Emmanuel Chebukati,内罗毕开发人员,肯尼亚内罗毕县
Emmanuel is available for hire
Hire Emmanuel

Emmanuel Chebukati

Verified Expert  in Engineering

DevSecOps工程师和开发人员

Location
Nairobi, Nairobi County, Kenya
Toptal Member Since
September 27, 2021

Emmanuel是一位具有系统审计经验的云安全工程师, application security, and secure cloud deployment. 他在东非地区和全球公共和私营部门交付了敏感技术项目. Emmanuel的经验得到了三项微软Azure和两项AWS认证的支持. 他是一名认证道德黑客(CEH). 他拥有卡内基梅隆大学的信息技术硕士学位和USIU非洲分校的理学士学位.

Portfolio

Knowcrunch Inc.
PHP,系统管理,Web托管,LiteSpeed for SQL Server, MySQL...
Hepta Analytics
PHP、Apache2、Linux、Azure、亚马逊虚拟私有云(VPC)、Amazon EC2...
Wagner Technical Services
Azure, Office 365, IT安全,Azure SQL, Azure Active Directory,部署...

Experience

Availability

Full-time

Preferred Environment

Amazon Web Services (AWS), Azure, Cisco, Office 365, GitLab, NGINX, Kubernetes, 关系数据库服务(RDS), Networks, Cloud Security

The most amazing...

...我所做的就是将金融科技公司瓶颈的物理IT基础设施转变为现代的混合云, secure, and easy to administer.

Work Experience

PHP SysAdmin | DevOps Engineer

2024 - PRESENT
Knowcrunch Inc.
  • 对托管基础设施进行全面审计, 重点关注服务器权限和配置. 建议对主机设置进行必要的更改,以减少停机时间并优化性能.
  • 为应用程序实现了一个基于GitHub动作的CI/CD管道,遵循GitHub流程. 对“主”的Pull请求导致了对开发环境的部署, 部署到生产环境是一键触发的.
  • 配置文件存储服务器,用于存储应用程序的媒体文件. 适当地挂载存储服务器,然后在应用程序目录中设置符号链接以引用存储服务器. 没有注意到停机或数据丢失.
  • 设置一个新环境来托管应用程序的admin和new-admin平台. 而以前这个庞然大物是托管在一台服务器上的, 我能够将管理功能与用户功能分开. 配置了适当的重写规则.
  • 将应用程序与Jelastic Cloud(现在的Virtuozzo application Platform)集成,以方便归档解决方案的部署. 实现了部署前和部署后挂钩,以确保部署期间的停机时间最少.
  • 按照15分钟的恢复时间目标(RTO)和24小时的恢复点目标(RPO)设置数据库恢复过程和文档.
  • 解决了生产服务器上主管的问题, 从而产生更可靠的Laravel排队作业.
  • 通过安装应用程序的新构建归档文件,然后逐步添加所需的文件(例如.g., .Htaccess, env等),直到所有错误都被消除. Other files were discarded.
  • 为应用程序和软件开发人员实现了有限的数据库访问权限, 坚持最少特权原则.
Technologies: PHP,系统管理,Web托管,LiteSpeed for SQL Server, MySQL, GitHub Actions, Laravel, Supervisor, Supervisord, Jelastic, Virtuozzo, Scaleforce, Monitoring

