Ayan Mullick

AYAN MULLICK

Azure Architect | PowerShell Automation | AI Platform Integration
Milwaukee, WI ayanmullick@gmail.com +1 (984) 212-6546 ayan.mullick.in

SUMMARY

Azure architect with 20+ years across technology services, enterprise support, and engineering leadership. Designs secure cloud platforms and automates infrastructure delivery with PowerShell, Bicep, and Azure Pipelines. Microsoft Certified Trainer with recent work spanning developer self-service, AI-assisted cost management, PowerShell MCP tools, and an enterprise policy assistant built with Foundry and Microsoft Teams.

CORE COMPETENCIES

TECHNICAL SKILLS

AI & Agents: Azure Foundry, MCP, M365 Copilot, Copilot Studio agents, Teams bots

Machine Learning: Azure ML workspace provisioning, private networking

Analytics: Power BI, Monitor Workbooks, Jupyter, Excel/PowerShell reports, Databricks

Databases: SQL Server 2019/2022, Azure SQL, SQL Managed Instance, PostgreSQL, Cosmos DB

Integration: API Management, Data Factory, Logic Apps, Service Bus, Microsoft Graph, SharePoint lists

Web: App Service, API Apps, Static Web Apps, Front Door, CDN, App Service domains

Compute: Confidential VMs, Functions, App Service plans, Batch

Containers: AKS, Container Registry, Container Apps/Instances, Windows/Linux containers

Networking: Virtual WAN, ExpressRoute, Private Link, DNS, VNets/VPN, UDRs, LB, App Gateway

Storage: Blob Storage, Tables, premium Files, managed disks, Data Lake

Operating Systems: Windows 10/11, Server 2016/2019, Server Core, RHEL, Ubuntu

Developer Tools: PowerShell, PnP.PowerShell, VS Code, Markdown, SSMS, Azure Data Studio

DevOps: Azure DevOps, Pipelines, Boards, Jira, GitHub, GitHub Actions, Bicep, ARM templates

IT Management: Automation, Policy, Management Groups, Lighthouse; M365 troubleshooting

Migration & DR: Migrate, Site Recovery, Backup, File Sync

Monitoring: Monitor, Log Analytics, App Insights, VM/IIS diagnostics; mailbox/archive/Teams support

Cost Management: Budgets, quotas, billing profiles, reports, auto-shutdown

Identity: Entra ID, External ID, Azure AD B2C, identity platform, RBAC; user/group/license support

Security: Defender, Defender for Cloud, Sentinel, Key Vault, Firewall, NSGs

ORGANISATIONAL EXPERIENCE

Azure Architect, Independent Contractor, Milwaukee, Wisconsin [Since Oct '22]

  • Designed and deployed Azure dev/test/prod landing zones with network isolation and cost controls.
  • Designed Azure IaaS/PaaS back-office infrastructure using Microsoft Well-Architected design principles.
  • Designed developer self-service with guardrails via a VS Code custom agent and GitHub Copilot Enterprise.
  • Deployed Azure Foundry with billing quotas to control spending during AI development and testing.
  • Built an AI Foundry assistant with enterprise policies in Azure Storage and a Teams bot for end users.
  • Applied Bicep infrastructure as code and Azure Pipelines to automate repeatable Azure deployments.
  • Built a PowerShell MCP server on Azure Functions to query Azure costs across organizational workloads.
  • Integrated Azure AI with a chat interface to query, review, and analyze organizational Azure cost data.
  • Enabled CI/CD for a business intelligence dashboard to visualize and analyze organizational Azure costs.
  • Established Azure Cost Management budgets and alerts to monitor spending across teams and workloads.
  • Produced monthly Azure cost reports with breakdowns by team and workload for cloud spending visibility.
  • Configured dev/test auto-shutdown policies to control spending on idle development and test resources.
  • Automated Azure host pool rightsizing to balance resource allocation, application performance, and costs.
  • Centralized enterprise billing profiles and invoice sections to organize Azure billing administration.
  • Designed Azure RBAC hierarchies, naming conventions, and tagging to reflect organizational structure.
  • Designed Entra External ID policies and Azure B2C user flows to support business application sign-in.
  • Resolved application authentication issues and supported secure integration with Elavon payments.
  • Built APIs to identify and remediate application IDs with expiring credentials or invalid passwords.
  • Implemented and tested cloud identity and access controls in partnership with Risk Management.
  • Remediated Azure cybersecurity findings against federal guidelines for enterprise cloud infrastructure.
  • Planned Azure migration roadmaps and tested application performance through pre-cutover load testing.
  • Automated on-premises VMware, SQL, and application migrations using PowerShell and Azure Migrate.
  • Managed Virtual WAN hubs, ExpressRoute circuits, and Azure network virtual appliances for connectivity.
  • Troubleshot Azure Firewall connectivity across environments to unblock application development.
  • Configured Azure diagnostics and operational alerts for proactive monitoring and incident resolution.
  • Monitored Azure workloads using Log Analytics, Sentinel, VM diagnostics, IIS logs, and platform metrics.
  • Designed and implemented SQL workload and Linux VM backup solutions to support recovery planning.
  • Mentored engineers on PowerShell automation and Azure deployment practices for enterprise migrations.

