Home

Ayaz Khan - Cloud Engineer SRE

[email protected]

Location: Chicago, Illinois, USA

Relocation:

Visa: USC

Resume file: Ayaz_Khan ResumeC2C_1790793639940.docx Please check the file(s) for viruses. Files are checked manually and then made available for download.

AYAZ ALI KHAN [email protected] | +1 510-956-5650 PROFESSIONAL SUMMARY Senior Cloud SRE with over 10+ years of hands on experience maintaining enterprise Linux systems, multi cloud platforms, and containerized microservices. Provisioned and administered multi cloud infrastructure environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP). Built and managed production Kubernetes clusters across Amazon EKS, Azure AKS, Google GKE, and Red Hat OpenShift using Docker, Helm charts, and Istio service mesh. Automated end to end cloud provisioning and system configurations using Terraform, Terraform Enterprise, Ansible playbooks, and ARM templates. Built automated continuous integration and GitOps delivery pipelines using ArgoCD, GitHub Actions, GitLab CI, Azure DevOps, and Jenkins. Implemented full stack observability, logging, and SLI/SLO tracking using Prometheus, Grafana, Datadog, OpenTelemetry, Splunk, and ELK Stack. Developed operational automation tools, infrastructure validations, and custom scripts using Python, Go, Bash, PowerShell, Terratest, and PyTest. Configured hybrid cloud networking, secure transit architectures, Azure ExpressRoute, VPC/VNet peering, and IAM/RBAC access controls. Deployed and scaled high performance compute environments utilizing NVIDIA GPU node pools, Triton Inference Server, and Karpenter autoscaling. Maintained enterprise operating systems (RHEL, CentOS, Ubuntu, Windows Server), executing kernel tuning, vulnerability patching, and production incident postmortems. TECHNICAL SKILLS: CATEGORY TOOLS & TECHNOLOGIES Cloud Platforms AWS, Microsoft Azure, Google Cloud Platform (GCP) Containers & Orchestration Kubernetes, Docker, Amazon EKS, Azure AKS, Google GKE, RH OpenShift, Helm, Istio Service Mesh Infrastructure as Code Terraform, Terraform Enterprise, Ansible, ARM Templates, Chef, Puppet CI/CD & Version Control GitHub Actions, GitLab CI/CD, Azure DevOps, Jenkins, ArgoCD, Git, SVN, Maven Observability & Monitoring Prometheus, Grafana, Datadog, OpenTelemetry, ELK, Splunk, AWS CloudWatch, Azure Monitor, Nagios OS & Virtualization RHEL, CentOS, Ubuntu, Windows Server, VMware ESXi, CoreOS Scripting & Programming Python, Bash, Go, PowerShell, Perl, SQL Networking & Cloud Security VPC/VNet, Azure ExpressRoute, Transit Gateway, Route 53, DNS, Azure Key Vault, IAM, SonarQube Testing & Reliability Terratest, PyTest, Apache JMeter, Chaos Mesh PROFESSIONAL EXPERIENCE: Applied Materials | Santa Clara, CA Sr Cloud Engineer/SRE Jan 2025 Present Maintained multi region AKS and GKE clusters hosting critical services, achieving 99.95% infrastructure uptime across enterprise environments. Automated multi cloud Azure and GCP resource provisioning using modular Terraform Enterprise templates integrated with policy as code guardrails. Implemented declarative ArgoCD GitOps pipelines to synchronize Helm charts and Kubernetes manifests across staging and production clusters. Configured Istio service mesh mTLS, traffic splitting, and ingress gateways across hybrid Azure ExpressRoute and interconnect networks. Integrated OpenTelemetry SDKs into microservices, streaming distributed traces and system performance metrics directly to Datadog. Defined Prometheus SLI and SLO alerting rules with Grafana dashboards to monitor latency, error rates, and cluster saturation. Configured Karpenter and native cluster autoscalers to dynamically provision node groups during heavy computational workload spikes. Developed custom Go based Kubernetes controllers to automate health checks and node draining during routine OS upgrade cycles. Executed Chaos Mesh experiments in staging to validate Kubernetes failover mechanisms and test pod disruption budget tolerances. Automated infrastructure validation tests using Terratest and Python scripts embedded into GitHub Actions pull request validation workflows. Upgraded RHEL and CoreOS node images across clusters using automated rolling updates to eliminate application service interruptions. Provisioned specialized GPU node pools on AKS to host high performance model inference APIs with Triton server endpoints. Troubleshot inter pod networking bottlenecks and CoreDNS latency issues across large AKS clusters running high concurrency microservices. Implemented Azure RBAC, Kubernetes ServiceAccounts, and GCP IAM policies to enforce least privilege access across cloud platforms. Configured Azure ExpressRoute circuits, virtual network peerings, and private DNS zones to secure internal cross cloud communication. Built automated Python and Bash maintenance scripts to remediate memory pressure alerts and recycle