Devops Engineer Cloud

Joel Dinga

Phone: +1-647-***-**** Email: ***********@*****.*** Location: Toronto, ON Professional Summary

With over 7 years of experience in Unix/Linux system administration, server automation, DevOps, Cloud Computing, Networking, and Security, I consider myself a Cloud Agnostic DevOps Engineer. I have expertise in using IAC for infrastructure provisioning, CI/CD automation tools such as Jenkins, GitHub Actions, GitOps and ArgoCD to build, test, package, publish, and deploy monolithic, microservice applications as well as infrastructure configuration both in the Cloud and on-premise. In addition to technical skills, I leverage my professional relationships to establish positive relationships with diverse individuals, analyze problems, and deliver high-quality software in Agile environments. My problem solving skills have been recognized in various settings, and I have a proven track record of implementing effective solutions. I pride myself on being highly analytical and always seeking out the most effective and efficient solution to a given problem.

Professional Experience

Senior DevOps Cloud Engineer

Alterna Savings, January 2021 - Present

- I have implemented secure CI/CD pipelines using AWS Code Pipeline, Jenkins, Maven, and SonarQube to automate the processes involved in producing high quality software. I ensure code quality analysis and mitigate vulnerabilities and code smells, enabling faster and more reliable application deployment.

- Designed and implemented multi-OU (Organizational Unit) infrastructure setups leveraging Terraform workspaces and Terragrunt to streamline environment specific configurations and deployments. Automated complex infrastructure provisioning processes, including state management, across multiple accounts, ensuring scalability, repeatability, and consistency. Utilized version-controlled IaC workflows to enforce compliance, optimize resource allocation, and integrate seamlessly with CI/CD pipelines for dynamic and efficient infrastructure lifecycle management.

- Implemented robust monitoring solutions using AWS CloudWatch to track key performance metrics and health status of AWS resources, including EC2, RDS, and Lambda. Defined custom CloudWatch metrics and alarms to monitor critical parameters such as CPU utilization, memory usage, and application latency. Configured CloudWatch Event Rules and SNS to send real-time alerts and notifications to Slack channels, ensuring quick response to potential issues. This setup enhanced operational visibility, reduced mean time to resolution (MTTR), [and improved overall system reliability.

- Set up comprehensive monitoring and logging solutions using tools like Prometheus and Grafana for metrics visualization and alerting, the ELK Stack for centralized log aggregation and analysis. Integrated New Relic for advanced application performance monitoring (APM), enabling detailed insights into application behavior, transaction traces, and error diagnostics. These solutions provided end to-end observability, proactive issue detection, and improved system performance monitoring across diverse environments.

- Designed, deployed, and managed scalable, high-availability infrastructure on cloud platforms like AWS, Azure, and Google Cloud, ensuring systems meet dynamic business needs. Implemented auto-scaling, load balancing, and multiregional architectures to enhance performance and fault tolerance.

- Optimized cloud resource utilization by analyzing cost and performance metrics, implementing reserved instances and rightsizing strategies, and leveraging cost management tools like AWS Cost Explorer. Strengthened security by enforcing IAM policies, integrating encryption protocols, and conducting regular vulnerability assessments to safeguard cloud environments

- I have created YAML, GROOVY, JSON, HCL, Bash, and Python scripts to automate the deployment, monitoring, and configuration of applications, significantly reducing manual efforts and ensuring consistent results. These scripts have enabled more efficient and reliable management of infrastructure and applications.

- Utilized tools like Ansible and Puppet to automate and manage system configurations, ensuring consistency across development, staging, and production environments. Designed playbooks and manifests to streamline provisioning, application deployment, and patch management processes. This approach minimized configuration drift, improved operational efficiency, and ensured thatall environments adhered to defined security and compliance standards

- Implemented a comprehensive disaster recovery strategy by automating the backup of critical AWS resources, including EC2 instances, RDS databases, and S3 buckets, using AWS Backup and custom Lambda functions. Designed infrastructure and CI/CD pipelines with redundancy and failover mechanisms to ensure minimal downtime during disruptions. Regularly tested recovery procedures to validate the reliability of backups and ensure rapid restoration of services, achieving high system resilience and business continuity

DevOps Engineer

Datavail, March 2018 December 2021

- Integrated security into DevOps workflows by implementing tools like Snyk, OWASP ZAP, and SonarQube for automated vulnerability scanning during CI/CD processes - Enforced role-based access control (RBAC) and multi-factor authentication (MFA) to secure access to cloud resources and development environments, reducing the risk of unauthorized actions

- Ensured compliance with regulatory standards such as GDPR, HIPAA, and ISO27001 by automating policy enforcement using tools like AWS Config, Chef Inspect, and HashiCorp Sentinel.

