SHAFALI S

Email: shafalis145@gmail.com |Mobile: (475) 265-0444

LinkedIn: linkedin.com/in/shafali-s-227657217
CAREER SUMMARY
▪ Experience in Azure Development process, including working on Azure App services, Azure storage, Azure SQL Database, Virtual machines,
Azure AD, and notification hub.
▪ Practical knowledge of Azure Scalability and Azure Availability (including VMs availability sets through Azure portal to provide resiliency for
IaaS based solution) and Virtual Machine Scale Sets (VMSS) (using Azure Resource Manager (ARM) to manage network traffic).
▪ Competency in writing Infrastructure as a code (IaC) for Azure solutions using Azure Resource Manager (ARM) and Terraform templates.
Also, in assembling Application Infrastructure with Azure DevOps using Infrastructure as Code on Azure Cloud.
▪ Design and develop cloud observability solutions and alerts for multiple Azure services such as Azure Monitor, Azure Log Analytics, and Azure
Application Insights, to notify relevant stakeholders on time to ensure that issues are addressed.
▪ Understanding of Azure Site Recovery (ASR) (as disaster recovery as a service (DRaaS)), including handling of Disaster Recovery by creating
recommendations on how to clone a subset of on-premises machines to Azure Infrastructure as a Service (IAAS) offering.
▪ Understanding of cloud-based managed Kubernetes services like Azure Kubernetes Service (AKS) for creating, deploying, and managing
Kubernetes clusters in the Azure portal, with Azure CLI, also by using template-driven deployment options.
▪ Experience in deploying microservice applications into AKS (Azure Kubernetes services) cluster, configuring Azure Container Registry (ACR) for
images, and using Azure Defender for detecting container security vulnerabilities.
▪ Understanding of AWS Cloud platforms, EC2, IAM, EBS, ECS, S3, Auto scaling, CloudWatch, CloudFront, Cloud Formation, Elastic Cache,
SNS, SQS, and Lambda functions in automating, securing, and deploying infrastructure and operations on AWS.
▪ Proficient in Cloud Solutions usage on distinct cloud platforms (such as Azure, AWS), alongside used software development kits and Visual
Studio for creating and deploying associated applications and storage in SQL Database, Tables, and Blobs.
▪ Practical understanding of tools like GitHub, Bitbucket, Jenkins, and Azure DevOps for version control, source code management, and
continuous integration and continuous Delivery.
▪ Understanding of API integrations using Logic Apps to connect and interact with various systems, services, and endpoints and to configure
authentication mechanisms, such as OAuth within Logic Apps to secure API integrations and protect sensitive data.
▪ Designing, developing, and testing AWS Lambda functions using programming languages supported by Lambda, such as Python.
▪ Experience in monitoring Azure infrastructure’s performance and health using monitoring tools (such as Dynatrace) to track metrics such as CPU
usage, memory utilization, network traffic, response times, and error rates to identify performance bottlenecks, anomalies, and areas for
optimization.
▪ Knowledge of designing and executing high-performing data consumption pipelines (ADF) from multiple sources via Azure Databricks, including
integration of end-to-end data pipelines for fetching data from source systems (like data repositories) and maintaining data quality and consistency.
▪ Experience in designing and handling Custom Agent Pools and troubleshooting issues during the CI/CD processes in Azure DevOps and used
Agent pool applications (like Change agent pool permissions) to restrict the assigned and unassigned projects and agents to/from pools.
▪ Understanding of Azure Functions in building HTTP-based API endpoints, along with configuring HTTP Triggers in Azure Functions with
Application Insights using Azure monitoring and performing load testing on the Applications via the VSTS.
▪ Hands-on experience in building and deploying Docker containers and working with Docker images, Docker Hub and Docker registries, and
Kubernetes to create microservices, improving developer workflow, increasing scalability, and optimizing speed.

