Gora Leye

Design and implement reusable patterns (template patterns) to industrialize the deployment of Azure infrastructures and solutions.

These patterns allow different entities to benefit from best practices in terms of security, observability, governance, and scalability, while reducing implementation time and risks associated with manual configurations.

Development of a standard template for deploying Azure Kubernetes Service (AKS) clusters.

Native integration of network security (Private Endpoints, Azure CNI, Network Policies) and identity management (Azure AD, Managed Identities).

Addition of automated configurations: node autoscaling, monitoring, persistent storage, ingress controller, and CI/CD integration.

Objective: ensure rapid and consistent production deployment of Kubernetes environments while adhering to group governance standards.

Design of a comprehensive observability pattern covering metrics, logs, and distributed traces.

Use of Azure Monitor, Azure Managed Prometheus, Azure Managed Grafana, and OpenTelemetry Collector to collect and correlate data.

Implementation of standardized dashboards and alerting based on business and technical KPIs (API latency, application errors, CPU/memory saturation, etc.).

Objective: provide entities with a turnkey foundation for end-to-end monitoring of their applications and infrastructures.

Within a team of 12, I designed and implemented an integrated Azure architecture, using Azure API Management, Azure Logic Apps, and Azure Service Bus to orchestrate integration flows and communication between systems.

Deployment of an Azure architecture in a Hub/Spoke model, interconnected with KPMG's central infrastructure, using advanced services like Azure API Management, Azure Logic Apps, and Azure Service Bus for API management and business process integration.

• Azure API Management: Implementation of Azure API Management to expose and secure APIs, facilitating data flow management between different services and providing a centralized gateway for developers and business teams.

• Azure Logic Apps: Deployment of Azure Logic Apps to orchestrate business processes and automate complex workflows, with seamless integration of internal and external services.

• Azure Service Bus: Use of Azure Service Bus to ensure reliable asynchronous communication between services, guaranteeing the integrity of inter-application exchanges and managing queues in a distributed environment.

• Resource Security: Privatization of critical services with Private Endpoints and implementation of governance rules via Azure Key Vault for secret and certificate management.

• Traffic Redirection and Routing: Implementation of an iptables-based Linux router and NGINX for network flow management, with DNS redirection (inbound and outbound) for precise and secure routing.

• Hub/Spoke Integration: Connection of the local Hub/Spoke architecture to KPMG's central Hub/Spoke infrastructure, ensuring secure network extension and centralized resource control.

• Implementation of a hub&spoke architecture for flow management (CONFLUENT KAFKAWEB APPLICATION GATEWAY, NAT GATEWAY, AZURE FUNCTIONS, LOGIC APP, PRIVATE ENDPOINT, TERRAFORM, AZURE DEVOPS, C#.NET)

• Implementation of private DevOps agents with Azure Container Instance

• Setup and configuration of CI/CD with Azure DevOps and Terraform

• Setup of monitoring and disaster recovery

• Writing DAT (Technical Architecture Document)