DevOps and cloud/platform engineer with 5+ years building and operating Kubernetes platforms across AWS, Azure, GCP, and Huawei Cloud. I own delivery end to end, using GitOps (ArgoCD), CI/CD automation, infrastructure as code, and observability to give on-call teams actionable insights. Security is part of the default in everything I build—RBAC, least-privilege access, and scanning built into pipelines. I’m comfortable running the platform from networking and ingress to secrets management and monitoring, and I work closely with clients and teams to get services into production reliably.

Jan Juma

DevOps and cloud/platform engineer with 5+ years building and operating Kubernetes platforms across AWS, Azure, GCP, and Huawei Cloud. I own delivery end to end, using GitOps (ArgoCD), CI/CD automation, infrastructure as code, and observability to give on-call teams actionable insights. Security is part of the default in everything I build—RBAC, least-privilege access, and scanning built into pipelines. I’m comfortable running the platform from networking and ingress to secrets management and monitoring, and I work closely with clients and teams to get services into production reliably.

Available to hire

DevOps and cloud/platform engineer with 5+ years building and operating Kubernetes platforms across AWS, Azure, GCP, and Huawei Cloud. I own delivery end to end, using GitOps (ArgoCD), CI/CD automation, infrastructure as code, and observability to give on-call teams actionable insights.

Security is part of the default in everything I build—RBAC, least-privilege access, and scanning built into pipelines. I’m comfortable running the platform from networking and ingress to secrets management and monitoring, and I work closely with clients and teams to get services into production reliably.

See more

Experience Level

Expert
Expert
Expert
Expert
Intermediate
Intermediate
Intermediate

Work Experience

DevOps Consultant (Contract) at Crafted Systems
October 1, 2025 - Present
Led deployment of a production Kubernetes platform on Huawei Cloud, owning cluster networking, ingress routing, and client exposure. Implemented GitOps delivery with ArgoCD for declarative, versioned releases with easy rollbacks. Built CI/CD pipelines in GitHub Actions with SonarQube and Trivy as quality and image-scanning gates. Configured Kubernetes RBAC, network policies, and namespace isolation for multi-tenant separation. Managed API gateway routing, authentication, and TLS termination. Secured secrets using Vault and External Secrets Operator to keep sensitive data out of pipelines and Git. Set up observability with Prometheus and Grafana with dashboards and alerting, and partnered with backend teams to stabilize service-to-service communication and document deployment/runbooks.
Lead DevOps & Cloud Engineer at Uamuzi Foundation (Remote)
July 1, 2023 - Present
Designed and operated cloud-native infrastructure for production workloads across AWS, Azure, and GCP. Built and maintained a Kubernetes deployment platform including networking, ingress, autoscaling, and upgrades. Implemented CI/CD automation with SonarQube and Trivy integrated into the delivery flow. Enforced RBAC, Pod Security Admission, and TLS across clusters while keeping access least-privileged. Managed AWS compute, networking, storage, IAM policies, and secrets handling. Ran monitoring/logging using Prometheus, Grafana, and CloudWatch with incident alerting and policy drift detection. Supported HIPAA-aligned practices where applicable and produced runbooks and security-focused sessions for the team.
Software Engineering Intern at Microsoft
January 1, 2023 - June 1, 2023
Contributed to internal engineering projects and participated in code reviews and debugging sessions. Worked with cross-functional teams and produced technical documentation.
Cloud Engineer at Resource Cloud Academy
September 1, 2022 - September 1, 2024
Deployed infrastructure across AWS, Azure, and GCP for training and production workloads. Built Kubernetes environments for training labs including networking, RBAC, and image scanning. Set up CI/CD pipelines for containerized workloads with security checks embedded. Mentored junior engineers on cloud, DevOps, and security fundamentals.

Education

BSc Information Technology (Computer Science) at Zetech University
August 1, 2025 - January 1, 2026
BA Music at Kenyatta University
January 1, 2024 - June 1, 2024

Qualifications

AWS Solutions Architect – Associate
January 11, 2030 - August 10, 2026
Kubernetes & Cloud Native Associate (KCNA)
January 11, 2030 - August 10, 2026
Azure Cloud Fundamentals
January 11, 2030 - August 10, 2026
AWS Cloud Practitioner
January 11, 2030 - August 10, 2026
Cisco Certified Network Associate (CCNA)
January 11, 2030 - August 10, 2026
Implementing DevSecOps (LFS262) – The Linux Foundation
January 11, 2030 - August 10, 2026

Industry Experience

Software & Internet, Education, Healthcare, Professional Services