Accra, Ghana · DevSecOps · Cloud · DFIR

Samuel Obeng Amoako builds secure platforms and teaches others to.

DevOps/DevSecOps, SRE and Cloud Engineer and Cloud Solutions Architect with 7+ years across AWS, Kubernetes and Linux. DevOps/DevSecOps trainer at JOMACS IT Solutions and a certified computer forensics analyst.

samuel.yamlkubectl apply -f
apiVersion: people/v1
kind: Engineer
metadata:
  name: samuel-obeng-amoako
  region: accra-gh
spec:
  roles: [devops, devsecops, sre,
          cloud-architect, trainer]
  platforms: [aws, azure, kubernetes]
  security: [zero-trust, sast-dast, dfir]
status:
  certifications: 10
  engineersTrained: 200+
  yearsInProduction: 7  # since 2019
metadataAbout

Infrastructure and security, treated as one job.

I harden Kubernetes and cloud environments, design Zero Trust architectures, and build CI/CD pipelines with security gates built in rather than bolted on. Currently I keep payment infrastructure reliable as a DevOps / Product Reliability Engineer at Hubtel in Accra.

Alongside engineering, I train. At JOMACS IT Solutions I teach Kubernetes end to end: foundations, workloads, cluster security, network policies, Helm, Kustomize and cluster setup. I also practise digital forensics through the Hive Consult Digital Forensics Training Programme, producing formal investigative reports on disk, browser, memory and device evidence.

7+
years in DevOps, cloud and SRE
200+
engineers trained and mentored
10
licences and certifications
11
episodes of Kubernetes Zero to Hero
spec.historyExperience

Where I've shipped.

  1. Oct 2024 – now
    CURRENT

    DevOps / Product Reliability Engineer (SRE)

    Hubtel Ltd · Accra, Ghana

    • Hardened TLS on Nginx reverse proxies, cutting security incidents by 45% year over year.
    • Built ELK Stack and Datadog dashboards for real-time log aggregation, reducing MTTR by 35%.
    • Standardised build, test and deploy in Azure DevOps pipelines, tripling release frequency.
    • Run containerised workloads on AKS with Helm charts for 20+ services; own IAM policies, encryption standards and compliance controls.
  2. Sep 2024 – now
    CURRENT

    DevOps / DevSecOps Trainer

    JOMACS IT Solutions · Calgary, Canada

    • Design and deliver curricula on AWS, Docker, Kubernetes, CI/CD and cloud-native security controls.
    • Mentored and upskilled 200+ engineers, adapting modules from learner performance and feedback.
  3. Mar 2021 – Aug 2024

    DevOps / Cloud Engineer

    JOMACS IT Solutions · Calgary, Canada

    • Implemented Zero Trust with mTLS, workload identity federation and AWS secrets management across Kubernetes, reducing attack surface by 70%.
    • Embedded SAST/DAST scanning and Cosign image signing in CI/CD, reaching 98% patch compliance.
    • Deployed EKS with IRSA/OIDC federation for pod-level IAM: zero hard-coded credentials in production.
    • Migrated infrastructure to Terraform, cutting provisioning from days to under 30 minutes.
    • Built Prometheus, Grafana and Datadog observability with runbooks that reduced MTTD by 55%.
  4. May 2019 – Mar 2021

    Linux Systems Administrator / Cloud Engineer

    ParbTech Solutions · Accra, Ghana

    • Managed Ubuntu and CentOS fleets; automated backups, log rotation and provisioning in Bash and Python, saving 15+ hours a week.
    • Configured iptables firewalls and SSL/TLS certificates; ran internal workshops on Linux, Git and AWS.
status.credentialsCertifications

Verified credentials.

Security & Forensics

Amazon Web Services

AWS Certified Developer – Associate
Amazon Web Services
Aug 2025Valid to Aug 2028
Verify on Credly ↗
AWS Certified Solutions Architect – Associate
Amazon Web Services
Sep 2024Valid to Sep 2027
Verify on Credly ↗

Kubernetes & Platform · KodeKloud

spec.dfirDigital Forensics

Evidence, handled properly.

As a Digital Forensics Analyst in the Hive Consult Digital Forensics Training Programme, I work structured cases from acquisition to report: preserve the image, prove its integrity, recover the artefacts, and write findings a reviewer can trace back to source.

  • Disk imaging
  • Hashing & integrity
  • Chain of custody
  • File analysis
  • Browser history analysis
  • Registry analysis
  • Email analysis
  • Data carving
  • Data extraction
  • EXIF & metadata
  • Steganography
  • Cryptography
  • Memory analysis
  • Network analysis
  • Vehicle forensics
  • Drone (UAV) forensics
spec.workloadsSelected projects

Security built into the platform.

Zero Trust Architecture

mTLS, workload identity federation, Vault secrets management and Kubernetes network policies, with full audit logging.

−70% attack surface

GitOps with security gates

GitHub Actions and ArgoCD with automated SAST/DAST, environment promotion gates and canary or blue-green rollouts.

−80% rollback time

TLS hardening & PKI automation

Automated Let's Encrypt lifecycle across 100+ endpoints, enforcing TLS 1.3 and retiring legacy SSL/TLS.

SSL Labs A+
Security
IAM, IRSA/OIDC, Zero Trust, mTLS, secrets management, SAST/DAST, vulnerability and patch management, TLS & PKI
Cloud
AWS, Azure
Containers
Docker, Kubernetes (EKS, AKS), Helm, Kustomize, Istio
Infrastructure as Code
Terraform, Ansible, CloudFormation
CI/CD
GitHub Actions, GitLab CI, Jenkins, Azure DevOps, ArgoCD
Observability
Prometheus, Grafana, Datadog, ELK Stack, CloudWatch, OpenTelemetry
Languages
Python, Bash, Node.js, YAML
metadata.originEducation

B.Sc. Computer Engineering

Kwame Nkrumah University of Science and Technology (KNUST) · Kumasi, Ghana · 2006 – 2010

spec.endpointsContact

Let's talk platforms, security or training.

Email
samuel.amoako@outlook.com
LinkedIn
in/samuel-obeng-amoako-jnr
Open profile ↗
Medium
12footsteps.medium.com
Read articles ↗