Manny D.

• Used AWS Systems Manager for patch management and to automate administrative tasks across our environments • Provided cost-effective solutions through the implementation of AWS instance scheduler • Proposed and leveraged disaster recovery strategies based on the desired RPO and RTO • Leveraged data life cycle manager, cross-region replication, and multi-availability zone deployments for business continuity • Designed and implemented highly available web server infrastructures using the elastic load balancer and auto-scaling groups and secured the environment via NACLs and security groups • Addressed the findings from Trusted Advisor by leveraging Amazon CloudWatch Events and AWS Lambda • Created CloudWatch alarm rules to evaluate the performance metrics of our AWS applications and resources • Followed AWS security best practices including access key rotation, S3 bucket policies, multi-factor authentication, security groups and NACLs, and encryption using KMS keys. • Provisioned and managed AWS infrastructures using infrastructure as code (CloudFormation and Terraform) • Created snapshots of EBS Volumes for backup by using the Data Lifecycle Manager and defined the retention time period for cost optimization. • Utilized reserve instances, autoscaling, S3 lifecycle policies, S3 storage classes, and the selection of the EC2 instance types based on resource needs to optimize cost • Implemented the authentication, authorization, and Identity and Access Management of our cloud infrastructure through IAM users and groups, IAM roles and policies, and AWS single sign-on. • Provided governance at scale by using AWS Control Tower, AWS config, and AWS organization • Implemented Control Tower Preventive and Detective guardrails, integrated with Account Factory and Lambda to create and set up new AWS accounts

• Designed the virtual private cloud: availability zones, subnets, server and storage instances, NACLs, security groups, AWS WAF and Shield, etc • Provisioned AWS infrastructures using Cloud Formation and Terraform. • Designed and implemented different aspects of the migration journey (Assess, Mobilize and Migrate phase) leveraging CloudEndure, CART, DMS, and ADS • Implemented AWS system manager to automate procedural tasks across AWS resources • Used CloudWatch and SNS notifications to monitor end-to-end infrastructure • Managed Ansible Tower for scale automation and deployments • Implemented read replicas, multi-AZ, and snapshots as disaster recovery on our RDS instances as well as ElastiCache for high performance • Launched databases in private subnets and configured NAT Gateways and bastion hosts for access to the internet

• Used Jira to manage requests, tickets, and incidents • Created and managed user accounts, profiles, and security • Implemented AWS best practices by using the principle of least privilege permissions and granular permissions for role-based access control • Configured security groups and linked them to the various authorized subnets and ip addresses in AWS • Created S3 buckets and managed their policies • Configured AWS Multi-Factor Authentication (MFA) for login access for users and resources • Optimized cost via reserve instances, proper utilization of S3 storage classes and S3 lifecycle policies, and leveraging autoscaling policies and lifecycle hooks

• Designed and implemented secure, scalable AWS cloud architectures, ensuring compliance with industry and organizational security standards • Administered and patched EC2 instances, improving performance, security, and availability • Configured and managed S3 storage solutions with secure access controls and compliance enforcement • Automated infrastructure deployment using Infrastructure as Code with CloudFormation • Set up logging, monitoring, and alerting across AWS services for improved observability and response • Secured sensitive data by administering AWS Secrets Manager and KMS • Partnered with cross-functional teams to deliver secure and compliant cloud solutions aligned with business objectives • Established centralized governance through AWS Organizations, Control Tower, and Landing Zone Accelerator