
Subramani Sundaram
Verified Expert in Engineering
Azure DevOps Engineer and Developer
Abu Dhabi, United Arab Emirates
Toptal member since February 3, 2022
Subramani is a certified DevSecOps Architect, SRE, and cloud architect with 16+ years of experience architecting, automating, and optimizing mission-critical applications and deployments over large-scale infrastructures. His employers include Miral Experiences, P&G, Emirates Group, and DTCC. Subramani's expertise includes infrastructure and configuration management tools, CI/CD pipelines, cloud deployment, and managing projects, Scrum teams, technology environments, people, vendors, and assets.
Portfolio
Experience
- CI/CD Pipelines - 10 years
- Azure - 7 years
- Azure DevOps - 7 years
- DevSecOps - 6 years
- ITIL V3 Foundation Certified - 4 years
- Microsoft Certified Trainer - 4 years
- Site Reliability Engineering (SRE) - 4 years
Availability
Preferred Environment
Azure, Microsoft Purview, Microsoft Intune, Microsoft Teams, GAP Analysis, Azure Active Directory, Azure VDI, Data Loss Prevention (DLP)
The most amazing...
...concept I've worked on is DevOps as a service (DaaS), which includes the creation of CI/CD for any application, platform, cloud, industry, or project.
Work Experience
Head of Microsoft Security Services
CyberGate Defense
- Conducted a comprehensive gap analysis of the Office 365 environment, resulting in actionable insights, and proposed and implemented solutions to enhance user experience and security.
- Orchestrated the successful deployment of DLP policies in Microsoft Purview. Reduced data leakage incidents by proactively monitoring and fine-tuning DLP rules. Achieved compliance with industry standards and protected sensitive information.
- Investigated and mitigated security incidents promptly, minimizing the impact of threats. Maintained up-to-date threat intelligence and collaborated with incident response teams.
- Streamlined device management by configuring Intune policies. Resolved complex issues related to device enrollment, compliance, and app deployment.
Senior Azure Infrastructure Specialist
Farah Experiences
- Migrated Bamboo, Octopus, Nexus, and Bitbucket to Azure DevOps (AzDO) and securely onboarded new apps in ActiveX Data Objects (ADO). Implemented branching strategies and PR pipeline in ADO Git.
- Set up disaster recovery in active-active mode for critical applications to run in secondary regions if primary regions go down. Implemented Azure governance and policies company-wide.
- Implemented DevSecOps for all pipelines and Azure security at the enterprise level. Created new Azure dashboards and resolved assigned tickets as part of the project plan.
- Created blueprints for organizations, using Azure policies to replicate their environments if and when needed. Deployed applications in Azure web, function, and data apps.
- Performed a POC on mobile E2E DevOps using the Microsoft HockeyApp so that APK or IPA files reach to mobile automatically after the build and deployment. Created the Jira dashboards for reporting to senior management.
- Completed a POC on Docker image scanning using Aqua Security to scan custom-created Docker images and send them to the Azure Container Registry as part of the security standards.
- Implemented the Ansible script to create the new user for all 75 Windows and Unix virtual machines as part of the RBAC process.
- Configured tools, such as SonarQube and JaCoCo for code coverage and analysis and Jenkins to ensure that code passed quality gates. If not, the build would fail.
DevSecOps Lead
Procter & Gamble
- Configured SonarQube and Istanbul for code coverage and analysis and Azure DevOps to ensure code passed quality gates. If not, the build would fail.
- Managed the Azure Container Registry with all the project-created Docker images and versioned it for new builds. Deployed Azure Functions and Web Apps and verified if the deployment was successful after the build.
- Created the Azure Resource Manager (ARM) templates to provision the Azure environment and then deploy it via CI/CD pipeline. Created new Azure dashboards and resolved assigned tickets as part of the project plan.
- Implemented the Yelp security tool to detect secret management and Snyk for library scanning as part of the pipeline. Prepared the known error database (KEDB) and DevOps risk register as part of the process.
Senior DevOps Engineer
Emirates Group
- Migrated all new applications in Jenkins and Azure DevOps to form a CI/CD pipeline. Created new projects in Git and branches per the standard. Onboarded new applications into the CI/CD pipeline per the Emirates process.
- Performed a POC on mobile E2E DevOps using the Microsoft HockeyApp so that APK or IPA files reach to mobile automatically after the build and deployment.
