cybersecurity TLS CDN BGP; M365 Routing, Switching Azure Entra Azure ML Azure Open Al LLM Terraform Bicep Ansible CI/CD; Pipelines; RAG LangCnain MITRE ATT&CK Framework development DevSecOps security testing and auditing Led cybersecurity projects for Microsoft cybersecurity team for Government and Banking customers Developed Cybersecurity systems and platforms based on OWASP (top 10) and OWASP AI Security and Privacy frameworks Developed cloud & on premises & data center security protection systems. Defenders' system architecture and deployment, XDR, IAM, RBAC, CASB, IDS, IPS, Honeypots, Scanning tools Physical security observing systems SOC, Application security, Network security, End Point security ADP02/2023 PresentSecurity Solution ArchitectThreat modeling Developed models using thereat modeling tool Developed threat modeling templates and diagrams. Generated threat model Worked on Threats and Countermeasures Used STRIDE, threat classification technique for Security Development Lifecycle Azure Designed solutions based on customer requirements for Azure infrastructure deployments, security, and data. Deployed Azure Front Door CDN with WAF; Azure Application Gateway with WAF Deployed and supported Azure WAF ModSecurity and custom rules; Azure Firewall rules design Developed Azure design documents and drawings for Azure architecture infrastructure and security. Designed and deployed IAC/architectural blueprints for Azure services Designed and deployed Azure AKS Kubernetes and services. Designed and implemented Azure API infrastructure. Designed and implemented Microsoft 365 security services and Azure Entra ID Designed and deployed Terraform, Bicep and ARM Designed and developed solutions: for Custom Images using Hashicorp Packer, Azure Pipelines, Azure DevOps, Ansible. Conducted testing and deployment of: Microsoft Defender for Endpoint; Microsoft Defender for Office 365; Microsoft Defender for Identity; Microsoft Defender for Cloud Apps; Microsoft Defender Vulnerability Management; Microsoft Entra ID Protection; Microsoft Data Loss Prevention Designed and deployed Azure Well Architected framework; Architected, organized, and deployed Azure Open AI Specified; Architected and deployed AI GPU compute, storage, cloud API management. Orchestrated GPU Infrastructure as a Service; Event Hubs Log collectors; Splunk Cloud integration. Security Segmentation design; Microsoft PKI; Azure based 3rd part KeyFactor Command: PKI product as a service design for automated lifecycle of keys and certificate management; Azure Key Vault Managed HSM; Microsoft 365 Defenders, Microsoft Defender for Cloud integration with ServiceNow Designed landing zones, tested, and deployed production worldwide: Azure vWAN, Azure Firewalls, Azure Front Door with WAF; Azure load balancers; Azure Hub/Spoke; Azure WAF; Azure Application Gateway Used Azure SAP HANA system design, VMs, deployment, and support. Used LLMs IOPS sizing; Data Lake; Datasets, Azure SQL MI, Postgres Citus MI, PostgreSQL SQL MI, Flexible server. Used Azure Storage, Azure NetApp BlueXP hybrid cloud data-management capabilities, Azure NetApp Cloud Sync. Used Azure Open AI LLM, Open AI Monitoring and Open AI Infrastructure POCs with Python Pytorch models deployment, Transformers Neuron MLOps pipelines; MLPerf Inference benchmarking to measure how fast systems can process inputs and produce results using a trained model; Retrieval Augmented Generation (RAG) and LangChain Used Azure Container workloads-based deployments on GPUs, Deployment of NVIDIA GPUs; GPU Direct RDMA; InfiniBand Documented flow requirements based on how potential AI users might want to interact with the product: human-to- Ai interactions, datasets to AI; API Management solutions to Open AI; Private DNS, DNS Resolver; Private end points; TLS, CDN to AI, WEB 3.0 [Provided integration design guidelines with AI to vector databases Worked with product team on the flow optimization with machine learning to continuously improve the AI algorithms based on customer feedback. Docker; Containers, Kubernetes; ExpressRoute circuits; Aviatrix system design Used ARM, Terraform, Bicep, Ansible, Power shell and Python. AWS Designed, implemented and support WEB services Globally: CDN: Anycast IP, BGP, DNS, Cache, WAF CDN: Cloud Front, Cloudflare Designed and implemented AWS solutions: NACLS, VPC segmentation, Private Endpoints, TGW Transit VIF; APIs Designed and deployed AWS logging based architecture to log collectors, Apache Kafka, applied ML and SOC2; Designed and applied ML AI LLM Inference on Data Lake sets, Apache Hadoop, Apache Spark to analyze logs Designed secure solutions based on AWS Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP) developed from open source. Utilize AWS provided and deployed components, platforms and tools to design secure solutions for various projects: AWS Secure HUB; Amazon Guard Duty; Amazon Macie; AWS Config; AWS CloudTrail; AWS CloudTrail Insights; AWS Security Hub; Amazon Inspector; AWS Shield; AWS Web Application Firewall; AWS KMS,AWS Secrets Manager; 3rd part tools: Alert Logic; Rapid7; Snyk; IBM Security Guardium; Orca Side Scanning; Wiz assessment; Palo Alto Networks Maintain, update and support AWS Cloud Front with AWS WAF Manage AWS accounts; IAM, RBAC; Designed and developed solutions: for Custom Images using Hashicorp Packer, AWS Code Pipelines, Terraform, Cloud