Senior Consultant, Microsoft, Madison, WI [May '20 - Oct '22]

  • Automated Azure IaaS/PaaS infrastructure deployment using PowerShell scripts and Azure Pipelines.
  • Automated Azure Files VM mounts via Policy Guest Configuration; integrated on-prem AD for app access.
  • Resolved SCCM integration issues for Azure virtual machines to support enterprise infrastructure migration.
  • Modernized ETL jobs on SQL Server 2019 and RHEL by converting Bash scripts to PowerShell automation.
  • Provisioned public/private AKS and ACR with PowerShell; fixed Docker container connectivity to Azure SQL.
  • Provisioned ML workspaces, Data Factory, Databricks, PostgreSQL, and Cosmos DB in private Azure VNets.
  • Designed virtual hubs and peered spoke VNets with Azure Firewall, Private Link, and DNS for private PaaS.
  • Built private web apps and PowerShell Functions; integrated Azure AD/B2C into API Management.
  • Applied tenant Azure Policy and least-privilege RBAC; analyzed activity logs for governance gaps.
  • Optimized Azure database spending across SQL, Cosmos DB, and PostgreSQL, using serverless Azure SQL.
  • Built Power BI and Azure DevOps dashboards for infrastructure reporting, operational visibility, and audits.

Azure Architect, Dataquest Corp, Madison, WI [Sep '16 - May '20]

  • Migrated on-premises web/data workloads to Azure IaaS and modernized legacy apps with containers.
  • Applied 12-factor design principles to improve cloud application scalability and maintainability.
  • Migrated enterprise file shares to Azure Files and configured Azure File Sync for hybrid file access.
  • Automated VM, App Gateway, and load balancer deployments with PowerShell and ARM templates.
  • Configured SQL Always On clusters in Azure; migrated databases to Azure SQL and SQL Managed Instance.
  • Designed geo-redundant SQL recovery; scripted Azure Site Recovery and automated SQL/VM backups.
  • Remediated Azure IaaS/PaaS security controls with auditors against NIST 800-53 and NYDFS requirements.
  • Configured Azure Key Vault access policies and integrated Key Vault with Azure API Management services.
  • Collaborated on SQL database remediation using Microsoft vulnerability assessments to improve security.
  • Designed governance and security controls for RHEL and Ubuntu virtual machines operating in Azure.
  • Configured hub-and-spoke VNets, ExpressRoute, Azure Firewall, and UDRs for Azure workloads.
  • Implemented hybrid ADFS/MFA on Azure; integrated SaaS apps with Azure SSO for access across devices.
  • Automated network/security tasks with PowerShell and Windows patching with Azure Automation.
  • Configured Sentinel, Application Insights, and Log Analytics for diagnostics and incident root cause analysis.
  • Built Azure Pipelines for web app delivery; analyzed Power BI usage reports for cost savings.
  • Used Azure Batch to improve execution performance for compute-intensive enterprise applications.
  • Developed Azure solution architectures and technical proposals to support new business opportunities.

Principal Infrastructure Engineer, Mphasis, Pune [Jan '13 - Aug '16]

  • Designed SCVMM 2012 R2 infrastructure for the CIO team, from capacity planning to implementation.
  • Delivered Hyper-V multisite recovery for SQL, Citrix, and NetScaler, plus hybrid Azure SQL recovery.
  • Automated Windows patching with PowerShell; supported 1,500 servers using HP management tools.
  • Provided level 3 SCCM support and T-SQL reports for Windows patching and regulatory compliance.
  • Migrated VMware virtual machines to Hyper-V and integrated WSUS with SCCM for patch management.
  • Designed hybrid datacenter management using Azure Operations Management Suite and Service Manager.
  • Built PowerShell diagnostic scripts to help first-line support teams identify and resolve incidents.

Technical Team Lead, Concentrix, Pune [Sep '10 - Jan '13]

  • Led 20 engineers in technical training, case triage, coaching, knowledge assessments, and floor support.
  • Advised customers on capacity planning, networking, storage, and cloud deployment strategies.
  • Analyzed Windows kernel dumps in WinDbg to identify failure causes and deliver root cause analyses.
  • Resolved Hyper-V, failover cluster, SAN/NAS storage, VSS, and boot or disk recovery escalations.
  • Identified Windows 8 and Server 2012 defects and worked with Microsoft product groups on resolutions.

AWARDED

  • Best Technical Support Engineer — Mar, Apr, May, June, Sept, Oct, and Nov 2011.
  • Best Escalation Engineer — Feb 2012.
  • Best Technical Lead — May and Sept 2012.
  • Mphasis Summit Award — June 2016, for excelling at work and keeping in line with Mphasis culture.
  • National Life Group recognition — Disaster recovery for the MRAS application, June 2018.

ADDITIONAL RELEVANT EXPERIENCE

  • Helpdesk Administrator, Rotary Intnl., Pune [Apr ’09 to Jun’10]: AD & SharePoint admin. Dell & HP server support.
  • CRA, 3 Global Services, Pune [Aug ’07 to Feb ’09]: Troubleshooting for mobile devices.
  • Sr. CSA, WNS, Pune [Mar ’06 - Sept’06]: Worked on SAP to resolve technical issues for British petroleum.
  • Technical Support Associate, Wipro, Pune [Sept ’05 - Feb’06]: Desktop\router technical support and troubleshooting.

PROFESSIONAL ENHANCEMENTS & COMMUNITY

  • ITIL-V3 Foundation Certified & Microsoft Certified Trainer for Azure and PowerShell.
  • Migrated UAE Government Civil Aviation from HP Service Manager to System Center Service Manager.
  • Worked with the Rotary Foundation and regularly donated to a school in rural West Bengal.
  • Conducted community training on Microsoft Azure, PowerShell, Hyper-V, and clustering.

Languages: English and Hindi (native/bilingual); Bengali and Marathi (elementary).