asharma.cloudMenu
CloudNetworkAIAutomation

From Hybrid Networks to Intelligent Enterprise Platforms.

Turning two decades of infrastructure expertise into AI-enabled operations — RAG, knowledge assistants, and intelligent troubleshooting at enterprise scale.

Abhishek Sharma·Associate Director — Public Cloud Connectivity Engineering

Cloud Infrastructure Leader | Azure & Network Architecture | Automation | AI-Enabled Operations

Portrait of Abhishek Sharma

20+

Years Experience

50+

Technologies & Platforms

25+

Certifications & Courses

30+

Projects & Solutions

About Me

I am a cloud infrastructure and connectivity leader with more than 20 years of professional experience spanning enterprise networking, security, Microsoft Azure, automation and platform engineering. I work across architecture and operations, turning complex infrastructure requirements into secure, supportable systems and practical engineering decisions. My strongest foundations are cloud connectivity and network architecture, supported by hands-on experience in automation, DevOps and container platforms. I am now extending that experience into AI-enabled operations, applied machine learning and intelligent troubleshooting. I value clear architecture, operational evidence and solutions that work under real enterprise constraints.

Read More

My career began in enterprise networking and customer-facing technical operations before progressing through network engineering, architecture, cloud platforms, automation and technical leadership. Today, as Associate Director — Public Cloud Connectivity Engineering, I work at the intersection of cloud infrastructure, connectivity, security, platform engineering and operational enablement.

My strongest professional foundation is the architecture and operation of complex enterprise networks and Azure connectivity services. I approach cloud systems as connected platforms rather than isolated services. Applications depend on routing, DNS, identity, security controls, observability, deployment processes and reliable operations, so effective architecture requires both a strategic view and the willingness to investigate technical detail when something fails.

I have worked across architecture, engineering, operations and consulting roles in India, the United Kingdom and the Czech Republic. My experience includes enterprise routing and switching, hybrid cloud connectivity, private Azure networking, firewalls, load balancing, Kubernetes, infrastructure as code, CI/CD and operational automation. I use Python, PowerShell, Terraform and related engineering practices to reduce manual effort and make outcomes more repeatable.

My current development focus is the intersection of infrastructure and AI. I am exploring retrieval-augmented generation, model-connected tools, machine learning and structured operational data for troubleshooting, knowledge access and engineering workflows. I present this as an evolving area of applied work and learning, grounded in my established cloud and networking experience.

I value direct problem solving, careful technical reasoning and honest evidence. This portfolio documents selected work, technical writing and professional experience while respecting employer and client confidentiality.

Download CV
Download CV
Developer workspace with dual monitors showing Python code and data visualizations

Technical Skills

Depth across cloud, network and AI-enabled operations — grouped by domain.

Skill strength distribution

Number of domains at each strength level

Expert4 domains

Cloud Architecture & Azure Platform, Networking & Connectivity, Azure Platform & Private Networking, Enterprise Network, Security & Hybrid Infrastructure

Advanced2 domains

Security & Identity, Automation & DevOps

Strong1 domain

Platforms & Containers

Working Knowledge1 domain

Data & Analytics

Developing1 domain

AI & Machine Learning

Cloud Architecture & Azure Platform

Expert

Architecture and operation of secure enterprise Azure environments, with particular depth in private connectivity and shared platform services.

Current hands-on capabilities
  • ExpressRoute
  • VPN Gateway
  • VNet peering
  • Private Link
  • Private Endpoints

Networking & Connectivity

Expert

Enterprise network architecture across data-centre, hybrid-cloud and cloud-native environments.

Current hands-on capabilities
  • BGP
  • OSPF
  • Routing and switching
  • DNS
  • DHCP

Security & Identity

Advanced

Security-conscious architecture across cloud connectivity, network controls and identity-aware platform integration.

Current hands-on capabilities
  • Palo Alto VM-Series
  • Network security controls
  • NSGs
  • WAF
  • RBAC

Automation & DevOps

Advanced

Repeatable infrastructure delivery and operational automation using code, pipelines and configuration management.

