Infrastructure and security, treated as one job.
I harden Kubernetes and cloud environments, design Zero Trust architectures, and build CI/CD pipelines with security gates built in rather than bolted on. Currently I keep payment infrastructure reliable as a DevOps / Product Reliability Engineer at Hubtel in Accra.
Alongside engineering, I train. At JOMACS IT Solutions I teach Kubernetes end to end: foundations, workloads, cluster security, network policies, Helm, Kustomize and cluster setup. I also practise digital forensics through the Hive Consult Digital Forensics Training Programme, producing formal investigative reports on disk, browser, memory and device evidence.
Where I've shipped.
-
Oct 2024 – now
CURRENTDevOps / Product Reliability Engineer (SRE)
Hubtel Ltd · Accra, Ghana
- Hardened TLS on Nginx reverse proxies, cutting security incidents by 45% year over year.
- Built ELK Stack and Datadog dashboards for real-time log aggregation, reducing MTTR by 35%.
- Standardised build, test and deploy in Azure DevOps pipelines, tripling release frequency.
- Run containerised workloads on AKS with Helm charts for 20+ services; own IAM policies, encryption standards and compliance controls.
-
Sep 2024 – now
CURRENTDevOps / DevSecOps Trainer
JOMACS IT Solutions · Calgary, Canada
- Design and deliver curricula on AWS, Docker, Kubernetes, CI/CD and cloud-native security controls.
- Mentored and upskilled 200+ engineers, adapting modules from learner performance and feedback.
-
Mar 2021 – Aug 2024
DevOps / Cloud Engineer
JOMACS IT Solutions · Calgary, Canada
- Implemented Zero Trust with mTLS, workload identity federation and AWS secrets management across Kubernetes, reducing attack surface by 70%.
- Embedded SAST/DAST scanning and Cosign image signing in CI/CD, reaching 98% patch compliance.
- Deployed EKS with IRSA/OIDC federation for pod-level IAM: zero hard-coded credentials in production.
- Migrated infrastructure to Terraform, cutting provisioning from days to under 30 minutes.
- Built Prometheus, Grafana and Datadog observability with runbooks that reduced MTTD by 55%.
-
May 2019 – Mar 2021
Linux Systems Administrator / Cloud Engineer
ParbTech Solutions · Accra, Ghana
- Managed Ubuntu and CentOS fleets; automated backups, log rotation and provisioning in Bash and Python, saving 15+ hours a week.
- Configured iptables firewalls and SSL/TLS certificates; ran internal workshops on Linux, Git and AWS.
Verified credentials.
Security & Forensics
Amazon Web Services
Kubernetes & Platform · KodeKloud
Evidence, handled properly.
As a Digital Forensics Analyst in the Hive Consult Digital Forensics Training Programme, I work structured cases from acquisition to report: preserve the image, prove its integrity, recover the artefacts, and write findings a reviewer can trace back to source.
- Disk imaging
- Hashing & integrity
- Chain of custody
- File analysis
- Browser history analysis
- Registry analysis
- Email analysis
- Data carving
- Data extraction
- EXIF & metadata
- Steganography
- Cryptography
- Memory analysis
- Network analysis
- Vehicle forensics
- Drone (UAV) forensics
Security built into the platform.
Zero Trust Architecture
mTLS, workload identity federation, Vault secrets management and Kubernetes network policies, with full audit logging.
GitOps with security gates
GitHub Actions and ArgoCD with automated SAST/DAST, environment promotion gates and canary or blue-green rollouts.
TLS hardening & PKI automation
Automated Let's Encrypt lifecycle across 100+ endpoints, enforcing TLS 1.3 and retiring legacy SSL/TLS.
- Security
- IAM, IRSA/OIDC, Zero Trust, mTLS, secrets management, SAST/DAST, vulnerability and patch management, TLS & PKI
- Cloud
- AWS, Azure
- Containers
- Docker, Kubernetes (EKS, AKS), Helm, Kustomize, Istio
- Infrastructure as Code
- Terraform, Ansible, CloudFormation
- CI/CD
- GitHub Actions, GitLab CI, Jenkins, Azure DevOps, ArgoCD
- Observability
- Prometheus, Grafana, Datadog, ELK Stack, CloudWatch, OpenTelemetry
- Languages
- Python, Bash, Node.js, YAML
I write the guides I wish I'd had.
Kubernetes Zero to Hero (11 episodes), Linux Zero to Hero, and deep dives on AWS, GitHub Actions, Docker and DevSecOps. New posts on Medium appear here automatically.
B.Sc. Computer Engineering
Kwame Nkrumah University of Science and Technology (KNUST) · Kumasi, Ghana · 2006 – 2010