Skip to content
View mogfrey's full-sized avatar

Block or report mogfrey

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mogfrey/README.md

Geoffrey Mogendi Okindo

Technical Architect | Cloud Platform & Site Reliability Engineering | AWS | Azure | Kubernetes | OpenShift | Terraform

I design, automate and operate secure cloud platforms for large, regulated environments. My work sits at the intersection of cloud architecture, Linux engineering, Kubernetes platform operations, observability, reliability and infrastructure automation.

I enjoy turning difficult operational problems into repeatable engineering systems: infrastructure as code, safe automation, useful telemetry, clear runbooks and architecture decisions that balance reliability, security and cost.

Featured architecture case studies

  • Production Platform Architecture and Reliability — a sanitized walkthrough of a four-cluster primary/DR platform supporting 5,000+ microservices and 1M+ daily transactions. It covers my personal ownership, architecture decisions, alternatives and trade-offs, failure behaviour, deterministic validation, incident remediation and recovery engineering.
  • Role-Aware Oracle Data Guard Failover for Azure Data Factory — a sanitized production-style design that replaced manual DNS/DNAT failover with fail-closed HAProxy routing driven by Oracle database role, managed identity, Key Vault, systemd automation and service-aware Azure Load Balancer health checks.

Featured engineering portfolio

Project What it demonstrates
AWS Enterprise Platform Secure VPC foundations, private connectivity, EKS patterns, tagging controls and Terraform design
Azure Enterprise Platform Landing-zone patterns, VNets, Private Link, managed identities, RBAC and Log Analytics
Kubernetes & OpenShift Operations Production readiness, workload resilience, platform health checks and incident runbooks
Enterprise Ansible Automation Idempotent Linux lifecycle automation, patching, service recovery and observability-agent deployment
Observability & SRE Playbooks OpenTelemetry, Prometheus, Grafana, Loki, Tempo, SLIs, SLOs and actionable alerting
Cloud FinOps Toolkit AWS and Azure cost analysis, ingestion trends, anomaly investigation and engineering accountability
Cloud Network Troubleshooting Lab DNS, TLS, routing, private endpoints, transit connectivity, Kubernetes network diagnostics and role-aware database failover patterns

Core capabilities

  • Cloud platforms: AWS and Microsoft Azure architecture, networking, security, governance and operations
  • Containers: Kubernetes, Red Hat OpenShift, EKS, Helm, Docker and Podman
  • Infrastructure as code: Terraform, ARM concepts, reusable modules and policy-aware deployments
  • Automation and validation: Ansible Automation Platform, Python, Bash, PowerShell, deployment checks and diagnostic tooling
  • Observability: OpenTelemetry, Prometheus, Grafana, Loki, Tempo, Mimir and cloud-native monitoring
  • Linux and infrastructure: Red Hat Enterprise Linux, SUSE Linux, VMware, OpenStack, high availability and enterprise backup platforms
  • Reliability: incident response, operational readiness, capacity management, disaster recovery, SLIs, SLOs and error budgets
  • FinOps: cost allocation, trend analysis, architecture-cost trade-offs and optimization governance

Engineering principles

  1. Automate the repeatable, document the exceptional.
  2. Prefer private, least-privilege designs by default.
  3. Measure customer impact, not merely infrastructure activity.
  4. Make failure modes explicit before production.
  5. Treat cost as an engineering signal alongside reliability and security.
  6. Build platforms that enable teams rather than creating operational dependency.

Certifications and education

  • Red Hat Certified Architect, AWS Solutions Architect Professional, Google Professional Cloud Architect, CKA, CKAD and Terraform Associate
  • Fortinet NSE 7, Cisco CCNA, PRINCE2 and ITIL
  • MSc Electrical Engineering and first-class BSc engineering degree
  • Mandela Rhodes Scholar and Erasmus mobility alumnus

Research

My academic work includes cloud-native 5G network-slice optimization, orchestration and metaheuristic resource allocation. See 5GSLICEOPTIMIZATION and 5GMETAHEURISTIC.

Portfolio validation

Every technical repository includes a GitHub Actions validation workflow. From a clone of this profile repository, all checks can be dispatched and reviewed with:

chmod +x scripts/run-portfolio-ci.sh
./scripts/run-portfolio-ci.sh dispatch
./scripts/run-portfolio-ci.sh status

The workflows validate Terraform, Ansible syntax, Kubernetes schemas, Prometheus rules, Python tests and Bash diagnostics without requiring access to private cloud environments.

About these repositories

The portfolio uses synthetic networks, placeholder identifiers and generated data. It contains no employer source code, credentials, customer information, production exports or confidential architecture.

I am particularly interested in international remote roles spanning technical architecture, platform engineering, cloud architecture, solutions engineering, DevOps and site reliability engineering.

Popular repositories Loading

  1. 5GMETAHEURISTIC 5GMETAHEURISTIC Public

    Metaheuristic Application to 5G slices

    Python 1

  2. Temperature-Sensor-Raspberry-pi Temperature-Sensor-Raspberry-pi Public

    Python

  3. PH-sensor PH-sensor Public

    Python

  4. Ultrasonic-Sensor-raspberry-pi Ultrasonic-Sensor-raspberry-pi Public

    Python

  5. Relay-Module Relay-Module Public

    Python

  6. Google-udacity Google-udacity Public

    Java