Cloud Security Engineer

2018 - PRESENT
Hepta Analytics
  • Co-founded the company, served as a director, 领导三个IT基础设施团队, 并领导客户团队定义和交付解决方案.
  • 为一家金融服务公司进行AWS良好架构框架审计. 审计确定了46个问题:11个被列为高影响问题, 他们的潜在补救措施与客户共享,以便采取行动.
  • 为客户端迁移和重建了24个生产VMware虚拟机应用程序,并在混合云设置中设置了Kubernetes集群,用户停机时间最少. 建立安全的远程访问和站点之间的连接.
  • 从本地VM迁移和维护Microsoft堆栈(IIS连接到带有多个子域的SQL Server 2008)到Azure(带有托管数据库的应用程序服务). 用GitHub和swap为客户端建立一个DevSecOps管道.
  • 调查并响应客户托管设施的停机事件. 将工作负载迁移到云端以减轻影响,并编写并提交事件报告, 导致我的委托人被判损害赔偿.
  • 为二十多个邮箱在客户端域上设置私人电子邮件托管. 将现有的Office 365用户电子邮件地址迁移到新的电子邮件托管设置. 设计了一个电子邮件安全网关解决方案,支持多种云解决方案.
  • 识别客户现场过程持续运行的潜在风险. 风险评估阶段涉及识别风险和减轻风险的控制措施, 在制造工厂的销售点进行鉴定后.
  • 开发了一个坚固的Android应用程序,可以处理复杂的互联网连接环境来接收音频报告. 部署一个安全的仪表板来查看、组织、管理和处理案例报告.
  • 为客户集思广益,提出潜在的金融科技解决方案,并就潜在的挑战和变通方法提出建议. 开发并部署了一个Android模型代码来演示最初预期的功能.
Technologies: PHP、Apache2、Linux、Azure、亚马逊虚拟私有云(VPC)、Amazon EC2, VirtualBox, Kubernetes, OpenVPN, Networking, Office 365, Mail Servers, Python, Classic ASP, Apache, Information Security, Cloud Security, VPN, Cloud Architecture, AWS Cloud Architecture, 基于角色的访问控制, Azure Active Directory, Azure Key Vault, Azure Resource Manager (ARM), Amazon Web Services (AWS), DevOps Engineer, DevSecOps, Networks, DevOps, Azure DevOps, Docker, Ansible, IT Security, Security, Hybrid Cloud Infrastructure, Deployment, Security Policies & Procedures, 资讯科技营运管理(ITOM), On-premise, Architecture, System Administration, Security Design, Code Auditing, AWS DevOps, Disaster Recovery Plans (DRP), Cybersecurity, MySQL/MariaDB, Postman, Kubernetes HPA, AWS VPN, AWS Secrets Manager, AWS Auto Scaling, Ubuntu, IT Infrastructure, Proxies, AWS IAM, WordPress, Asana, High-Availability Linux, Amazon EKS, Security Management, Controls, Security Architecture, Debian, 关系数据库服务(RDS), Continuous Delivery (CD), Continuous Integration (CI), CI/CD Pipelines, Azure SQL, PostgreSQL, Grafana, Prometheus, Bash, Amazon API Gateway, Sentry, Amazon RDS, Amazon S3 (AWS S3), Fintech, Azure Synapse Analytics, Azure SQL Databases, Azure Container Registry, Azure Container Instances, Azure Files, Azure Kubernetes Service (AKS), Azure Synapse, Azure Functions, MariaDB, Data Centers, Business Continuity, 业务连续性计划(BCP), Team Leadership, Leadership, Web App Design, Twitter API, IT Audits, IP Networks, Java, AWS Cloud Computing Services, Virtualization, Cloud Storage, Cloud Services, Azure Virtual Networks, 多因素认证(MFA), Azure Virtual Machines, Azure Storage, Load Balancers, Azure App Service, Azure Administrator, Network Security, Data Security, Cloud, Data Protection, Reverse Engineering, Cloud Computing, NGINX, Data Loss Prevention (DLP), Istio, AWS Lambda, Monitoring, Windows PowerShell

Azure Platform Engineer

2022 - 2023
Wagner Technical Services
  • Prepared, documented, 并实施了从裸机本地Windows服务器迁移到微软Azure云生态系统的计划.
  • 使用密码散列同步方法和无缝单点登录从本地Active Directory到Azure Active Directory的联合用户身份.
  • 通过Azure文件同步将多个本地SMB文件共享同步到Azure文件,在单个存储帐户的一对一共享映射下.
Technologies: Azure, Office 365, IT安全,Azure SQL, Azure Active Directory,部署, Security Policies & Procedures, 资讯科技营运管理(ITOM), Infrastructure as Code (IaC), IT Infrastructure, Controls, Azure SQL Databases, Azure Files, Azure DevOps, DevOps Engineer, Business Continuity, 业务连续性计划(BCP), 基于角色的访问控制, IP Networks, Networks, VPN, Azure Key Vault, Virtualization, Cloud Storage, Cloud Services, Cloud Security, Azure Virtual Networks, 多因素认证(MFA), Azure Virtual Machines, Azure Storage, Load Balancers, Azure App Service, Azure Administrator, Network Security, Data Security, Cloud, Data Protection, Hybrid Cloud Infrastructure, Cloud Computing, Information Security, Data Loss Prevention (DLP), Monitoring, Windows PowerShell