TECHNICAL SKILLS
Cloud Technologies Microsoft Azure and AWS
Containerization Docker, Kubernetes
CI/CD Tools Jenkins, GitLab, Azure DevOps
Infrastructure/Configuration Mgmt. Tools Terraform, Ansible, Chef, Puppet
Version Control Tools GIT, ARM, Bit Bucket
Scripting Languages Python, JSON, YAML, Shell scripting, Power shell, Groovy, KQL, Node.js, JSON
Monitoring Tools Cloud Watch, Prometheus and Grafana.
Virtualization Technologies VMware, Virtual box
Operating Systems Ubuntu, CentOS, RedHat Linux, Windows, Linux
Networking Protocols DNS, HTTP, TCP/IP, DNS, SMTP
Reporting Tools SonarQube
Databases MySQL, PostgreSQL, Amazon DynamoDB
Web Servers Apache, HTTP, Apache Tomcat, Nginx
Build Tools Maven
Bug Tracking Tools JIRA, Service Now

EXPERIENCE
CLOUD ADMINISTRATOR, ENVIVA, Raleigh, NC Sept 2023 – Present
● Developing PowerShell scripts or leveraging automation tools to streamline deployment, configuration, and maintenance tasks related to
FortiGate VMs, aiming for efficiency and consistency across the infrastructure.
● Analyzing and gathering data to identify performance bottlenecks/r resource constraints for instance VM CPU usage and disk space of the last
three months' time-frame using KQL queries.
● Managing Azure Entra Directory including ole might include checking permissions, as well as enabling and disabling accounts. that are no
longer active or are deemed a security risk, such as accounts belonging to former employees or temporary contractors.
● Convert dynamic images to static images using Hyper-V server and Az CLI and further build VM using these images.
● Write scripts or workflows within the runbook, for instance, to automate the start and stop actions for VMs before and after office hours.
● Write and execute SQL queries to retrieve information about user accounts, their roles, privileges, and other security-related information in the
database.
● Create and Configure datasources within LogicMonitor for Azure resources/services and further, fine-tune datapoints configurations based on the
importance and sensitivity of each metric to avoid unnecessary alerts while ensuring critical issues are promptly detected.
● Work closely with networking colleagues to troubleshoot and diagnose the issues affecting the VM networks.
● Work closely with the manager to analyze Azure cost reports and usage data to identify trends, anomalies, or areas of overspending and
optimization strategies based on usage patterns and business requirements.
● Ensuring VM setups adhere to relevant compliance standards and security policies.

