Asim Abdelgadir - DevSecOps architect/engineer,

Feedback from Asim’s ex-colleagues

Let me see

Keep in touch with meI'm using Intch to connect with new people. Use this link to open chat with me via Intch app

Work Background

Principal Financial GroupDevOps Engineer

Jun. 2021 - Mar. 2022Iowa, United States• Cloud Security Posture Management (CSPM), cloud infrastructure vulnerability management, monitoring, remediation, policy management and reporting using Palo Alto’s Prisma • Design and implement custom security applications integrated with Prisma API (Python, Bash, MS SQL). • Task and process automation, identify and reduce toil (Python, Bash, AWS Services) • AWS Infrastructure provisioning and management (Terraform, Ansible Tower, AWS Cloud Formation). • Application deployment and CICD Pipeline design and implementation (GitHub, Jenkins). • Prisma alerts trend analysis, root cause analysis, and insight/KPI reporting. • Maintain proper documentation of: Processes, Architecture Diagrams, Applications, Playbooks, Runbooks, SOPs for both end users and engineers. • Involved in periodic Prisma policy review, the review involves adding, removing, or enhancing Prisma policies, to ensure these policies meet our security demands while trying to be accommodative to our developers and users. (Prisma RQL, Mapping NIST 800-53 Controls) • Troubleshoot incidents, conduct root cause analysis, and recommend long term resolutions. • Application and infrastructure support, working closely with engineers and end users and maintaining proper communication.

NomuraCloud Operations Engineer

Apr. 2020 - Jun. 2021New York, United States• Task and process automation, identify and reduce toil (Python, Bash, AWS Lambda.) • AWS Infrastructure provisioning and management (Terraform, Ansible Tower, AWS Cloud Formation). • Cost monitoring via instance reservation and infrastructure monitoring. • Infrastructure and application monitoring. • AWS cloud security monitoring via Palo Alto’s Prisma Cloud. • Prisma alerts trend analysis, root cause analysis, alert management, reporting and long-term resolution. • Built a python application to manage AWS accounts on Prisma, the application utilizes Prisma API, the application authenticates using LDAP, it can onboard accounts, manage account group, run bulk operations such as renaming accounts and get account status, and report on accounts that are not onboarded in Prisma by utilizing AWS organizations account list. • Wrote detailed SOPs and run books on how to manage and address Prisma alerts and worked closely with the security team on remediation. • Involved in periodic Prisma policy review, the review involves adding, removing or enhancing Prisma policies, to ensure these policies meet our security demands while trying to be accommodative to our AWS cloud users. • Constant engagement and interaction with AWS cloud users whenever Prisma alerts are triggered to generate security awareness and education. • Maintain proper documentation of: Cloud Ops processes, Security processes, architecture diagrams, playbooks, runbooks, SOPs for both end users and engineers. • Troubleshoot incidents, conduct root cause analysis and recommend long term resolutions. • Application and infrastructure support, working closely with engineers and end users. • Utilized AWS organization, DynamoDB and AWS Lambda to create and maintain an AWS Account Information table which allows other scripts and automation systems to fetch persistent AWS account information in the table, this table helped us keep track of accounts that are not in Prisma to name a use case.

The Madison Square Garden CompanyDevOps Engineer

Jan. 2019 - Apr. 2020New York City, 10001 NY• Kept our cost in check by utilizing instance reservation and infrastructure cost monitoring (AWS Reserved Instances, Cost Explorer, CloudWatch Alerts). • Secured access to our AWS cloud infrastructure by Implementing AWS SSO via Azure AD, including IAM policy and permission design and implementation across multiple teams and multiple AWS accounts. (AWS Organization, IAM, Terraform) • Automated the migration of our WPengine websites to AWS, this saved us 4-5 hours for each websites, the automation utilized (Ansible, Python, Bash and AWS Lambda, Terraform). • Automated patching our EC2s using AWS RDS, Lambda (Python) and Slack. • AWS Infrastructure provisioning and management (Terraform, AWS) • CI/CD Pipeline Management (Jenkins, Python, Bash) • System Administration: Servers patching and backup, via automated weekly SSM Jobs, also includes reporting and alerting. (Bash and Python Scripting, Tenable, Linux, AWS IAM Roles, AWS SNS). • Application Deployments (Jenkins, Terraform, Docker, AWS ESC). • Domain and SSL Certificate Management: Transfer, Registration, and hosted zone setup for domains, SSL Certificate Installation, Domain protection via CAA records. (Mark Monitor, DNS, AWS Route 53). • Infrastructure and application monitoring: Participation on weekly on-call rotation using AppDynamics and AWS CloudWatch for insight regarding metrics alerts. (AppDynamics, AWS CloudWatch, AWS CloudTrail, VictorOps). • Level 1 and 2 production support, incident/ticket management. (Zendesk). • Ensured proper and fast task handover by maintaining proper documentation of processes, architecture diagrams, playbooks, how-tos, SOPs and incidents for both end users and engineers. • Troubleshoot incidents, conduct root cause analysis and recommend long term resolutions. • Application and infrastructure support, working closely with engineers and end users.

