Ayush M

• Designed and implemented AWS Landing Zone and Control Tower for multi-account governance.
• Defined and enforced Service Control Policies (SCPs), IAM guardrails, and account baselines to ensure compliance and security.
• Automated account provisioning with guardrails, tagging standards, and centralized logging.
• Designed and deployed scalable, fault-tolerant AWS architectures to improve performance, reliability, and cost efficiency.
• Performed workload assessments and optimized placement across EC2, Fargate, and Lambda.
• Conducted cloud cost analysis and rightsizing, leveraging Savings Plans and Reserved Instances.
• Built Infrastructure-as-Code (IaC) using Terraform, CloudFormation, and AWS CDK.
• Automated deployments and environment provisioning with CI/CD pipelines (CodePipeline, GitHub Actions, GitLab CI).
• Integrated CloudWatch, Datadog, and Prometheus/Grafana for monitoring, alerting, and auto-remediation workflows.
• Managed Linux and Windows servers with automated patching and configuration using SSM and Ansible.
• Hosted and maintained WordPress environments (Apache, Nginx, PHP-FPM, MySQL/MariaDB), including performance tuning and security hardening.
• Deployed and managed containerized workloads with EKS and ECS.
• Managed Route 53, domain registrations, SSL/TLS certificates (ACM, Let’s Encrypt), and DNS migrations.
• Designed secure VPC architectures with private/public subnets, NAT Gateways, Transit Gateway, and VPC Endpoints.
• Implemented WAF, Shield, Security Groups, and NACLs for robust security.
• Performed bottleneck analysis for compute, networking, and database workloads.
• Migrated monolithic workloads to microservices and serverless architectures for scalability.
• Configured Auto Scaling, ALB/NLB, and Global Accelerator for high availability and resiliency.
• Managed RDS (MySQL, Postgres, MariaDB), Aurora, and DynamoDB with backup/restore strategies.
• Configured S3, EFS, AWS Backup Vault policies, and cross-region replication for storage and disaster recovery.
• Implemented IAM, SSO, Cognito, KMS, and Secrets Manager for identity, security, and compliance.
• Handled DNS, domain management, WordPress hosting, and business application integrations (e.g., G Suite, email services).

AWS Infrastructure Management:

• Oversee the design, deployment, and management of AWS infrastructure and services.
• Ensure the availability, scalability, and security of AWS resources.

Architecture and Design:

• Work closely with architects and engineers to design and implement AWS solutions that meet the organization's needs.
• Ensure best practices and AWS Well-Architected Framework principles are followed in the design.

Resource Provisioning and Optimization:

• Allocate and manage AWS resources effectively to optimize costs while maintaining performance.
• Monitor AWS resource utilization and make adjustments as needed.

Security and Compliance:

• Implement security best practices and ensure compliance with industry standards and regulations.
• Manage AWS Identity and Access Management (IAM) policies and permissions.

Backup and Disaster Recovery:

• Establish and maintain backup and disaster recovery plans for AWS resources.
• Conduct periodic testing of disaster recovery procedures.

Performance Monitoring and Optimization:

• Monitor the performance of AWS services and applications.
• Identify and resolve performance bottlenecks and optimize AWS configurations.

Cost Management:

• Monitor AWS billing and expenses.
• Implement cost-saving strategies, such as reserved instances and instance right-sizing.

Automation and Scripting:

• Develop and maintain scripts or automation tools to manage AWS resources efficiently.
• Implement Infrastructure as Code (IAC) practices using tools like AWS CloudFormation or Terraform.

Documentation and Training:

• Maintain documentation for AWS resources, configurations, and procedures.
• Provide training and guidance to team members and stakeholders on AWS best practices.

Vendor Relationship:

• Manage relationships with AWS representatives and stay informed about AWS product updates and offerings.
• Evaluate and recommend new AWS services that could benefit the organization.

Incident Response and Troubleshooting:

• Lead incident response efforts for AWS-related incidents.
• Troubleshoot and resolve AWS-related issues promptly.

Capacity Planning:

• Plan for future growth by assessing resource needs and scalability requirements.

Compliance and Governance:

• Ensure AWS accounts and resources are compliant with organizational policies and governance frameworks.

Continuous Improvement:

• Stay up-to-date with AWS trends and best practices.
• Continuously improve AWS infrastructure and processes.

Collaboration:

• Collaborate with other teams and stakeholders to understand their AWS requirements and provide solutions.

DevOps Strategy and Planning:

• Develop and implement a DevOps strategy aligned with the organization's goals and objectives.
• Define the roadmap for DevOps adoption and continuous improvement.

Team Leadership and Management:

• Lead and mentor a team of DevOps engineers and specialists.
• Set clear goals, provide guidance, and ensure the team's productivity and growth.

Infrastructure as Code (IaC):

• Implement and maintain infrastructure automation using tools like Terraform, AWS CloudFormation, or Ansible.
• Define and manage version-controlled infrastructure configurations.

Continuous Integration and Continuous Deployment (CI/CD):

• Design, implement, and manage CI/CD pipelines to automate software delivery.
• Ensure fast and reliable software releases.

Containerization and Orchestration:

• Manage containerization technologies like Docker and container orchestration platforms like Kubernetes.
• Ensure containerized applications are scalable and resilient.

Configuration Management:

• Implement and maintain configuration management tools like Puppet, Chef, or Ansible to ensure consistency across environments.

Monitoring and Logging:

• Set up monitoring and alerting systems for infrastructure and application performance.
• Manage centralized logging solutions for troubleshooting and analysis.

Security and Compliance:

• Implement security best practices throughout the DevOps pipeline.
• Ensure compliance with industry regulations and company policies.

Collaboration:

• Collaborate with development, operations, and QA teams to facilitate communication and streamline processes.
• Promote a culture of collaboration and knowledge sharing.

Cost Optimization:

• Optimize infrastructure costs by monitoring resource utilization and implementing cost-saving strategies.

Disaster Recovery and High Availability:

• Develop and test disaster recovery plans to ensure business continuity.
• Design and implement high availability solutions for critical systems.

Tool Selection and Evaluation:

• Identify, evaluate, and select DevOps tools and technologies that align with the organization's needs and goals.

Performance Optimization:

• Analyze system performance and identify areas for improvement.
• Optimize system configurations for maximum efficiency.

Documentation and Training:

• Maintain documentation for DevOps processes, configurations, and best practices.
• Provide training to team members and stakeholders on DevOps tools and methodologies.

Continuous Improvement:

• Stay up-to-date with DevOps trends and emerging technologies.
• Continuously improve DevOps practices and processes based on feedback and lessons learned.

Risk Management:

• Identify and mitigate risks related to the DevOps process and infrastructure.
• Develop and maintain disaster recovery and incident response plans.