EKUBA SOLOMON TSAGUE

Automated provisioning and lifecycle management of AWS infrastructure using reusable Terraform modules, standardizing VPC, compute, IAM, load balancing, and networking across multiple environments. Drove FinOps by analyzing spend with Cost Explorer and AWS Budgets, implementing rightsizing, Savings Plans, lifecycle policies, and cost-allocation tagging to reduce waste while meeting performance, availability, and security needs for healthcare workloads. Implemented controls to protect ePHI, including encryption at rest/in transit, private access patterns, restrictive IAM, and centralized audit logging aligned with HIPAA. Built private connectivity using VPC endpoints and AWS PrivateLink to reduce public internet exposure while enabling secure access to S3, databases, APIs, and internal enterprise services. Used AWS Systems Manager for patching and configuration maintenance with standardized AMIs, automation documents, and scheduled maintenance windows. Designed scalable architectures wi

Designed and secured multi-cloud (AWS and Azure) architectures by enforcing IAM least privilege, MFA, RBAC, and KMS encryption to strengthen enterprise security. Implemented governance and compliance frameworks (HIPAA, PCI-DSS, NIST) using AWS Config and Control Tower to improve audit readiness. Built automated security remediation pipelines using Python and AWS Lambda to resolve findings from Security Hub, Trusted Advisor, Wiz, and AWS Config. Reduced cloud risk using zero-trust controls, Wiz monitoring, WAF optimization, continuous monitoring, and automated policy enforcement across AWS and Azure. Embedded DevSecOps into CI/CD pipelines with automated SAST, DAST, and container security scanning to catch vulnerabilities before production. Built observability and monitoring with CloudWatch, Prometheus, and Grafana, and deployed secured containerized microservices on Amazon EKS using Helm and GitOps practices, including vulnerability scanning with Trivy and runtime security controls.

Architected an AWS multi-account landing zone using AWS Organizations and Control Tower with enforced guardrails, centralized logging, and governance policies. Designed and deployed highly available, scalable infrastructure using EC2, ALB/NLB, Auto Scaling, and multi-AZ architecture supporting strict availability SLAs. Engineered secure VPC architectures with subnet segmentation, Transit Gateway, NAT Gateway, and private connectivity patterns. Automated infrastructure provisioning using Terraform and CI/CD pipelines for consistent and repeatable deployments. Implemented end-to-end encryption and identity security using AWS KMS and IAM role-based access controls. Optimized reliability and performance using fault-tolerant architectures and auto-healing mechanisms.