Emilio Figaro

Cloud Solution Architect

#cloud #devops #security #cybersecurity #azure #aws #gcp

about my job journey

Along with my 17 years of experience, I’ve developed deep technical skills in Architecture and Systems development and management always driven by curiosity and sense of responsibility. These two aspects combined with an uninterrupted study allowed me to develop leadership skills. As consultant, I worked for different kind of customers, travelling between Italy and Europe, allowing deepening my knowledge in different architectures and technologies.

I started as a developer when I was just a student but I’ve always shown my interest for network, security and system management so I attended courses in Linux and Solaris System Adm, Bea Middleware System Adm, Scripting, Cisco and certifications in BigIp F5 loadbalancer.

Especially during my work experience in Accenture, I showed my interest for Network Architecture, High-Availability, Platforms’ HW Sizing and migration strategy supporting the application software and business of an enterprise.

My technical skills together with my attitude to explain clearly and simply allowed me to be a technical interface between customers and my company.

Since 2015, I’ve been working in “Poste Italiane Group” joining the Architecture and Innovation group for a very big enterprise company. I carried out a PoC to compare Microsoft Azure and Aws cloud solutions using a specific project based on classic three-layer architecture. This allowed me to be the promoter of cloud adoption in poste italiane.

I’ve designed and implemented the architecture blueprint for hybrid datacenters hosted on Azure cloud. From the collaboration with security group, I’ve handled aspect of encryption vm’s (using onprem HSM and cloud Keyvault), Active directory federation, environments’ segregation, Categorization of PaaS based on specific features (service tunnel, encryption and possibility to manage upgrade).

From the collaboration with network team I’ve dealt primary connectivity such as Express Route, firewall for the DMZ internal and External and peering between the different environment areas, network address spaces and network security groups.

Working with implementation group I’ve automatized the deploy, I’ve hardening the vm’s and defining the guidelines of log management, ntp, antivirus, licensing and patching systems.

From the collaboration with development teams, I’ve suggested the correct use of specific cloud PaaS, SaaS and IaaS services and how they can integrate them.

In the second part of 2017, I’ve designed the blueprint architecture also with AWS and Oracle translating the above mentioned guidelines using specific features of cloud provider.

After this phase, I started to supporting projects to adapt existing architectures to cloud features and their migration on cloud; Also design innovative and scalable solutions (design, overseen developer as technical lead, overseen deploy automation) taking requirements with internal clients.

On my last work experience in Nestle I expand my knowledge to work in a global company working with people all around the globe and with different background. As part of CCOE group I also been speaker in company’s conference to evangelize the usage of the cloud platforms (Azure, AWS and GCP).

I love to be always updated on the latest technology and study for a new certification that can help me to expand my job. Actually I got Azure Cloud Solutions Architect Expert certification, Azure DevOps Engineer Expert certification, Azure Administrator Associate certification, Azure security engineer Associate certification and some other certifications in azure and AWS too.

continue checking my jobs list

work experiences

05/2020-on going

senior cloud solution architect @Nestlè

  • As part of a global Cloud group, we define the B2B, B2C and B2E area cloud strategy of the Nestlè Group dealing with the main cloud service providers Azure, Aws and GCP
  • Speaker at global J2C conferences
  • CCOE member
12/2015 – 05/2020

Cloud and Infrastructure Solution Architect @Poste Italiane

  • started the cloud journey setting up the blueprint
  • migration of thousand workloads from onprem
  • new cloud native architectures
  • CCOE member
09/2013 - 11/2015

Project Manager for Poste Vita @Altran

  • Responsible for Exchange 2010 migration to Office 365;
  • Enabling O365 Apps: OneDrive, Sharepoint online and Skype for Business online and migration of data from onprem servers;
  • Proof of Concept of a chatbot for Office365 service desk: Skype and Telegram bot to help customers during migration. 
12/2007 - 08/2013

Technical Leader / Team Leader @Accenture

  • architect leader for projects for Telco customer (Telecom italia, Telefonica O2, etc)
  • configuration management for ABIC (accenture broadband innovation center)
07/2007 - 12/2007

Java Developer / System Administrator @amifb

for the customer Telecom italia

04/2006 - 07/2007

Analyst and Java Developer @Software Design

Aerospace sector developer for Gesac - BAA

01/2006 - 04/2006

Java Developer / system administrator @Università di Salerno

system administrator and java developer for the project "advanced timestamp" -  production deployment of my thesis

educations

1999-2005

Università di Salerno

laurea in informatica - reti di calcolatori

1994-1999

Istituto Tecnico Industriale

sezione Informatica

professional skills

Troubleshooting

proactivity

team work

Technical Leadership

High context switch

Padel

Hiking

Snowboarding

Biking

Swimming

Escape rooms Game

Diving

sport and passions outside the office

Here on the left you can find a list of sports i do. This list is only the latest activities i'm continuing to do, alone or with friend.....



continue to follow your passions

Blog and Articles

Each week i will add an article or a blog topic to help you with your cloud environment about tips or troubleshooting or explanation of anything i found useful (or you can suggest using the related module)

The topics can also contains scripts or a small code.


