$ ./init --portfolio
Senior cloud and infrastructure consultant with 7 years designing, automating, and securing systems — from 3,500-node enterprise networks to zero-trust AWS environments. I help teams ship resilient, cost-efficient, security-gated infrastructure. Based in Lagos, Nigeria.
I operate at the intersection of systems administration, cloud engineering, DevOps, and security. Over seven years I've built and run production infrastructure end-to-end — from administering 3,500-node enterprise networks and Active Directory estates, to architecting AWS landing zones, automating delivery with Terraform and GitHub Actions, and orchestrating workloads on Kubernetes. I traced a live AWS account compromise through CloudTrail, contained it, and recovered the full spend from AWS. I cut monthly AWS spend by 52.4% through disciplined right-sizing and FinOps. I lead with a senior consultant's lens: clear trade-offs, measurable outcomes, and security gated into every layer — not bolted on after.
Comercio Partners Limited · Lagos · Hybrid
Tizeti Network Limited · Lagos
Tizeti Network Limited · Lagos
Led incident response on a live AWS account compromise from leaked developer credentials. Traced the attack via CloudTrail, contained it, rotated all credentials, hardened IAM, and secured a full cost write-off from AWS — preventing financial loss.
Designed and executed full network and physical security setup for Comercio Partners' new office — Fortinet firewall, access control, attendance systems, CCTV, and wireless APs. Zero service disruption during cutover.
Conducted authenticated light penetration testing on internal organizational applications. Identified vulnerabilities, submitted prioritized report to management, and tracked every finding through to remediation.
Cut monthly AWS spend by 52.4% through systematic EC2 right-sizing, decommissioning of idle resources, and rewriting storage lifecycle policies — without degrading performance or availability.
Directed rollout of 3,500 cloud-managed public Wi-Fi hotspots across two Nigerian states. Led a 6-engineer team and shipped on schedule, enhancing network scalability and performance.
7-stage security-gated GitHub Actions pipeline. Gitleaks → Semgrep → Snyk → Build → Trivy → Deploy. Reduced HIGH/CRITICAL findings to zero before first production deployment.
Prometheus, Grafana, and Alertmanager on Kubernetes via Helm. Custom PrometheusRule alerts routing to Slack for HighMemoryUsage, PodRestarting, and DeploymentReplicasMismatch.
PostgreSQL StatefulSet, Flask with HPA (2→5 replicas at 70% CPU), Nginx NodePort. ConfigMap/Secret management with readiness and liveness probes.
15 AWS resources as code — VPC, subnets, EC2, RDS in private subnet, least-privilege security groups. Used sensitive=true for secrets and count for subnet replication.
Flask + Gunicorn + Nginx + PostgreSQL on Docker Compose. GitHub Actions CI/CD: test → build → push to Docker Hub (latest + SHA tags) → deploy to EC2.
Production-grade shell scripts — disk monitoring, user management, log parsing, backup rotation. Shared logging library, strict mode (set -euo pipefail), ShellCheck CI — green badge on all commits.
# note: entries marked Course Completion are training programs I finished — not proctored certification exams. Listed transparently for clarity.
Google · 2026
Google · 2025
Juniper Networks · 2022
Stephane Maarek (Udemy) · 2025
Udemy · 2025
LinkedIn Learning · 2025
Open to DevSecOps, Cloud Security, and Infrastructure roles. Let's talk.