I build cloud platforms that are secure, reproducible and safe to change.

• A fintech company·Oct 2026·11 min read

  Reviving drifted production Terraform: 40% to 100% under code, zero changes

  A fintech's Terraform had silently stopped matching production, and its main branch would have destroyed or downgraded live resources. I led a human-governed, AI-assisted revival that brought every resource under Terraform with 135 imports and zero changes to Azure.

  Resources managed by Terraform

  100%

  Before: was 40%

  Resources imported (0 changed)

  135

  Before: was Unmanaged

  Environment provisioning

  ~20 min

  Before: was Manual

  Stack: Terraform · Azure · GitHub Actions · AKS · Azure Firewall · Claude Code

  Read the case study →

• An AI-powered EdTech company·Aug 2026·7 min read

  Azure tag compliance from 20% to 100%, and the audit it unlocked

  Only 20% of an EdTech company's Azure resources were tagged, so nobody could say who owned what or what it cost. I standardised tags with Azure Policy to reach 100% of taggable resources, then used them to find orphaned resources and feed a 30% cost reduction.

  Tag compliance (taggable resources)

  100%

  Before: was 20%

  Azure cost (wider cost programme)

  −30%

  Before: was Baseline

  Tagging decisions needed

  31 groups

  Before: was 232 resources

  Stack: Azure · Azure Policy · Azure CLI · Azure Cost Management · Excel

  Read the case study →

All case studies →

• AZ-305Azure Solutions Architect ExpertMicrosoft (opens in a new tab) ↗
• AZ-104Azure Administrator AssociateMicrosoft (opens in a new tab) ↗
• AZ-800Windows Server Hybrid Core Infrastructure (exam passed)Microsoft (opens in a new tab) ↗
• KCNAKubernetes and Cloud Native AssociateThe Linux Foundation (opens in a new tab) ↗

• GitOps on AKS

  Terraform-provisioned AKS with Helm and ArgoCD, so both the infrastructure and the applications are delivered declaratively from Git.

  Stack: Azure · AKS · Terraform · Helm · ArgoCD

  Code for GitOps on AKS ↗Write-up for GitOps on AKS ↗

• GitOps with ArgoCD on Amazon EKS

  A three-tier application on EKS, delivered by ArgoCD with Kustomize overlays on Terraform-built infrastructure. Every change pushed to Git is detected and applied automatically.

  Stack: AWS · EKS · Terraform · ArgoCD · Kustomize

  Code for GitOps with ArgoCD on Amazon EKS ↗Write-up for GitOps with ArgoCD on Amazon EKS ↗

• Secure AKS with Terraform and Azure DevOps

  AKS built with Terraform and Azure Pipelines: least-privilege identities, remote state in Azure Blob Storage and a complete CI/CD path.

  Stack: Azure · AKS · Terraform · Azure DevOps

  Code for Secure AKS with Terraform and Azure DevOps ↗Write-up for Secure AKS with Terraform and Azure DevOps ↗

• Containerised full-stack app on AWS

  A full-stack application on EC2 with Docker Compose, NGINX and GitHub Actions, provisioned with Terraform. A production-grade pattern for small teams that keeps hosting costs low.

  Stack: AWS · Docker · Terraform · GitHub Actions · NGINX

  Code for Containerised full-stack app on AWS ↗Write-up for Containerised full-stack app on AWS ↗

• Prometheus observability stack

  Prometheus, Alertmanager and Grafana on AWS, provisioned with Terraform: metrics, alert routing and dashboards from a single deploy.

  Stack: AWS · Terraform · Prometheus · Grafana

  Code for Prometheus observability stack ↗Write-up for Prometheus observability stack ↗

• Cloud best practices

  A curated reference of cloud and DevOps practices: implementation patterns and operational lessons for production architecture.

  Stack: Azure · AWS · IaC

  Code for Cloud best practices ↗

Cloud

Microsoft Azure, AWS

Containers & orchestration

Kubernetes (AKS, EKS), Docker, Helm, ArgoCD, Kustomize

Infrastructure as code

Terraform, Bicep, ARM

CI/CD & release

GitHub Actions, Azure DevOps, GitOps, release management

Observability & SRE

Datadog, SigNoz, OpenTelemetry, Prometheus, Grafana, Azure Monitor, SLIs/SLOs, incident response

Security & compliance

PCI DSS, Microsoft Entra ID, AWS IAM, secrets management, Microsoft Defender for Cloud

Networking

VNet/VPC, NSGs and security groups, load balancers, DNS, NGINX, Kubernetes ingress

Scripting & OS

Bash, PowerShell, Azure CLI, AWS CLI, Linux, Windows Server

Open to senior cloud, DevOps and platform engineering roles with remote-first teams.

raheem.shonubi@gmail.com

• LinkedIn
• GitHub
• Résumé