The scope is to be a practices guide, not theory or long long pages to read, more handover


Since the cloud providers update regularly their products adding feature and changing configuration, each page will display a date to allow you to understand if the configurations explained can be changed or if the article has been published recently.


  • how to get your own carbon footprint?

    #cloud #emissions #GHG #azure #gcp #aws #footprint #carbonfootprint


    10/10/2022


    Do  you know what is Carbon footprint? 

    A carbon footprint is the total greenhouse gas (GHG) emissions caused by an individual, event, organization, service, place or product, expressed as carbon dioxide equivalent (CO2e). Greenhouse gases, including the carbon-containing gases carbon dioxide and methane, can be emitted through the burning of fossil fuels, land clearance and the production and consumption of food, manufactured goods, materials, wood, roads, buildings, transportation and other services.


    In most cases, the total carbon footprint cannot be calculated exactly because of inadequate knowledge of data about the complex interactions between contributing processes, including the influence of natural processes that store or release carbon dioxide. For this reason, Wright, Kemp, and Williams proposed the following definition of a carbon footprint:

    A measure of the total amount of carbon dioxide (CO2) and methane (CH4) emissions of a defined population, system or activity, considering all relevant sources, sinks and storage within the spatial and temporal boundary of the population, system or activity of interest. Calculated as carbon dioxide equivalent using the relevant 100-year global warming potential (GWP100).



    In a cloud environment the carbon footprint is how much GHG emissions your environment is causing. Those emissions, of course, are done by the cloud service provider but depends on which service you are requesting (VMs, PaaS, SaaS, CaaS, FaaS, etc).


    Each Cloud Service Provider (CSP)  allow you to estimate the total carbon footprint of your environemnt.


    AWS: customer carbon footprint tool


    Azure: tool on powerbi available here


    GCP:  carbon footprint tool in preview 


  • How Azure Storage account can be secured to share content publicly

    17/10/2022


    go to the article -->

  • How to setup AWS CLI with Zscaler

    How to Setup AWS CLI with Zscaler

    Using the AWS Command Line Interface (CLI) can be quite challenging when operating behind a Zscaler firewall. This is not an issue with AWS itself, but rather with the Zscaler security configuration that can block certain requests made by the AWS CLI.


    In this article, I will share my experience and provide a solution to help you overcome this hurdle.


    Understanding the Issue

    When attempting to use AWS CLI while connected to a network that employs Zscaler, users may encounter connectivity issues. These problems arise because Zscaler acts as a secure gateway, inspecting and controlling traffic to ensure compliance and security. As a result, requests from AWS CLI may not go through successfully, leading to frustration.


    The Solution

    While we are not the designated support group for Zscaler-related issues, I can assist you based on my own experience. Here is a step-by-step guide to help you set up the AWS CLI to work with Zscaler:


    Download the  ROOTCA certificate from your company :


    Access the Certificate Manager on your laptop.

    Download the ROOTCA certificate, which is necessary for establishing a secure connection.

    Export the Certificate in pem format and save it on your laptop.


    Once you have it, you need to setup your environment variable.


    Depending on your operating system, you will need to run a specific command. The command varies between Windows and macOS.

    For macOS, use the following command in your terminal:


    export AWS_CA_BUNDLE=~/path/to/your/RootCA.pem



    For Windows, you can use:

    set AWS_CA_BUNDLE=C:\path\to\RootCA.pem


    Ensure that you replace the path with the full path location where you saved the ROOTCA file.


    Now you are ready to use the aws cli:

    After exporting the certificate, you can proceed to use the AWS CLI commands as usual. The exported certificate will help facilitate the connection through the Zscaler firewall.

    By following these steps, you should be able to use the AWS CLI effectively, even when behind a Zscaler firewall.


    Conclusion

    In conclusion, while using AWS CLI behind a Zscaler firewall can pose some challenges, the solution is straightforward. By downloading the Nestle ROOTCA certificate and exporting it correctly, you can ensure that your AWS CLI commands are executed successfully. If you encounter further issues, please reach out to your IT support for additional assistance.





  • How to setup and use AssumeRole on AWS

    coming soon....

  • what's the different between public endpoint and scm endpoint on an Azure webapp

    will be published on 24/10/2022

  • How to login and use the Azure Admin feature on a sql DB [on 31/10/2022]

    will be published on 31/10/2022

  • How to login and use the Azure Admin feature on a mysql DB [on 31/10/2022]

    will be published on on 31/10/2022

LANGUAGE

English

Italiano

Nuovo titolo

Nuovo titolo

keep in touch

Ideas to share?

suggestions?

need help?


fill the contact module and i will contact you back or just contact me on the main social network: