Mirand Osmani

Architected and engineered AWS and Google Cloud Landing Zones to support large-scale cloud migrations, including lift-and-shift initiatives and environments for 50+ clients across EMEA and APAC. Designed secure multi-account and multi-project architectures using Terraform, reusable modules, structured outputs, environment-specific tfvars files, and Zero Trust principles.

Migrated a PostgreSQL database with 150+ schemas to Amazon RDS with zero downtime and implemented blue/green deployment strategies for database upgrades. Configured EC2 Auto Scaling Groups supporting 20+ instances and maintained 20+ Google Cloud projects across multiple client environments.

Designed centralized cloud networking using AWS Transit Gateway, Resource Access Manager, Shared VPC, hub-and-spoke connectivity, Site-to-Site VPN, BGP, global routing, and StrongSwan for hybrid connectivity with on-premises data centers.

Implemented DevSecOps and security controls using CloudTrail, GuardDuty, Service Control Policies, KMS, IAM, VPC Service Controls, cloud firewalls, and Palo Alto NGFW. Managed 200+ Google Cloud firewall rules and deployed Palo Alto firewalls with Managed Instance Groups for high availability and traffic inspection.

Built CI/CD pipelines using GitHub Actions, Azure DevOps, and TeamCity, enabling reusable workflows, single-click multi-environment promotion, and automated Terraform deployments. Automated server and firewall configuration with Ansible and implemented Datadog monitoring dashboards.

Provided 24/7 support for cloud infrastructure, Kubernetes, networking, routing, firewalls, and platform services. Produced HLDs, LLDs, migration plans, setup guides, procedures, and operational runbooks.

Technologies: AWS, Google Cloud Platform, Terraform, GitHub Actions, Azure DevOps, TeamCity, Ansible, Datadog, RDS, EC2, ECS Fargate, Lambda, Transit Gateway, Shared VPC, GKE, Palo Alto NGFW, IAM, KMS, GuardDuty, CloudTrail, VPN, BGP, Zero Trust.

Configured and maintained Google Cloud infrastructure for applications and microservices across multiple environments. Deployed Docker-based workloads on Google Cloud Run using reusable Terraform modules and serverless architecture.

Identified and resolved infrastructure scaling issues, improving application performance, reliability, and scalability. Rebuilt CI/CD workflows with GitHub Actions, reducing deployment time and enabling reusable pipeline templates through a centralized CI/CD repository for services distributed across multiple repositories.

Implemented Shared VPC architecture across organization projects, allowing workloads to consume centralized networking and CIDR allocations from a dedicated network-security project. Managed IAM roles and service accounts using least-privilege principles.

Implemented security controls with VPC Service Controls to protect sensitive services and restrict deployment, edit, and view permissions. Automated malware scanning for files uploaded to Google Cloud Storage using ClamAV, with separate clean and contaminated bucket workflows.

Designed load-balancing solutions for public applications using Google Cloud Load Balancing and Cloud Armor. Used Apigee to publish, secure, monitor, and manage APIs, and supported developers in implementing event-driven architectures with Pub/Sub.

Collaborated with developers through pair-programming sessions to understand application requirements and deliver appropriate cloud solutions. Worked within Agile and Scrum methodologies to support iterative delivery and platform improvements.

Technologies: Google Cloud Platform, Cloud Run, Docker, Terraform, GitHub Actions, CI/CD, Shared VPC, IAM, Service Accounts, VPC Service Controls, Cloud Storage, ClamAV, Cloud Load Balancing, Cloud Armor, Apigee, Pub/Sub, Serverless, Microservices, Agile, Scrum.

•  Led a group of 4 network engineers on thisproject.

•  Acting as Service Delivery Managerfor Kos bit Team

•  Clearing alarmson Vodacom ISP Routers (Edge Routers, Core Routers)

•  Deleting alarmson 86xx, 88xx Tellabs Family Routers

•  Clearing Network Element Unavailable alarms

•  Removing different services such as PWE3(VPN L2) and Circuits

•  Creating a weekly plan to organize the alarm clearing and prioritize different alarms.

•  Deleting all trunks (Ethernet, IP/MPLS/ML-PPP) and putting interfaces in the planned state.

•  Ensuring with Vodacom Team to clear critical unused configurations such as BGP Peers,

•  Deleting all configurationsfrom VPN Provisioning including ATM PWE3, TDM PWE