Production should be boring. I build the platforms that keep it that way.

• 11 min read

  Reviving drifted production Terraform: 40% to 100% under code, zero changes

  A production Azure estate's Terraform had silently stopped matching reality, and its main branch would have destroyed or downgraded live resources. I led a human-governed, AI-assisted revival that brought every resource under Terraform with 135 imports and zero changes to Azure.

  Resources managed by Terraform

  100%

  Before: from 40%

  Harmful plans on main branch

  0

  Before: from 5

  Resources imported

  135

  Stack: Terraform · Azure · GitHub Actions · AKS · Azure Firewall · Claude Code

  Read the case study →

• 8 min read

  Azure tag compliance from 20% to 100%, and the audit it unlocked

  Only 20% of an AI company's Azure estate was tagged, so nobody could say who owned what or what it cost. I standardised tags with Azure Policy to reach 100% of taggable resources, then used them to find orphaned resources and feed a 30% cost reduction.

  Tag compliance (taggable resources)

  100%

  Before: from 20%

  Azure cost, wider cost programme

  −30%

  Tagging decisions needed

  31 groups

  Before: from 232 resources

  Stack: Azure · Azure Policy · Azure CLI · Azure Cost Management · Excel

  Read the case study →

All case studies →

• AZ-305Azure Solutions Architect ExpertMicrosoft (opens in a new tab) ↗
• AZ-104Azure Administrator AssociateMicrosoft (opens in a new tab) ↗
• AZ-800Windows Server Hybrid Core Infrastructure (exam passed)Microsoft (opens in a new tab) ↗
• KCNAKubernetes and Cloud Native AssociateThe Linux Foundation (opens in a new tab) ↗

• Prometheus observability stack

  Prometheus, Alertmanager and Grafana on AWS, provisioned with Terraform: metrics, alert routing and dashboards from a single deploy.

  Stack: AWS · Terraform · Prometheus · Grafana

  Code for Prometheus observability stack ↗Write-up for Prometheus observability stack ↗

• GitOps with ArgoCD on Amazon EKS

  A three-tier application on EKS, delivered by ArgoCD with Kustomize overlays on Terraform-built infrastructure. Every change pushed to Git is detected and applied automatically.

  Stack: AWS · EKS · Terraform · ArgoCD · Kustomize

  Code for GitOps with ArgoCD on Amazon EKS ↗Write-up for GitOps with ArgoCD on Amazon EKS ↗

• Containerised full-stack app on AWS

  A full-stack application on EC2 with Docker Compose, NGINX and GitHub Actions, provisioned with Terraform. A production-grade pattern for small teams that keeps hosting costs low.

  Stack: AWS · Docker · Terraform · GitHub Actions · NGINX

  Code for Containerised full-stack app on AWS ↗Write-up for Containerised full-stack app on AWS ↗

All labs & open source →

Cloud

Microsoft Azure, AWS

Containers & orchestration

Kubernetes (AKS, EKS), Docker, Helm, ArgoCD, Kustomize

Infrastructure as code

Terraform, Bicep, ARM

CI/CD & release

GitHub Actions, Azure DevOps, GitOps, release management

Observability & SRE

Datadog, SigNoz, OpenTelemetry, Prometheus, Grafana, Azure Monitor, SLIs/SLOs, incident response

Security & compliance

Microsoft Entra ID, AWS IAM, secrets management, Microsoft Defender for Cloud

Networking

VNet/VPC, NSGs and security groups, load balancers, DNS, NGINX, Kubernetes ingress

Scripting & OS

Bash, PowerShell, Azure CLI, AWS CLI, Linux, Windows Server

Open to senior cloud, DevOps and platform engineering roles and contracts with remote-first teams.

raheem.shonubi@gmail.com

• LinkedIn
• GitHub
• Résumé