Tobi — Cloud & DevOps Engineer

// about me

Building the infrastructure that powers the internet

I'm a Cloud and DevOps Engineer with a strong security operations background, passionate about designing secure, automated, and resilient cloud systems. I bridge the gap between DevOps, SOC, and DevSecOps practices to deliver security-first, production-ready solutions.

I work across AWS, Azure, and GCP, using Infrastructure as Code (Terraform, CloudFormation) and CI/CD pipelines (GitHub Actions, Jenkins, AWS CodePipeline) to automate consistent, reliable deployments. My SOC background means security is never an afterthought — it's baked into every pipeline and architecture decision.

I also bring a frontend development background, giving me end-to-end understanding of application behavior, deployment pipelines, and application-layer security risks.

AWS Azure GCP Terraform Kubernetes Docker GitHub Actions Jenkins Linux Python Bash Prometheus Grafana CloudFormation

// what i do

Areas of Expertise

From cloud architecture to security, I cover the full spectrum of modern DevOps and cloud engineering.

Cloud Infrastructure

Design and deploy scalable, highly-available cloud environments across AWS, Azure, and GCP with cost-optimized architectures.

DevOps & Automation

Build robust CI/CD pipelines that automate testing, security scanning, and deployment across every environment.

Cloud Security

Implement IAM policies, security groups, SIEM integration, and compliance controls. DevSecOps is my default approach.

Linux Administration

Configure, harden, and optimize Linux servers for production workloads. Performance tuning, patch management, and troubleshooting.

Monitoring & Reliability

Set up Prometheus, Grafana, CloudWatch, and ELK stacks to ensure full observability, fast incident response, and SLO tracking.

Infrastructure as Code

Terraform and CloudFormation to provision, version, and manage cloud resources with repeatability and auditability at scale.

// projects

What I've Built

Real-world cloud and DevOps projects showcasing secure, automated, production-ready systems.

This Portfolio

Serverless Contact Form + CI/CD Pipeline

Fully serverless contact form architecture deployed on AWS. User messages trigger API Gateway → Lambda → SES email notification. The entire portfolio is hosted on S3 with CloudFront CDN. GitHub Actions automates deployments to S3 on every push — true continuous delivery with zero manual steps.

Architecture Flow:

Contact Form → API Gateway → Lambda → SES → Email

GitHub Push → Actions CI/CD → S3 Sync → CloudFront Invalidation

AWS Lambda API Gateway S3 CloudFront SES GitHub Actions Serverless

Completed

SSH Port Hardening & Datadog Logging on EC2

Hardened SSH access on an Amazon EC2 Ubuntu server by changing the default SSH port and updating security group rules. Integrated Datadog for centralized log collection and monitoring.

EC2 Linux SSH Hardening Datadog Security Groups Ubuntu

View on GitHub →

Completed

AWS Organization & IAM Role-Based Access Control

Designed and implemented an AWS Organization managing three AWS accounts. Configured IAM users, groups, and policies using RBAC to enforce least privilege and support multi-account governance.

AWS Organizations IAM RBAC Multi-Account Least Privilege

View on GitHub →

Completed

Serverless AI Quote Generator on AWS (Terraform)

Production-grade serverless web app where users type a topic and receive an AI-generated quote. Entire infrastructure provisioned with Terraform and deployed via GitHub Actions CI/CD pipeline.

AWS Lambda API Gateway Terraform GitHub Actions S3 CloudFront AI

View on GitHub →

Completed

Nova Support — Real-Time AI Customer Support Platform

Real-time serverless customer support platform with AI sentiment analysis. Built on AWS using Lambda, API Gateway WebSockets, DynamoDB, and CloudFront. Infrastructure deployed with Terraform.

Lambda WebSockets DynamoDB CloudFront Terraform AI Sentiment

View on GitHub →

Completed

Production-Grade Serverless Web Architecture with CI/CD

Migrated a static website from Azure to AWS for scalable, cost-effective hosting. Upgraded with a contact form (API Gateway + Lambda + SES) and full CI/CD pipeline via GitHub Actions.

S3 CloudFront Lambda API Gateway GitHub Actions SES Azure → AWS

View on GitHub →

Completed

Serverless Observability with Datadog & Slack

Observability layer built on top of a production serverless architecture, providing real-time monitoring, alerting, and operational visibility. Integrates Datadog with Slack for instant incident notifications.

Datadog Slack Lambda CloudWatch SNS Alerting

View on GitHub →

Completed

AWS Automated Incident Response (SOAR)

Extends cloud security detection into automated response using AWS native services. Reduces SOC MTTR by integrating detection, automation, and notification in a secure, cost-aware architecture.

GuardDuty EventBridge Lambda SNS SOAR SOC Security

View on GitHub →

In Progress

TASK-APP — 12-Week DevOps Workflow Series

A 12-week progressive DevOps project demonstrating real-world workflows from basic to advanced tooling. Each week introduces new tools and improvements to showcase the full DevOps engineering lifecycle.

Docker Kubernetes Terraform GitHub Actions CI/CD 12 Weeks

View on GitHub →

Completed

AWS Cloud Security Detection Engineering Platform

Cloud-native security detection platform using CloudTrail, CloudWatch, GuardDuty, Lambda, and SNS. Collects security telemetry, detects suspicious activity, and generates actionable SOC-style alerts.

CloudTrail CloudWatch GuardDuty Lambda SNS Security

View on GitHub →

Completed

Hosting a Static Website on Azure VM

Deployed and configured a Virtual Machine in Microsoft Azure with Nginx to serve a static website. Covers VM provisioning, Nginx setup, and network security configuration.

Azure Azure VM Nginx Static Website Linux

View on GitHub →

Completed

Azure Cloud Organization Hierarchy Setup

Set up an Azure environment for a company including domain integration, identity management, access control, and organizational hierarchy using Azure AD, Management Groups, and Azure Policy.

Azure AD Management Groups Azure Policy RBAC Identity

View on GitHub →

Cloud & DevOps Engineer

Building the infrastructure that powers the internet

Areas of Expertise

What I've Built

Let's build something great together