CLOUD ENGINEER, Barings LLC, Charlotte, NC Sept 2021 – June 2023

● Integrated Terraform with CI/CD pipelines to enable continuous integration, testing, and deployment of infrastructure changes.
● Built landing zones and created resources (such as subnets, app services, storage accounts, virtual machines, etc) for various projects and
provided required permissions (such as storage blob container ‘Contributor role’) using Terraform.
● Configured LogicMonitor collectors in Azure environments to monitor resources such as virtual machines, databases, and storage accounts
and gained comprehensive visibility into the Azure infrastructure via the LogicMonitor dashboard.
● Wrote Log Analytics queries using the Kusto Query Language (KQL) to extract and analyze data from log records, enabling troubleshooting and
root cause analysis.
● Developed automation scripts and workflows to streamline the configuration and management of diagnostics settings, retention policies, and
integration with Event Hubs and Log Analytics workspaces. Leveraged Azure PowerShell, Azure CLI, and Terraform to automate these tasks.
● Designed and developed Logicapp workflows and automated business processes and alerts (resource health and service health) using ARM
templates & KQL queries.
● Enabled geo-replication for the SQL databases using the Terraform module to combat regional outages or related uncertainties.
● Developed Network Security Groups (NSG) to trigger rule access control list (ACL) in Azure and filter traffic to and from Azure Resources by
configuring Inbound and Outbound rules and connecting them via Subnet and Network Interfaces by writing Terraform reusable Modules.
● Managed subnets within Azure Virtual Networks, involving creating and deleting subnets, modifying subnet configurations, and ensuring proper
connectivity and routing between subnets.
● Wrote and automated PowerShell scripts to reduce manual tasks for various requirements such as excluding LogicMonitor tags from Azure
storage accounts, checking the soon-to-be expired app registration certificates and secrets, disabling FTP, firewall exceptions (Azure
Services), and public network access for various resources, and retrieving policy assignments that contain a specific keyword in their display, etc.
● Worked on Policy-as-a-code and built custom policy definitions, policy assignments, and exemptions (Policy-as-a-code) and assigned them to
the management group level, and documented the process.
● Troubleshot and resolved issues related to custom policies (via remediation module), such as policy conflicts or policy non-compliance, which
involved investigating resource configurations, policy evaluation logs, and implementing remediation actions to bring resources into compliance.
● Developed DevOps pipelines using YAML code, involving features like multi-document support, built-in comments, and explicit data tags via
YAML files to speed up the project delivery cycles.
● Built CI/CD pipelines to automate the built, testing, and deployment processes for Web Apps and Function Apps via Azure DevOps to streamline
the development and release cycles.
● Configured AKS node scaling settings based on workload demands (via autoscaler, node scaling) defined scaling policies and thresholds for AKS
node scaling, and set trigger-based metrics alerts to ensure efficient resource utilization.
● Investigated and resolved issues related to VMSS or node pool instances, such as connectivity problems, performance degradation, and application
failures.
● Provisioned and configured the necessary infrastructure components to support autoscaling including setting up virtual machines, containers,
load balancers, and network configurations to ensure that the application can scale seamlessly.
● Designed Azure infrastructure using ARM templates and deployed resources to Azure using ARM APIs, along with managing Azure
pipelines (to build, test, and release) and Azure Container Registry for storing private Docker images.
● Rectified issues by providing production support for the ServiceNow application via troubleshooting, problem analysis, problem management,
resolution, and synchronized tasks between ServiceNow and Azure DevOps Boards.
● Implemented, safeguarded, and restricted cluster access to specific IP addresses and CIDR blocks via Azure Kubernetes Service (AKS) and
managed the AKS cluster by integrating Azure Policies using PowerShell in Azure DevOps.
● Designed, developed, and maintained Continuous Integration (CI), and Continuous Deployment (CD) workflow, plus managing Custom
Agent Pools and troubleshooting issues during the CI/CD processes in Azure DevOps.
● Updated Terraform modules updated the existing workflow with the latest Modversions and troubleshooted the associated errors.
● Worked in a team to establish integration between ServiceNow and Azure DevOps and coordinated Incidents, User Stories, Change Requests,
and Work Items under different themes as per project requirements.
● Responded to performance incidents and outages by investigating root causes, identifying the impact on Azure services, and working with
relevant teams to resolve issues and restore normal operations.
● Worked on POCs like restricting AKS namespaces via the gatekeeping approach and did stress testing to check node scalability.
● Managed namespaces within AKS clusters which include creating, deleting, and modifying namespaces as needed.
● Automated the deployment and management of Azure Service Bus resources, and performed routine maintenance tasks using PowerShell scripts.
● Regulated the immutable storage feature of Azure blob to access needed files ensuring data cannot be altered or deleted by any user) and further,
managed Azure Storage Queues to make connections amid associated processes.
● Deployed and configured Azure Standard load balancer to Azure Virtual Machine Scale sets through PowerShell scripts and set monitoring to
Azure Log Analytics workspace.
● Executed Change Management calls and hotfixes for Microsoft Azure cloud services in the project environment using PowerShell.
● Built ARM templates to run the SonarQube installation for easy integration and analyzing built pipelines.

