Abdul Salman

Experience

• 

  CtrlS Datacenters Ltd

  Jan 2013 - Nov 2015

  Linux System Administrator

  • Installing, configuring and maintaining RedHat Linux and CentOS on Dell/HP servers for applications running on the servers, Performance Tuning and Configuration.• Worked with Agile and SCRUM development teams to provide services and deliver products in time.• Installation of patches and packages using RPM and YUM in Red hat Linux.• Created and modified users and groups with SUDO permission. Working with developers to load software onto Linux Enterprise servers and debugging Scripts.• Set up and administer user and groups accounts, setting permissions for users.• Diagnosed and resolved problems associated with DNS, DHCP, VPN, NFS, and Apache.• Resolved TCP/IP network access problems for the clients.• Experience in installing and configuring SSH (Secure Shell) encryption to ensure secure access on Red Hat and Ubuntu.• Maintaining the Linux firewall to implement network security.• Created backup capabilities adequate for the recovery of data and understand concepts & processes of replication for disaster recovery.• Managing SVN repositories for branching, merging and maintaining version across the environments.• Troubleshooting errors during environment upgrades ranging from system resources to application stack traces.• Remotely coping files using SFTP, FTP, SCP, WinScp, and FileZilla.• Regularly manage backup process for server and client data. Show less

• 

  Hitachi

  Jan 2016 - Mar 2017

  Azure DevOps Engineer

  • Performed the daily system administration tasks like managing system resources and end users support operations and security. • Implemented cloud services AWS and Implemented Bash, Perl, PYTHON scripting. • Worked on GIT (Git Hub) repositories as Distributed Version Control System. • Installed and configured GIT to implement branching strategy which is suitable for AGILE development also provided continuous support and maintenance of software builds.• Responsible for taking the source code and compiling using MAVEN and package it in its distributable format, such as a WAR file. • Worked on integrating Git into the continuous Integration (CI) environment along with JENKINS Configured the services using modern DEVOPS tools. • Refined automation components with scripting and configuration management using ANSIBLE. • Wrote Ansible playbooks from scratch in YAML. Installing, setting up & Troubleshooting ANSIBLE, created and automated platform environment setup.• Automated various infrastructure activities like Continuous Deployment, application server setup, stack monitoring using ANSIBLE playbooks. • Automated the deployment process by writing SHELL (bash), PYTHON scripts in Jenkins. • Provide support to Account Managers, UNIX and Windows technicians, and other departments • Installed packages using YUM and RED HAT Package Manager (RPM) on various servers. • Configured and administered JENKINS pipelines for automated builds and responsible for installing Jenkins master and slave nodes.• Worked exclusively on VMWARE (Ubuntu 16.04) virtual environment. • Worked closely with DBA Teams to adjust kernel parameters as per requirements.• Designed and created multiple deployment strategies using CI/CD Pipelines using Jenkins. Installed multiple plugins to Jenkins, Configured Proxy to get auto updates. Show less

• 

  Wall Street Exchange - A member of Emirates Post Group

  Apr 2017 - Jan 2023

  Lead Cloud Engineer

  • Setup logs streaming into Kibana and setup indexes to search for application logs when there is an issue. • Configured VMs in Availability Sets using Azure Portal to provide resiliency for IaaS based solution and scale sets using Azure Resource Manager to manage network traffic.• Implemented CI/CD builds and releases of our software and infrastructure and Monitoring and alerting of our production environment. • Created AKS clusters with basic and advanced networking where Basic Networking Model Called Kubenet which is default configuration when creating an AKS cluster and k8s cluster is separate from Azure network and on-prem network Suitable if you are deploying in an Isolated Environment.• Collaborated with cross functional teams (firewall team, data base team, application team) in execution of this project. • Added Azure CDN to an Azure App Service web app and Accessed storage blobs using an Azure CDN custom domain over HTTPS. • Integrated our ILB App Service Environment with the Azure Application Gateway. • Enable customers to elastically scale throughput and storage based on demand, globally with Azure Cosmos DB. • Used Ansible to Remediate faster-automating actions like blacklisting attacking IP addresses or domains, whitelisting non-threatening traffic, or isolating suspicious workloads for further investigation. • Enabled developers with good practices and help with containerization efforts for production systems.• Setup API gateway for services and included a load balancer and add an entry in F5 pointing to our API gateway since some of env’s are publicly accessible. • Created docker images and stored under ACR and deployed the build artifacts and docker images onto AKS as a container service with ARM template where infrastructure is provisioned automatically with ARM template. • Created AKS cluster with networking where It makes Pods first class citizens in our network with Azure CNI, Every Pod will get an Ip address from the Virtual Network. Show less

