Design for operations
I think about system health, monitoring, failure handling, service ownership, incident response and useful audit trails from the beginning of a project.
I'm Olawale Azeez, a Cloud & Platform Engineer designing, automating, securing and operating cloud-native systems across AWS, Azure and Kubernetes. I focus on engineering that can be deployed, validated, observed and explained.
Cloud platforms should not stop at successful deployment. They must be secure, testable, observable, maintainable and understandable to the engineers responsible for running them.
I think about system health, monitoring, failure handling, service ownership, incident response and useful audit trails from the beginning of a project.
I use Infrastructure as Code, CI/CD, GitOps and developer self-service to reduce manual configuration and promote consistent engineering workflows.
I document decisions and build validation into delivery pipelines. Tests, code, diagrams and deployment evidence should support the claims made about a system.
Four publicly inspectable projects demonstrate how I approach platform architecture, delivery, security and operations. CalcioSapien, a separate private product spotlight below, illustrates evidence-led domain engineering and governance.
An AI-assisted Kubernetes operations platform connecting cluster visibility, workload diagnostics, Prometheus monitoring, role-based access and structured operational findings.
Engineers need actionable context when investigating unhealthy workloads. Kubernetes resources, events, logs and metrics are often explored separately, increasing the effort required to understand a cluster incident.
PlatformPilot uses a React frontend, FastAPI backend, Kubernetes Python Client and Prometheus integration. Resource-focused APIs support cluster navigation, while operational analysis adds contextual findings and guidance.
Protected API access uses viewer, operator and admin roles. Structured operational findings can be exported to CloudOps Command Center, keeping observation and controlled remediation separate.
An infrastructure operations workspace that transforms incoming risks into evidence-backed, owner-routed investigations with explicit human approval boundaries.
Operational alerts alone do not explain impact, ownership, remediation requirements or the evidence needed to make a safe decision.
A Next.js and TypeScript application integrates infrastructure signals, risk classification, runbooks, service ownership and persistent operational workflows. Structured findings from PlatformPilot extend the investigation flow.
The deterministic Decision Trace models a sequence of premise, reasoning, hypothesis, verification and conclusion. It keeps raw evidence separate from interpretation, and does not itself authorize remediation.
A multi-tenant operations platform that turns business signals into prioritized recommendations, human-approved actions and tracked execution workflows.
Small businesses may receive operational signals through email, notes, customer interactions and disconnected processes. Turning those signals into accountable action is difficult.
The application uses Next.js, TypeScript, PostgreSQL and server-side authorization. Its SaaS architecture includes tenant workspaces, operational ingestion, approval queues, execution records and billing foundations.
AI-assisted recommendations are separated from business decisions. The platform implements human approval boundaries, permission checks and execution-state tracking instead of assuming that model output should directly trigger actions.
An Azure-hosted property operations platform demonstrating secure cloud deployment, maintenance workflows, identity integration, private networking and infrastructure automation.
Operational applications require more than business logic. They also need secure identity, controlled access to services, repeatable deployment and visibility into application behaviour.
PropertyOps combines FastAPI, PostgreSQL, Azure Container Apps, Microsoft Entra ID, managed identities, Key Vault, Application Insights and modular Bicep infrastructure.
Application-role authorization protects operations, private endpoints isolate supported data services and GitHub OIDC enables deployment without storing long-lived Azure client secrets.
A private football intelligence platform designed to help a sporting department move from sourced player evidence to accountable recruitment decisions.
The product connects data ingestion and provenance, scouting observations, recruitment shortlists, scenario analysis, board authorisation, negotiation workflows and audit history. The emphasis is on explaining why a decision is supported and who is authorised to make it.
I developed a FastAPI and React application with persistent workflows, role-scoped permissions, session controls, backend tests, CI checks and documented private-hosting, backup and recovery procedures. Analytical capabilities distinguish deterministic scoring from opt-in model-assisted evidence selection.
Public-safe overview only. Source code, licensed datasets, operator accounts and deployment details are intentionally not published here. This is a developing product, not a claim of commercial adoption or production certification.
A repeatable approach connecting architecture, infrastructure, automated checks, delivery and ongoing operational visibility.
Architecture, boundaries, risks and decisions
Terraform, Bicep, AWS SAM and cloud resources
Tests, linting, schema checks and security scans
GitHub Actions, containers, OIDC and GitOps
Metrics, logs, tracing, alerts and evidence
Supporting projects organized by engineering discipline. These supporting projects complement the flagship case studies and the private CalcioSapien product spotlight.