Current hands-on capabilities
  • Terraform
  • Bicep
  • Python
  • PowerShell
  • Bash

AI & Machine Learning

Developing

Applied development in AI-enabled operations, RAG, model-connected tools and machine-learning foundations.

Current hands-on capabilities
  • Python data analysis
  • Supervised and unsupervised ML
  • Azure ML
  • RAG prototypes
  • Model APIs

Data & Analytics

Working Knowledge

Operational-data analysis, telemetry querying and data-platform integration for infrastructure and AI use cases.

Current hands-on capabilities
  • KQL
  • Log Analytics
  • Azure Monitor
  • Microsoft Sentinel
  • pandas

Platforms & Containers

Strong

Container, Kubernetes and enterprise platform experience spanning architecture, migration and operations.

Current hands-on capabilities
  • Docker
  • Kubernetes
  • AKS
  • NGINX Ingress
  • Ingress/egress controls

Azure Platform & Private Networking

Expert

Azure private connectivity, application delivery and platform integration across Private Link/DNS, ExpressRoute/VPN, NVA, Application Gateway/Front Door/WAF, API Management, Key Vault, AKS and hub-and-spoke architecture.

Current hands-on capabilities
  • Private Link
  • Private DNS
  • ExpressRoute
  • VPN
  • NVA

Enterprise Network, Security & Hybrid Infrastructure

Expert

Enterprise routing and switching; BGP, OSPF and route redistribution; Cisco Nexus and spine-leaf fabrics; firewall clustering and segmentation across Palo Alto, Check Point and Fortinet; F5/NetScaler, secure web proxies, wireless controllers/APs, VMware, IBM Cloud and hybrid connectivity.

Current hands-on capabilities
  • Enterprise routing and switching
  • BGP
  • OSPF
  • Route redistribution
  • Cisco Nexus

Full Technology Index

Every platform and tool across the domains above, at a glance.

Read More
Cloud Architecture & Azure Platform
  • ExpressRoute
  • VPN Gateway
  • VNet peering
  • Private Link
  • Private Endpoints
  • Private DNS
  • Azure Firewall
  • Application Gateway
  • Front Door
  • WAF
  • Load Balancer
  • UDRs
  • NSGs
  • Azure Monitor
  • Log Analytics
  • Hub-and-spoke architecture
  • Landing-zone principles
  • Governance
  • Azure Machine Learning networking
  • Azure AI Foundry networking
  • API Management
  • Key Vault
  • RBAC
  • Managed identities
  • Azure Policy
  • ARM templates
Networking & Connectivity
  • BGP
  • OSPF
  • Routing and switching
  • DNS
  • DHCP
  • Hybrid connectivity
  • Traffic-flow analysis
  • Network troubleshooting
  • Load balancing
  • Proxy services
  • MPLS
  • SD-WAN
  • WAN architecture
  • Capacity planning
  • Multi-vendor network strategy
  • Regulated-enterprise connectivity
  • Cisco IOS/CatOS
  • Legacy VPN concentrators
  • Older switching platforms
Security & Identity
  • Palo Alto VM-Series
  • Network security controls
  • NSGs
  • WAF
  • RBAC
  • Managed identities
  • Key Vault integration
  • Private access patterns
  • Security architecture
  • Segmentation
  • Governance
  • Azure Policy
  • Change and risk assessment
  • Cross-team security integration
  • Check Point
  • Fortinet
  • Cisco PIX/ASA/FTD
  • NetScreen
  • pfSense
  • VyOS
Automation & DevOps
  • Terraform
  • Bicep
  • Python
  • PowerShell
  • Bash
  • Azure DevOps
  • GitHub Actions
  • Git
  • CI/CD
  • Ansible/AWX
  • Infrastructure-as-code strategy
  • Deployment governance
  • Reusable modules
  • Change sequencing
  • Operational automation
  • ARM
  • Jenkins
AI & Machine Learning
  • Python data analysis
  • Supervised and unsupervised ML
  • Azure ML
  • RAG prototypes
  • Model APIs
  • Prompt design
  • Evaluation experiments
  • AI use-case design
  • AI-enabled operations
  • Knowledge-assistant architecture
  • Governance and cost evaluation
Data & Analytics
  • KQL
  • Log Analytics
  • Azure Monitor
  • Microsoft Sentinel
  • pandas
  • NumPy
  • Jupyter notebooks
  • Data preparation and model evaluation
  • Observability design
  • Operational intelligence
  • Capacity analysis
  • Azure Data Factory and data-platform connectivity
Platforms & Containers
  • Docker
  • Kubernetes
  • AKS
  • NGINX Ingress
  • Ingress/egress controls
  • Helm-related platform work
  • Linux
  • Container networking
  • Secrets integration
  • AKS architecture
  • Docker Swarm-to-AKS migration
  • Platform security
  • Private connectivity
  • Application-platform integration
  • RabbitMQ
  • Redis
  • Grafana
  • Verdaccio
  • F5
  • NetScaler
  • HAProxy
  • Proxy platforms
Azure Platform & Private Networking
  • Private Link
  • Private DNS
  • ExpressRoute
  • VPN
  • NVA
  • Application Gateway
  • Front Door
  • WAF
  • API Management
  • Key Vault
  • AKS
  • Hub-and-spoke architecture
Enterprise Network, Security & Hybrid Infrastructure
  • Enterprise routing and switching
  • BGP
  • OSPF
  • Route redistribution
  • Cisco Nexus
  • Spine-leaf fabrics
  • Firewall clustering
  • Palo Alto
  • Check Point
  • Fortinet
  • F5/NetScaler
  • Secure web proxies
  • Wireless controllers/APs
  • VMware
  • IBM Cloud
  • Hybrid connectivity

