Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Harish Malapati

Sydney,NSW

Summary

Over 16 years of diversified experience in Financial services and telecom clients across the world as cloud platforms owner, cloud architecture, network security designer. Have experience in AWS cloud infrastructure platforms, PaaS platform design, automation and management, Network & Infrastructure security, application delivery security, with specialized multi-vendor Infrastructure & cloud environments including AWS cloud, Pivotal Cloud Foundry(PCF)/VMware TAS, RedHat Openshift, Data centre network and security.

Overview

17
17
years of professional experience
1
1
Certification

Work History

AWS Cloud Platform Owner

Telstra Ltd
Sydney, NSW
06.2022 - Current
  • Leading a high impact team of 20 DevOps engineers across multiple geographic locations and handling complete lifecycle of umbrella of platforms like AWS microservices Naked/serverless tenancy platform, managed Vanilla kubernetes CaaS offering, Observability platform for all the various tenancies using AWS Quicksight/datalake, Virtual desktop infrastructure(VDI) platform using AWS Appstream and a legacy container platform for application teams to leverage the platform to the application needs.
  • It is a high impact team in a fast-paced environment that is driving the company targets of 90% apps to cloud and runs on the most cutting-edge AWS cloud-based infrastructure.
  • Act as the overarching technical product owner within the Group, partner with Engineering and collaborate with application teams, cloud platforms stakeholders and product owners across company to align team technical capability vision with the Group strategic priorities, so that it drives and continually improves modular, reusable technical capabilities and components.
  • Lead the definition, management and scheduling of work to manage the operational lifecycle of the platform and constant evolution and maturity of the platform technical capability and applications, including support, maintenance and capacity planning.
  • Develop and champion business cases and funding bids to enable the team to maintain platform and team operational performance and deliver their work within budget constraints.
  • Coordinating with the various security teams like Security architecture, engineering and operations for continuous enhancements to the platform for compliance and security updates.
  • Maintain the team backlog, prioritizing and defining requirements while keeping a strong focus on security, reliability and scalability of the company services, but also have an eye on the costs using Agile methodologies.

Engineering DevOps Sr Specialist

Telstra Corporation, Sydney
11.2018 - 05.2022
  • Pivotal Cloud Foundry/Redhat Openshift PaaS platform team, Working part of Internal Cloud Solutions unit of Telstra in a PaaS platform team responsible for platform design, engineering and operations
  • Worked as acting Technical product/platform owner(TPO) for the PCF and Openshift platforms for 4 months while manager is on long-leave.
  • Manage end-to-end development, delivery, execution, integration requirements and lifecycle management and optimisation of technology products and services to enable risks, issues, dependencies, timeline and costs to be managed.
  • Collaborate with the team, stakeholders and mission product owners to discover usability,cost, security concerns and functional gaps and generating insights that uncover feature enhancement solutions.
  • Installing PCF as a self-serviced, automated, secure platform building layers up from bottom, encapsulating VMware PCF/TAS product using haproxies, signal sciences WAF, NAT proxies restricting access to internet.
  • Currently working on designing and building/automating Redhat Openshift platform based on kubernetes in AWS.
  • Design, engineer, implement, automate & operate features/products/solutions in the VMware /Pivotal Cloud Foundry (Tanzu Application service) platform in AWS.
  • Established the Highly Available platform with proactive monitoring setups and configuration/automation.
  • Developing suite of services in PCF marketplace for application teams to bind with apps running on platform.
  • Building platform using ansible to automate installation of PCF components and services including AWS services and infrastructure.
  • Automated deployment, upgrades and backups of PCF platform using concourse pipelines.
  • Ensuring successful deployment of enterprise-grade PaaS solutions as well as supporting application migration.
  • Interface with Development teams to assist them with their issues, queries and support their app deployment in platform
  • Liaising with security team to get security certifications for the platform and new components/services
  • Actively review new technologies/tools and identify if/where they can be utilised.
  • Technologies, tools & languages: Redhat Openshift, kubernetes, VMware Tanzu application service / Pivotal cloud foundry(PCF), AWS cloud, Bamboo, Ansible, Python, HAproxies, pagerduty, newrelic, signalsciences WAF, cloud conformity, Prisma cloud, CloudAbility, concourse CI, AWS ec2,s3,dynamodb, EBS, VPCs, Security groups, Nacls, cloudtrail.