Senior DevOps Engineer

2022 - 2023
Rollee
  • 在GitLab中为10多个应用程序实现持续集成和持续部署和交付(CI/CD). 该管道以最小的停机部署完成,以确保客户请求在生产部署期间不受影响.
  • 使用Kubernetes Executor在Kubernetes上设置Airflow,并使用SequentialExecutor将其从VM迁移. 将数据库迁移到托管数据库, 容器中已安装的依赖项, 并为dag设置CI/CD和git同步.
  • 为基础设施和数据库指标收集安装了Prometheus,以帮助满足业务需求. 安装并固定Grafana以可视化收集的指标, set up alerts, and created incident runbooks.
  • 将一个Go应用程序迁移到Kubernetes上工作和运行. 适当地设置服务、部署、PVC、ConfigMaps、secrets和Ingress. 在块存储之上为readwritmany访问设置一个托管数据库和NFS提供程序.
  • Researched, recommended, 并在Gitflow之间为公司记录了合适的Git工作流策略, GitHub flow, and GitLab flow. 该建议在不影响运营的情况下被提出、讨论和采纳. Implemented GitOps.
  • 实现了Grafana Loki和Promtail作为基础设施和应用程序日志解决方案. 这样就可以收集日志并无缝地分析应用程序和基础设施日志.
  • 为React和React Native SDK创建了一个CI/CD管道,用于构建和发布到npm组织帐户. 还实现了一个Python应用项目的CI/CD,并在GitLab中支持回滚.
  • 在GitLab中实现了带有回滚支持的CI/CD,用于包含三个应用程序的单线程. 管道仅在特定代码库文件夹中反映更改时运行.
  • 调查并确定了PostgreSQL上的共享锁问题,导致服务无法重新启动. 问题是没有正确关闭长时间运行的查询, 为了快速解决问题,哪些问题被放在了代码行中.
  • 通过实施建议,领导公司技术部门成功通过ISO 27001审核, documenting decisions, 捍卫公司的地位.
Technologies: DevOps, Bash, IP Networks, Ubuntu, Python, Linux, IT Infrastructure, Proxies, Prometheus, Grafana, PostgreSQL, GitLab, GitFlow, CI/CD Pipelines, Continuous Integration (CI), Continuous Delivery (CD), Shell Scripting, Deployment, Security Policies & Procedures, 资讯科技营运管理(ITOM), System Administration, Infrastructure as Code (IaC), Terraform, Disaster Recovery Plans (DRP), MySQL/MariaDB, Asana, Postman, Application Security, High-Availability Linux, Security Management, Debian, Fintech, Docker, DevOps Engineer, Business Continuity, 业务连续性计划(BCP), Team Leadership, Leadership, IT Audits, Networks, VPN, Cloud Storage, Cloud Services, Cloud Security, 多因素认证(MFA), Load Balancers, Network Security, Data Security, Cloud, Data Protection, Hybrid Cloud Infrastructure, Cloud Computing, Information Security, NGINX, Data Loss Prevention (DLP), Monitoring

LinkedIn Learning Instructor

2021 - 2023
LinkedIn Learning
  • 策划了一门关于金融科技安全要素的网络安全课程.
  • 为金融科技安全要点的网络安全课程编写脚本.
  • 录制关于金融科技安全要素的网络安全课程.
  • 计划了一个14个视频的网络安全必备课程,重点介绍了2022年最常报告的十大漏洞.
  • 为网络安全必备课程编写脚本和准备幻灯片.
  • 录制了14个视频的网络安全基本要素课程,每个视频都有演示.
Technologies: Fintech, Information Security, Cybersecurity, Amazon S3 (AWS S3), Amazon EC2, 亚马逊虚拟私有云(VPC), Amazon Web Services (AWS), VPN, AWS VPN, OpenVPN, Amazon RDS, AWS WAF, Sentry, Amazon API Gateway, AWS Secrets Manager, Ansible, AWS Auto Scaling, Security Policies & Procedures, Lecturing, Application Security, Ubuntu, IT Infrastructure, AWS IAM, Debian, Continuous Integration (CI), 业务连续性计划(BCP), Training, AWS Cloud Architecture, Cloud Architecture, Networks, AWS Cloud Computing Services, Cloud Storage, Cloud Services, Cloud Security, Azure Virtual Networks, Load Balancers, Network Security, Data Security, Cloud, Data Protection, PHP, Azure, Hybrid Cloud Infrastructure, Cloud Computing, Monitoring

