Certified AWS Solutions Architect Associate with over 8 years of solid experience architecting on AWS cloud platform predominantly in the areas of Finance, and Communication industries. Had been involved in technical roles collaborating and enabling customers to thrive, realize innovative solutions, successfully utilize AWS ecosystem with Machine Learning and Artificial Intelligence services to transform their business. Developed technically compliant cloud-native solutions that aligned with best practices and principles using cutting-edge technology.
Skills
System configurations and maintenance
Network security and protocols
Automation of common tasks
Infrastructure and event monitoring
Operational analysis
Linux and Windows administration
Diagnosing and resolving bugs
Data, systems, and asset security
Programming with Python, Bash and YAML
Infrastructure development
Experience
Cloud Solutions Architect, 06/2018 - Current Avanade – Milwaukee, WI,
Worked with team to design and implement highly available, cost-effective, fault-tolerant systems using EC2 Auto Scaling, Elastic Load Balancing, cross-AZ, and multi-AZ deployments
Translated customer requirements into technical specifications, and communicated requirements to developers
Served as Subject Matter Expert (SME), and point of contact for internal and external clients, and managed over 20 customer calls a day
Deep understanding of AWS global infrastructure including regions, availability zones, and edge locations
Configured launch templates, Auto Scaling groups, and CloudWatch alarms for Amazon EC2 Instances
Architected public and private subnets to isolate public from private resources, and configured security groups to secure access to private resources including application servers and databases
Designed and assisted in the implementation of serverless architecture model (SAM) using Cognito, Amazon API Gateway, AWS Lambda, S3, and Amazon DynamoDB
Configured NAT gateway to enable resources in the private subnet be updated via the internet while prohibiting those resources from initiating a connection to the internet for security
Leveraged EventBridge, SNS, and SQS in event-driven architecture and pub/sub model with asynchronous patterns to decouple, integrate, and scale services
Designed efficient database workloads for RDS, DynamoDB to reduce latency, optimize throughput using Read Replicas, caches, and TTL
Optimized networking for global applications using S3 Transfer Acceleration, Route 53 latency based routing, Global Accelerator, and CloudFront
Monitored infrastructure and applications on EC2, Lambda, and across ECS, AWS Fargate, EKS by collecting metrics, logs, events, and troubleshooting using CloudWatch
Boosted network system, data availability, and integrity through preventive maintenance and upgrade
Implemented event-driven automation for quick respond and incidents remediation actions reducing MTTR by 10% using Amazon CloudWAtch and AWS Lambda
Collected and Analyzed metrics, logs, and events with Athena, QuickSight, and CloudWatch Log Insights
Optimized cost through a mix of Reserved, Spot and On-Demand Instances, EC2 instance types, Auto Scaling, and S3 storage classes that reduced cost by 15%
Engaged in proactive resource optimization, capacity automation, resource planning through different scaling options and policies which boosted operational performance by 10%
Participated in all phases of system development life cycle from requirements analysis through system implementation
Ensured data protection and integrity through encryption at rest of S3 objects, EBS volumes, and databases with KMS, and HTTPS, for data in transit
Analyzed and made recommendations in the areas of cost optimization, performance, security, fault tolerance, and service limits using AWS Trusted Advisor
Leveraged AWS IAM service to implement a strong identity foundation and enforced least privilege principle, credentials management, and MFA
Experienced in AWS Organizations SCPs to centrally manage and govern environment as resources grow and scale-out
Leveraged AWS Config, and CLoudTrail for governance and compliance to take inventory and keep track of resource configuration, change management, security analysis and troubleshooting
Configured cross-account access using STS to facilitate resource sharing and enable developers update applications in the production account
Set up controls using preventive and detective guardrails in Control Tower for unauthorized actions and detected security weaknesses such as unencrypted EBS volumes
Reviewed and established metrics and alarms for tracking based on KPI in order to use computing resources efficiently to meet system requirements
Configured mandatory tagging of EC2 Instances, EBS volumes and security groups through automation with Amazon CloudWatch and AWS Lambda
Leveraged S3 storage classes to store and managed data. Used Intelligent-Tiering, and configured S3 life cycle policies to transition and archive objects in S3 Glacier
Scheduled regular backups by leveraging EC2 Lifecycle Manager to create snapshots of EBS volumes and define retention period as a cost-saving measure
Implemented network firewalls at all layers using security groups, NACL, and AWS WAF, Advanced Shield against DDoS attacks and common web exploits
Experienced in computing services: EC2 instances, containers, and Lambda functions
Participated in designing and implementation of disaster recovery and failover plans with best RPO and RTO as applicable
Experienced in network equipment: VPC, subnet, route table, Internet Gateway, NAT gateway, VPC Endpoint, AWS Direct Connect, VPG, VPC peering and Bashion Host
Evaluated existing procedures and processes and made proactive adjustments to meet changing demands and improve efficiency
Wrote and maintained custom scripts to increase system efficiency and performance
Protected data through encryption with KMS, managed and secured database secrets (passwords) with Secret Manager and Parameter Store
Configured and monitored alerts for important events through system integration with SNS to send emails and SMS notifications that enabled traceability and timely interventions
Used security tools including GuardDuty, Macie and Detective to monitor resources, generate detailed findings and identify root causes of security issues
Cloud Engineer, 01/2012 - 07/2012 American Express – North Carolina, NC,
Worked with team to design, build, implement and support CI/CD toolchain using AWS CodeCommit, CodeBuild, CodeDeploy, Elastic Beanstalk, S3, and ECS
Performed deployments, upgrades, configurations in controlled pre-production and production environments while minimizing down time
Deployed web applications on AWS Elastic Beanstalk
Deployed, managed and scale containerized applications using Docker Containers on Amazon ECS, Fargate, ALB with dynamic port mapping
Used Ansible for cloud provisioning and configurations management
Actively managed, and monitored cloud infrastructure on AWS: EC2, security groups, S3, RDS, load balancers, and networking
Used CloudFormation framework to create templates and provisioned resources including VPC stack, security group stack and network load balancers stack
Set up and configured centralized multi-account and multi-region patching of 98 servers with AWS System Manager Automation
Education
Bachelor of Science: Economics, Expected in 11/2014 - University of Buea - Buea, Cameroon, GPA:
Resumes, and other information uploaded or provided by the user, are considered User Content governed by our Terms & Conditions. As such, it is not owned by us, and it is the user who retains ownership over such content.