CLOUD ENGINEER, Amfam, Madison, July 2019 – Aug 2021

● Built, and executed Enterprise Integration architecture in Azure using Azure Service Bus, AppService, Active Directory, Storage, hybrid
connection manager, and active directory authentication (for Azure SQL server) along with other associated/required service offerings through
ARM templates.
● Managed Azure data platform stack (such as Azure Data Factory, Azure DevOps, and Azure Functions), and applied it during the designing,
building, and operating of informatics solutions dedicated to the Azure ecosystem.
● Designed and executed high-performing data consumption pipelines from multiple sources via Azure Databricks, including integration of
end-to-end data pipelines for fetching data from source systems (like data repositories) for maintaining data quality and consistency.
● Managed the log data collected from different data sources and grouped VMs and Azure resource log files into a single data lake using Azure
Log Analytics Workspace.
● Deployed, configured, and analyzed Dynatrace monitoring data to identify performance bottlenecks, resource utilization issues, and anomalies in
Azure infrastructure.
● Operated Azure PowerShell for managing Azure Infrastructure including, Azure Web Roles, Worker Roles, VM Roles, Azure SQL, Azure
Storage, Azure AD Licenses, and Virtual Machine Backup.
● Managed security principles such as Role-Based Access Control (RBAC), Azure Active Directory (AD), and Azure KeyVaults on the Azure
platform.
● Transformed .Net application to Azure Cloud Service Project for cloud deployment along with migrated database from SQL Server to Windows
& Azure including upgradation of the engaged Connection Strings.
● Understanding of hosting micro-service application architecture on Orchestration tool, Azure Kubernetes service, and deploying services using
helm chart, which includes horizontal pod auto-scaling, load-balancing, etc.
● Built and automated cloud-ready solutions on the Microsoft Azure cloud platform using Azure Kubernetes Services (AKS), and used platforms
like Azure, Ansible, Terraform, and Jenkins to build, test, integrate, and deploy project-associated applications.
● Defining and scheduling data processing jobs and workflows using Databricks notebooks, SQL scripts, or other programming languages
supported by Databricks, ensuring efficient and reliable execution.
● Created custom policies using Azure Custom Policy definitions and Azure Policy initiatives (using Policy-as-a-code) to define specific
compliance rules, security controls, or governance requirements for Azure resources
● Constructed Ansible Playbooks to enable Nginx, and used the file module in Ansible Playbook to copy and eliminate files on remote systems.
● Managed Azure automation and developed scripts/pieces of code in Azure runbooks (using PowerShell and Python) for scheduling and
securing credential storage, along with applying Azure Key Vault to make the project platform more robust.
● Managed and updated existing infrastructure deployments through ARM templates and implemented changes, managed infrastructure updates
using template-based deployments.
● Developed, and secured the internal (within the firewall) Artifactory like Jfrog/Nexus applications holding packages needed for creation and
distribution to the clients, ensuring the reliability of packages for both cloud and on-premises.
● Establish and configure HTTP Triggers in Azure Functions plus Application insights for supervising and executing applications load testing via
VSTS (Visual Studio Team Services).
● Create ARM templates to deploy Azure infrastructure involving nested and shared templates alongside migrated core networking
infrastructure such as virtual network, subnets, and NSG to Terraform.
● Created and provisioned VMSS instances or node pools with the desired configuration, including virtual machine size, operating system,
networking, and storage settings.
● Configured autoscaling policies for VMSS or node pools based on metrics such as CPU utilization, memory usage, or custom application-specific
metrics to automatically adjust the number of instances based on workload demands.
● Leveraged Azure Monitor Application Insights to monitor the performance and availability of applications running on Azure, tracking requests,
dependencies, and exceptions.
● Integrated scripts into CI/CD pipelines, automating the testing, building, and deployment of infrastructure changes as part of the software delivery
process.
● Transmit domains/registrars between platforms like GoDaddy, Azure, etc., ensuring nothing gets missed (like DNS record).