DevSecOps Engineer

2022 - 2022
Freelance
  • 使用HorizontalPodAutoscaler (HPA)和cluster Autoscaler解决了Azure Kubernetes Service (AKS)集群上的突发流量问题.
  • 为Azure Kubernetes Services (AKS)研究并推荐了合适的云原生数据量,该数据量支持跨多个pod的并发访问和水平可伸缩性.
  • 用Web-Queue-Worker风格构建了一个云原生基础架构,用于新的可扩展, secure, resilient, 高可用性应用, 哪个支持多租户客户机.
  • 部署了一个Web-Queue-Worker示例基础架构,并演示了如何使用Azure Synapse Analytics和其他工具将客户端转换为大数据架构.
Technologies: Kubernetes, Docker, NGINX, MySQL, MariaDB, DevOps, DevSecOps, Azure Functions, Azure Synapse, Azure Kubernetes Service (AKS), Azure Files, Azure Storage, Azure, Kubernetes HPA, Azure Container Instances, Azure Container Registry, Azure SQL Databases, Azure Synapse Analytics, Linux, Deployment, 资讯科技营运管理(ITOM), Architecture, Security Design, Cybersecurity, Postman, Ubuntu, IT Infrastructure, Security Management, Debian, Continuous Integration (CI), CI/CD Pipelines, Azure DevOps, DevOps Engineer, IP Networks, Networks, Azure Key Vault, Cloud Services, Cloud Security, Azure Virtual Networks, Azure Virtual Machines, Load Balancers, Azure Administrator, Network Security, Data Security, Cloud, Data Protection, PHP, Cloud Computing, Information Security, AWS Lambda, Monitoring

Security Trainer

2019 - 2022
e.KRAAL Innovation Hub
  • 为国家网络安全培训计划(NCSTP)第三批20名学员讲授云安全, featuring 30+ hours of live, practical content, 以及Azure上的9个实践实验室, delivered over five days.
  • 为NCSTP第一批40名学员讲授关键信息基础设施保护课程, featuring 24+ hours of live, practical content, and five practical labs on AWS, delivered over four days.
  • 每次培训都获得了压倒性的积极评价.
Technologies: Training, Azure, Amazon Web Services (AWS), Ansible, IT Security, Security, Hybrid Cloud Infrastructure, Security Policies & Procedures, Lecturing, Disaster Recovery Plans (DRP), Cybersecurity, Application Security, Ubuntu, IT Infrastructure, Proxies, AWS IAM, Security Management, Debian, 关系数据库服务(RDS), Continuous Integration (CI), Amazon API Gateway, Docker, DevOps Engineer, 业务连续性计划(BCP), Team Leadership, Leadership, AWS Cloud Architecture, Cloud Architecture, IP Networks, Networks, VPN, AWS Cloud Computing Services, Virtualization, Cloud Storage, Cloud Services, Cloud Security, Azure Virtual Machines, Load Balancers, Azure App Service, Network Security, Data Security, Cloud, Data Protection, PHP, Cloud Computing, Information Security, NGINX, Data Loss Prevention (DLP), Monitoring

