Nairobi County, Kenya
Senior Cloud, Network & Security Engineer with 15+ years of experience designing, deploying, securing, and automating enterprise, carrier-grade service provider, and mission-critical data center infrastructures. Proven expertise delivering greenfield network deployments, multi-vendor environments, hybrid cloud connectivity, and large-scale infrastructure modernization initiatives. Experienced across Cisco, Juniper, Palo Alto, Fortinet, Aruba and Meraki technologies, with extensive expertise in enterprise networking, data center infrastructure, network security, SD-WAN, and hybrid cloud connectivity. Strong knowledge of AWS, Azure, GCP, and OCI cloud platforms, with skills spanning network architecture, routing and switching, Zero Trust, SASE, firewall strategy, and secure hybrid environments. Recently completed AWS Advanced Networking Specialty training, further strengthening expertise in AWS Transit Gateway, Direct Connect, Route 53, hybrid cloud connectivity, BGP routing, network security, and highly available cloud architectures. Passionate about automation and Infrastructure as Code, leveraging Python, Ansible, Terraform, and CI/CD pipelines to improve operational efficiency, scalability, and resilience. Strong background in network security, cloud security, observability, and compliance frameworks including ISO 27001, NIST, PCI DSS, and ITIL. Core Competencies • Network Architecture & Infrastructure Engineering • Enterprise & Service Provider Network Design & Operations • Multi-Site Network Deployment & Modernization • Data Center & Hybrid Cloud Solutions • SD-WAN, SASE & Zero Trust Architectures • Cloud Networking & Secure Connectivity • Network Automation & Infrastructure as Code (Python, Ansible, Terraform) • Monitoring & Observability (Prometheus, Grafana, Zabbix, ELK, AWS CloudWatch, Azure Monitor, Google Cloud Operations Suite, OCI Monitoring) • Cybersecurity, Risk Management & Compliance I am passionate about building secure, scalable, and automated infrastructures that enable business growth and digital transformation. Open to remote, hybrid, and relocation opportunities across Europe, North America, Australia, and the Middle East.
Deliver consulting and engineering services across AWS, Azure, GCP, OCI, and on-prem data centers—specializing in IaC (Terraform, Ansible, Python), hybrid-cloud, Zero Trust, and SASE architectures. Experienced in Data Center Networking (Cisco ACI), VPN/IPSec, IAM, SIEM, and secure access solutions including Bastion Service, VPC, VNets, and VCN. Skilled in cloud interconnects (Azure ExpressRoute, AWS Direct Connect, GCP Interconnect, OCI FastConnect). Architect hybrid and Zero Trust network topologies integrating on-prem, cloud, and SD-WAN/SASE connectivity. Implement Infrastructure as Code (IaC) using Terraform, Ansible, Python, and ARM/Bicep for provisioning, compliance, and automation. Design and deploy GCP Interconnect, OCI FastConnect, Azure ExpressRoute, and AWS Direct Connect for high-availability, low-latency hybrid environments. Deliver data center and SDN designs using Cisco ACI, VXLAN/EVPN fabrics, and multi-cloud integration. Optimize routing and segmentation with BGP, OSPF, and unified firewall policies across Fortinet, Cisco ASA/FTD, Palo Alto, Juniper SRX, and Aruba networks. Enhance cloud and datacenter security using IDS/IPS, VPN/IPSec, IAM, aligned with ISO 27001, NIST 800-53, PCI DSS, and ITIL frameworks. Build observability stacks with CloudWatch, Prometheus, Grafana, and ELK integrated with SIEM and CI/CD DevOps pipelines. Advise on migration, cost optimization, and governance across multi-cloud and on-prem infrastructures. Key Technologies: AWS | Azure | GCP | OCI | Terraform | Ansible | Python | ARM/Bicep | IaC | GCP Interconnect | OCI FastConnect | AWS Direct Connect | Azure ExpressRoute | MPLS | SD-WAN | SASE | Cisco ACI | Data Center Networking | Fortinet | Cisco | Palo Alto | Juniper | Aruba | Zero Trust | IDS/IPS | Firewall Manager | BGP | OSPF | VPN | IAM | SIEM | CloudWatch | Prometheus | Grafana | Git (GitHub, GitLab) | CI/CD | DevOps | ISO 27001 | NIST | PCI DSS | ITIL | Bastion Service | VPC | VCN | VNets
Designed and operated multi-site enterprise network infrastructures. Led SD-WAN deployment across 30+ sites, reducing MPLS dependency and costs by 25%. Managed and hardened Fortinet, Cisco ASA, and Juniper SRX firewalls with unified policy control. Configured and administered BGP, OSPF, MPLS, VLANs, and secure branch interconnects. Integrated data center core with AWS and Azure via IPsec VPNs and Direct Connect routing. Automated configuration backup and firewall compliance using Python and Ansible. Managed enterprise DNS, DHCP, VoIP, VPN, load balancers, and routing failover strategies. Built central network observability with SNMP, syslog, NetFlow, dashboards, and alerts. Key Achievements: Reduced MTTR by 60% through automated monitoring and SIEM alerts. Deployed 30+ SD-WAN sites with centralized orchestration and dynamic routing. Awarded Best Performer – IT Operations (2022). Improved network audit compliance and enhanced zero-trust readiness.