☁️🛡️ Cloud DevOps / DevSecOps Engineer | 🧠 Splunk Architect | 💻 Backend Developer (Python & Node.js)
📍 Ghana 🌍nakodtech.xyz | 🔗 https://linkedin.com/in/bernard-ofosu
Cloud DevOps / DevSecOps Engineer with 6+ years of experience designing, deploying, and operating production-grade cloud & hybrid infrastructures.
🔧 Specialized in CI/CD automation, Kubernetes platforms, observability, and security, with strong hands-on expertise across AWS ☁️, Azure ☁️, and GCP ☁️.
🤖 Automation & IaC:
Ansible, Shell Scripting, Python, Go (Golang), Terraform
🛠️ CI/CD & Platform Tools:
Kubernetes, Jenkins, GitHub Actions, GitLab CI/CD, Trivy, SonarQube, Splunk, Prometheus, Grafana
💻 Backend Development:
Python (FastAPI, Flask), Node.js (Express)
🎯 Core Focus:
Automation ⚡ • Reliability 🔁 • Security 🔐 • Scalability 📈
I design and operate secure, scalable, and observable cloud platforms using modern DevOps and DevSecOps practices. I have extensive experience building end-to-end CI/CD pipelines, containerized platforms, and enterprise observability solutions.
My background in GIS & Spatial Systems gives me a systems-thinking approach to infrastructure, resilience, and performance optimization. I enjoy solving complex problems through automation and data-driven insights.
- Build and automate CI/CD pipelines for cloud-native workloads
- Design and operate Kubernetes platforms (EKS, AKS)
- Implement observability using Splunk, Prometheus, and Grafana
- Secure pipelines and platforms using DevSecOps best practices
- Automate infrastructure with Terraform and Ansible
- Reduced manual deployment effort by ~70% through CI/CD automation
- Improved deployment reliability and consistency across environments
- Centralized logs and metrics for 10+ services to improve MTTR
- Implemented security scanning at every pipeline stage (shift-left security)
Description:
Production-grade CI/CD platform centered on Jenkins, orchestrating build, test, security scanning, containerization, and deployment to AWS EKS. Infrastructure provisioned with Terraform, deployments managed via GitOps using Argo CD, and full observability enabled with Prometheus and Grafana.
Tech Stack:
Jenkins • AWS (EKS, EC2, VPC, IAM, Route 53) • Terraform • Docker • Kubernetes • Helm • Argo CD • SonarQube • Trivy • Nexus • Prometheus • Grafana • GitOps • DevSecOps
Description:
Modern DevSecOps CI/CD pipeline using GitHub Actions for a 3-tier cloud-native application. Includes automated testing, secret detection, vulnerability scanning, container image build, and Kubernetes deployment.
Tech Stack:
GitHub Actions • Node.js • Docker • Kubernetes • SonarQube • Trivy • Gitleaks • Linux • Bash • DevSecOps
🔗 GitHub:
https://github.com/bernardofosu/3-Tier-GitHub-Actions-Project
Description:
End-to-end Azure DevOps CI/CD implementation deploying containerized workloads to AKS with images stored in ACR. Secure service connections, YAML pipelines, RBAC, and Azure-native monitoring included.
Tech Stack:
Azure DevOps • AKS • ACR • Azure CLI • Kubernetes • YAML Pipelines • RBAC • Linux • Cloud Monitoring
Description:
Architect-level Splunk project covering indexer clustering, search head configuration, deployment server architecture, data ingestion pipelines, CIM normalization, troubleshooting, and performance optimization.
Tech Stack:
Splunk Enterprise • Indexer Clustering • Search Heads • Deployment Server • CIM • Syslog • REST APIs • Kubernetes Logs • Linux • Observability
🔗 GitHub:
https://github.com/bernardofosu/Splunk-Architect-Practicals
Description:
Production-grade HashiCorp Vault deployment on AWS EC2 integrated with Jenkins pipelines for secure secrets management using TLS, DNS, RBAC, and short-lived tokens.
Tech Stack:
HashiCorp Vault • Jenkins • AWS EC2 • TLS (Let’s Encrypt) • DNS • Linux • systemd • DevSecOps
🔗 GitHub:
https://github.com/bernardofosu/Jenkins-Crush-Course-2025
Description:
A production-style Azure DevOps CI/CD project that automates the build and deployment of a Node.js application backed by MongoDB (Azure Cosmos DB API) to Azure App Service. This project demonstrates both classic pipelines and YAML-based pipelines, showcasing flexibility in Azure DevOps delivery models.
The CI pipeline builds and packages the Node.js application, while the CD pipeline deploys it to Azure App Service using secure service connections. Application configuration, database connectivity, and DNS handling are managed through Azure-native services. The project also includes operational tasks such as cleaning and managing App Service instances via SSH, validating deployments, and inspecting live MongoDB Cosmos DB data.
This implementation highlights end-to-end application delivery on Azure PaaS, combining CI/CD automation, cloud-native application hosting, and managed database services with enterprise-ready practices.
Tech Stack:
Azure DevOps (CI/CD) • Node.js • Azure App Service • Azure Cosmos DB (MongoDB API) • Azure CLI • YAML Pipelines • Classic Pipelines • Service Connections • SSH • DNS • Linux • Bash • Cloud PaaS • CI/CD Automation
Repo / Documentation:
Designed AI-powered automation workflows using n8n, integrating APIs, webhooks, and intelligent agents to automate DevOps and business processes.
🔗 GitHub:
https://github.com/bernardofosu/AI-Agents---n8n-Automation-Masterclass---From-Zero-to-Production
🎯 DevOps & Cloud Engineering – Udemy
- Mastered Python by building 100 projects covering data science (NumPy, Pandas, Matplotlib), automation (subprocess, Invoke, Fabric, Paramiko), and backend web development (Flask, FastAPI, Django).
📊 Observability & Logging (Certified User) – Cribl
-
🛠️ Production-Grade DevSecOps & Cloud DevOps – DevOpsShack
(Hands-on training covering CI/CD, Kubernetes, DevSecOps, Azure DevOps, AWS, and enterprise-grade projects) -
☁️ Azure Administrator (AZ-104) – In Progress
🕰️ Earned earlier in my career, currently not verifiable, and re-certification is planned.
- ☁️ AWS Cloud Practitioner (Legacy – re-certification planned)
- 🔍 Splunk Core Certified User (Legacy – re-certification planned)
- 📈 Splunk Core Certified Power User (Legacy – re-certification planned)
- 🛡️ Splunk Core Certified Admin (Legacy – re-certification planned)
Python • Go • Node.js • JavaScript • Bash • PowerShell
AWS • Azure • GCP • EC2 • VPC • IAM • EKS • AKS • CloudWatch • Azure Monitor
Docker • Kubernetes • Helm • Kustomize • Ingress • Container Security
Terraform • Ansible • CloudFormation • ARM Templates
Jenkins • GitHub Actions • GitLab CI/CD • Pipeline Security • GitOps
Splunk • Prometheus • Grafana • ELK • OpenTelemetry
IAM • RBAC • HashiCorp Vault • Secrets Management • Compliance Automation
I’m open to remote or international roles in:
- Cloud DevOps Engineering
- DevSecOps & Platform Engineering
- SRE & Observability Engineering
📫 Contact:
LinkedIn: https://linkedin.com/in/bernard-ofosu
Website: https://blogtechacademy.org
⚡ Fun Fact: I automate everything — and then automate the automation 😄