CHRYS GIDE Tcheumadjeu Djeukeutcheu

- Managed IAM across mulitple environments, including custom roles, Workload Identity Federation (WIF), service accounts and Secret Manager integrations. Strengthened cloud security by remediating high-risk findings identified through Wiz. - PostgreSQL upgrade programs across production and non-production environments. Designed and operated highly available AlloyDB and Cloud SQL architectures with read replicas, cross-region resilience and security hardening controls. - Onboarded and governed GKE clusters through GKE Hub/Fleet Management, implementing cross-project IAM, health monitoring and workload identity integrations. Built centralized logging pipelines from GKE to Pub/Sub and OpenSearch while optimizing ingestion costs through filtering and sampling strategies. - Scaled and managed critical GCP services, including BigQuery and Vertex AI Search, by increasing quotas and supporting multi-region production growth. Implemented budget monitoring, billing governance and cloud cost optimization initiatives through resource lifecycle management and environment cleanup. - Designed and maintained reusable Terraform modules for AlloyDB, Artifact Registry, Backup & Disaster Recovery solutions. Automated infrastructure configuration management and enforced compliance policies as code across Cloud Storage and platform services. - Implemented Cloud Armor WAF policies, CDN whitelisting (Akamai, Wangsu), global external Application Load Balancers and advanced traffic routing. Modernized TLS configurations, improved observability and enabled diagnostic logging to enhance security, reliability and operational performance. Core technologies: GCP, Terraform, GKE, Kubernetes, IAM, WIF, PostgreSQL, AlloyDB, Cloud SQL, Cloud Armor, Pub/Sub, OpenSearch, BigQuery, Vertex AI, Secret Manager, FinOps, CI/CD, Observability.

- Develop and configure Grafana dashboards and alerts for effective monitoring - Implement and configure Prometheus and Grafana for Docker Swarm monitoring - Deploy (using Terraform), continuously maintain, and monitor GCP infrastructure - Deploy (using Helm, ArgoCD), continuously maintain, and monitor applications on Google Kubernetes Engine (GKE) - Contribute to FinOps initiatives, including implementing best practices, reducing BigQuery costs, and decommissioning unused projects and resources - Enhance CI/CD pipelines by effectively implementing inheritance - Provide support to other teams (e.g., KAFKA) in structuring their technical requirements

- Designing and implementing (via Terraform) a data infrastructure on GCP - Ensuring the maintenance of the platform (Kubespray) on OVH

At TESSI: - Configuring RBAC (Role-Based Access Control), Network Security, and Pod Security on GKE clusters. At Adéo : - Implemented FinOps principles, including rightsizing and redeploying underutilized virtual machines - Developed Bash scripts (Cron) to automate VM shutdown and startup based on schedules - Developed Cloud Functions using NodeJS - Contributed to the development of data pipelines using Dataflow and Terraform

Context : Configuration of load balancing and failover on a Cisco router for INFOGENIE TECHNOLOGIES - Network Architecture Design - Configured Cisco routers for load balancing and failover capabilities - Developed a web-based garage management application using HTML, CSS, PHP, and SQL - Network cabling and installation for a cybercafé - Provided on-site network troubleshooting and support for clients - Performed fiber optic installation and troubleshooting

Context : Local network expansion for IAI Cameroon - Designed and Architected Network Solutions - Configured MikroTik hotspots and switches to ensure student connectivity - Implemented and configured RADIUS for user authentication and authorization - Provided network and computer maintenance for the entire institution