- Implemented the Ansible script to create the new user for all 75 Windows and Unix virtual machines as part of the RBAC process. Used the Helm package manager for packaging the applications.
- Installed Kubernetes in the AWS environment for a development POC using Kubernetes Operations (Kops) to create clusters as needed and when deploying new applications.
Principal DevOps Engineer
Deevita Technologies
- Enforced the TFS branch policy to ensure that bug IDs were present and branch security to control access to the development branch at the project level. Migrated code from TFS to Git.
- Created a VSTS custom workflow template for bugs and tasks and upgraded TFS and VSTS from 2018 to 2018R1 to reduce downtime with minimal impact to existing projects and users.
- Set up release management approval as a measure for manual gates before releases to QA, UAT, and production to reduce the impact on live applications.
- Rearchitected the existing Azure resource group setup, resource cleanup, and subscription swapping when needed according to the proper standard. Implemented the blue-green deployment strategy for critical applications.
- Set up Active Directory and VPN in Windows 2016 Server for the entire office.
- Established new group policies to ensure compliance with HIPAA security rules and conducted sessions on security and password requirements.
Principal Software Engineer
DTCC
- Managed access to servers for QA and provided support for entitlements based on roles. Supported the Global Q6 and Portal Q6 websites. Commissioned and decommissioned environments based on requirements.
- Performed regular server health checks for availability and trade processing, such as JVM and MQ. Supported the QA teams during releases and provided reports using the ITR process.
- Created CQ tickets and messages for scheduled releases and coordinated completion with the WAS and Unix teams. Created RFCs for sudden or normal release changes.
- Collaborated with my team to manage alerts to the DBA team about reduced space on the Unix server and performed database cleanup based on our analysis and recommendations to the DBA team.
Experience
My Health Clinic
https://github.com/subu123321/AKS_DemoAzure DevOps Methodology Setup
Office 365 Implementation End-to-end for a Startup
• Identified functionality, security, compliance, or user experience gaps.
• Collaborated with stakeholders, proposed solutions, and documented findings.
• Bridged gaps to ensure a seamless and secure user experience.
• Defined data categories (e.g., PII, financial data) and monitored alerts to prevent data leaks.
• Worked with legal and compliance teams to ensure alignment with regulations.
• Deployed EDR agents and continuously monitored and investigated alerts.
• Responded swiftly to incidents, isolating compromised devices and removing threats to maintain a proactive defense against cyberattacks.
• Set up policies for enrollment, compliance, and app management.
• Troubleshoot issues, provided end-user support and collaborated with IT teams to ensure smooth Intune operations.
Education
Master's Degree in Cybersecurity
National Institute of Business Management - India
Bachelor's Degree in Information Technology
Anna University - Chennai, Tamil Nadu, India
High School Diploma in Computer Science
Sethu Bhaskara MHSS - Chennai, Tamil Nadu, India
Certifications
Microsoft Certified: Azure Solutions Architect Expert
Microsoft
Microsoft Certified: Azure Virtual Desktop Specialty
Microsoft
Microsoft Certified: Cybersecurity Architect Expert
Microsoft
Microsoft Certified Trainer
Microsoft
Microsoft Certified: DevOps Engineer Expert
Microsoft
Microsoft Certified: Azure Administrator Associate
Microsoft
Site Reliability Engineering (SRE) Practitioner
DevOps Institute
AWS Certified Cloud Practitioner
AWS
Microsoft Certified: Azure AI Fundamentals
Microsoft
Microsoft Certified: Azure Data Fundamentals
Microsoft
SAFe DevOps Practitioner
Scaled Agile, Inc.
DevOps Foundation Certified Trainer
DevOps Institute
ITIL v3 Foundation Specialist
Axelos
DevSecOps Foundation (DSOF)
DevOps Institute
Microsoft Certified: Azure Fundamentals
Microsoft
Skills
Tools
GitHub, Microsoft Intune, Microsoft Teams, Microsoft Power BI
Paradigms
DevSecOps, Azure DevOps, DevOps
Platforms
Azure, Amazon Web Services (AWS)
Storage
Azure Active Directory
Other
CI/CD Pipelines, Site Reliability Engineering (SRE), Microsoft Certified Trainer, ITIL V3 Foundation Certified, Strategic Planning, Office 365, Microsoft Purview, GAP Analysis, Azure VDI, Data Loss Prevention (DLP), Enterprise Cybersecurity, Cyber Defense
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring