SRS Team Member Profile
Darlington Aigbokie
 |
|
Go Back To Team Members
NAME: DARLINGTON AIGBOKIE
EMAIL: DARLAIG0311@GMAIL.COM
MOBILE: +447446837056
|
PERSONAL PROFILE |
|
PROFILE |
|
Experienced and resourceful goal-driven
technology consultant within Cloud SRE/DevOps
currently working with DXC technology's
clients in the public and private sector.
|
|
TECHNOLOGY EXPERIENCE |
|
Enterprise Cloud Native Infrastructure - Containerization with Docker and orchestration using Kubernetes and Docker swarm.Blockchain - Ethereum, Multichain, Hyperledger Fabric Provisioning - Terraform, Ansible Experience in CI/CD - design and implementation with Jenkins. GitHub actions and Circle CI Programming Languages & Scripting - Python, Bash APM & Application Logging: New Relic, ELK, CloudWatch, Prometheus and Grafana Virtualisation: VMware (vCenter, ESXi), Windows Hyper-V Databases: MySQL, Oracle Other Technologies: Kafka, Hashicorp Consul and Vault, Helm, Nginx, Squid proxy. GitOps - Flux, ArgoCD Security - Security Information and Event Management(SIEM)- Wazuh, Threat Detection - Falco, Darktrace Cloud & Watchguard, Firewall - FortiGates, Fortiweb, WatchGuard. Identity & Access Management - Keycloak.
|
Professional Experience
|
||
| Co-Founder / CTO | ||
|
Co-founded and Spearhead the development and implementation of SRS's technological vision from ground up as founding CTO, overseeing all technology strategy, and aligning with the company's mission to enhance security in educational institutions. Collaborating with the CEO and executive team to formulate and execute the company's overall strategic goals and business objectives. Managed relationships with key technology vendors to evaluate and integrate optimal hardware that would enhance the functionality of our software solution. Oversee the integration of machine learning and artificial intelligence
|
|
||
| Technology Consultant | ||
|
Working on a Digital transformation and re-platforming project focused on migrating legacy systems for clients to the cloud platform and implementing information security measures securing data at rest and in transit. Providing day to day engineering functions in maintaining and managing the core cloud and enterprise multi-tenant self-service platform hosting variety of critical client applications. Collaborated with cross-functional teams to ensure compliance with security best practices, including vulnerability assessments; IAM policies and SSL/MTLS encryption. Conducted upgrades of self-managed Kubernetes clusters from version 1.19 to 1.20. Coordinated with stakeholders and adhered to best practices to minimize downtime. Introduce the use of spot instances on k8s clusters to reduce AWS cloud cost, having 50% spot instance and 50% on demand instance running. Upgraded FortiGate firewalls, to eliminate known vulnerabilities and ensuring secure network traffic and application delivery. Utilized Docker and Kubernetes to containerize and orchestrate applications, improving scalability and portability across environments. Developed and maintained IAC using Terraform and Ansible, enabling version-controlled and automated infrastructure deployment. Take the initiative to raise known vulnerability highlighted by Jenkins Security Advisory (2024-01-24) and upgrade accordingly. This includes upgrading Jenkins image and fix other vulnerabilities in found in plugins.
|
|
SUMMARY OF EDUCATION |
| 02/ 11 - 08 / 12 |
University of South Wales , Glamorgan |
|
| Core Modules: |
MSc. Electronics and Information Technology |
|
|
Electronic System Design, Applied Digital Signal Processing, |
||
|
Wireless and Personal Communication, Digital Communications Systems, Project/Product management and Integrated Studies |
||
| 05/04 - 06/08 |
Ambrose Alli University BSc. Computer Science
|
|
||
| Senior Site Reliability Engineer | ||
|
Scaled a trading platform from blockchain PoC to SQL enterprise-scale application and successfully migrated enterprise blockchain applications from Docker Swarm to Kubernetes(K8S) platform. Implemented and optimise CI/CD pipelines for blockchain projects; this includes collaborating with Devs and QA team to improve and automate QA processes, ensuring efficient code deployment and release management; integrating release process with slack for Project managers deployment convenience. Maintained and support blockchain infrastructure; this includes frequently planned upgrade/update of Nodes upon releases of new base AMI's (Linux CentOS). Improved docker build processes to get deterministic build and implemented and automated the process to validate docker images against images already in registry. Implemented highly available monitoring solutions with Prometheus and Elastic Search (ELK) to gain visibility and observability on blockchain networks and nodes and assisted in testing and debugging, identifying, and resolving application issues to ensure quality and reliability.
|
|
||
| Cloud DevOps Engineer | ||
|
Providing cloud expertise as part of a cross-functional software delivery teams and making contributions on cloud-based projects, designing, provisioning and maintenance of Event driven Infrastructure such as AWS Lambda, SQS, S3, REST API, Dynamo DB, RDS and EKS. Including working in various collaborative project, which includes creating and publishing a secured API Gateway endpoint to integrate a client onboarding application with the backend MDM systems and integrating our event driven pipeline with services developed by other cross function team within the business and other third-party API to obtain client risk data.Kubernetes cluster creation and maintenance; Application installations via Helm charts; using helmfile to manage and simplify Kubernetes helm releases. Jenkins's administration and maintenance. Continually working to improve infrastructure and reviewing cloud services using Apptio's Cloudability /billing reports to find biggest expenses for potential savings; determining services that are under-optimized and making recommendations with the aim of reducing cloud cost. Experience with distributed queueing tools such as Kafka. Implementing and improving on infrastructure and microservices monitoring on New Relic and setting up alerts. Collaborating with InfoSec in ensuring compliance with security best practices; reviewing data classification and event streams from on-prem Oracle Database to applications running on Kubernetes clusters. Involving in SCRUM meetings to ensure successful project forecasting and developing a road map with realistic commitments. Upgraded terraform from Version 0.13 to 1.0.0 and began the initial upgrades to our base Terraform modules and working to improve the terraform code quality. Setup Jenkins Pipeline as a code for running Cypress automated UI test against our MDM application.
|
|
||
| Cloud Infrastructure Engineer | ||
|
Provisioning infrastructure in Google Cloud and support developers with their CI/CD releases; Integrate build automation tool, maven with Jenkins to automate the build process as part of continuous delivery. Using JIRA to manage Agile Projects including bugs/Issues/defects tracking and documentation, collaboration, feedback, and workflow management. Implemented vertical Pod autoscaling to automatically manage pod resources. Further reducing maintenance time.
|
|
||
|
Infrastructure Engineer -
Hyperconverged Infrastructure, Cloud, Automation, Orchestration & Build |
||
|
Administering and supporting French Connection group (United Kingdom, Europe, USA, China) complex hybrid cloud Infrastructure, consisting of Intrusion Detection Systems (IDS), Linux and Windows servers VM's. Conducting AWS Well-Architected review in ensuring our workload aligns with each pillar of the Well-Architected framework; contribute to the planning, designing and delivery of cloud native solutions and continually working to improve existing architecture. Automating AWS cloud with terraform. Provided broad technical knowledge that covers cloud, Built Kubernetes clusters from ground up, control and worker components configuration. Experience with monitoring tools Prometheus and Grafana. Volunteering in store working during business peak operations such as Black Friday, to better understand the business from a customer driven perspective. Assisting, answering queries, and communicating with customers to better understand their expectations.
|
|
||||
|
Managed active directory services and group policies; setting up new users in AD, granting users access to shared network resources, making changes to login script when required to map network drives and printers to user machine. Adhering to change management process; presenting proposed changes to CAB, providing details of all Proactively monitor infrastructure environment using PRTG network monitor and resolving issues before it becomes business impacting. Troubleshooting e-mail issues with Exchange Troubleshooting Assistant Update and maintain network documentation and procedures. Running server maintenance and populating system report log for documentation. Rolling out patches using Batch Patch and WSUS |
|
Key Achievements |
|
Contributed in planned migration of HMPO'S Fortigate Next Generation Firewall from manual config to automated configuration and cert rotation. upgrade firewalls running on OS v7.2.2 subject to critical vulnerability to v7.2.4. Upgrade Kubernetes cluster from v1.19 to v1.20. Implemented highly available monitoring solutions with Prometheus and Elastic Search (ELK) to gain observability on services running on Kubernetes and EC2 instances. Reviewed and proposed instance resize on EKS cluster and implemented a mixed worker group lunch templates with mixed pools of SPOT instances which significantly reduce cloud cost. Reviewed and rightsized AWS Elastic Search (ES) instance that was solely dedicated to the Master data management application; ES was running on three r5. large instance with a 200gb EBS volume size which was storing just 200mb of data, costing $544.92 per month in both non prod and prod making a total of $1089.84 to a t3. small instance with 20gb EBS volume, making about 90% cost saving. Upgraded Amazon EKS CLUSTER from Version 1.14 to 1.20 Worked as part of a team to deliver a greenfield project with the aim of extending our infrastructure to a public cloud platform. Served as technical project lead for Cato SASE converged cloud native solution, securely connecting Data centers and users to cloud via Cato SASE cloud edge; Designed, Planned, Tested and implemented SD-Wan solution across remote corporate sites, data centers and retail locations across Europe, America and Asia, replacing MPLS links and Site-to-site VPN with SD-WAN solution with aim of reducing MPLS cost, improving security and simplify complex network to allow for better management. Deployed WatchGuard Threat Detection and Response (TDR) advanced malware defense tools to improve French connection's network security posture. Upgraded French Connection's Sophos antivirus enterprise Server and deployed updates to all endpoints and servers. Took ownership of publishing SPF, DMARC and DKIM records to further improve email security for French Connection domains and other brands under the French connection IT infrastructure management to prevent the delivery of spam emails and deploying patches to endpoints. Delivered the IBM AS400 Power9 project; designed and implemented network system and ensures it aligns to security best practices, installed IBM virtual HMC on our virtual infrastructure, allocated IP ranges and configured switch ports for servers while adhering to change management process.
|