• 

  EQ Bank | Equitable Bank

  Feb 2023 - Jan 2024

  Senior DevOps / Cloud Engineer

  • Involved in Planning, Architecting, Implementing the Security and Disaster Recovery processes for the whole infrastructure. • Used Azure artifacts for storing the build artifacts where versioning is solid and accurate, also used JFROG artifactory for storing Docker images. • Utilized the AWS Control Tower dashboard to gain insights into the overall health, compliance status, and resource configurations of the AWS environment.• Designed and configured Azure Virtual Networks (VNets), subnets, Azure network settings, DHCP address blocks, DNS settings, security policies and routing.• Configured IAM policies to create users, roles and groups and gave access to users-based role in a team. • Implemented Security, Auto Scaling, Disaster Recovery and Monitoring. • Configured Internet facing load balancers and Internal load balancers.• Worked on ARM templates to automate the provisioning and deployment process • Configured DNS with Route53 to route users to internet-based applications by using Hosted Zones. Restrict the users to route to their application with Private Hosted Zones. • All infrastructure components for different environments (Dev/Test/Prod) are provisioned via Terraform scripts, CloudFormation with no manual intervention in AWS. • Deployed application secrets and sensitive configuration data like tokens, passwords, certificates, encryption keys etc., into AWS Secrets Manager. • Integrated JMeter Performance Testing into release pipeline so that every build after it is deployed into DEV, UAT, or PROD it will do a performance test automatically. • Integrating Azure Active Directory for user authentication/authorization and organization profiles.• Implemented Azure DevOps Pipelines for CI/CD setup, deployed applications automatically by enabling the triggers to deploy.• Created ARM template to join VM to existing domains, Create a sandbox setup of Azure Firewall with Zones. Show less

• 

  SaskSigns

  Mar 2024 - now

  Senior DevOps Engineer

  • Implemented end-to-end Salesforce deployment processes, ensuring smooth transitions from development to testing and production environments.• Managed source code repositories using Bitbucket for version control, ensuring collaboration and centralized code storage.• Led the implementation and configuration of AWS Control Tower to establish and govern a secure and compliant multi-account AWS environment.• Utilized Infrastructure as Code tools to define and deploy Apigee-X configurations, enhancing reproducibility and scalability.• Organized accounts into logical OUs and enforced security policies across the organization using SCPs through AWS Control Tower.• Implement automated checks or scripts to validate the versions of dependencies against a compatibility matrix on Mac OS.• Implemented Docker-based runner images to create reproducible and isolated build environments, ensuring consistent results across different stages of the pipeline.• Integrated encryption into cloud-based databases (e.g., Amazon RDS, Azure SQL Database), enhancing the security of sensitive data within cloud-hosted databases.• Implemented cloud-native encryption solutions, leveraging services such as AWS Key Management Service (KMS), Docker, Kubernetes, Azure Key Vault.• Implemented automated testing strategies for Salesforce, reducing manual testing efforts and improving overall product quality.• Orchestrated and scheduled ETL jobs in AWS Glue using triggers, workflows, and job bookmarks to automate data processing workflows and ensure timely execution.• Implemented DevOps practices for Salesforce development, optimizing collaboration and code quality.• Extensively worked on Hudson, Jenkins, Team City and Bamboo for continuous integration (CI) and for End-to-End automation for all build and deployments. • Implemented security best practices using HashiCorp Sentinel policies, ensuring compliance with security standards and regulatory requirements. Show less