DEVOPS ENGINEER, Harman International, MI June 2018- June 2019

● Worked with Azure products and services, including database offerings, developer tools, DevOps, security, storage, and logging, also operated
cloud-native solutions, including service directory (like LDAP, Azure Active Directory (AAD)), infrastructures services (like compute
/networking/storage), data protection services and security monitoring.
● Designed patterns for Azure microservices using Gateway Routing, offloading, Bulkheads, Anti-corruption layer, etc. to reduce project cost,
increase deployment release speed, improve the service network's flexibility, and increase task visibility.
● Configured AppDynamics cluster agent to monitor Azure Kubernetes Service (AKS) pod failures and restarts, node starvation, and missing
dependencies such as Services, Config maps, and Secrets.
● Built, automated, and deployed Azure PaaS Services such as Service Bus Queues, Event Grid, Storage, Logic Apps, WebApps, etc.
● Provisioned on-premises platform to integrate and migrate design alterations to new infrastructure and cloud platform (IaaS/PaaS) and make
resources/applications available to users remotely using public cloud service offerings.
● Troubleshooted and analyzed Azure cloud-based systems operations for availability, performance, reliability, and security via tools such as Azure
Monitor, Azure Log Analytics, or similar.
● Built and Installed servers with the help of Azure Resource Manager Templates and migrated On-premises virtual machine to Azure Resource
Manager Subscription.
● Operated Virtual machines and cloud services in the VNets to the Internet via Azure External Load Balancer.
● Managed Azure Backup on-premises service and shared consistent backups for Windows and Linux VMs including security features and
management controls via Azure portal.
● Proposed infrastructure solutions supporting products and deployed them into the Azure ecosystem using infrastructure as code via Terraform.
● Created and executed procedures for managing source code inside Team Foundation Server (TFS) and Git, involving branching, tagging, and
strategies approach to support frequent releases, concurrent development, and partial fixes. Also, used Git enterprise features (like centralized
self-hosted runners & runner groups) to handle access controls and custom workflow templates.
● Managed migrating SQL Server databases to SQL Azure Database using SQL Azure Migration Wizard and used Python API to upload
agent logs into Azure blob storage.
● Wrote ARM templates using JSON syntax to define the resource structure, properties, and dependencies. Implementing reusable and
parameterized templates to enable consistent and scalable deployments across different environments.
● Designed and automated infrastructure provisioning process using infrastructure-as-code (IOC)solutions and reduced repetitive work using
Terraform including providing flexibility over CloudFormation.
● Provided real-time metrics of dashboard trends, useful messages, and immediate notifications by using Grafana, and Prometheus.
● Written Ansible playbooks for Installing and configuring database servers such as MySQL.

CLOUD ENGINEER, Cisco, Durham, NC June 2017 – Dec 2017

● Worked on various Azure services like VNets, security groups, availability Zones, ExpressRoute, Virtual Machines, App Services, Azure
SQL, Azure Monitor, and Azure Resource Manager.
● Integrated Azure management tooling with Multiprotocol Label Switching (MPLS), involving spin-up and spin-down automation, and enabling
data from IoT devices to AWS cloud excluding VPN usage.
● Formulated Azure Web Application projects involving the upgradation and deployment of Web Jobs using Visual Studio, ASP.NET, GitHub,
and Azure Resource Manager (ARM).
● Operated Azure ExpressRoute to create a reliable and high-throughput connection from Azure to the On-premises data center.
● Developed, tested, migrated, provisioned, and deployed EC2/VMs instances, databases, App Services, networking, and Infrastructure
applying AWS CloudFormation Templates, and Infrastructure as Code (IaC).
● Designed and deployed a variety of applications using practically the whole AWS stack, including EC2, Route53, S3, RDS, SNS, SQS, and
LAMBDA, with a focus on high availability, fault tolerance, and auto-scaling in AWS cloud formation, including managing AWS cost,
performance, and equivalent scaling functions into EC2, VPC, ELB.
● Implemented Bitbucket with Jenkins & automated the development process via SCM polling, designed post-commit & pre-push hooks inside
Bitbucket repositories using Python.
● Executed Unix/Linux operating systems internals and administration like filesystems, inodes, and system calls, in conjunction with automated
patch deployment to Linux OS and third-party applications.
● Operated server migrations on both Linux/Unix and Windows servers, including moving all clients' and clients’ data, configuration settings,
scanning, and verifying everything is accurate with zero downtime.
● Deployed orchestrating Elastic stack modules on Kubernetes on Cloud platforms using Jenkins, Ansible, and Terraform.
● Integrated CloudWatch with other monitoring/ observability tools, like Grafana, to create comprehensive monitoring solutions.
● Creating custom CloudWatch metrics, setting up alarms based on predefined thresholds or custom conditions, and taking automated actions
when alarms are triggered, such as scaling resources or sending notifications.
● Defined CloudWatch event rules and targets to capture specific events and automate responses, such as invoking Lambda
functions, triggering notifications via SNS (Simple Notification Service), or integrating with other AWS services.
● Worked on packaging and deploying Lambda functions using AWS CLI (Command Line Interface).
● Managing Docker containers, and Kubernetes Clusters, and ensuring readiness, dependability, and performance of Container Platform and
operated AWS & RedHat Infrastructure design along with deploying and delivering operational assistance to design solutions.
● Applied Terraform for provisioning infrastructure automation to AWS and Azure cloud platforms, along with reliable and scalable cloud hosting
services like Elastic Compute Cloud (EC2), Auto Scaling Groups (ASGs), and Elastic Load Balancing (ELB).
● Analyzed EC2 instance performance, identifying performance bottlenecks, optimizing instance configurations, and implementing performance
tuning techniques.