Professional Experience

  1. Associate Director — Public Cloud Connectivity Engineering

    Novartis

    December 2022 – Present · Prague, Czech Republic

    Full-time employment

    • Lead cloud-connectivity engineering and AI-enablement initiatives across infrastructure domains
    • Provide architecture leadership for Azure private and hybrid connectivity
    • Coordinate platform, network, security, DevOps and application teams
    • Guide infrastructure automation, governance, scalability and engineering roadmaps

    Leadership scope: Cross-functional technical and architecture leadership

    Enterprise scale & impact

    EnvironmentGlobal Regulated Pharma
    AvailabilityZero-Downtime Transit

    Key projects & deliverables

    • AI-Powered Ops & RAG: Knowledge assistants & Log Analytics/Sentinel troubleshooting telemetry
    • Enterprise Cloud Transit: Multi-region ExpressRoute, Private Endpoints & landing-zone governance
    • Copilot Architecture: Evaluation of enterprise adoption, integration security, and cost models

    Key technologies

    • Azure
    • ExpressRoute
    • VPN Gateway
    • Private Link
    • Private Endpoints
    • Private DNS
    • Azure Firewall
    • Application Gateway
    • Terraform
    • CI/CD
    • Azure Monitor
    • Log Analytics
    • AI-enabled operations
  2. Lead Engineering Expert — Public Cloud

    Novartis

    January 2021 – December 2022 · Prague, Czech Republic

    Full-time employment

    • Designed and delivered Azure networking solutions for cloud adoption and hybrid connectivity
    • Acted as a subject-matter expert for architecture reviews, change assessments and complex troubleshooting
    • Produced technical specifications, operational procedures and implementation guidance

    Leadership scope: Subject-matter and cross-team technical leadership

    Enterprise scale & impact

    Incident LeadMajor Incidents / RCA
    ComplianceEnterprise GxP

    Key projects & deliverables

    • Next-Gen Firewalls: Integrated Palo Alto VM-Series and Cisco CSRs for secure transit
    • Network Baseline: Architected standardized UDR routing and VNet peering topology

    Key technologies

    • Azure
    • ExpressRoute
    • VPN Gateway
    • VNet peering
    • Route tables
    • Azure Load Balancer
    • Palo Alto VM-Series
    • Cisco CSR
  3. Network Architect / Senior Network Specialist / SME

