Jan Juma

DevOps and platform engineer with 5+ years building and running Kubernetes platforms across AWS, Azure, GCP, and Huawei Cloud. Experienced in GitOps and CI/CD automation, infrastructure as code, and observability that gives on-call engineers something useful to work with. Comfortable owning a platform end to end, from cluster networking and ingress through secrets management and monitoring, and working directly with clients to get releases into production reliably.

Treats security as part of the normal workflow rather than something added on later, with RBAC, least privilege access, and scanning built into the pipeline.

DevOps Consultant (Contract) - Crafted Systems

(2025-10)

• Led deployment of a production Kubernetes platform on Huawei Cloud, owning cluster networking, ingress routing, and how services are exposed to clients.
• Set up GitOps delivery with ArgoCD so releases are declarative, versioned in Git, and easy to roll back.
• Built CI/CD pipelines in GitHub Actions covering build, test, and deploy, with SonarQube and Trivy wired in as quality and image-scanning gates.
• Configured Kubernetes RBAC, network policies, and namespace isolation to keep multi-tenant workloads cleanly separated.
• Handled API gateway routing, authentication, and TLS termination for external-facing services.
• Moved secrets out of plaintext and into Vault with External Secrets Operator, so nothing sensitive lives in the pipeline or in Git.
• Set up observability with Prometheus and Grafana, with dashboards and alerting the team actually uses to catch issues early.
• Worked closely with the backend team to stabilise service-to-service communication and wrote the deployment and handover documentation.

Lead DevOps & Cloud Engineer - Uamuzi Foundation - Remote

(2023-07)

• Design and run cloud-native infrastructure for production workloads across AWS, Azure, and GCP.
• Built and maintain a Kubernetes deployment platform, including cluster networking, ingress, autoscaling, and upgrades.
• Set up CI/CD pipelines for automated deployments, with SonarQube and Trivy scanning built into the flow.
• Enforce RBAC, Pod Security Admission, and TLS across all clusters, keeping access aligned to least privilege.
• Manage AWS compute, networking, and storage, including IAM policies and secrets handling.
• Run monitoring and logging with Prometheus, Grafana, and CloudWatch, with alerting for incidents and policy drift.
• Keep workloads aligned to HIPAA where it applies, write runbooks, and run occasional secure-coding sessions for the team.

Cloud Engineer - Resource Cloud Academy

(2022-09 - 2024-09)

• Deployed infrastructure across AWS, Azure, and GCP for both training and production workloads.
• Built Kubernetes environments for training labs, including networking, RBAC, and image scanning.
• Set up CI/CD pipelines for containerised workloads with security checks built in.
• Mentored junior engineers on cloud, DevOps, and security fundamentals.

Software Engineering Intern - Microsoft

(2023-01 - 2023-06)

• Contributed to internal engineering projects and took part in code reviews and debugging sessions.
• Worked with cross-functional engineering teams and produced technical documentation.

BSc - Information Technology (Computer Science) - Zetech University (2025-08)

BA - Music - Kenyatta University (2024-06)