PRABHU VELUSWAMY

AWS Multi-Account Management & Governance

• Managed and governed over 70 AWS accounts across multiple business units using AWS Control Tower and AWS Organizations, establishing structured environments for Production, Development, and QA.
• Collaborated with Information Security teams to implement and maintain Service Control Policies (SCPs) and guardrails, ensuring compliance with enterprise security standards and best practices.

Shared Services Architecture & Cloud Networking Design

• Designed and maintained shared services architecture in AWS, enabling multiple production workloads across business units.
• Built hub-and-spoke VPC architecture using AWS Transit Gateway and Resource Access Manager (RAM) for efficient and consistent cross-account network connectivity.
• Deployed Cisco Meraki vMX in Azure as a central SD-WAN VPN hub, ensuring secure connectivity between cloud and on-premises networks.
• Implemented Azure Traffic Manager and Private DNS Zones within the Azure Hub Management Account for intelligent traffic routing and secure DNS resolution.
• Designed and deployed Azure Landing Zone architecture to support scalable, secure multi-subscription environments with centralized connectivity and governance.
• Strengthened security posture by isolating network boundaries and enforcing standardized routing, firewall policies, and access controls across cloud environments.

Infrastructure as Code (IaC) & Automation

• Proficient in Infrastructure as Code (IaC) using Terraform to automate provisioning of AWS and Azure resources, including EC2, Azure VMs, networking, security groups, and more.
• Led end-to-end deployment of infrastructure stacks, including Kubernetes clusters, RDS databases, App Services, Lambda functions, Storage Accounts, CloudFront, Transit Gateways, and other core services.
• Integrated Terraform with Azure DevOps CI/CD pipelines to automate infrastructure provisioning triggered by code changes and infrastructure updates.
• Managed environment-specific configurations using Terraform Workspaces and automated server image deployment with AWS AMIs and Azure Images to ensure compliance, security, and optimization.

Identity & Access Management (IAM)

• Centralized user access across AWS using IAM Identity Center (formerly AWS SSO) with Azure AD integration for seamless Single Sign-On (SSO) and identity federation.
• Defined and managed custom permission sets based on least-privilege principles and aligned access roles with environment-specific requirements.

Cloud Cost Optimization & Financial Governance | AWS & Azure

• Enabled centralized cost visibility by configuring the Cost Optimization Hub in the AWS Management Account for actionable cost insights across member accounts.
• Utilized AWS Cost Explorer, Azure Cost Management, and Budgets to track spend, forecast usage, and identify cost-saving opportunities (e.g., rightsizing, Reserved Instances, savings plans, workload migration).

Cloud Operations & Monitoring

• Maintained comprehensive cloud infrastructure documentation, including high-level and low-level design diagrams, in collaboration with Enterprise Architecture teams (via Confluence and SharePoint).
• Led the onboarding and migration of workloads (applications, databases, file servers) from 13 on-prem data centers to AWS and Azure.
• Implemented Lambda-based automation for non-critical VMs to shut down during off-business hours, reducing operational costs.
• Deployed Commvault SaaS Backup across AWS and Azure production workloads, including configuration of backup plans and retention policies.
• Onboarded AWS and Azure environments to ManageEngine OpManager for centralized cloud infrastructure monitoring.
• Ensured 99.99% uptime for critical applications by implementing resilient cloud architectures and high-availability setups.
• Configured automated monitoring and alerting for system health and availability using AWS CloudWatch and Azure Monitor.

• Migration of infrastructure, data, and applications from on-premises to AWS cloud
• Design & Implement migration strategies for traditional systems on AWS (AWS Migration Services & other third-party tools)
• Executed the migration and implementation of multiple applications from on-premises to AWS
• Adherence Cloud Migration & Modernization methodologies (proposal writing, runbooks)
• Leveraged Open-source technologies (Terraform & Ansible) to automate the Design and Management of the infrastructure including servers, networks, load balancers, and databases in VMware & other cloud platforms
• Managed successful Design & Delivery of cloud-native, optimized solutions for our ERP Customers by utilizing re-usable terraform templates across AWS and Azure architecture patterns.

• Infrastructure as a Code - Good hands-on with Terraform - Deploying the AWS stack including VPC, bastion server, creation of cluster, installing Kubernetes, autoscaling group, EFS using terraform template & ZDT update for ASG using Terraform, Managed AZURE/AWS infrastructure with automation and configuration tool such as Ansible and AWS System Manager
• Migrating on-premises data centers servers to AZURE / AWS / Private cloud / VMware for IAAS/PAAS
• Had responsibility for migrating 4500+ workloads to CapGemini infrastructure from Pittsburg / Leverkusen / Singapore/ Monsanto DC (BAYER – GERMANY) Had responsibility for migrating 1800 workloads to CapGemini infrastructure (IKANO BANK – SWEDEN) Tools used for migration, Azure Site Recovery, AWS Server Migration Service, VMware Site Recovery and VMotion

• Support product teams in adopting best practices for configuration management, build and release management, and immutable infrastructure
• Administer customer environments for over 70 hospitals across the US hosted on Siemens Retail Healthcare Cloud
• Developed an E-Notification tool automating maintenance emails for clients, resulting in a time savings of nearly 700+ hours and earning the Cerner Masters award at the global level.

• Manage the configuration and operation of client-based computer operating systems
• Deployment of OS, Patches & Software through SCCM
• Installing, configuring, managing, and updating McAfee antivirus (8.7i) to client machines through server using E-Policy Orchestrator.