FastAPI workload with Amazon Cognito, EKS Pod Identity, DynamoDB, Kubernetes resilience controls, CI/CD and container supply-chain validation.
Explore repository ↗Modular Terraform infrastructure, private networking, automated guardrail tests, IaC scanning and AWS plan workflows authenticated with OIDC.
Explore repository ↗Modular Bicep, private virtual machines, Azure Bastion, managed identities, RBAC, Private Link, backup and deployment verification.
Explore repository ↗Backstage software catalog, governance, reusable service templates, golden paths, permissions and delivery standards.
Explore repository ↗Container validation, vulnerability scanning, AWS ECR publishing, GitHub OIDC, software bills of materials and artifact attestations.
Explore repository ↗Declarative Kubernetes delivery, pull-request validation, Argo CD reconciliation and application deployment configuration.
Explore repository ↗An example FastAPI service generated from the Backstage golden path, including container support, Kubernetes resources, CI and tests.
Explore repository ↗Prometheus, Grafana, OpenTelemetry, Loki, Tempo, SLO monitoring, error-budget alerts and automated rule validation.
Explore repository ↗Grounded operations assistant with retrieval, Amazon Bedrock, LangGraph, MCP and AWS ECS Fargate deployment.
Explore repository ↗Resume evidence extraction, explainable skill scoring, n8n workflows and AWS Bedrock career analysis.
Explore repository ↗AWS Lambda and SAM-based workflow for content planning, approvals, OAuth connection, scheduling and X publishing automation.
Explore repository ↗Pharmacy inventory application with a React dashboard, AWS Lambda functions, tenant-aware workflows, event processing and automated tests.
Explore repository ↗A published, project-led reference with hands-on labs covering AWS, Azure, Kubernetes, Terraform, GitOps, SRE, secure AI operations, architecture and technical interviews. Includes automated documentation and security quality checks.
Read the handbook ↗I aim to support project descriptions with implementation, tests, configuration and deployment records. These links let you inspect those artifacts directly.
Examine Cognito token handling, Kubernetes workload controls, identity integration and CI/CD.
Inspect EKS evidence ↗Review modular Bicep, private endpoints, managed identities and documented Azure validation screenshots.
Inspect Azure evidence ↗Examine telemetry configurations, Prometheus alert rules, dashboards, automated rule tests and smoke checks.
Inspect reliability evidence ↗Review reusable Terraform modules, guardrail tests, static validation and security workflows.
Inspect Terraform tests ↗Explore protected APIs and security testing across Kubernetes operational services.
Inspect access-control tests ↗Explore risk validation, decision traces, human approval boundaries and operational workflow testing.
Inspect operational tests ↗Repository artifacts and screenshots demonstrate particular implementation and validation steps; they do not imply continuous production availability or independent certification.
Technologies used across infrastructure, applications, platform delivery and operational engineering projects.
Amazon Web Services, Microsoft Azure, EKS, ECS Fargate, Lambda, Azure Container Apps, IAM, Microsoft Entra ID, Key Vault.
Terraform, Azure Bicep, AWS SAM, CloudFormation, networking, private endpoints, remote state and configuration validation.
Docker, Kubernetes, Helm, Argo CD, deployment manifests, workload identity, RBAC, runtime hardening and health probes.
GitHub Actions, GitOps, GitHub OIDC, Trivy, TFLint, IaC scanning, SBOMs, software supply-chain controls.
Prometheus, Grafana, OpenTelemetry, Loki, Tempo, Alertmanager, CloudWatch, Application Insights and SLOs.
Python, FastAPI, TypeScript, React, Next.js, PostgreSQL, Amazon Bedrock, RAG, LangGraph and MCP.
My approach to professional development combines formal learning with applied engineering projects, troubleshooting and documented technical decisions.
AWS application development, services, deployment and cloud engineering foundations.
Hands-on AZ-104-oriented labs covering network security, compute, identity, storage, backup and Bicep deployment.
View Azure lab ↗Technical concepts connected to working implementations, engineering decisions, troubleshooting and lessons learned.
Read published handbook ↗I'm open to opportunities involving Cloud Engineering, Platform Engineering, DevOps, infrastructure automation, developer platforms and reliability engineering. I welcome conversations about engineering roles, technical projects and collaboration.