DevSecOps Platform Engineer - Cloud & IaC

JOSIAH CHUKU

DevSecOps DevOps Site Reliability Engineer Platform Engineer Cloud Engineer Cloud Architect Data Engineer Ai Engineer

Fort Walton Beach, Florida ********@*****.***

PROFESSIONAL SUMMARY

•Certified Azure DevOps and Terraform engineer with 10+ years of experience in Cloud (Azure, AWS, GCP), DevOps, configuration management, infrastructure automation, and CI/CD. Experienced with Unix/Linux and Windows server administration.

•Hands-on experience administering Microsoft Azure Services including App Services, Azure Kubernetes, Azure SQL Database, Azure AD, Blob Storage, Azure Functions, Azure Data Factory, and Service Bus.

•Experienced with AWS services: IAM, VPC, EC2, ECS, EBS, RDS, S3, Lambda, ELB, Auto Scaling, Route 53, CloudWatch, CloudTrail, SQS, and SNS. Proficient with CloudFormation for cloud automation.

•Expertise designing and implementing CI/CD pipelines across environments using Azure DevOps, GitHub Actions, and Jenkins, enabling agile deployment to Azure Kubernetes Services (AKS).

•Extensive experience with GCP tools including BigQuery, Cloud Storage, Dataflow, Google Kubernetes Engine, Cloud SQL, and Dataproc.

•Expertise configuring monitoring and alerting tools including Prometheus, Grafana, and ELK; deploying dashboards for individual applications in Kubernetes environments.

TECHNICAL SKILLS

Cloud Platforms

Microsoft Azure (incl. Azure Government Cloud), AWS, GCP

AWS Services

EC2, VPC, IAM, EBS, S3, ELB, Auto Scaling, Elastic Cache, API Gateway, Route 53, CloudWatch, SQS, SNS, SWF, AWS Glue, Database Migration Service

Azure Services

App Services, Key Vault, Function App, Blob Storage, Azure AD, Service Bus, ACR, AKS, Azure SQL, Cosmos DB, ARM Templates, Data Factory, Databricks, Data Lake

Infrastructure as Code

Terraform, AWS CloudFormation, Azure Resource Manager (ARM) Templates

CI/CD

Jenkins, Azure DevOps Pipelines, GitHub Actions, GitOps, Argo CD, GitLab Pipelines

Container Orchestration

Docker, Kubernetes, OpenShift, Helm, EKS, AKS

DevSecOps Tools

SonarQube, Veracode, Fortify, Checkmarx (SAST); Burp Suite, OWASP ZAP, Acunetix (DAST); GitHub Advanced Security (CodeQL, Secret Scanning, Dependabot)

Compliance & Security Frameworks

NIST 800-53, NIST RMF, DoD DevSecOps Reference Design, Azure Policy, STIG hardening, Authority to Operate (ATO) support

Configuration Management

Ansible, Chef, Puppet

Monitoring & Logging

Nagios, Splunk, Grafana, Prometheus, ELK, New Relic, Datadog, Dynatrace, Azure Monitor

Databases

Amazon RDS, DynamoDB, Aurora, Redshift, Azure Cosmos DB, Azure MySQL, PostgreSQL, Cassandra

Scripting & Languages

Python, Shell, Groovy, Bash, YAML, PowerShell, C, C++, Java, Golang, ReactJS

Source Code Management

Git, GitHub, GitLab, Bitbucket, Azure Repos, AWS CodeCommit

Build & Artifactory

Maven, Ant, Gradle, MSBuild, JFrog, Nexus, Azure Artifacts

Operating Systems

Microsoft Windows, Linux, UNIX

WORK EXPERIENCE

Azure Engineer October 2024 – Present

Leidos, Eglin, Florida

•Built end-to-end CI/CD pipelines on Azure Government Cloud (Azure Gov) using Azure DevOps to automate build, testing, and deployment processes for high-traffic DoD applications. Leveraged Azure Repos, Azure Pipelines, and Azure Artifacts for package management; reduced deployment time by 98%.

•Implemented a PowerShell script in Terraform modules to automatically add launched Windows servers into Active Directory, enabling seamless AD integration for Windows infrastructure as code.

•Designed, built, and maintained Infrastructure as Code (IaC) using Terraform to provision and manage Azure Gov resources, ensuring consistent, repeatable, and auditable environment configurations; reduced infrastructure provisioning errors by 95%.

•Developed automated VM start-up and shutdown routines using IaC, optimizing resource utilization and reducing unnecessary compute costs across non-production Azure Gov environments.

•Deployed Azure IaaS virtual machines and PaaS role instances into secure VNets and subnets; implemented Terraform modules for multi-cloud deployments and wrote custom plugins to extend Terraform functionality.

•Performed data profiling, cleansing, standardization, and enrichment on diverse datasets using PySpark and Databricks Notebooks in preparation for analysis.

•Integrated OWASP ZAP in Azure DevOps pipelines for static and dynamic application security testing as part of the CI/CD process; analyzed and remediated findings pre-production.

•Identified, triaged, and remediated security vulnerabilities on GitHub Enterprise Server, leveraging GitHub Advanced Security (code scanning, secret scanning, and dependency review) to reduce vulnerability exposure across source repositories.

•Automated Azure resource configuration and IaC guardrails using Terraform and Azure Policy to define and enforce security best practices aligned with NIST 800-53 controls, supporting Authority to Operate (ATO) and continuous compliance monitoring.

•Strategized Docker and Kubernetes for Azure Container Registry deployments; onboarded microservices to Checkmarx SAST tooling and developed microservice onboarding tools using Python and Jenkins.

•Designed scalable data pipelines orchestrating data movement between Azure Data Lake Storage, Azure SQL Database, Azure CosmosDB, and other sources using Azure Data Factory; created SSIS packages for data transformation.

•Performed code reviews using SonarQube and Veracode; enforced quality gates in pipelines to fail builds when conditions were not met.

•Established infrastructure and service monitoring using Prometheus and Grafana; implemented application monitoring using New Relic and Dynatrace; improved system uptime to above 99.5% and reduced mean time to resolution (MTTR) by 70%.

Lead Solution Architect & Cloud Migration Consultant January 2022 – October 2024

Accenture, San Francisco, CA

•Led agile development teams delivering complex enterprise applications using Scrum and Kanban; planned sprints, facilitated standups, reviews, and retrospectives while tracking team velocity.

•Migrated on-premises Jenkins CI/CD pipelines to Azure Pipelines for increased scalability, availability, and security; integrated with Azure Artifacts and Repos for end-to-end automation.

•Designed and configured Azure Virtual Networks (VNets), subnets, DNS settings, and security policies; configured BGP routes for ExpressRoute and site-to-site VPN connections between on-premises and Azure.

•Led Azure Active Directory implementation for SSO and web application authentication; configured RBAC to enforce least-privilege access for team members.

•Automated build workflow for .NET Core applications using YAML pipelines in Azure DevOps with tasks for linting, compiling, unit testing, packaging, and artifact publishing.

•Managed Kubernetes cluster creation including deployments, services, RBAC, and Ingress; integrated Docker container orchestration using Kubernetes pods and deployments.

•Migrated on-premises data (Oracle, SQL Server, MongoDB) to Azure SQL and CosmosDB using Azure Data Factory; developed standardized ETL templates for reusability across multiple pipelines.

•Authored BASH scripts to increase efficiency of daily tasks including system administration, log parsing, file manipulation, and deployment automation on Linux servers.

AWS Cloud Engineer November 2017 – January 2022

Amazon, USA

•Managed AWS infrastructure using the AWS Console and CLI; configured and maintained VPCs, public/private subnets, NACLs, Route Tables, Elastic Load Balancers, security groups, and EC2 instances.

•Worked with IAM to create accounts, roles, and groups; wrote Python scripts for DynamoDB to MySQL data transfers and developed Lambda functions for event-driven data aggregation into DynamoDB.

•Designed and implemented data models within Snowflake including data types, primary/foreign key relationships, and performance optimization through clustering and partitioning.

•Deployed infrastructure using Terraform and CloudFormation; created stacks of VPCs, ELBs, security groups, SQS queues, and S3 buckets; maintained and updated Terraform scripts on a regular basis.

•Managed Kubernetes charts using Helm; created reproducible builds, managed manifests, and managed Helm package releases. Utilized Terraform modules to create EKS clusters.

•Worked with Ansible and Ansible Tower to automate repetitive tasks and deploy critical applications; created Chef inventory and wrote recipes using YAML for continuous deployment automation.

•Set up full CI/CD pipelines with Jenkins ensuring each commit passed through the complete software lifecycle and testing process before reaching production.

Site Reliability Engineer Platform Engineer November 2013 – November 2017

Lagos Ministry of Energy and Mineral Resources, Ikeja, Nigeria

•Architected and automated deployment pipelines across dev, test, staging, and production environments for cloud-native applications on Azure App Service using Infrastructure-as-Code techniques.

•Implemented CI/CD pipelines using Azure DevOps (VSTS/TFS) with GIT, MS Build, Docker, Maven, and Jenkins; deployed code to AKS using YAML scripts and HELM charts.

•Integrated Azure Key Vault into CI/CD pipelines to securely inject secrets such as connection strings and API keys into release pipelines following security best practices.

•Centralized security logging by forwarding tool logs to Azure Sentinel; created custom alerts and dashboards. Automated policy compliance checks using Azure Policy for governance enforcement.

•Created PowerShell scripts to manage Active Directory and Exchange on Windows Server; enabled automation of recurring IT administration tasks.

•Deployed and configured Azure Backups for VMs and file/folder backups on Windows and Linux using Recovery Services Vault in Azure Resource Manager.

EDUCATION

•Master of Science, Computer Science Florida Agricultural and Mechanical University, USA

•Bachelor of Science, Petrochemical Technology University of Port Harcourt, Nigeria

•Diploma, Statistics Yaba College of Technology, Nigeria

PUBLICATIONS

•Chuku, J. “Pre-Deployment Detection of Security Misconfigurations in Azure Bicep Infrastructure-as-Code for Public Safety Cloud Systems.” Accepted (Regular Paper), 2026 IEEE World Forum on Public Safety Technology (WF-PST), 2026.

CERTIFICATIONS

•Microsoft Certified: Azure DevOps Engineer Expert (AZ-400)

•Microsoft Certified: Azure Fundamentals (AZ-900)

•Microsoft Certified: Azure AI Fundamentals (AI-900)

•AWS Certified Solutions Architect – Associate (SAA-C03)

•Certified Kubernetes Administrator (CKA)

•HashiCorp Certified: Terraform Associate

•AWS Certified DevOps Engineer – Professional

•Microsoft Certified: Security, Compliance, and Identity Fundamentals

•Microsoft Certified: Azure Data Fundamentals

•Google Cloud Certified: Professional Cloud Architect

•Microsoft 365 Certified

Contact this candidate