Cloud Architecture & Azure Engineering
Cloud Administration // Advanced Security Integration
Overview
Engineering and implementation blueprints from advanced Cloud Administration and Advanced Security Integration coursework — spanning multi-region virtual networking, global traffic management, Kubernetes container orchestration, big data analytics pipelines, and event-driven serverless automation with cross-region disaster recovery on Microsoft Azure.
Major Projects
Global Multi-Regional Web Infrastructure & Traffic Management
- Designed and deployed a resilient, multi-regional infrastructure spanning geographically isolated Azure zones (Canada Central and Europe) to handle global user demand.
- Provisioned duplicate application server pools within isolated VNets behind Azure Standard Load Balancers configured with a Round Robin distribution algorithm to guarantee region-level high availability.
- Layered an Azure Front Door global routing solution over regional endpoints to dynamically distribute external client traffic based on user location and sub-millisecond proximity.
- Conducted chaos engineering validation by purposefully simulating total regional failures (terminating complete VM sets), successfully confirming automated failover and zero-downtime client redirection to alternative global availability zones.
Scalable Microservice Architecture on Azure Kubernetes Service (AKS)
- Built and deployed a secure, multi-tier e-commerce microservice application onto an Azure Kubernetes Service cluster.
- Configured a secure, private Azure Container Registry (ACR) pipeline to build, version control, and store proprietary Docker front-end application images, linking it directly to the AKS control plane via AcrPull managed identity permissions.
- Segmented system components from user workloads by isolating the Kubernetes control plane within a 3-node System Node Pool, systematically applying custom taints (CriticalAddonsOnly=true:NoSchedule) to force user application pods onto dedicated User Node Pools.
- Implemented Horizontal Pod Autoscalers (HPA) targeted at custom CPU utilization thresholds, and subjected the infrastructure to heavy concurrent stress tests using the hey load-generation utility to validate dynamic elastic scaling from 1 to 10 active pod replicas.
Big Data Engineering & Analytics Infrastructure (Azure Synapse)
- Provisioned an enterprise-grade Azure Synapse Analytics workspace seamlessly integrated with a primary Azure Data Lake Storage (ADLS Gen2) account acting as a centralized data repository.
- Developed an automated Synapse Pipeline utilizing HTTP copy activities to dynamically ingest massive raw external datasets (products.csv) from external endpoints directly into the underlying storage lake.
- Engineered optimized data transformation workflows by utilizing a serverless SQL pool to execute ad-hoc T-SQL queries over raw unstructured files using tailored OPENROWSET functions and custom header row mappings.
- Programmed distributed Python notebooks using PySpark within an elastic, memory-optimized Apache Spark pool to group, analyze, and generate visual bar-chart data matrices tracking product metrics directly out of the lake.
Event-Driven Serverless Automation & Disaster Recovery
- Orchestrated an event-driven serverless file processing pipeline utilizing Azure Logic Apps tied to Azure Blob Storage file creation and modification triggers.
- Designed low-code logical workflows to detect, fetch, ingest, string-manipulate, and cleanly relocate active file streams between separate incoming and processed storage tiers without requiring manual server upkeep.
- Established an advanced Azure Site Recovery (ASR) framework across a Recovery Services Vault structure, automating continuous asynchronous cross-region VM replication between Canada Central and Canada East paired data centers to maintain zero-loss business continuity plans.
Skills Gained
Advanced Virtual Networking
Architected multi-region Hub-and-Spoke networks utilizing User-Defined Routes (UDR) to intercept and force traffic through Network Virtual Appliances (NVA). Configured Regional and Global VNet Peering, and engineered hybrid on-premises connectivity via Virtual Network Gateways.
Global Load Balancing & Content Delivery
Implemented Layer 4 (Azure Load Balancer) and Layer 7 (Azure Application Gateway) solutions with path-based routing rules (e.g., /image/* and /video/*). Deployed Azure Front Door for global edge-caching, SSL termination, and proximity-based user routing.
Enterprise Container Orchestration
Managed container lifecycles across Azure Container Instances (ACI) and Azure Kubernetes Service (AKS). Engineered automated infrastructure scaling by implementing Horizontal Pod Autoscalers (HPA) alongside the Kubernetes Cluster Autoscaler to dynamically match real-time system demand.
Cloud Governance & Security Policy
Enforced enterprise-wide compliance baselines by executing Azure Policy assignments (e.g., mandatory resource tagging) and preventing unauthorized state changes via resource delete locks. Managed credentials and cryptographic keys securely via Azure Key Vault RBAC role assignments.
Data Engineering & Serverless Pipelines
Provisioned Azure Synapse Analytics workspaces coupled with ADLS Gen2 storage lakes. Developed automated data ingestion pipelines, analyzed raw payloads via serverless SQL pools utilizing T-SQL OPENROWSET optimization, and executed PySpark scripts in Apache Spark pools for programmatic analysis.
Hybrid Cloud Management & Resilience
Connected simulated on-premises physical hosts to the Azure control plane using Azure Arc-enabled server configurations. Architected business continuity blueprints using Recovery Services Vaults, automating cross-region replication via Azure Site Recovery (ASR).