Software Engineer Cloud Security
Resume:
Mona Mishra
***.****.****@*****.***
linkedin.com/in/mona-mishra03
An accomplished Software Engineer with over thirteen years of work experience specializing predominantly in the areas of DevOps, Azure Cloud Engineering, Software Development and Project Management.
•Automating and managing software builds and releases of multiple products of global development teams
•Rich hands on in Azure Migration
•CI/CD pipeline implementation on Azure DevOps, GitLab, Jenkins
•Azure IaaS/PaaS/SaaS provision and automation using IaC - Terraform, Bicep and ARM Template to provision multiple environments
•Worked in a hybrid cloud environment including GCP, Azure, Oracle OCI, AWS and Alibaba cloud.
•Integrated Prisma on cloud for CSPM/CIEM security.
•Implemented and managed Prisma Cloud Security Posture Management (CSPM) tool to enhance cloud security, ensure compliance, and streamline risk detection across multi-cloud environments.
•Continuous monitoring of the cloud security and implementing solutions and remediations for alerts.
•Worked on setting up Hub Spoke architecture
•Worked to set up Azure Virtual Networks, DNS Zones, App/web services and private endpoints
•Implementing DMZ, Setup of WAF firewall, and API Gateways to secure public facing resources.
•Designed and implemented Azure Databricks solutions for big data processing, transformation, and analytics.
•Integrated Databricks with Azure Data Lake Storage (ADLS), SQL databases, and external APIs to enable seamless data flow
•Configured Azure key vault and key management policies.
•Worked to implement SSO and MFA.
•Perform security assessments and vulnerability scans
•Automate tasks using Runbooks and create utilities using PowerShell, Azure CLI, Shell Scripting and .net
•Skilled in creating and managing Azure DevOps Pipelines (YAML) and Jenkins Pipelines (YAML), significantly improving CI/CD processes.
•Streamlined Azure DevOps processes by replacing legacy pipelines with GitHub Actions, improving deployment speed and visibility.
•Implemented blue-green deployment strategies on Azure App Services and AKS to achieve zero-downtime releases and safe rollbacks.
•Automated blue-green deployment workflows with GitHub Actions, enabling controlled and reliable rollouts across staging and production environments.
•Well versed with Azure/OCI Networking- Load Balancer and Application Gateway
•Integrate code analysis – SonarQube, Checkov, Dependency-Track, StyleCop, FxCop
•Implement cloud best practices including High Availability, Disaster Recovery, Infrastructure and Application Security, Monitoring and Logging
•Automate creation of immutable images using Packer
•Created clusters, developed and managed them using Kubernetes(K8s) and (GKE) for different applications using terraform
•Skilled in containerization technologies like Docker and Kubernetes, with hands-on experience managing Azure Kubernetes Service (AKS). Deployed and orchestrated microservices architectures to enhance application scalability and resilience.
•Managed and contributed in Planning, Scheduling, Risk Management, Scope Management, Project Execution & Delivery and Reporting within the set timeline.
•Cohesive Team Player with Fast Learning Curve along with strong analytical, problem solving, innovation, planning, organizational, communication & interpersonal skills
SKILL SET
Source Control Repository:
GIT – Bitbucket, GitLab & GitHub, Azure DevOps
Cloud Platform:
Microsoft Azure, OCI, Ali Cloud, GCP
IaC:
Terraform,Bicep, ARM Template
Scripting Technologies:
Python, Perl, Powershell, Shell, Groovy
VM Imaging:
Packer
Containerization & Orchestration:
Docker, Kubernetes, AKS, Helm chart
Languages:
C#, ASP.Net, Java, PL/SQL, HTML, JavaScript
Build Tools:
Jenkins, Azure DevOps, GitLab Pipeline
Code Analysis Tools:
SonarQube, Checkov, Dependency-Track, StyleCop and FxCop
Presentation Logic:
XML, JSON, HTML, YAML
Database:
Oracle, MongoDB, MySQL, SQL Server
Security:
Prisma
Operating System:
Windows, Unix, RHEL
Development Methods:
Agile, Waterfall Model
Certifications:
Microsoft Certified: Azure Administrator Associate
Academic qualification
Online Master of Science in Computer Science at Georgia Tech University, Atlanta, GA, USA, completed parallelly while working on H1B.
Bachelor of Technology in Computer Science & Engineering from Amrita School of Engineering, Bengaluru Campus, Amrita Vishwa Vidyapeetham University in 2008, India.
PROFESSIONAL EXPERIENCE
H-Town Technologies Inc.