Systems Developer

2015 - 2016
Nature Surf Systems
  • 设计和部署专注于安全性的定制IT基础设施. 这包括通配符SSL证书, strong SSL cipher suites, 反向代理和负载平衡器, remote access VPNs, and site-to-site VPNs.
  • 带领开发团队连续两个月每周发布一个新特性.
  • 通过创建lite将Android应用程序大小从1MB减少到40KB, 能够在入门级智能手机上运行的缩小版.
Technologies: PHP, Android, MySQL, Reverse Engineering, Apache2, NGINX, Apache, Information Security, Java, Linux, Security Policies & Procedures, 资讯科技营运管理(ITOM), On-premise, System Administration, MySQL/MariaDB, Postman, Application Security, Ubuntu, IT Infrastructure, Proxies, High-Availability Linux, Controls, Security Architecture, Debian, Continuous Delivery (CD), Continuous Integration (CI), Bash, DevOps Engineer, Business Continuity, 业务连续性计划(BCP), Team Leadership, Leadership, IP Networks, Networks, VPN, Virtualization, Cloud Storage, Cloud Services, Cloud Security, 多因素认证(MFA), Load Balancers, Network Security, Data Security, Cloud, Data Protection, Hybrid Cloud Infrastructure, Cloud Computing, Data Loss Prevention (DLP), Monitoring

Graduate Management Trainee

2015 - 2015
总统数字人才计划
  • 更新入境事务处的资讯保安政策.
  • 审查内政部网站,并对其重新设计提出建议.
  • 作为100名管理培训生的指定代表,带领整个团队.
技术:Web应用程序设计,领导力,团队领导力,安全策略 & Procedures, Ubuntu, IT Infrastructure, Controls, Debian, Business Continuity, IT Audits, IP Networks, Networks, Network Security, Data Security, Data Protection, Information Security, Data Loss Prevention (DLP)

某金融服务公司的AWS良好架构框架审计

客户对其托管在AWS上的基础设施进行了审计,以确定任何漏洞, loopholes, 以及不遵守影响性能的最佳实践, availability, security, 以及应用程序的可伸缩性. 客户还就如何解决已确定的问题寻求建议.

我们实施此审计的方法由AWS良好架构框架(Well-Architected Framework)管理,该框架指导云解决方案架构师在AWS中创建基础设施时采用的最佳实践. 该框架由六个支柱组成(安全性, reliability, performance efficiency, cost optimization, operational excellence, 和可持续性),这些都是在审计过程中经过彻底审计的. 我们被授予访问AWS、演示、开发和UAT环境的权限. Other documents, 例如AWS账单报告, were provided, 以及问题的答案.

审计共确定了46个分类问题:11个问题被列为高影响问题, 他们的潜在补救措施与客户共享,以便采取行动.

Email Server Audit

这个项目是由一家旅游公司的信息通信技术系统,特别是电子邮件系统的不当行为引起的. 公司所有者是项目的拥护者. 该项目的目的是查明信息和通信技术方面存在这种不当行为的任何可能性, recommend solutions, 并在可能的情况下实施解决方案.

该项目分三个阶段远程执行,并通过三次前往阿鲁沙总部的区域旅行:

第一阶段包括对邮件系统进行法医分析,以确定谋杀的实例. 不当行为确实被发现了,证据也被提交给了项目负责人.

第二阶段是实现一个解决方案,该解决方案将邮件服务器迁移到安全的云虚拟专用服务器上,并运行加密、电子邮件防病毒和反垃圾邮件机制. 这次迁移是无缝地、成功地完成的,对业务的影响最小.

最后一个阶段是优化办公室信息通信技术系统的性能和安全性. 这个阶段进一步涉及邮件服务器的配置,以满足组织的需求, 例如,特定的帐户仅限于内部通信.

总的来说,这个项目取得了巨大的成功.

HeptaPay

http://heptapay.com
通过借记卡或信用卡将钱存入移动钱包的在线代理. As the integrations engineer, I set up the card processing payment gateway and connections to the telecommunications partners; tested these connections for security and performance; and managed the back end, 内部事务监视仪表板, and the platform's security.

2017年肯尼亚总统选举情绪分析

http://uchaguzi.today/
肯尼亚于2017年举行了大选. 我们建立了Uchaguzi Today,以展示每位候选人受欢迎程度背后的趋势,并解释(通过定期更新)他们的行为引发了积极的影响, neutral, or negative response. 我的工作是建立收集数据的基础设施, 与Twitter API交互以收集tweet, 设计和部署仪表板, 并部署一个Android应用程序来对样本数据集进行分类,以帮助训练模型.

