Rajesh K.

Designed, administered, and optimized multi-forest Active Directory environments, including domain trust management, FSMO role operations, group policy design, and automated OU governance. • Built advanced PowerShell modules for bulk provisioning, attribute standardization, automated deprovisioning, mailbox cleanup, stale/computer object lifecycle, and PIM task automation. • Developed enterprise-wide Graph API automation for user object management, license assignment, mailbox provisioning, and security group synchronization with Entra ID. • Integrated ServiceNow with AD/Entra ID for automated identity workflows, including catalog-driven group membership, entitlement requests, and role-based approvals. • Supported and optimized Exchange Online and Exchange hybrid deployments, implementing retention policies, mail flow rules, migration batches, distribution groups, shared mailboxes, and compliance settings. • Designed secure hybrid identity architectures using AAD Connect, password hash sync, pass-through authentication, ADFS, Kerberos, LDAP, and certificate-based authentication. • Implemented Conditional Access, MFA, passwordless authentication, and security defaults, aligning with Zero-Trust policies. • Built automation for Azure PaaS identity integration, covering App Services, Function Apps, Key Vault access policies, managed identities, and access token handling. • Developed reusable .NET 6/7/8 identity libraries for OAuth2, OIDC, Graph API authentication flows, and JWT token validation. • Automated user license governance (E5, Exchange, Teams, EMS, Intune) with subscription reconciliation and least privilege logic. • Built AD and Entra ID compliance dashboards using PowerShell, KQL, Graph API, and Azure Monitor.

Provisioned Azure resources (Compute, Network, Service Fabric, Application Gateway) using ARM templates. Implemented and maintained Dev, Test, Staging, and Production environments using Infrastructure as Code (IaC) with JSON/YAML configurations. Implemented integration using Azure Service Bus, AppService, Active Directory, Storage, Hybrid Connection Manager, and Azure SQL authentication. Familiar with the development lifecycle, with added experience in Java and ETL development. Migrated web applications to Azure with ARM templates, VPN gateway, site-to-site VPN, DNS server firewall, and Application Gateway. Managed Azure Web Apps, App Services, Application Insights, Application Gateway, DNS, and Traffic Manager. Created deployment scripts and automated maintenance tasks using PowerShell in Windows-based projects. Configured storage blobs, Azure files, CDNs, custom domains, and managed storage access keys. Set up ASE with high availability and autoscaling, configured with Barracuda WAF and Azure Traffic Manager. Created cloud modules and automated applications using Azure Functions, Kubernetes, and Ansible. Automated container deployment with Docker and Jenkins, managed Docker Hub and multi-container applications with Docker Compose and Kubernetes. Optimized CI/CD processes using Docker and Kubernetes, automated build and deployment with Jenkins. Configured infrastructure with Ansible, created playbooks, and established best practices for deployment. Scripted administrative tasks using CLI, Java, Python, YAML, PowerShell, Shell, and Ruby, and built Jenkins jobs for automation. Developed scripts using MS Build and Gradle in Jenkins, used Nexus for artifacts, and SonarQube for code analysis. Monitored servers and applications with Splunk, responded to alerts, and automated monitoring with Ansible.

Set up AWS components (VPC, EC2, EBS, IAM, S3, DynamoDB, MongoDB, Route53, SNS, SES, SQS, CloudWatch, CloudTrail, Security Groups, ASG, RDS) using CloudFormation and Terraform. Migration Planning: Designed and executed migration plans for Linux/Windows servers and web applications to AWS, utilizing IPSec tunnels, VPN gateways, Customer Gateway, and Data Pipeline. Built Kubernetes clusters using AWS-Kops (EKS) and set up the Kubernetes dashboard for cluster management. Managed multiple AWS accounts and VPCs for production and non-production environments, focusing on automation, integration, and cost control. Designed VPCs, EC2 instances, FTP servers with Elastic IPs, Load Balancers, and set up CloudWatch for instance launch notifications and pager duty services. Created and managed S3 buckets and policies, and utilized S3 and Glacier for storage, backup, and archiving. Configured IAM roles and groups, implemented MFA, and set up monitoring and alerting with CloudWatch and CloudTrail. Used Python-based Lambda functions for data transformation and analytics, interfacing with EMR clusters, Kinesis streams, and DynamoDB via REST API. Automated AWS resources (VPCs, ELBs, security groups, SQS, S3) using Terraform, also managing VMware and Docker containers. Deployed microservices in Kubernetes (EKS) with CI/CD, managing scaling, load balancing, and networking policies. Automated CI/CD pipelines using Docker Containers, Docker Swarm, and Ansible playbooks. Integrated Docker-based test environments with Jenkins CI/CD, GitLab, and Jira for automated builds using WebHooks and Slave Machines. Installed and configured the ELK stack for log aggregation and monitoring in both legacy and Docker Swarm environments. Utilized AWS OpsWorks to integrate Ansible for code deployment and database configuration optimization. Upgraded Jenkins and other CI/CD tools following the SDLC process, collaborating with vendors to resolve issues.

Build and release engineer role includes Middleware automation, Release management, Environment Management Continuous integration, Continuous deployment, Incident management, Version management. Continuous integration, Continuous deployment, Incident management and Version management. Created and managed CI/CD pipeline Using Jenkins, Nexus, GitLab to improve the efficiency and produce or release bug free or highly effective applications to the end users or customers. Worked with Engineers, QA, and other teams to ensure automated test efforts are tightly. Experience in integrating Unit Tests and Code Quality Analysis Tools like JUnit, Cobertura, PMD, Findbugs and Checkstyle. Integrated with the build system and in fixing the error while doing the deployment and building. Integration of Puppet with Apache and developed load testing and monitoring suites in Python. And maintained. Created a custom puppet module skeleton to use same structure across all puppet modules. And Developed Puppet scripts for an automated server provisioning and reducing the time between provisioning and deployment from over 3 hours to less than 10 minutes. Maintained build related scripts developed in shell for ANT and Gradle builds. Created and modified build configuration files including Build.xml. Resolved update, merge and password authentication issues in Bamboo and JIRA. Installing, upgrading, and configuring Linux Servers using Kickstart as well as manual installations and the recovery of root password.

Created and maintained Python scripts for Automating Build and Deployment Process. Utilized Nagios based Open-Source monitoring tools to monitor Linux Cluster nodes. Developed the Shell scripts, Ruby scripts, and python scripts to automate the system level activities and to run the API calls and parsing through the outputs of the REST API calls. Administered Linux servers for several functions including managing Apache/Tomcat server, mail server, MySQL database, and firewalls in both development and production. Responsible for building and supporting Solaris/Linux/AIX/HP-UX servers. Used various Core Java concepts such as Exception Handling, Collection APIs to implement features. Creating and maintaining client's data interface utilizing SSH File Transfer Protocol. Installation and configuration of Web hosting administration such as HTTP, FTP, SSH, RSH. Installation of patches, security fixes and packages on AIX and Linux servers