Senior DevOps/SRE

Lead AWS cloud architecture and infrastructure design sessions with stakeholders, tailoring solutions to business requirements for fintechs in Nigeria; design and provision secure, multi-AZ environments using Terraform, implementing VPCs, public/private subnets, NAT & Internet Gateways, IAM roles, ALB, WAF, Route 53, and RDS, while enforcing cloud security best practices Lead the automation of software deployment pipelines, collaborating with backend engineers to architect and deploy a cloud-native microservices platform on Amazon ECS/EKS, containerizing and running 11 independent services (API Gateway, Direct debit, Authentication, User, Wallet, Transaction, Payment, Support, Notification, RabbitMQ, and Keycloak). Lead end-to-end incident management for production outages, performance degradation, and data loss; drive post-mortem analysis and implement long-term corrective actions and reliability guardrails. Architecting and deploying CI/CD pipelines with GitHub Actions to automating Docker image builds, pushes to Amazon ECR, and rolling deployments to EKS while implementing security-as-code across CI/CD pipelines and IaC by integrating Trufflehog, Trivy, SAST, DAST, ensuring early vulnerability detection and policy enforcement across the SDLC. Execute infrastructure upgrades (EKS, operating systems) and routine maintenance while analyzing system performance and traffic patterns to forecast capacity needs, and conducting load testing and chaos engineering experiments to validate system resilience under failure conditions.

Architected the automation of secured and scalable Terraform-based network segmentation infrastructure across Staging, PCI-DSS CDE, and Production on AWS cloud infrastructure enforcing strict isolation, auditability, and compliance through CI/CD-only deployments and approval gates reducing manual provisioning time by 40% and ensuring faster delivery of cloud-based solutions. Setup and Optimized CI/CD pipelines, for Dockerized 120+ microservices powering Carbon’s SME AI-powered banking platform on AWS ECS/EKS using AWS CodePipeline, CodeBuild, and ECR, reducing deployment time by 40% through dependency caching, parallel execution, and seamless Jenkins and AWS DevTools integration accelerating delivery of customer-facing features. Led SRE initiatives for payment systems by designing SLO-driven reliability models and implementing end-to-end observability with monitoring solutions (Prometheus, Grafana, Uptime-Kuma, and AWS CloudWatch) for critical bank services like Card Services, BVN Services, Bill Transfers, App Logins and Loan Disbursements charts enabling early detection, systems health performance and rapid incident responses achieving 99.9% production uptime. Conducted regular security audits and vulnerability assessments using tools like amazon inspector, and Aqua Security, AWS Security Hub, Amazon GuardDuty, AWS Config leading to the identification and remediation of 50+ critical vulnerabilities and enhancing overall system security. Appointed by VP of Engineering in 2024 to lead PCI DSS 4.0 In 2024 as a Security Analyst. Spearheaded the end-to-end delivery of Q1-Q4 objectives through effective stakeholder collaboration and technical leadership, culminating in the successful achievement of PCI DSS 4.0 certification Designed a secure Card Data Environment for the Carbon MFB Card Service Platform, integrating third-party network flows (Paystack) and Providus Bank from the ground up using a Zero Trust architecture, ensuring PCI DSS compliance, robust network security, and high operational resilience. Led a cost-optimization initiative by designing and standardizing multi-platform container base images (linux/amd64 & linux/arm64) to enable workloads on AWS Graviton (ARM64) across EKS, ECS, and Fargate Implementing a staged rollout strategy executing performance benchmarking and compatibility validation across all staging services before promoting the architecture to production environments resulting in significantly reduced container and compute costs while maintaining service reliability. Developed an automated release workflow for Android SDKs with Gradle and AWS CodePipeline, streamlining artifact versioning and S3 storage integration. Assist development teams with the deployment of Java, C#, Python, and Node.js applications and Integrated DevSecOps practices by incorporating vulnerability scans and static analysis into CI/CD workflows, proactively addressing security gaps pre-release.

Provided end-to-end IT and network support, including monitoring network uptime, deploying and maintaining Windows operating systems, supporting VoIP softphone services, Active Directory support, installing structured cabling, and managing enterprise network infrastructure. Extended network infrastructure to a newly acquired adjacent office by setting up LAN, WAN, and VLAN architectures, RAC with Cisco switches, Huawei enterprise router and iKuai access points for seamless Connectivity. Coordinated a hybrid infrastructure setup by connecting HQ and branches with AWS Site-to-Site VPNs and secure OpenVPN access, ensuring resilient and encrypted communications.