Charles Ngugi

DevSecOps/Cloud Engineer with extensive experience architecting, deploying and securing scalable cloud platforms, directing DevSecOps transformations, and leading engineering teams across cloud and hybrid environments. Proven track record of guiding team operations, managing production Kubernetes platforms, establishing SRE best practices, and reducing operational overhead. Adept at bridging executive technical strategy with hands-on infrastructure execution to deliver high reliability, security and cost efficiency.

Senior DevSecOps Engineer - Onfon Mobile

(2025-01)

• Lead and mentor a team of 5 DevOps and infrastructure engineers, overseeing daily sprint planning, architectural reviews, technical roadmaps, and career development.
• Direct the strategic migration of legacy on-premises workloads to AWS cloud infrastructure, enhancing platform availability and system resilience.
• Architect and optimize production Kubernetes clusters, defining standard operational practices for workload deployments, auto-scaling, and high-availability routing.
• Establish organization-wide observability standards using Prometheus and Grafana to track critical KPIs and reduce time taken to detect infrastructure and application incidents.
• Serve as Incident Commander for critical outages across distributed microservice architectures, driving root cause analysis (RCA) and post-mortem improvements.
• Automate complex operational workflows via Python and Bash, cutting manual tasks by 30% across engineering teams.

DevSecOps Engineer - Leja Capital - Remote

(2024-07 - 2024-12)

• Engineered automated CI/CD pipelines using GitHub Actions, decreasing overall deployment cycle times by 25%.
• Spearheaded cloud security hardening on AWS through IAM policy minimization and network isolation, reducing overall attack surface by 45%.
• Implemented continuous cloud cost optimization strategies, lowering monthly AWS expenditure by 17% through resource rightsizing and reserved capacity.
• Integrated static application security testing (SonarQube) directly into automated pipelines to enforce shift-left security governance.
• Automated staging and production server provisioning using Ansible playbooks for zero-drift configuration management.

DevOps Engineer - Roamtech Solutions

(2022-01 - 2024-06)

• Managed production Kubernetes environments powering multi-tenant web applications.
• Containerized legacy microservices using Docker and managed deployments via Kubernetes orchestration.
• Built Jenkins CI/CD automation to streamline build, test, and release cycles across developer squads.
• Supported deployment automation and infrastructure provisioning using Terraform and Jenkins.
• Implemented centralized log aggregation with Elastic Stack (ELK), accelerating troubleshooting capabilities and reducing mean time to resolution by 50%.
• Automated recurring system tasks using Python and Bash, reducing manual workload by 50%.

Bachelor of Science - Computer Science - Chuka University (2017 - 2021)