Jamil Rashdi

All four landscapes for production and DR migrated across different phases with the least interruption to end users and achieved a 100% success rate for data migration, and delivered outstanding performance.

• Prepared the building block for building secure network infrastructure in Microsoft Azure cloud.
• Established seamless connectivity to connect wasl's on-prem data center to Azure public cloud to examine cloud capabilities and application migration.
• Adopted hybrid cloud to strike a balance between control, specialization, security, agility, elasticity, and scalability.

• Established the organization's digital workplace platform and enabled modern workplace transformation with accessibility from anywhere and anytime.
• Empowered employee collaboration using Microsoft Teams.
• Modern desktop management and readiness for BYOD.

Developed a SaaS cloud service, a ready-made platform, including application onboarding and initial setup requirements. Solutions can be easily scaled up with little time and effort. Similarly, solutions can be scaled down without wasting resources. Well-defined web services and accessibility are required to integrate SaaS with on-prem systems.

Reduced the infrastructure complexity of having multiple software and operations. Tape-free backup provides faster recovery and high retention by leveraging cloud tiers for long-term retention. Provided backup for new cloud-hosted applications (IaaS, PaaS, and SaaS).

• Dynamic connectivity to easy relocation for faster service restoration.
• Established seamless connectivity to connect wasl's on-prem data center to Azure public cloud to examine cloud capabilities and application migration.
• Highly secure and available connectivity using the internet to bring edge cloud to wasl's data center.

• Prepared the building block for building secure network infrastructure in Microsoft Azure cloud.
• Established seamless connectivity to connect wasl Asset Management Group's on-prem data center to Azure public cloud to examine cloud capabilities and application migration.
• Adopted a hybrid cloud to strike a balance between control, specialization, security, agility, elasticity, and scalability.

The AWS Landing Zone will provide a well-managed and governed platform to ensure uniformity across all operations of applications.

The objective of this SOW is to:
1. Set up the AWS multi-account:

Established AWS Multi-Account Landing Zone for a secure and reliable application hosting for C3. This will provide secure 24x7 access to their customers and administrators. The landing zone will provide segmented access to different types of workloads for external as well as internal users via the application firewall (Layer 7) and limit surface attacks to data behind the secure channels.

2. Set up a hybrid network between cloud and on-preminfrastructure:

Established the secure and continuous network between on-prem infrastructure and AWS Cloud using site-to-site VPN based on FortiGate technology to leverage existing investment and skills for better operational excellence.

3. Data Migration:

All existing S3 Data Buckets will be migrated to the New AWS multi-account, including AWS backup vault, to ensure data consistency for Modernized applications. Also includes all customers' configuration data, be required to run applications in the future state.

I have delivered many Microsoft 365 projects from On-Prem and deployed with E3 and E5 Licenses offering for enterprise from exchange servers and Lotus Notes Environment. The environment consists of 500-5000 users for different deployments.

This project was initiated to migrate an on-premiss application to a secure cloud platform. The proposed solution consisted of an Azure landing zone, multi-tier applications, and a private link to Azure SaaS offering.

I deployed and managed Google Compute Engine (GCE) instances for scalable hosting, designed autoscaling groups and managed instance groups (MIGs) for workload variations, and used Google Kubernetes Engine (GKE) for containerized deployment. I also integrated Cloud Functions and Cloud Run for event-driven, serverless computing.

I configured VPCs, subnets, and firewall rules to ensure secure and efficient network segmentation. I set up cloud load balancing (global and regional) to optimize traffic distribution across multiple regions. I implemented Cloud VPN and Interconnect for secure hybrid cloud connectivity and designed private networking solutions with Private Google Access, Cloud NAT, and Peering.

I managed IAM roles and permissions to enforce the principle of least privilege and implemented VPC Service Controls to restrict unauthorized access to sensitive data. I configured Cloud Armor (DDoS protection) and Security Command Center for advanced security monitoring and enforced compliance with customer-managed encryption keys (CMEK) and Cloud Identity-Aware Proxy (IAP).

I managed storage solutions and databases to optimize data access and security and ensure scalability and reliability across the infrastructure.