BUILD & RELEASE ENGINEER, Axis Bank, India Nov 2014 – Nov 2015
● Built Multibranch Pipeline plugins within Jenkins to automatically build branches and further applied Stage View plugins to get a graphical
view of the pipeline platform/execution.
● Developed and delivered end-to-end endless integration of products in an agile environment using Puppet and Jenkins and automated
deployment, configured management key clusters.
● Created Groovy scripts to configure build Jobs & pipelines using Jenkins-designed master and slave configuration for executing multiple
parallel builds via build farm. Further, switched environments by deploying Maven and Gradle scripts as build tools in Jenkins.
● Designed branch and label strategies to retain the source code in the Git repository and contributed to the process of applying appropriate
branching and labeling conventions via Gi source control.
● Applied Python code in Git to pull individual reports from access reports through Rest APIs and configured through Jenkins.
● Developed deployment scripts, manifest templates, or other automation techniques to ensure consistent and reliable deployments across
environments.
● Configured Jenkins build jobs to compile, build, and package software applications or infrastructure components using build tools like Maven,
and Gradle.
● Automated testing frameworks and tools (such as Selenium) into Jenkins build jobs to run automated tests as part of the CI process.
● Utilized configuration management tools such as Ansible to automate server provisioning, and configuration changes, and ensure consistency
across multiple Linux systems.
● Leveraging Groovy scripts to process and transform data within your cloud environment. This can include tasks like parsing log files, extracting
relevant information, performing calculations, or generating reports.
● Installed and configured Visual Studio Code on your local development machine or remote servers, including extensions and plugins specific to
your cloud environment.

Linux Administrator, 4 Square Logic IT Solutions, India Jan 2013 – Sept 2014
● Supervised team in installing Linux Servers like RedHat and Centos Linux on virtual machines as well as on bare metal Installation.
● Configured, and maintained operating systems like Linux, Windows, etc., along with hosted servers, created user accounts, and set permissions
linked to user groups, directories, and ownership.
● Automated daily tasks such as log monitoring, and log rotation using Bash script and, file systems via LVM on Linux.
● Debugged, analyzed, and solved kernel and hardware driver compatibility issues by using Linux operating systems like Centos and RedHat.
● Developed shell scripts and automation workflows using Bash/ other scripting to streamline system administration tasks and improve efficiency.
● Configured network interfaces, IP addressing, DNS resolution, firewall rules, VPN connections, and securing network services like SSH, FTP, or
web servers on Linux servers.
● Reviewed and updated existing Bash scripts to adapt to changing system requirements, security updates, or operational changes.
● Managed script versions using version control systems like Git to maintain code integrity and facilitate collaboration.
CERTIFICATES
● Microsoft Certified: Azure Administrator Associate
● Microsoft Certified: DevOps Engineer Expert
● Designing and Implementing Microsoft DevOps Solutions
● AWS Certified Solutions Architect - Associate