Senior Platform Engineer | DevOps | SRE | Cloud-Native Infrastructure

I design and automate secure, reliable cloud-native platforms, with a focus on Kubernetes, CI/CD, GitOps, observability, DevSecOps and production reliability.

With 7+ years of experience, I've worked across cloud, on-premises and hybrid infrastructure, helping teams automate delivery, improve platform visibility, strengthen security and troubleshoot complex distributed systems.

My engineering philosophy is simple: automate what is repetitive, observe what is running, secure what is deployed, and make recovery predictable.

• Platform Engineering: Kubernetes, OpenShift, Helm, workload orchestration, high availability and platform automation.
• Observability & SRE: Prometheus, Grafana, Loki, Tempo, OpenTelemetry, Alertmanager, SLIs/SLOs, error budgets and incident response.
• CI/CD & GitOps: Jenkins, Azure DevOps, GitHub Actions, ArgoCD, immutable releases, deployment promotion and rollback.
• Cloud & Infrastructure: AWS, Azure, Terraform, