Bank Azure Infrastructure Setup

Implemented an Infrastructure-as-Code (IaC) approach using Terraform and mentored the bank's cloud operations team on modern infrastructure management tools and DevOps practices. Designed and developed reusable Terraform modules for all banking services, established Git best practices for development workflows, and automated infrastructure deployments using Azure DevOps pipelines.

The bank's Azure Cloud tenant had grown too large for the internal cloud operations team to manage efficiently. Key challenges included:

• Developing a Git workflow with branching and PR procedures.
• Designing and building Terraform modules for all Azure services used by the bank.
• Creating a module maintenance process and guidelines for new module additions.
• Automating infrastructure deployments using Azure DevOps.
• Leveraging Azure VMSS build agents to deploy resources within private networks.
• Onboarding the internal team with Terraform, Azure DevOps, and DevOps best practices.

• Adopted a modular Terraform approach for scalability and reusability.
• Implemented automated linting, testing, and vulnerability scanning in Terraform pipelines.
• Introduced Terraform module versioning using Git tags to ensure controlled updates.
• Developed automated pipelines for Create, Destroy, and Import processes.
• Built a knowledge base documenting all processes for future onboarding and reference.
• Added detailed README files with every module and configuration repository for smooth handover.
• Conducted hands-on online workshops with the bank's cloud ops team to accelerate their adoption of Terraform and DevOps practices.

The new Azure Cloud infrastructure management process empowered the cloud ops team to work more agilely and efficiently, while ensuring compliance, governance, and transparency across the bank's cloud infrastructure.

The IaC pipelines automated infrastructure provisioning, reduced human error, and embedded security and compliance checks (SAST, linting, and policy enforcement), resulting in a predictable and secure infrastructure management lifecycle.