Yohannes Measho-Senior DevOps Engineer and Cloud Architect (Consultant)

Senior AWS DevOps Engineer supporting migration and re-platforming of a public sector online portal (SAAS.gov.uk) and Backoffice applications from on-premises to AWS. Key Contributions

• Migration of Microsoft and Solaris-based application platforms to AWS Cloud.
• Designed and delivered AWS infrastructure using Terraform, including VPC components, EC2, RDS, ALB, IAM, KMS, Route 53, S3, Lambda and CloudWatch
• Built master and child CI/CD pipelines using Terraform, AWS CodePipeline, CodeCommit, Lambda, EventBridge, Checkov for policy and security validation.
• Implemented CIS hardened RHEL golden AMIs using EC2 Image Builder and integrated with AWS hosted Active Directory.
• Developed reusable Terraform modules to support multiple application migration patterns into Development, Test, Pre-production and production environments.
• Delivered secure end-user environments via AWS WorkSpaces provisioning pipelines.
• Worked closely with security teams in deploying Trend Micro, OS hardening, patching, and monitoring.
• Provided early life support for migrated environments in production environments. Technologies: AWS, Terraform, CodePipeline, CodeCommit, CodeBuild, Checkov, Git, Bash, PowerShell, RHEL 8/9, JIRA, Confluence

• Migrated and deployed TISP infrastructure and telecom application components from legacy to OpenStack and AWS for OEM tenants including BMW, Volvo and Rolls-Royce in development, test and production environments
• Implemented Kubernetes-based microservices architecture in OpenStack and AWS (EKS)
• Designed high and low level infrastructure of the TISP platform, including networking, security, logging and monitoring
• Provisioned and maintained AWS resources: VPC, EC2, ALB, EKS, S3, Route 53, RDS MS SQL Server, Secrets Manager, Parameter Store, VPN, Transit Gateway
• Designed secure network connectivity using DirectConnect and site-to-site VPN between third-party telecom providers and 1NCE AWS infrastructure, collaborating with AWS Professional Services to validate design and perform cost analysis
• Implemented infrastructure as code using AWS CDK and Terraform
• Migrated DNS of hotspotdrive.com from Akamai to AWS Route 53
• Implemented container synchronization from Harbor Container Registry to AWS ECR
• Provisioned and maintained microservices applications with GitOps pattern using GitLab CI/CD, Helm and Argo CD
• Participated in production cutover and go-live of migrated applications to AWS and OpenStack
• Provided on-call support for the TISP production platform
• Collaborated with third-party vendors to integrate complementary services
• Participated in agile sprint backlog grooming, sprint planning, review and retrospective

• Designed, developed and implemented industrial applications using AWS Lambda, API Gateway, AWS IoT, DynamoDB, Cognito, Route 53, S3, EC2, CloudFront, SQS, SNS, SSM, Secrets Manager, KMS, EC2 Image Builder, Certificate Manager, Angular and React
• Developed and published Industrial Cloud solution products conforming to AWS Marketplace standards
• Designed and implemented infrastructure as code using AWS CDK, AWS SAM and CloudFormation
• Designed and implemented industrial data ingest models using OpenAPI 3.0, MQTT and PPMP protocols with AWS API Gateway, LoRaWAN and AWS IoT
• Developed and implemented continuous delivery processes using AWS CDK, CodePipeline and EC2 AMI builder pipeline
• Integrated serverless applications with shop floor ERP systems (SAP)
• Developed and implemented code obfuscation for Lambda functions and layers
• Developed and implemented product license verification solution for AWS Marketplace serverless products
• Conducted technical review of existing infrastructure; documented, proposed and implemented feature and security enhancements
• Provided support and mentoring to junior AWS developers, DevOps and architects
• Participated in agile sprint backlog grooming, sprint planning, review and retrospective

• Designed, developed and implemented infrastructure as code using AWS CDK and Terraform
• Designed, developed and implemented AWS security services using Security Hub, WAF, Shield, Config, Cognito, Inspector, IAM Security Analyzer, GuardDuty, SSM, Secrets Manager, KMS, Certificate Manager, encryption of RDS databases and EBS volumes
• Conducted technical review of existing infrastructure; documented, proposed and implemented security and feature enhancements
• Developed and maintained Lambda functions using Node.js
• Performed web application scanning and security penetration testing
• Provisioned and maintained AWS resources: API Gateway, EC2, ALB, NLB, CloudFront, Route 53, Lambda, S3, WAF and RDS Aurora
• Provided infrastructure support for AWS resources in development, test and production environments

• Designed, developed and implemented automation services using AWS Lambda and AWS API to manage portal operations, including monitoring DynamoDB stock levels to trigger portal open/close by manipulating CloudFront, API Gateway usage plans, WAF, Secrets Manager and Slack
• Designed, developed and implemented monitoring and reporting services using AWS Lambda, AWS API, Kinesis Firehose, S3, CloudWatch, Glue, Athena, SPICE, QuickSight, SQS, Amazon MWS API, Secrets Manager and Slack
• Designed, developed and implemented alerting services using AWS Lambda, CloudWatch, SNS and Slack
• Designed, developed and implemented shipment and delivery tracking of COVID-19 home test kits using SQS, Amazon MWS API, Lambda and S3
• Developed Lambda functions using Node.js and Python
• Provisioned and maintained AWS resources using Serverless Framework, CloudFormation, AWS CLI and SDKs
• Provided infrastructure support for AWS resources including Lambda, API Gateway, CloudFront, IAM, Cognito, ACM, Secrets Manager, Route 53, S3, SQS, SNS, SES, SSM, Athena, Glue, DynamoDB, Kinesis, CloudTrail, CloudWatch, WAF, Shield, Amplify and CodePipeline

• Delivered automated CI/CD pipelines and DevOps services using Jenkins, Ansible, Bitbucket, AWS CloudFormation, and Maven to streamline PPL’s music royalties' development lifecycle.
• Provisioned and managed secure AWS infrastructure (EC2, VPC, IAM, Lambda, API Gateway, RDS, S3, ECS/Docker) across environments, including configuration for 80+ instances, Linux/Windows admin, AD integration, and cost optimisation.
• Collaborated with Member Services, International, Distribution, and IT teams while mentoring developers on AWS tools, microservices, and best practices for scalable operations.

• Delivered enterprise configuration management and release automation solutions.
• Implemented build and deployment tooling across large-scale distributed systems.
• Supported regulated banking and financial services environments with strong governance controls.