Formation; Ansible; AWS Private CA Connector for Active Directory; Deployed DNS Route 53 resolver firewall; Developed and documented ingress-nginx K8, EKS architecture and deployment; POC SPIRE components in a Kubernetes cluster Architected and deployed AI GPU compute, storage, cloud API management. Orchestrated GPU Infrastructure as a Service; Designed landing zones; LLMs IOPS sizing; Data Lake; Datasets; Deployed AWS NetApp BlueXP hybrid cloud data-management capabilities Developed Cloud Security Web Gateways and Secure Access Service Edge (SASE) systems Maintained and configured Zero trust network access; CrowdStrike; Qualys Cisco, Arista, Firewalls, OSPF, BGP, RIP, Cloud systems secure design based on NIST 800-37, 800-53, 800-171, 800-204, 800-207, CIS, PCI, IRS-Pub 1075, CJIS; ISO, CIS, OWASP, GDPR, ITIL, HITRUST, HIPPA, PCIDSS AWS to Azure Open AI, ML LLM Direct Connect, ExpressRoute, Interconnects Deployed Azure vWAN and Open AI workloads Terraform, Ansible, PowerShell, Python.Microsoft Corp. 01/2021 02/2023Azure Solution Architect Worked with Microsoft customers to deploy Cloud Native Application Protection Platforms (CNAPP) including Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and Cloud Workload Protection (CWP) Deployed Azure Sentinel design, connectors, Threat management: Incidents; Workbooks; Hunting; Integrated Machine learning workspace-Notebooks; Entity behavior; Threat intelligence; MITRE ATT&CK (Preview); Deployed Microsoft Threat Modeled design Deployed Sentinel connectors to workloads: WEB, APP, Database infrastructure Deployed Azure Front Door CDN with WAF; Azure Application Gateway with WAF Used Azure NetApp Files with NFS; SMB; NetApp-native backup, recovery, replication and Azure Storage design Azure Cloud Network architecture for 500 Intermediate HUBs Designed Azure vWAN and SD WAN global network design Used Aviatrix Multi cloud design. Developed Azure Firewall IHUB architecture. Used Azure Load balancers; Azure Private Link and private endpoint Used Azure CDN; Azure Stack HCI (SQL, AKS, VDI, Hyper-V) Developed Windows shared services DNS updated architecture Developed Azure DNS; UDR, ExpressRoute architecture. Developed Azure AMPLS, Log Analytics designs, VNET flow log, VPC flow log. Azure Power Apps; Azure Container Instances (ACI);Office 365, Azure AD;SharePoint, Exchange;NSG; SG, Users, Groups, Power App, ADF DataFactory; Hadoop; Data Lake; Data Bricks Designed VNETs, Private Endpoints, VNET peering to SQL, SQL MI, CosmoDB, Oracle POCs URI whitelisting across secure baston network for Public Endpoints access Used Azure NSG design, Azure NSG service tags testing,Azure Load Balancers, AKS MI Designed access and deployed Azure SQL MI, Postgres Citus MI, PostgresSQL SQL MI, Flexible server Deployed Open AI workloads, Open AI Private Endpoint design, Open AI Traffic Analytics; Open AI support; Used Terraform, Bicep, Ansible, ML: Pytorch; Azure Developed and deployed POCs for ML Deep Learning: PyTorch, ML Studio, Curated and Custom PyTorch deployments for CUDA builds; Developed Azure Kubernetes Service (AKS) Clusters for GPUs compute-intensive workloads. Deployed F5 multi-cloud security platform between AWS, Azure and GCP; Deployed F5 CDN, F5 Network Firewall, F5 WAF; F5 DNS; F5 API Scan Morgan Stanley 2018 2021Design Engineer Developed Cloud Security Web Gateways and Secure Access Service Edge (SASE) systems. Cloud Access Security Broker (CASB), Data Loss Prevention (DLP); Zero Trust Network Access (ZTNA) platform design and deployment Designed landing zones, tested, and deployed: Azure Firewalls, NSG, SG, RBAC, Defenders for Cloud, Itune,SSO Used Azure Front Door with WAF; Azure load balancers; Azure Hub/Spoke; Azure WAF; Azure Application Gateway Cisco Systems 2016 2018Consulting Engineer Represented Cisco Systems at Goldman Sachs Next Generation ultra-low latency design for trading applications Provided Cloud /Network security servicesAT&T 2013 2016Solution Architect Provided Cloud /Network security servicesBritish Telecom 2011 2013Solution Architect Developed Private Cloud Firewall managed service for BT Juniper firewalls, Palo Alto firewalls; Snort,Suricata, Bro (Zeek),OSSEC,Samhain Labs,OpenDLP Migrated complex legacy customer infrastructures to new managed security services platforms Deployed IDS/IPS, SIEM, EDR, DLP, Firewalls, DNS security, cloud security, Windows and Linux systems, etc. OpenStack Cloud product design; private cloud AWS workloads hosting; AWS VPC design IBM Cloud; VMWare; EMC storage Optical UNI, O-NNI, MPLS-TE; BGP-LS, Multicast; Mobile Edge-Mobile core - MPLS core transport Juniper Networks (Juniper Labs), Sunnyvale, CA/Westford, MA 2008 2011 System Architecture Product and network interoperability engineering MPLS TE; EVPN, NNI; MEF; IETF; OIF;3GPP Network Consulting Engineering Provided consulting services to service providers and large financial companies AWS, AOL, Sprint, UBS, Amex, NYSE, NASDAQ, ULL ECNs UNIX Operating systems UNIX Kernel development BNET, ISO, TCP/IP stacks development Pascal, Java, C, C++ IETFEDUCATION & CERTIFICATION &TRAININGS: M.S.E.E., School of Telecommunications, University of St. Petersburg B.S.E.E., School of Telecommunications, University of St. Petersburg AWS, Azure, GCP, OCI, Aviatrix, F5, Cisco, Juniper, Extreme, Foundry, Azure AI, Gen AI; TRAINER: AWS Azure Cisco Routing and Switching Juniper F5 multi-cloud platform |
