Aaron Co Hee

Consultant / DevOps Technical Specialist

Arinco

Melbourne, Australia

01.2022 - Current

Vortex Platform - Policy, Alerting & AI-Driven Remediation: Designed and deployed an automation framework integrating Azure Policy, Prisma Cloud, ServiceNow, and AI Foundry. Created modular runbooks for automated remediation of non-compliance, including tagging, NSG rule adjustments, and storage account hardening. Delivered AKS CPU and VM performance diagnostics using AI, with automated remediation triggers. Developed ARM template snapshot and restore workflows for resource-, resource group-, and subscription-level recovery.
Transition to Operations (TTO) Workflow & Checks Automation: Replaced manual operational readiness checks with fully automated workflows spanning Azure and AWS. Designed Durable Functions-based orchestration for multi-cloud tagging, remediation, and change tasks, with real-time dashboards. Integrated automation with GitLab, Terraform, SharePoint, and Cosmos DB; implemented Key Vault-secured credentials and private endpoints. Automated scaling of Azure App Service Plans and production resources for cost efficiency and operational consistency.
GitHub Enterprise Cloud Readiness & TFS to Git Migration: Led governance, security, and DevOps maturity assessment for GitHub Enterprise Cloud migration. Rebuilt TFS pipelines in GitHub Actions using reusable templates and shared libraries. Automated migration of historical repositories, preserving full commit history and minimising disruption. Implemented GitHub Packages for multi-technology application releases.
Azure Enterprise Policy as Code (EPAC) Implementation & Migration: Migrated Azure Guardrails policies to EPAC, resolving diagnostics, tagging, and RBAC assignment issues. Built GitLab CI/CD pipelines for policy deployment and exemptions, integrated with Key Vault-stored SPN credentials. Supported documentation of LLDs, onboarding processes, and environment standards.
Azure Done Right (ADR) Implementation - Health Sector Client: Led workshops to align ADR patterns for governance, networking, security, and operations to client needs. Developed custom Bicep templates for VM provisioning, monitoring, and operational automation. Migrated an on-premises health service to Azure with full compliance and monitoring.
BAU & Automation: Automated provisioning of Azure services using PowerShell, Azure Functions, Logic Apps, and REST APIs. Streamlined operational processes with integrated DevOps pipelines in Azure DevOps, Jenkins, and GoCD.

Similar Profiles