Unuane Godspower Ozimede

Platform and DevOps for DeFi and Web3: CreatorFi (DeFi protocol), Chubby (Web3), and core shared infrastructure. Drives GitOps delivery on EKS, 24/7 operations, and secure analytics. Combines Argo CD, Terraform, and AWS services (including Metabase, Amazon Athena, and Glue) with a focus on reliability, observability, and cost-aware runbooks.

• Architected a GitOps delivery model evolving from Terraform-only toward Argo CD–driven deployments, including PriorityClasses, drift awareness, and audit-friendly change paths across DeFi and Web3 workloads
• Implemented production EKS autoscaling with Karpenter: EC2NodeClass and node lifecycle policies, with a 70% image garbage collection threshold to optimize cost while meeting SLA expectations
• Built the observability stack: Prometheus, Grafana, and Alertmanager; Uptime Kuma for incident-style monitoring with Slack notifications and Argo CD deployment status integration
• Designed data and analytics on EKS: Metabase with persistent storage, Amazon Athena for S3-based analytics, automated pg_dump cron backups to S3, and isolated dev with PV/PVC boundaries; plain manifests and External Secrets, aligned with IRSA and Terraform in aws/athena (Athena workgroup, Glue catalog, crawlers, remote state, GitHub Actions plan/apply)
• Established reliability patterns: Pod Disruption Budgets for production and Argo CD, HPA and startup/readiness probes for slow-starting services, and PriorityClass protection for monitoring and observability stacks
• Solved a critical production outage from node disk exhaustion: ECR lifecycle policies, automated node cleanup, stronger logging and alerting, and zero-downtime cluster remediation; extended work included kubelet image GC, SSM on nodes, and additive node groups with operational runbooks
• Migrated cluster-wide concerns where appropriate from Terraform to GitOps (e.g. PriorityClasses) for visibility in Argo CD; enabled GitHub Actions Terraform against the cluster via EKS access entries and IAM; standardized EKS add-ons to avoid duplicate components (e.g. metrics-server)
• Built a serverless, config-driven email-to-data-lake pipeline as a reusable Terraform module: AWS SES receives inbound mail, an S3 event triggers a Python 3.12 Lambda that archives every message, routes attachments to per-client data-lake prefixes via a JSON routing table (new clients onboarded by config, not code), extracts the CSV, and delivers HMAC-SHA256-signed webhooks with Slack notifications; provisioned SES/DKIM/receipt rules, KMS-encrypted S3 with lifecycle policies, least-privilege IAM, Secrets Manager, an SQS dead-letter queue, and CloudWatch metric-filter alarms, with quarantine and long-term archive for forensics and replay
• Hardened the cluster against a software supply-chain attack: built and deployed a Route 53 Resolver DNS Firewall as a reusable Terraform module that blocks known malicious command-and-control domains at the VPC resolver (NXDOMAIN responses, a data-driven IOC blocklist, and CloudWatch query logging for incident investigation), so a compromised dependency cannot reach attacker infrastructure; and ran security audits across the cluster and cloud infrastructure to assess exposure and harden the environment

Leading cloud infrastructure architecture and operations for mission-critical payment gateways and instant payment solutions across multi-cloud environments.

• Championed Terraform IaC for the core banking infrastructure — reusable modules for networking, compute, CloudSQL and Huawei RDS databases, encryption, and identity — deployed through automated GitHub Actions CI/CD workflows across GCP and Huawei Cloud.
• Championed reusable CI/CD pipelines (GitHub Actions) for GKE and Huawei CCE clusters, deploying Node.js and .NET microservices for retail and business banking with Artifact Registry, Trivy container scanning, and automated rollback.
• Championed CI/CD pipelines to deploy core banking Node.js and .NET microservices to Cloud Run v2 — image build, migration jobs, health checks, and zero-downtime rolling deployments.
• Championed Terraform CI/CD workflows for Huawei Kubernetes (CCE) environment provisioning and lifecycle management via GitHub Actions.
• Championed structured alerting and observability dashboards (Prometheus/Grafana) with documented runbooks, reducing incident recovery time by 60%.
• Championed cloud cost controls (autoscaling, reserved instances, schedule-based shutdowns) achieving >30% monthly spend reduction.
• Championed end-to-end QA automation (Playwright/Cucumber + Newman/Postman) with a deploy-triggered pipeline that runs tests after Huawei Cloud releases, publishes HTML reports to a custom domain, and notifies teams via Google Chat — cutting manual QA effort by ~70%.
• Championed Zero Trust access with Cloudflare, automated secrets rotation via Cloud Functions and Google Secret Manager, least-privilege IAM with per-service grants, and Workload Identity Federation for keyless CI/CD across the core banking platform.
• Championed VPN networks for third-party fintech payment partners, enabling secure connectivity across the payment processing ecosystem.
• Championed daily developer issue resolution across application and platform layers, unblocking engineering teams on deployment, environment, and infrastructure problems.
• Championed IaC security gates (Checkov, Terrascan, TruffleHog) and daily drift detection to support PCI DSS and ISO 27001 compliance.
• Managed technical onboarding and mentorship of junior DevOps staff.

