M.abdullah

Cloud Administrator

Contours Rx UK

Dec 2024 - Present • 1 yr 8 mos

• Engineered resilient hybrid network topology with Azure VPN Gateway and ExpressRoute, reducing intersite latency for production workloads. • Led microservices modernization: containerized monoliths with Docker, stored images in ACR, and deployed to AKS using Helm. • Applied SRE practices with Azure Monitor and Log Analytics to strengthen service reliability and lower MTTR by 25%. • Implemented AGIC, Azure Front Door, and NGINX Ingress for global traffic routing, SSL/TLS termination, and centralized WAF enforcement. • Provisioned and tuned high-availability Azure SQL Managed Instances with cross-region failover and pointin-time recovery. • Diagnosed multi-tier connectivity issues using Network Watcher and Azure Firewall logs, reducing troubleshooting cycles by 30%. • Monitored security posture and triaged alerts using Microsoft Defender for Cloud (Azure Security Center) to remediate findings across subscriptions. • Re-architected resource topology with Azure Cost Management, automated rightsizing, storage tiering, and spot instances, decreasing operational costs by 15%. • Built and operationalized an enterprise GenAI platform on Azure OpenAI and Azure AI Foundry, delivering production RAG pipelines and AI agents with Foundry Agent Service, Azure AI Search, and Azure AI Document Intelligence. • Deployed, configured, and extended a custom Azure MCP Server for the organization tenant, securely exposing internal tools and data to AI agents via Managed Identity, Entra ID, and Key Vault, with scoped, auditable tool permissions. • Integrated Azure AI Speech, Vision, and Content Safety into business workflows and enforced responsible-AI guardrails, monitoring token usage and cost to keep GenAI spend predictable.

Associate cloud consultant

SYSTEMIQ • Temps plein

Dec 2020 - Jan 2025 • 4 yrs 1 mo

hore, Pakistan | 07/2022 – 01/2025 • Authored modular Terraform configurations and ARM templates to automate provisioning across Hub-andSpoke Dev, QA, and Production landing zones. • Built and maintained CI/CD pipelines with Azure Pipelines (YAML), Jenkins, and Git, achieving 30% faster release cycles and fewer deployment errors. • Governed organization-wide IAM via Microsoft Entra ID and Managed Identities; secured secrets in Azure Key Vault with Conditional Access, MFA, and SSO. • Enforced governance across subscriptions using Azure Blueprints, Azure Policy, and RBAC, strengthening security and compliance posture. • Automated routine administration tasks with PowerShell and Bash, saving approximately 8 engineering hours each week. • Monitored resource utilization to secure a 20% recurring monthly reduction in cloud billing. • Deployed and right-sized Virtual Machines, Function Apps, and Web Apps supporting 10+ production workloads. • Integrated Azure Monitor, Application Insights, and Log Analytics, improving critical-severity incident response by 25%. • Configured Virtual Networks, NSGs, and Route Tables for network isolation and traffic segmentation. • Established Data Lake, Data Factory, and Blob Storage with tier-aging policies for cost-effective retention.