    IBM

    March 2015 – January 2021 · Brno, Czech Republic

    Full-time employment

    • Progressed through account SME, client technical leadership, senior network specialist and network architect responsibilities
    • Designed cloud-connectivity and migration patterns
    • Delivered firewalls, load balancing and automation
    • Led cross-functional engineering and technical escalations

    Leadership scope: Technical leadership across engineering teams and client engagements

    Enterprise scale & impact

    Account SectorGlobal Banking & Finance
    Tenure~6 Years

    Key projects & deliverables

    • Banking Cloud Migration: Hybrid connectivity and security governance for regulated financial workloads
    • ADC & Firewalls: Deployed high-availability F5 BIG-IP, Check Point, and Fortinet clusters

    Key technologies

    • Azure
    • AWS
    • IBM Cloud
    • Enterprise networking
    • Firewalls
    • F5
    • NetScaler
    • Linux
    • Bash
    • Python
    • Ansible
View Full Experience
  1. Assistant Professor — Telecommunications

    JNCT

    May 2013 – December 2013 · India

    Full-time academic role

    • Taught Computer Networks and Data Communications within the Computer Science department
    • Developed technical teaching and communication experience
    • Created internal student record website with Joomla CMS
    • Created online learning material for Engineering students using Moodle
    • Provided summer technical training on CCNA course to students

    Key domains

    • Computer networks
    • Data communications
    • Technical education
  2. Enterprise Network Support and Architecture — IBM and AT&T client assignments

    IBM and AT&T — client assignments

    2008–2011 · Bangalore, India and Brno, Czech Republic

    Contract client assignments through a staffing agency

    • IBM assignment: Third-level network escalation support, routing, switching, firewall changes, load balancing, and formal incident/change processes
    • AT&T assignment: Onboarding architecture and L3 escalations across ~200 enterprise sites; BGP/OSPF route redistribution; resilient Catalyst 6500/4500 switching; MST/PVST+, port security and 802.1Q trunking; Check Point and Cisco firewalls with IPsec VPN concentrators; QoS (DSCP/LLQ), EtherChannel and load-balanced WAN delivery

    Enterprise scale & impact

    ScopeGlobal Onboarding
    TierL3 Escalation

    Key projects & deliverables

    • Global WAN Onboarding: Integrated multi-vendor core routing and redistribution
    • Switch Fabric Deployments: Catalyst 6500/CatOS core deployments and VPN gateways

    Key technologies

    • BGP
    • OSPF
    • Cisco IOS/CatOS
    • Check Point
    • Cisco PIX
    • Load balancers
    • VPN
    • QoS
  3. Network Engineer / Resident Network Engineer

    Datacraft; resident assignment at Aztecsoft

    November 2006 – December 2007 · Pune, India

    Full-time employment with Datacraft; approximately 80% resident assignment at Aztecsoft and 20% Datacraft field assignments

    • Designed, tested, implemented and optimized multi-vendor network infrastructure
    • Monitored network and server performance using SNMP
    • Configured and maintained PIX515E and NetScreen firewalls
    • Coordinated with external and internal project teams
    • Performed ISP firmware/hardware upgrades and managed network documentation
    • Managed VoIP, IPLC, Cisco 7940, 7936, and CCM
    • Applied CoS, QoS, DSCP, Packetshaper, and Packeteer for traffic management
    • Provided technical support and conducted training sessions

    Enterprise scale & impact

    Assignment80% Resident / 20% Field
    FocusMulti-Vendor Ops

    Key projects & deliverables

    • Network Operations: Firewall, routing, switching, VoIP, QoS and monitoring support

    Key technologies

    • Cisco routing and switching
    • PIX
    • NetScreen
    • Cisco Call Manager
    • VoIP
    • QoS
    • SNMP monitoring
  4. Customer Service Advisor

    ClientLogic

    July 2005 – May 2006 · Newcastle upon Tyne, United Kingdom

    Part-time student visa work — limited to 20 hours per week while studying in the UK

    • Handled customer enquiries for National Rail Enquiries
    • Developed professional communication, issue handling and client-service experience
    • Answered customer calls on train and booking related queries
    • Maintained above-average call handling time — 99% of calls within ACH

    Key domains

    • Customer communication
    • Issue resolution
    • Service operations

Independent & Contractual Work

Alongside my primary career, I have completed selected independent and contractual assignments. These are presented separately to distinguish them from my full-time employment history.

