Senior DevSecOps & Cloud Architect | Building Secure, Scalable Platforms from Scratch | Telco & Fintech Veteran | AWS, K8s, pfSense, Wazuh & IaC Expert.
Senior DevSecOps, Cloud Architect & Platform Engineer (CKA | AWS Certified)
With over 10 years of experience engineering mission-critical infrastructure for the Telecommunications and Fintech sectors, I specialise in building secure, agile, and scalable cloud platforms from the ground up.
I don't just maintain servers; I architect complete ecosystems. My approach combines the reliability of enterprise standards with the flexibility and cost-efficiency of Open Source Software (FOSS). I help companies move away from "black box" solutions to fully controlled, observable, and automated environments.
What I Bring to Your Project:
🚀 Infrastructure from Scratch & IaC: I build agility into your foundation. Whether it's bare metal or Cloud (AWS), I use Terraform and Ansible to create reproducible, immutable infrastructure.
Key Tech: Terraform, Ansible, Python, Bash Scripting.
🛡️ Advanced Network Security & VPNs: I master pfSense to build complete cloud networks. I design secure Site-to-Site VPN architectures using WireGuard and IPsec (StrongSwan) to ensure encrypted, robust connectivity between your branches and cloud resources.
🔐 DevSecOps & Security Hardening (SOC/SIEM): Security isn't an afterthought; it's the pipeline. I integrate OWASP ZAP for DAST and SonarQube for SCA/SAST. I build custom SOC/SIEM solutions using Wazuh integrated with the ELK Stack, giving you enterprise-grade threat detection without the enterprise license fees.
☁️ Kubernetes & Container Orchestration: As a Certified Kubernetes Administrator (CKA), I design production-ready clusters. I handle ingress (Traefik, Nginx, HAProxy) and ensure your microservices scale effortlessly.
Key Tech: Kubernetes (K8s), Docker Swarm, Helm.
📊 Observability & Reliability (SRE): If you can't measure it, you can't manage it. I deploy full-stack monitoring using Zabbix for infrastructure metrics and Prometheus/Grafana for application insights, ensuring 99.99% uptime.
Why work with me? I have navigated the strict compliance requirements of Fintech and Telco. I understand that "fast" cannot compromise "secure." If you need an engineer who can open Vim, write the script, secure the network, and automate the deployment pipeline all in one go, let’s talk.
Work Terms
Communication: I prioritize clear, asynchronous communication. I am available for voice/video syncs during project kickoff and critical milestones. I am comfortable working via Slack, Teams, or Jira.
Methodology: I follow Agile/DevOps methodologies. For every project, I provide:
Architecture Design: Visual diagrams of the proposed solution.
Implementation: All code committed to Git (Infrastructure as Code).
Documentation: Detailed SOPs and hand-over documentation (Markdown/Confluence).
Payment: I prefer milestone-based payments for project work (e.g., 30% upfront, 30% mid-point, 40% upon handover and verification).