Client – Wells Fargo, Remote
May 2024 - Current as DevOps and Cloud Engineer Lead
Wells Fargo is a financial services company with a significant global presence and has its IT solutions in major cloud service providers like MS Azure and Google Cloud.
Worked on migrating the webApps from onPrem to Azure Cloud and setting up CI/CD pipelines for applications. Automated deployment pipelines for Azure resources using Bicep, terraform, ARM templates integrated with Azure DevOps and GitHub Actions. Worked on deploying and managing applications on Google Kubernetes Engine (GKE) using Kubernetes best practices for scalability and reliability.
Details
•Setup CI/CD Pipeline on Azure DevOps for various applications using YAML
•Implemented Azure Networking by deploying VNets, Subnets, Load Balancers, NSG Rules, RouteTables, Firewalls and Endpoints, Managing Key Vaults, Azure Monitoring, Log Analytics, Alerts
•Automated infrastructure provisioning with Terraform and Google Cloud SDK for seamless environment setup on GCP
•Deployed and managed production workloads on GKE, configuring node pools, autoscaling, and workload affinity for optimal resource utilization.
•Designed Kubernetes networking solutions including ingress controllers (NGINX, GKE Ingress), NetworkPolicies, and internal/external load balancers to securely expose services.
•Developed modular Terraform templates to standardize resource provisioning across multiple projects, improving consistency and reducing deployment times. Ensured templates adhered to Azure policies and governance standards to maintain compliance.
•Implemented Ansible playbooks to automate configuration management and deployment tasks, reducing manual effort and increasing deployment speed.
•Developed and deployed API gateway solutions to centralize and secure traffic between applications and backend services.
•Collaborated with network and security teams to fine-tune load balancer configurations, reducing latency and improving response times while ensuring robust security controls.
•Monitor resources using Azure monitor and Insights and perform remediations
•Developed Azure Automation Runbooks using Powershell
•Designed, developed, and deployed serverless applications using Azure Functions, reducing infrastructure overhead and improving scalability.
•Created Load Balancers /Application Gateways
•Setting up Kubernetes clusters and managing services, ingress, and deployments for scalable, containerized applications.
•Creating and managing Helm charts for deploying applications into Kubernetes clusters with customized configurations.
•Troubleshoot various cloud networking issues
Tools
Azure Cloud
Azure DevOps
GCP Cloud
Kubernetes
Jenkins
Ansible
H-Town Technologies Inc.
Client – Cordis Corp, Remote
Juy 2022 - April 2024 as Cloud Engineer Lead
Cordis Corp is a Miami based medical manufacture Company and has its IT solutions in all major cloud service providers like GCP, OCI,Azure, Alibaba and AWS with Multi-cloud and Hybrid Cloud architecture.
Working as the admin for Azure/GCP/OCI Cloud handling the entire Cloud architecture(Hub-Spoke) including setting up Virtual networks, endpoints, DNS setup,along with Prisma security.. Also, admin for oracle cloud OCI and Ali Baba Cloud architecture and deployments.
Setup CI/CD Pipeline on Azure DevOps for various applications.
Details
•Define cloud network architecture
•Setup CI/CD Pipeline on Azure DevOps for various the applications using YAML
•Implemented Azure/OCI/GCP Networking by deploying VNets, Subnets, Load Balancers, NSG Rules, RouteTables, Firewalls and Endpoints, Managing Key Vaults, and also monitoring tools like Azure Monitoring, Log Analytics, Alerts, Grafana, Prometheus.
•Active Directory (on premises and Azure AD)
•Developed Terraform scripts and reusable modules to deploy various kinds of IaaS, PaaS and SaaS resources on GCP/OCI/Azure for Dev, QA, Perf and Prod environments
•Migrated Databases from on-prem to Azure using Azure Migration Service.
•Designed and implemented Azure Databricks solutions for big data processing, transformation, and analytics.
•Integrated Databricks with Azure Data Lake Storage (ADLS), SQL databases, and external APIs to enable seamless data flow
•Deployed and managed OCI Compute, Block Storage, Object Storage, and Networking services for cloud-hosted applications.
•Configured OCI Identity and Access Management (IAM) with fine-grained policies, multi-factor authentication (MFA), and least privilege access controls to ensure secure authentication and authorization.
•Deployed and managed production workloads on GKE, configuring node pools, autoscaling, and workload affinity for optimal resource utilization.
•Designed Kubernetes networking solutions including ingress controllers (NGINX, GKE Ingress), NetworkPolicies, and internal/external load balancers to securely expose services.
•Configured persistent storage in Kubernetes using GCP Persistent Disks, Filestore CSI drivers, and dynamic volume provisioning with StorageClasses.
•Configured Network Security Groups (NSGs) and Security Lists to control inbound and outbound traffic to OCI resources.
•Automated cloud infrastructure provisioning using Terraform with OCI Resource Manager.
•Optimized OCI cost and performance by selecting appropriate compute shapes and storage tiers.
•Implemented OCI Load Balancer and Traffic Management for high availability and disaster recovery.
•Configured Oracle Autonomous Database (ADB, ATP, ADW) for secure and optimized data management.
•Integrated OCI API Gateway with Oracle Functions for serverless computing and secure API management.
•Monitored and troubleshot OCI resources using OCI Logging, Monitoring, and Alerts.
•Deployed microservices onto GKE cluster using yaml files.
•Developed Docker images, Helm Charts, Config maps, endpoints.
•Automated deployment of databases like MySQL, Azure SQL Server using GRS strategy for geo-replication backups.
•Implementing DMZ, Setup of WAF firewall, and application Gateways to secure public facing resources
•Setup SDWANs, Firewalls and switches as virtual appliances
•Setup Application Gateways and Load Balancers
•Monitor resources using Azure monitor and Prisma and perform remediation
•Deployed and optimized Prisma Cloud CSPM to detect and remediate misconfigured IAM roles with excessive privileges, reducing security risks and improving adherence to least-privilege principles.
•Configured Prisma Cloud CSPM to monitor Kubernetes clusters, identifying unauthorized container access attempts, filtering out false positives, and enforcing security policies to prevent lateral movement within cloud environments.
•Utilized Prisma Cloud CSPM to detect and mitigate publicly exposed Azure Blob storage containers, preventing potential data breaches and ensuring compliance with GDPR and SOC 2 regulations.
•Leveraged Prisma Cloud CSPM to detect and mitigate publicly exposed Azure SQL databases, enforcing encryption policies and network access restrictions to prevent unauthorized access and ensure regulatory compliance.
Leveraged Prisma Cloud CSPM’s risk-based alerting to differentiate genuine security threats from false positives, enabling the security team to reduce incident response time by 30% and focus on high-priority vulnerabilities.
•Work on the compliance standards defined by CIS benchmark, NIST, CSA STAR.
•Developed Azure Automation Runbooks using Powershell
•Set up Azure AVD (azure Virtual Desktops) using terraform
•Automated creation of immutable VM images using Packer and their uploads to Azure Shared Image Gallery
•Migrated more than 40 Servers both Windows and Linux from on-prem to Azure using Azure Migration Service.
•Developed Terraform reusable modules to deploy various kinds of IaaS and PaaS resources in Azure for Dev, QA, Perf and Prod environments
•Created Load Balancers /Application Gateways in both oracle and azure cloud.
•Troubleshoot various cloud networking issues in both Azure and Oracle cloud.
•Troubleshoot build and deploy issues in various environments and different Clouds
•Managing source code branching and release pipeline using ADO
•Worked on other cloud deployments – OCI,GCP,Azure and Alibaba Clouds
•Implemented Prisma Cloud Security (CSPM/CWP/CIEM/SIEM) Integration with Azure and OCI
•Worked on Prisma cloud setting up monitors, alerts based on company standards and policy
Tools
Azure Cloud
GCP
Oracle Cloud OCI
Ali Cloud
Prisma Cloud
Jenkins
H-Town Technologies Inc.
Client - Ernst & Young, Remote
Nov 2021 - June 2022 as DevOps/ Azure Cloud Engineer
Details
•Automating pipeline to build and deploy artifacts to Azure Resources.
•Performed Azure Networking by deploying VNets, Subnets, Load Balancers, NSG Rules, Route Tables, ASG, ACL, Firewalls and Endpoint networking
•Developed Azure Automation Runbooks using Powershell
•Automated creation of immutable VM images using Packer and their uploads to Azure Shared Image Gallery
•Define cloud network architecture, and addition of any new feature.
•Developed azure ARM templates and reusable modules to deploy various kinds of IaaS and PaaS resources on Azure for Dev, QA, Perf and Prod environments
•Automated Tagging and branching of pipelines
•Developed several utilities using Powershell like automation of tagging and branching of pipelines.
•Troubleshoot build and deploy issues in various environments
•Managing source code branching and release pipeline using ADO
Tools
Azure Cloud
HAL, Aircraft Division (Bangalore, India)
Dec 2013 – Feb 2019 as Tech Lead
•Working with application teams to understand their current on-prem infrastructure setup. Preparing migration Architecture, cost estimation on Azure and migration approach. Working with Security architects to get approvals for Azure architecture.
•Define cloud network architecture.
•Set up CI/CD pipelines for .Net core microservices on Jenkins using Groovy scripting for Jenkinsfile.
•Setup code quality using SonarQube and integrated with Jenkins CI system.
•Automated merging of code between branches in GIT using Power shell scripting.
•Set up CI builds.
•Obfuscation of build binaries using Dotfuscator as part of build automation.
•Automated Continuous Deployment of build web package to target environments.
•Documented CM Plan and Build Process documents.
•Responsible for end-to-end development from requirement analysis to system study, designing, coding, testing, debugging the problem, Integration and acceptance from customer.
•Designing, architecture and maintaining of web portals and oracle database.
•Running scrums, mentor juniors in the team, delegate tasks, attend meetings with stakeholders.
Projects:
Project
CI/CD Setup and Azure Migration
Details
•Setup CI/CD pipeline for .Net projects.
•Preparing migration Architecture, cost estimation on Azure and migration approach. Working with Security architects to get approvals for Azure architecture.
•Define cloud network architecture
•Wrote ARM Templates for deploying Azure Batch Service
•Automated creation of immutable VM images using Packer and their uploads to Azure Shared Image Gallery using Terraform
•Performed end to end migration of infrastructure resources from On-Prem datacenter to Azure cloud implementing fully automated deployment of Virtual Machine Scale Set, Availability Set, Load Balancer, Keyvault, Storage Account, File Share, Azure Batch, Application Gateway, WebApp
•Migrated Databases from on-prem to Azure using Azure Database Migration Service.
Tools
Azure Cloud
Team Size
8
Project
Single Sign on web Portal
Details
•Automated the full build from scratch. Created CI/CD pipeline for projects.
•Login to multiple portals by a single time authentication by user.
•Web portals include Payroll, HR and Attendance Management, Leave Application, Over Time Application with 3 levels of Approval, Online Visitor Pass, and Provident Fund Processing.
Technology
ASP.net, PowerShell
Database
Oracle
Tools
Visual Studio, GitHub
Team Size
8
Project
Skill Development Web Portal
Details
•Designed and developed a web portal to incorporate employees Personal Development Plan with continuous assessment and improvement system for the organization.
•Skill mapping, analysis of skill gap and identifying required trainings. Automated the full build from scratch.
•Creation and publishing of NuGet packages.
•Automated Continuous Deployment of build web package to target environments.
Technology
ASP.net, PowerShell
Database
Oracle
Tools
Visual Studio, GitHub
Team Size
8
Nokia Siemens Networks ( Bangalore, India)
Dec. 2008 – Dec 2013 as R&D Engineer
Roles/Responsibilities:
•Software development Methodology followed – Agile Methodology using SCRUM
•Requirements Analysis – Gathering customer requirements from the product owner and preparing for the development of the feature mentioned in the product backlog in each sprint.
•Design – The requirements are validated from technical stand point and prototypes were built to check the technical feasibility for the development of the feature.
•Coding and unit testing – Development and unit testing of committed features using core java.
•Production support – Involved in product support activity to make the product go smoothly. It requires having in-depth knowledge each product that we offer.
•Technical documentation – Writing the documents for the feature like Administrative guide, Troubleshooting guide, Test cases document.
•Integration testing - Perform the testing by integrating with other modules of the application to verify the behavior of the entire application.
•Bug fixing – Fixing the bugs raised by integration testing team and end-to-end testing team.
•Mentoring – Training the new resources in the team and giving guidance.
Projects:
Project
Liferay Portlet – CEI
Environment
Windows/Red Hat Linux
Details
Customer Experience Index (CEI) is a CEM on Demand content pack that enables the CSP to understand “customer experience” from the subscribers’ point of view.
Technology
J2EE (Servlets, JSP, HTML, CSS) Core Java, Struts2, Liferay
Database
Oracle
Tools
Eclipse Indigo, SQL Developer, Tortoise SVN
Project
Traffica
Environment
Windows/Red Hat Linux
Details
Traffica is a real time traffic monitoring and analysis tool for multi-technology, multi-vendor networks.Traffica provides real-time visibility over the end-users activity and service usage, in the whole network or down to cell level.
Technology
J2EE (Servlets, JSP, HTML, CSS)
Database
Oracle
Tools
Eclipse IDE, SQL Developer, Tortoise SVN
Achievements
Received Best Officer Award at HAL in 2017.
Contact this candidate