Languages

PHP, Python, Java, Bash, JavaScript

Tools

NGINX, 亚马逊虚拟私有云(VPC), VirtualBox, OpenVPN, Azure App Service, VPN, Apache, Azure Kubernetes Service (AKS), Ansible, Sentry, GitLab, Amazon EKS, AWS IAM, Postman, Azure Key Vault, Grafana, Terraform, Asana, Istio, Supervisor, Supervisord

Paradigms

基于角色的访问控制, DevOps, DevSecOps, Azure DevOps, Continuous Integration (CI), Continuous Delivery (CD), Web App Design

Platforms

Linux, Apache2, Azure, Amazon EC2, Kubernetes, AWS Cloud Computing Services, Amazon Web Services (AWS), Ubuntu, Debian, WordPress, Android, Docker, Azure Functions, Azure Synapse, Azure Synapse Analytics, AWS Lambda, Jelastic

Storage

MySQL, Azure Active Directory, MariaDB, Amazon S3 (AWS S3), PostgreSQL, MySQL/MariaDB, Data Centers, Storage Area Networks (SAN), Azure SQL Databases, On-premise, Azure SQL, LiteSpeed for SQL Server

Industry Expertise

网络安全

Other

Office 365, Hybrid Cloud Infrastructure, Cloud Computing, Information Security, Application Security, Cloud, Azure Administrator, Azure Virtual Machines, 多因素认证(MFA), Identity & Access Management (IAM), Azure Virtual Networks, Cloud Security, Cloud Services, Cloud Storage, Virtualization, Networks, IP Networks, IT Audits, Cloud Architecture, AWS Cloud Architecture, Leadership, Team Leadership, Training, 业务连续性计划(BCP), Business Continuity, Storage, Email Security, DevOps Engineer, Azure Files, Kubernetes HPA, Fintech, AWS VPN, Amazon RDS, AWS Secrets Manager, AWS Auto Scaling, IT Infrastructure, Proxies, IT Security, Security, GitFlow, Load Balancers, CI/CD Pipelines, Deployment, Security Policies & Procedures, 资讯科技营运管理(ITOM), Architecture, System Administration, 关系数据库服务(RDS), Infrastructure as Code (IaC), Security Design, AWS认证云从业者, Lecturing, Security Architecture, Controls, Security Management, Disaster Recovery Plans (DRP), High-Availability Linux, Data Loss Prevention (DLP), Monitoring, Reverse Engineering, Mail Servers, Data Security, Azure Storage, Data Protection, Azure Container Instances, Azure Container Registry, AWS WAF, Amazon API Gateway, Prometheus, Shell Scripting, Code Auditing, AWS DevOps, Networking, Cisco, Azure Resource Manager (ARM), Web Hosting, GitHub Actions, Virtuozzo, Scaleforce

Frameworks

Windows PowerShell, Classic ASP, Laravel

Libraries/APIs

Twitter API

2016 - 2018

信息技术硕士学位

卡耐基梅隆大学-匹兹堡,宾夕法尼亚州

2012 - 2014

应用计算机技术学士学位

美国国际大学-非洲-内罗毕,肯尼亚

NOVEMBER 2023 - NOVEMBER 2026

AWS认证安全-专业

Amazon Web Services

JUNE 2021 - JUNE 2024

微软认证:Azure安全工程师助理

Microsoft

DECEMBER 2020 - DECEMBER 2026

AWS认证云从业者

Amazon Web Services

OCTOBER 2020 - OCTOBER 2024

微软Azure管理员助理

Microsoft

AUGUST 2020 - PRESENT

微软认证:Azure基础

Microsoft

APRIL 2015 - PRESENT

Associate - Information Storage and Management Version 2.0

Dell Technologies

NOVEMBER 2014 - DECEMBER 2026

Certified Ethical Hacker (CEH)

EC-Council

Collaboration That Works

How to Work with Toptal

在数小时内,而不是数周或数月,我们的网络将为您直接匹配全球行业专家.

1

Share your needs

在与Toptal领域专家的电话中讨论您的需求并细化您的范围.
2

Choose your talent

在24小时内获得专业匹配人才的简短列表,以进行审查,面试和选择.
3

开始你的无风险人才试验

与你选择的人才一起工作,试用最多两周. 只有当你决定雇佣他们时才付钱.

Top talent is in high demand.

Start hiring