degraded Kubernetes daemonsets. Migrated on premises batch computation workloads to containerized Azure Kubernetes services using customized Docker base runtime images. Optimized Kubernetes pod resource requests and limits across production namespaces, reducing cluster compute overhead and memory thrashing. Validated Helm chart parameter schemas and Kubernetes security policies in GitHub Actions CI pipelines before release rollouts. Documented operational runbooks, disaster recovery steps, and blameless incident postmortems in Confluence for on call rotation support. Adobe | Chicago, IL Cloud DevOps Engineer Oct 2023 Jan 2025 Built and maintained enterprise AWS EKS container platforms hosting SaaS microservices across multi account production environments with 99.9% availability. Developed reusable Terraform modules to automate standardized AWS VPCs, subnets, Transit Gateways, and IAM roles across enterprise application teams. Built centralized GitLab CI/CD pipelines and Jenkins shared libraries, reducing developer deployment cycle times by 40% across staging environments. Deployed containerized microservices onto AWS EKS using Helm charts, configuring horizontal pod autoscaling based on custom traffic metrics. Configured AWS Route 53 DNS routing policies, private hosted zones, and Transit Gateway attachments for secure multi VPC cross account communication. Integrated SonarQube static code analysis gates into GitLab pipelines, enforcing code quality and vulnerability scanning before production merges. Automated routine AWS AMI cleanup and snapshot lifecycle policies using custom Python Boto3 scripts scheduled via serverless events. Built Grafana dashboards and CloudWatch alarms to track microservice request latency, node CPU utilization, and container memory thresholds. Configured Fluent Bit log forwarders on EKS worker nodes to aggregate application and cluster logs directly into Splunk. Migrated on premises VMware virtual machines to AWS EC2 Nitro instances, minimizing production cutover downtime and network disruption. Maintained Ansible playbooks to standardize RHEL and Ubuntu base configurations, user permissions, and security hardening benchmarks across environments. Deployed Milvus vector databases on EKS clusters to support semantic search indexing and low latency internal retrieval augmented generation workloads. Implemented automated pipeline tests using shUnit2 and PyTest to validate infrastructure deployment parameters before executing production Terraform applies. Troubleshot and resolved AWS EKS node group capacity exhaustion, optimizing container resource reservations and pod disruption budgets. Configured AWS IAM roles for service accounts, restricting pod level cloud resource access and enforcing the principle of least privilege. Patched RHEL and Ubuntu EC2 instances systematically using AWS Systems Manager, ensuring compliance with enterprise monthly security patch baselines. Humana | Louisville, KY Cloud Automation Engineer May 2022 Sep 2023 Built enterprise Azure infrastructure automation pipelines, supporting secure healthcare microservices and core clinical applications across hybrid cloud environments. Developed modular Azure Resource Manager templates to provision standardized VNets, subnets, Network Security Groups, and storage accounts reliably. Built multi stage Azure DevOps YAML release pipelines for automated build, testing, and deployment of containerized Azure App Services. Automated Windows Server and RHEL baseline configuration management using Ansible playbooks, standardizing OS hardening across enterprise virtual machines. Configured Azure ExpressRoute circuits and hub spoke virtual network peering to maintain low latency connectivity between on premises data centers and Azure. Migrated on premises relational SQL Server databases to cloud hosted Snowflake data warehouses, executing automated schema transformations and data validations. Deployed event driven Azure Functions in Python to automate log parsing, backup validation, and incident notifications across cloud environments. Implemented automated data masking scripts in Azure Data Factory pipelines to sanitize sensitive protected health information before staging processing. Configured Azure Monitor alerts and Log Analytics workspaces to detect infrastructure anomalies and track virtual machine performance metrics. Automated end to end infrastructure smoke testing using PowerShell and Python scripts integrated into post deployment Azure DevOps release stages. Integrated Azure Key Vault with Azure DevOps pipelines to manage application secrets, certificates, and API tokens securely without hardcoding. Maintained custom Docker base images in Azure Container Registry, ensuring vulnerability free deployment images for application development teams. Patched enterprise Windows Server and RHEL virtual machines