IT Security Sr Engineer

Telstra Corporation
Sydney
12.2014 - 11.2018
  • Team: Application Delivery Networks Design, Working part of Digital Engineering business unit of Telstra and mainly responsible for the application centric network & security designs, application acceleration, optimization & implementation using various vendor appliances
  • Design and implement network & security architecture which support the web applications and services of Telstra as per the business requirements with customer experience as primary objective for all the digital applications of Telstra
  • Configure entire application security, optimization and processing in F5s with various F5 config items like Writing iRules, AAM policies, ASM rules, HTTP caching optimisation, LTM for customer requirements and generalising them for multiple test and production environments for Telstra media and across multiple applications.
  • Design the network & security architecture along with the application architect to establish the required network enablement & security firewall rules configuration
  • Design/engineer AWS hosted infrastructure with haproxy/F5, AWS firewalls, VPCs with Adobe AEM environment
  • Installation and configuration of ASM, AFM module and policies
  • Utilising ansible for automating configurations of HAproxies, F5 LTM and Varnish cache
  • Analysing traffic logs in Splunk and performing various application security restrictions
  • Technologies: F5 LTM, AAM, ASM (WAF), GTM, AFM in bigip hardware, virtual installation(including AWS cloud), irules, HAproxies, varnish, AWS cloud, Arbor, Adobe AEM, Ansible tower, Checkpoint, Instart logic CDN, splunk.

IT Security Consultant

Telstra Corporation, Westpac Banking Corporation
Sydney
09.2013 - 12.2014
  • Working part of Enterprise Perimeter Security infrastructure (EPS) project team for design review and implementation for Network and Security infrastructure
  • Provided Detailed Design and implementation for components of Data Centre migration project undertaken by Client (IMTP); including application server migration, clients relocation and infrastructure migration across data centres
  • End to end project installation, configuration and integration of Junos Space (JSA) and Juniper STRM appliances into network and migration of SRX device management from Juniper Network & Security Manager (NSM)
  • Upgraded and configured Logical systems (LSYS) in all the Juniper SRX firewalls in EPS environment
  • Design review and implementation of extranet F5 LTM and GTM for investment banking applications
  • Complete design review and implementation for Manila Contact Center(Voice) connectivity through secure EPS Environment including complex multi-player checkpoint firewall environment
  • Created Checkpoint VSX clusters for different business units and projects for virtual traffic segregation requirements.
  • Vendor Devices: Cisco Nexus 2/5/7k, Cisco UCS, Checkpoint VSX, GAIA/Splat, Nokia IPSO, F5 (6900, 8900, VIPRION platforms), F5 LTM/GTM.
  • Juniper SRX & netscreen Firewalls, Junos Space (JSA), Juniper Security Threat Response Manager (STRM), Alteon load balancers, Bluecoat Proxies

Network & Security Consultant

Computer Sciences Corporation, Zurich Financial Services
, India
05.2012 - 08.2013
  • Was part of the infrastructure management and projects team managing the Zurich infrastructure as F5 SME assisting in design, implementation and providing expert solutions
  • Completed the Rome Extranet project which accounts for a million dollar savings for client by migration of the extranet applications and consolidating datacentres.
  • Working closely with the Senior Network architects to provide low level designs, implementation of network infrastructure, creating and configuring iRules and handing over to Operations team
  • Network Get Well Plan review and coordinate with vendors and prepare datacenter standards across the infrastructure
  • Upgradation of F5 hardware and software and replacing e0L hardware and detailed documentation before handing over to BAU.
  • Technologies: Cisco Nexus 2/5/7k, Cisco UCS, Cisco 4/6k, Checkpoint GAIA/Splat, F5 Big IP 3400, 6900, LTM/GTM, iRules, Cisco ASA firewalls,Juniper Netscreen, Cisco Content services switches, Adnovum Nevis proxy, Nortel bay stack switches, CIGESM (Cisco Intelligent Gigabit Ethernet Switch Modules) for IBM Blade Centers, VPN

Sr Network Security Engineer

Infosys Technologies
, India
02.2011 - 05.2012


  • Working part of the network and security implementation team deploying network and security devices in a hosted datacentre.
  • Implementation and troubleshooting of MPLS vpn configurations, Juniper SRX and routers into NSM for management.
  • Completed the migration and transformation of the billing and metering applications to the new infrastructure
  • Installation and configuration of Checkpoint NGXR71, F5 LBs and Nokia IPSO firewalls.

