ENGINEERING / CAREER & SELECTED WORK

Bertrand Mbanwi

Site Reliability / DevSecOps Engineer

Hands-on engineer with 8+ years across cloud infrastructure, DevSecOps, and platform operations. Operates Azure Government AKS and on-premises Kubernetes, owns on-call response and root-cause analysis, and builds secure delivery with Terraform, Helm, ArgoCD, and GitLab CI. Connects monitoring to actionable alerts and validates recovery through service, repository, and backup checks. Earlier work includes AWS and EKS; independent projects extend into applied AI.

build@bertrandmbanwi.dev github.com/bertrandmbanwi bertrandmbanwi.dev

Technical expertise

Platform & delivery: Azure Government, AKS, Kubernetes, MKE, Docker, Terraform, ArgoCD (hub-and-spoke, multi-source Helm apps), Helm, GitLab CI, Renovate; AWS/EKS in earlier roles

Reliability & recovery: PagerDuty on-call, incident response, root-cause analysis, Prometheus, Alertmanager, Grafana, Blackbox Exporter, Velero, persistent storage, disruption budgets

Security & automation: Bash, Python, Vault Secrets Operator, Azure Key Vault, Prisma Cloud Compute, RBAC, TLS/PKI, restricted-egress networking, Artifactory, GitHub Actions; FedRAMP/FISMA/STIG-constrained environments

Career history

DevOps Engineer

Oct 2025 — Present

Kelmavory

Own hands-on reliability, GitOps delivery, and platform security across Azure Government AKS and on-premises MKE in restricted-egress federal environments.

Operate production Kubernetes platforms with PagerDuty on-call ownership, incident response, root-cause analysis, and recovery runbooks; investigate failures across workloads, identity, networking, and storage.
Operate ArgoCD for all Azure Government AKS clusters in a hub-and-spoke topology, using multi-source Helm applications with pinned charts and environment values; gate manual production syncs on diff review and development-first validation.
Traced a production authentication outage through image-pull and registry logs to service-mesh proxy memory exhaustion and stale ingress annotations; corrected resources and configuration to restore the affected delivery path.
Migrated GitLab from on-premises Kubernetes to Azure Government AKS and recovered stalled pull mirroring across 114 projects by isolating stale Redis concurrency state from pre-existing repository failures.
Implemented Prometheus and Alertmanager routing to PagerDuty, including OOM, restart, and crash-loop alerts; validated notification and automatic resolution end to end and built Blackbox Exporter availability checks.
Upgraded Prisma Cloud Compute Console and Defenders on a production MKE cluster using manual Helm changes; restored all six Defender connections on the target version without using the prepared rollback.
Maintain Terraform-managed AKS infrastructure, certificate trust, and identity/RBAC dependencies; troubleshoot node rebuilds, zone-bound persistent storage, and disruption budgets before production changes.
Secure platform dependencies with Vault Secrets Operator, certificate-chain validation, and internal image distribution; renew PostgreSQL and PgBouncer certificates and verify application connectivity.
Own monthly ArgoCD and platform chart maintenance through Renovate merge requests, local Helm rendering, and test-to-production promotion; resolve reconciliation conflicts and reject silently ignored values before merge.
Maintain shared GitLab CI pipelines and move runners from shell to Kubernetes executors on AKS, with internally mirrored secret-scanning images.
Validate Velero backup restoration and GitLab repository recovery; document restoration checks and operational gaps, and automate staged Linux maintenance with Rundeck.

DevSecOps Engineer · Contract

Nov 2024 — Oct 2025

Mechanicode

Introduced container delivery and automated security checks for a CDC government contract.

Supported Operations & Maintenance with infrastructure automation and DevSecOps pipeline ownership.
Containerized applications on Amazon EKS and introduced Argo CD deployment workflows.
Integrated Trivy, SonarQube, Snyk, and OWASP ZAP into Jenkins and GitHub Actions pipelines.

CaeliCode Solutions

Dec 2017 — Nov 2024

DevOps Engineer · Federal Subcontract

Apr 2023 — Nov 2024

Automated secure Azure application delivery and repeatable platform changes for a federal subcontract.

Integrated Azure Key Vault and Fortify scanning into GitHub Actions to bring secrets handling and security checks into application delivery.
Built Docker and AKS environments and reviewed Terraform changes through Atlantis, keeping infrastructure changes versioned and repeatable.
Maintained Helm and GitOps delivery practices with separate environment configuration, reviewed changes, and development-before-production validation.
Automated REST API deployment to Azure API Management using a build-once, deploy-many approach.

DevSecOps Engineer

Jun 2019 — Mar 2023

Built repeatable Azure infrastructure and Kubernetes operations, with security automation, observability, and recovery practices.

Built infrastructure frameworks with Terraform and ARM templates.
Operated AKS clusters with Helm deployments, RBAC, and network segmentation; investigated workload, access, and configuration failures.
Developed Python and Bash automation for compliance reporting, vulnerability tracking, and drift detection.
Supported platform monitoring, incident troubleshooting, and documented recovery procedures with security and infrastructure teams.

Cloud Security Engineer

Dec 2017 — May 2019

Built AWS infrastructure with automated provisioning, access controls, monitoring, and recovery procedures.

Designed AWS infrastructure using VPC, EC2, S3, and RDS.
Automated deployment with CloudFormation and Ansible, with IAM and AWS Config controls.
Built centralized CloudWatch and CloudTrail monitoring, backup strategies, and recovery procedures.

Cloud Infrastructure Engineer · Internship

Jun 2017 — Nov 2017

MTN Cameroon

Supported AWS infrastructure operations, troubleshooting, and security patching.

Worked with AWS infrastructure, monitoring, access controls, and CloudFormation automation.
Supported infrastructure troubleshooting and security patching.

Professional case studies

Selected independent projects

GitOps Supply Chain

Signed image delivery with GitOps reconciliation and an explicit Kubernetes admission boundary.

Argo CD app-of-apps bootstrap
Automated sync with prune and self-heal

Case study: https://bertrandmbanwi.dev/work/gitops

Source: github.com/bertrandmbanwi/gitops-supply-chain

Ephemeral Azure Platform

A complete cloud lifecycle: provision an AKS platform, verify it independently, preserve evidence, then tear it down.

Ordered Terraform stacks with isolated state
GitHub OIDC authentication without stored cloud credentials

Case study: https://bertrandmbanwi.dev/work/azure

Source: github.com/bertrandmbanwi/terraform-azure-platform

J.A.R.V.I.S.

A personal AI assistant that connects conversation to tools, browser actions, and a native macOS interface.

Python and FastAPI server with WebSocket delivery to web, extension, and desktop clients
AI agents coordinate specialized tasks with cloud model tiers and a local Ollama option

Case study: https://bertrandmbanwi.dev/work/jarvis

Source: github.com/bertrandmbanwi/Jarvis

Education & credentials

B.S. Computer Science

AWS DevOps Engineer - Professional · Azure Developer Associate

Listed on the professional profile. Issuer verification and validity dates have not been supplied.

Career history updated 2026-10-12. Independent projects demonstrate related skills and are separate from employer work. Visit the portfolio for architecture decisions, source evidence, and current repository activity.