Lakshan Walgama

Experience

• 

  IBM

  Feb 2018 - now

  Currently working in the CICD enablement team for a large federal government client, working across environment build automation, networking and security, and deployment automation, packaging and release.The platform is currently hosted in Amazon Web Services with both a cloud native and an on premise lift and shift component to it. I manage and maintain the aws security and networking components to both platforms as Infrastructure as Code (IaC stored and versioned controlled in TFS. This includes provisioning new resources and migrating resources within IaC which were previously created manually).Resources maintained include VPCs, subnets, VPC endpoints and associated policies, NACLs, Route Tables, Security Groups, IAM roles, IAM policies and groups, EC2 Instance Profiles, Load Balancers , KMS etc.Also work in the environment build automation space, currently utilising ec2 instances with automated user data coded on top, all stored in version control. Release and orchestration of the environment build utilises TFS for version control and UrbanCode Deploy for orchestration. The work I specifically do in this space is around furthering the automation capabilities with the goal of reaching fully automated environment builds.Also work in the software configuration management space, enabling deployment automation and packaging deployments. Show less Involved with managing the cloud infrastructure for a large government client on the AWS platform. The role includes Windows and Linux system administration, utilising AWS services to improve existing processes, and high severity incident response activities and root cause analysis. Key achievements include:- Creating non-outage application restart scripts triggered via AWS Systems Manager using PowerShell and AWS Tools for PowerShell- Creating PowerShell scripts to conduct mass volume encryption on managed environments using AWS Tools for PowerShell- Creating PowerShell scripts which track S3 Bucket Policy changes for security purposes using AWS Tools for PowerShell- Creating a centralised application log capturing solution for root cause analysis using AWS Systems Manager and AWS Tools for PowerShell Show less

  • Senior Cloud Engineer | DevSecOps Enablement

    Oct 2021 - now

  • Senior Cloud Infrastructure Specialist

    Jan 2020 - Oct 2021

  • Cloud Infrastructure Specialist

    Feb 2018 - Jan 2020