through automated Azure Update Management schedules, maintaining strict HIPAA compliance. Troubleshot hybrid network connectivity issues, broken pipeline tasks, and storage permission errors across production healthcare cloud applications. Documented disaster recovery runbooks, SOC2/HIPAA audit evidence, and standard infrastructure change procedures within JIRA and internal knowledge bases. Memorial Sloan Kettering Cancer Center | New York, NY DevOps Engineer Mar 2021 Apr 2022 Deployed and maintained AWS infrastructure and OpenShift container clusters to support high throughput genomic data pipelines and clinical research applications. Automated server provisioning and system configurations across CentOS and Ubuntu compute nodes using modular Chef cookbooks and Puppet manifests. Configured distributed Jenkins master worker architectures on AWS EC2 instances, automating multi branch builds for Java Maven and Python microservices. Deployed containerized analytical microservices onto Red Hat OpenShift clusters, configuring persistent storage volumes for high volume research datasets. Migrated on premises clinical workloads to AWS VPC infrastructure, configuring secure subnets, security groups, and route tables for network isolation. Implemented centralized Elasticsearch, Logstash, and Kibana logging pipelines to aggregate container logs and debug clinical application transaction errors. Monitored distributed compute nodes and memory utilization using Datadog agents and Nagios alerts, ensuring uninterrupted genomic sequence processing. Developed custom Python and Bash automation scripts to schedule batch genomic processing jobs and manage AWS S3 dataset archival. Executed automated load and stress testing using Apache JMeter to identify microservice performance bottlenecks under heavy clinical request spikes. Configured high throughput batch compute pools to orchestrate machine learning data processing for unstructured clinical notes and biomedical text. Hardened CentOS and Ubuntu operating systems against security vulnerabilities, implementing automated patch cycles across hybrid virtual and bare metal environments. Saint Paul University Systems Engineer Sep 2019 Feb 2021 Maintained enterprise-wide hybrid IT infrastructure across VMware ESXi hosts, Windows Server environments, and Red Hat Enterprise Linux systems. Configured and provisioned virtual machines across VMware ESXi clusters, optimizing CPU and memory resource allocations for production workloads. Automated user access management and security group policies across Active Directory domains using custom PowerShell administration scripts. Migrated legacy file shares and enterprise databases to high-availability SAN storage arrays with zero data loss. Deployed enterprise software updates and operating system patches across Windows and Linux servers using SCCM and Red Hat Satellite. Configured Jenkins build jobs to automate routine software builds and internal web application staging deployments. Implemented SolarWinds monitoring and Syslog forwarding rules to track server health, interface status, and network outages. Configured network VLANs, subnet routing, and firewall port rules to isolate secure corporate systems from guest and public network traffic. Built dedicated Linux high-performance computing environments to support large-scale analytical datasets and complex data modeling workflows. Documented disaster recovery procedures, network Visio topologies, and ITIL asset management records for infrastructure compliance audits. Capgemini | Chicago, IL Linux System Administrator Mar 2016 Aug 2019 Maintained multi tier enterprise Linux hosting environments across bare metal servers and virtual machines running RHEL and CentOS. Automated bare metal operating system installations using PXE boot and Red Hat Kickstart configuration profiles across distributed data centers. Configured and tuned Apache HTTP and Apache Tomcat application servers hosting multi tier enterprise web platforms with high concurrency. Managed enterprise NFS mounts, Samba file shares, and local IPTables firewall rules to ensure secure internal network communication. Developed Bash and Perl automation scripts to execute system health checks, log rotation, and scheduled database backups. Monitored server health, disk utilization, and CPU bottlenecks using Nagios Core and System Activity Report utilities. Patched RHEL kernels and resolved memory leaks, socket exhaustion, and filesystem errors across client hosting environments. Maintained Subversion repositories and executed scheduled production software deployments aligned with ITIL change management procedures in ServiceNow. EDUCATION Bachelors in Computer Science from Osmania University, 2015 Keywords: continuous integration continuous deployment sthree information technology golang California Illinois Kentucky New York