  1. GitHub Enterprise Migration Specialist

    2023

    Enterprise CI/CD

    Automated repository and CI/CD migration activities and developed supporting Python tooling for enterprise environments

    GitHub Enterprise migrationCI/CD migrationAutomationSecurity enablementGitHub Enterprise ServerGitHub Advanced SecurityPythonCI/CD
  2. Azure, Kubernetes & DevOps Architect

    Tietoevry · March 2022 – April 2023 · Ostrava, Czech Republic

    Factory Systems

    Designed Azure and AKS infrastructure for application migration; created reusable Terraform, Bicep/ARM and CI/CD assets; supported platform services and migration from Docker Swarm to AKS

    Azure architectureKubernetesAKSDevOpsInfrastructure as codeApplication-platform migrationAzureAKSKubernetesTerraformBicepARMAzure DevOpsAnsible AWXDocker SwarmRabbitMQRedisGrafanaVerdaccio
  3. Azure DevOps & Network Engineer

    drivvn · August 2021 – December 2021 · Remote

    Automotive Tech

    Built Azure DevOps build and release pipelines, supported AKS deployments, and worked on ingress, egress, certificates, CDN and VPN integration

    Azure DevOpsAKSNetworkingPlatform automationAzure DevOpsAKSKubernetesNGINX IngressAzure CDNVPNBashPowerShellPython
  4. Enterprise Azure & Cloud Consulting

    2021–2023

    Multi-Client

    Delivered selected Azure connectivity, platform integration, automation and infrastructure-as-code assignments for enterprise clients

    Azure connectivityPlatform integrationCloud backupSecurity controlsInfrastructure as codeExpressRouteVPNFront DoorAPI ManagementData LakeAzure Data FactoryOpenAI endpointsTerraform
  5. Cloud, DevOps & Network Consulting

    2016–2021

    Infrastructure & ADC

    Delivered cloud, container, networking and automation work for international clients

    AzureAWSAKSTerraformCI/CDNetworkingLoad balancingProxiesAutomationAzureAWSAKSTerraformNGINXHAProxyF5NetScalerPythonPowerShell
  6. Remote Network & Security Consulting

    2011–2015

    Security & Operations

    Provided remote network, firewall, VPN, monitoring, documentation and technical-training services

    Network engineeringSecurityRemote operationsDocumentationTrainingCisco ASARoutingVPNHigh availabilityNetwork monitoring

Education

  1. Master of Science (MSc) in Network Systems

    University of Sunderland

    2004–2006 · United Kingdom

    Specialized research in enterprise networking architectures, wide-area connectivity, distributed Java programming, and discrete network simulations.

    Core modules

    • Enterprise Networks
    • WAN Architectures
    • Network Simulation
    • Wireless Comms
    • Network Management
  2. Bachelor of Engineering (BE) in Electronics & Communication Engineering

    University Institute of Technology (RGPV)

    2000–2004 · India

    Rigorous foundation in telecommunications systems, signal propagation, VLSI design, semiconductor physics, and core TCP/IP data network models.

    Core modules

    • TCP/IP & OSI
    • Optical & Mobile Comms
    • VLSI Circuits
    • Telecommunications
    • Calculus & Numerical Analysis

Selected Projects

Certifications

Microsoft Certified: Azure Solutions Architect Expert

Microsoft

Active

Microsoft Certified: Azure Network Engineer Associate

Microsoft

Active

Microsoft Certified: Azure Administrator Associate

Microsoft

Active

Cisco Certified Network Professional — Enterprise

Cisco

Active

AWS Certified Solutions Architect — Associate

Amazon Web Services

Expired — Previously Held

Certified Kubernetes Administrator

CNCF

Expired — Previously Held

Latest Blog Posts