BERTRANDMBANWI/

Own hands-on reliability, GitOps delivery, and platform security across Azure Government AKS and on-premises MKE in restricted-egress federal environments.

• Operate production Kubernetes platforms with PagerDuty on-call ownership, incident response, root-cause analysis, and recovery runbooks; investigate failures across workloads, identity, networking, and storage.
• Operate ArgoCD for all Azure Government AKS clusters in a hub-and-spoke topology, using multi-source Helm applications with pinned charts and environment values; gate manual production syncs on diff review and development-first validation.
• Traced a production authentication outage through image-pull and registry logs to service-mesh proxy memory exhaustion and stale ingress annotations; corrected resources and configuration to restore the affected delivery path.
• Migrated GitLab from on-premises Kubernetes to Azure Government AKS and recovered stalled pull mirroring across 114 projects by isolating stale Redis concurrency state from pre-existing repository failures.
• Implemented Prometheus and Alertmanager routing to PagerDuty, including OOM, restart, and crash-loop alerts; validated notification and automatic resolution end to end and built Blackbox Exporter availability checks.
• Upgraded Prisma Cloud Compute Console and Defenders on a production MKE cluster using manual Helm changes; restored all six Defender connections on the target version without using the prepared rollback.
• Maintain Terraform-managed AKS infrastructure, certificate trust, and identity/RBAC dependencies; troubleshoot node rebuilds, zone-bound persistent storage, and disruption budgets before production changes.
• Secure platform dependencies with Vault Secrets Operator, certificate-chain validation, and internal image distribution; renew PostgreSQL and PgBouncer certificates and verify application connectivity.
• Own monthly ArgoCD and platform chart maintenance through Renovate merge requests, local Helm rendering, and test-to-production promotion; resolve reconciliation conflicts and reject silently ignored values before merge.
• Maintain shared GitLab CI pipelines and move runners from shell to Kubernetes executors on AKS, with internally mirrored secret-scanning images.
• Validate Velero backup restoration and GitLab repository recovery; document restoration checks and operational gaps, and automate staged Linux maintenance with Rundeck.

Related projects demonstrate similar skills; they are not presented as employer source code.

Introduced container delivery and automated security checks for a CDC government contract.

• Supported Operations & Maintenance with infrastructure automation and DevSecOps pipeline ownership.
• Containerized applications on Amazon EKS and introduced Argo CD deployment workflows.
• Integrated Trivy, SonarQube, Snyk, and OWASP ZAP into Jenkins and GitHub Actions pipelines.

Related projects demonstrate similar skills; they are not presented as employer source code.

Automated secure Azure application delivery and repeatable platform changes for a federal subcontract.

• Integrated Azure Key Vault and Fortify scanning into GitHub Actions to bring secrets handling and security checks into application delivery.
• Built Docker and AKS environments and reviewed Terraform changes through Atlantis, keeping infrastructure changes versioned and repeatable.
• Maintained Helm and GitOps delivery practices with separate environment configuration, reviewed changes, and development-before-production validation.
• Automated REST API deployment to Azure API Management using a build-once, deploy-many approach.

Related projects demonstrate similar skills; they are not presented as employer source code.

Built repeatable Azure infrastructure and Kubernetes operations, with security automation, observability, and recovery practices.

• Built infrastructure frameworks with Terraform and ARM templates.
• Operated AKS clusters with Helm deployments, RBAC, and network segmentation; investigated workload, access, and configuration failures.
• Developed Python and Bash automation for compliance reporting, vulnerability tracking, and drift detection.
• Supported platform monitoring, incident troubleshooting, and documented recovery procedures with security and infrastructure teams.

Related projects demonstrate similar skills; they are not presented as employer source code.

Built AWS infrastructure with automated provisioning, access controls, monitoring, and recovery procedures.

• Designed AWS infrastructure using VPC, EC2, S3, and RDS.
• Automated deployment with CloudFormation and Ansible, with IAM and AWS Config controls.
• Built centralized CloudWatch and CloudTrail monitoring, backup strategies, and recovery procedures.

Related projects demonstrate similar skills; they are not presented as employer source code.

Supported AWS infrastructure operations, troubleshooting, and security patching.

• Worked with AWS infrastructure, monitoring, access controls, and CloudFormation automation.
• Supported infrastructure troubleshooting and security patching.

Related projects demonstrate similar skills; they are not presented as employer source code.