The Madison Square Garden CompanyProduction Support Analyst and Devops

Jan. 2018 - Dec. 2018Greater New York City Area• System Administration: Servers patching and backup, via automated weekly SSM Jobs, also includes reporting and alerting. (Bash and Python Scripting, Tenable, Linux, AWS IAM Roles, AWS SNS). • Application deployments using Jenkins. • Cost monitoring via instance reservation and infrastructure monitoring (AWS Reserved Instances, Cost Explorer, CloudWatch Alerts). • Domain and SSL Certificate Management: Transfer, Registration, and hosted zone setup for domains, SSL Certificate Installation, Domain protection via CAA records. (Mark Monitor, DNS, AWS Route 53). • Infrastructure and application monitoring: Participation on weekly on-call rotation using AppDynamics and AWS CloudWatch for insight regarding metrics alerts. (AppDynamics, AWS CloudWatch, AWS CloudTrail, VictorOps). • Level 1 and 2 production support, incident/ticket management. (Zendesk). • Maintain proper documentation of processes, architecture diagrams, playbooks, how-tos, SOPs and incidents.

The Madison Square Garden CompanyProduction Support Analyst

Nov. 2015 - Dec. 2017Greater New York City Area• Level 1 and 2 production support, application monitoring, incident/ticket management. (Zendesk, New Relic). • Maintain proper documentation of processes, architecture diagrams, playbooks, how-tos, SOPs and incidents. • System administration (AWS EC2s). • Assisted with manual QA testing and smoke testing when required.

Omnigon Communications LLCTechnical Support Analyst

Mar. 2015 - Nov. 2015New York City, 10001 NYResponsibilities: - Respond to internal and external client tickets/issues via Zendesk, perform troubleshooting and triage, and ultimately resolve or escalate ticket. - Acquire and maintain relevant knowledge of offered products (websites, mobile apps) - Monitor all relevant internal and external systems using New Relic, Pingdom, StatusCake, Bamboo, Chartbeat and other monitoring tools, and report incidents based on SOPs - Maintain support processes (SOPs) and tracking system Technical Exposure: Client Management: Zendesk Project / Task Management: JIRA, Stash, Basecamp Software development Languages: VB.Net, HTML, CSS, VSTO (Visual Studio Tool for Office), MS SQL, MS Access Documentation / SOP: Confluence Quality Assurance: JAMA IDEs: MS Visual Studio 2010, MS SQL Server Management Studio 2005 Databases: MS SQL Server 2000-2008, MS Access 2003-2010 Monitoring Tools: Pingdom, New Relic, StatusCake, Bamboo Productivity and Time Management: MS Office 2010, 2013, Slack, Skype, Yammer, Bamboo Operating Systems: Microsoft Windows 8, 7, XP Networking: CISCO Routers, Switches Active Directory, DHCP, TCP/IP Performance Management: Simple Improvements, MSRP (PeopleSoft)

UNHCRSenior Data Management Assistant

Jul. 2009 - Oct. 2014KuwaitICT Related Duties: - Developing Desktop Applications for UNHCR, these include: 1) MS Outlook Addin created in VB.Net that connects to the Database and inserts the relevant data into the subject and body of the Email / Task / Appointment / Meeting. 2) An application created in VB.Net that connects to the database and looks for case numbers inside the excel sheet and inserts the case details next to the case number inside the excel sheet. - Supporting PC users and addressing software, hardware and networking issues. - Monitoring UNHCR's servers (File Server, the Boarder Manager Server, ProGres Server) and IT systems and conducting periodic backup operations. - Network Management: Managing user accounts, restrictions and emails through the Active Directory. - Implementing the Connect & Collaborate Project in UNHCR Kuwait. Protection Related Duties: - Counseling our people of concern (Refugees and Asylum Seekers) about UNHCR's International Protection, procedures and policies. - Updating and following up cases and reflecting such changes in the UNHCR's custom application database called "ProGres", to achieve technologies such as MS SQL Server, MS Access, MS Excel and MS Visual Basic .Net are used. - Coordinating RSD and Resettlement Interviews. - Registering Refugees and Asylum Seekers through Registration Interviews and the "ProGres" database according to UNHCR policies and SOPs. - Identifying vulnerable cases and their specific needs during and after registration and reporting them to the Protection Officer / Unit. - Preparing periodic reports such as QSR, RSR, MYSR, SIR and ASR, and preparing ad hoc statistics and reports related to our POCs upon the request of the Protection Officer / Unit.