Leading full lifecycle infrastructure delivery and GitOps practices for scalable microservices architecture.

• Built and maintained multi-cloud infrastructure using Terraform IaC — Huawei Cloud for development, Azure for staging and production — provisioning networks, Azure Flexible Server databases, and AKS clusters through automated CI/CD pipelines.
• Built and maintained GitHub Actions pipelines to deploy Node.js microservices across development, staging, and production environments with promotion gates between stages.
• Led remediation for production incidents across microservices and databases on production, staging, and development environments.
• Built self-managed Kubernetes on Hetzner Cloud — application deployments via GitOps with Argo CD, containerized databases and Redis managed with persistent volume claims.
• Hardened container and Kubernetes security — optimized Dockerfiles for minimal attack surface, enforced NetworkPolicies for pod-to-pod isolation, implemented least-privilege IAM and RBAC policies, and configured Zero Trust remote access with Azure VPN Client.
• Implemented Zero Trust network architecture and WAF using Cloudflare across client environments.
• Implemented observability stack with Prometheus, Grafana, and Loki with SLO-driven monitoring tied to incident runbooks.
• Collaborated with DBA on database management activities including incident resolution, backup strategies, and point-in-time recovery (PITR) configurations.
• Resolved daily developer issues across application and platform layers, unblocking engineering teams on deployment, environment, and infrastructure problems.
• Applied AI-assisted operations using Claude to accelerate daily issue resolution, infrastructure troubleshooting, and incident triage.

Led infrastructure automation strategy and deployment architecture for fast-paced product releases.

• Led infrastructure automation strategy using Terraform and Ansible
• Orchestrated deployment architecture on AWS ECS with integrated code quality tools
• Strengthened cloud network security with tiered VPC design and IAM policy governance
• Implemented automated security testing (SAST and DAST) for vulnerability detection
• Integrated SonarQube and Jenkins into the development lifecycle

Drove cost optimization and security compliance while automating deployment pipelines and infrastructure management.

• Built containerized microservices architecture using Docker and ECS
• Deployed CI/CD pipelines using GitHub Actions and IaC
• Strengthened cloud network security with tiered VPC design
• Enabled high-availability logging with ELK stack integration
• Implemented Zero Trust architecture and WAF
• Built infrastructure as code using Terraform

Built AWS microservices infrastructure and led monolith-to-microservices migration for a Nigerian fintech, integrating with core banking and NIBSS payment networks.

• Built and managed AWS cloud infrastructure — VPC networking, RDS databases, ECS clusters deploying multiple microservices, provisioned through reusable Terraform modules and automated CI/CD pipelines.
• Built CI/CD pipelines to deploy Golang, Node.js, and React microservices with automated rollback and health checks at each deployment stage.
• Led a gradual monolith-to-microservices migration using the strangler-fig pattern — per-service CI/CD pipelines, IaC, and observability instrumentation across both paths during cutover.
• Set up VPN networks to third-party providers (NIBSS and Mifos core banking provider) for secure payment and banking integrations.
• Deployed ELK stack for centralized log management and tracing service-to-service communications across the microservices architecture.
• Enforced RBAC and IAM access policies aligned with ISO 27001 and SOC 2 controls.
• Automated deployment pipelines and secret rotation using Ansible, Terraform, and HashiCorp Vault.
• Collaborated with QA and development teams using Jira for ticket management and agile workflow coordination.
• Collaborated with DBA on database management activities including incident resolution, backup strategies, and point-in-time recovery (PITR) configurations.
• Drove 25% reduction in operating costs through spot instances and schedule-based shutdown automation.

Designed Azure infrastructure strategy for enhanced reliability and scalability of educational technology platforms.

• Designed Azure infrastructure strategy enhancing reliability and scalability of edtech platforms
• Secured build artifacts and sensitive data through Azure Key Vault and Fortanix encryption tools
• Collaborated across development and QA teams to release resilient applications on schedule
• Implemented automated security testing (SAST and DAST) and Zero Trust architecture
• Configured secure cloud VPN connections for third-party integrations