- Conducted regular audits and implemented encryption protocols and secure data transfer mechanisms to maintain data integrity and privacy across the organization.

- With GitOps principles and ArgoCD, I efficiently managed my Kubernetes applications on EKS and AKS clusters. Using Git as a single source of truth, I made changes to my application configurations via pull requests, which were automatically propagated to the cluster using ArgoCD. ArgoCD's web-based UI and CLI interface provided an easy-to-use tool for managing deployments and configuration changes, and features such as rollbacks, audit trails, and RBAC policies helped ensure that my deployments were consistent and secure.

- Employed Ansible for configuration management on AWS, managing the configuration of systems and applications in a repeatable and automated manner. Developed playbooks and roles to perform tasks such as package installation, configuration file management, and service management across multiple instances. Utilized Ansible Tower for centralized management and reporting of Ansible runs.

- Designed and implemented microservice architectures on AWS, utilizing services such as EC2, ECS, EKS, Lambda, API Gateway, DynamoDB, S3, CloudFront, CloudFormation, CloudWatch, and CloudTrail to achieve scalable, fault-tolerant, and highly available systems. Utilized containerization technologies such as Docker and Kubernetes to deploy microservices and achieve resource optimization. Implemented best practices for service discovery, load balancing, and monitoring to ensure high performance and reliability

- managing networking components such as DNS configurations to enable seamless domain resolution, setting up security groups and firewalls to restrict unauthorized access, and configuring Virtual Private Clouds (VPCs) for secure and isolated environments in AWS.

- Configured and optimized load balancers NGINX and HAProxy to efficiently distribute incoming traffic across application servers, ensuring high availability and low latency. Leveraged cloud-native solutions such as AWS Elastic Load Balancer (ELB) and Azure Load Balancer to scale resources dynamically and improve application fault tolerance during peak traffic periods.

- Leveraged Database as a Service (DBaaS) solutions like Amazon RDS, Google Cloud SQL, and Azure SQL Database to simplify database management tasks, including scaling, patching, and monitoring. Implemented performance tuning techniques

such as query optimization, indexing strategies, and read replicas to enhance database efficiency and support high-demand applications.

Cloud Engineer

Dropbox, January 2016 - March 2018

- Expertise in AWS cloud services for highly available and secure SaaS applications: As a Cloud Engineer at a SaaS company like Dropbox, I have developed extensive expertise in using AWS cloud services to deploy highly available and secure SaaS applications.

- Designed, deployed, and managed scalable, secure, and cost-optimized cloud infrastructure on AWS, Azure, and Google Cloud.

- Automated cloud resource provisioning using Terraform and AWS CloudFormation, ensuring version-controlled, repeatable, and scalable infrastructure.

- Implemented monitoring solutions with AWS CloudWatch, Prometheus, and ELK Stack to track performance metrics, analyze logs, and set up alerts for system reliability. - Enforced cloud security best practices by implementing IAM policies, encryption standards, and security scanning tools like AWS Inspector, ensuring compliance with SOC.

- Developed disaster recovery strategies, including automated backups for RDS, S3, and EC2, and regularly tested recovery procedures for high availability and resilience. - Configured VPCs, subnets, and security groups, and deployed load balancers like AWS ELB and NGINX to optimize traffic distribution and network security.

- Deployed and managed containerized applications using Docker and Kubernetes, enabling efficient resource utilization and scaling.

- I have experience with services such as EC2, RDS, S3, CloudFront, CloudFormation, and CloudWatch to create scalable and fault-tolerant infrastructure for hosting the application.

- I have also implemented AWS security best practices, including VPCs, Security Groups, IAM roles, and encryption, to ensure customer data confidentiality and compliance with industry standards.

Skills and Tech Stack

AWS · Azure · Infrastructure as code (IaaC) · GitOps and ArgoCD · Continuous Integration and Continuous Delivery (CI/CD) with Jenkins & GitHub Actions · Docker · Kubernetes · Microservice Design and Implementation · Git · Logging and Monitoring(EFK) · Ansible · Terraform · Lambda · Datadog · Grafana · Traefik · HAProxy · Python · WordPress · Go · Java · Serverless · ECS · Docker Swarm · NGINX · SSL Certificates · Digital Certificates.

Educations & Certifications

- AWS, Certified Cloud Practitioner

- AWS, Certified Solutions Architect Associate

- Microsoft Certified, DevOps Engineer Expert

- AWS, Certified Solutions Architect Professional,

- University of Yaoundé 1, Bachelor of Science in Computer Science, December - Seneca College, Computer Systems Technician

References

Available upon Request

Contact this candidate