Technologies: Juniper SRX firewalls SRX5800, SRX240, SRX650, Juniper EX2200 switches, Juniper NSM, Junos STRM, Checkpoint R71, Nokia IPSO, Cisco switching, VPN, F5 load balancers.

Sr Network Engineer

Infosys Technologies, COLT Telecom
Bangalore, India
05.2009 - 01.2011
  • Product Engineering team, responsible for F5 BIG IP LTM & Cisco CSS products
  • Establishing a lab setup, testing new software/hardware products for custom configurations and building config standards, implementation and operations guide documentation.
  • Incident, change, problem and capacity management of various 2-tier and 3-tier Network & security infrastructure of various end clients hosted in COLT datacentres across Europe.
  • Technologies: F5 LTM v9.x, v10.x, Cisco 3750X, 3750v2 switches, Cisco IOS, Cisco CSS devices, Checkpoint R71, Nokia IPSO platform, Nortel switches, Juniper SRX & netscreen firewalls, Hobbit monitoring tool, Remedy ticketing tool

Network Engineer

Infosys Technologies
, India
10.2007 - 05.2009
  • Managing infrastructure for clients KVH and Diageo and doing Incident, change, problem and capacity management of network infrastructure.
  • L2 network engineer supporting customer network backbone for leading APAC & European service providers hosted at various data centers in Europe & Japan
  • Technologies: Cisco 3750,2960,6509,3560,4700 switches, F5 Big IP 1000,1500,3400, 6900, LTM, iRules, Juniper Netscreen firewalls, Cisco ASA, Cisco PIX, VPN, IBM Proventia IDS, Nortel Alteon Load balancers

Education

Bachelor of Science - Electrical, Electronics And Communications Engineering

Osmania University
Hyderabad, India
05.2007

Skills

  • Amazon Web Services(AWS) cloud
  • Vmware Tanzu suite of products like Tanzu Application service (TAS)/ Pivotal Cloud Foundry(PCF), Tanzu Kubernetes Grid(TKG)
  • Redhat Openshift Platform(based on kubernetes)
  • Kubernetes, Docker
  • CI/CD - Bamboo, concourse
  • Tools - Harbor, splunk, newrelic, Pagerduty, JIRA,
  • WAF products - Signal sciences, F5 ASM, AWS WAF
  • F5 suite of products like LTM, GTM, ASM, iRules
  • Other Load balancers like haproxies, Cisco CSS, Alteon LBs
  • Checkpoint firewalls
  • Juniper SRX, Netscreen, Junos space, STRM, NSM
  • Cisco switches, routers, firewalls
  • Agile, scrum

Certification

  • AWS certified Solutions Architect Associate
  • F5 Certified Technology Specialist–LTM (F5-CTS LTM)
    Juniper Networks Certified Internet Associate (JNCIA-FWV) Checkpoint Certified Security Associate (CCSA)
  • Cisco Certified Network Professional (CCNP).
  • Cisco Certified Network Associate (CCNA).
  • F5 Certified Administrator(F5-CA)
  • ITIL v3 Foundation


Timeline

AWS Cloud Platform Owner

Telstra Ltd
06.2022 - Current

Engineering DevOps Sr Specialist

Telstra Corporation, Sydney
11.2018 - 05.2022

IT Security Sr Engineer

Telstra Corporation
12.2014 - 11.2018

IT Security Consultant

Telstra Corporation, Westpac Banking Corporation
09.2013 - 12.2014

Network & Security Consultant

Computer Sciences Corporation, Zurich Financial Services
05.2012 - 08.2013

Sr Network Security Engineer

Infosys Technologies
02.2011 - 05.2012

Sr Network Engineer

Infosys Technologies, COLT Telecom
05.2009 - 01.2011

Network Engineer

Infosys Technologies
10.2007 - 05.2009

Bachelor of Science - Electrical, Electronics And Communications Engineering

Osmania University
Harish Malapati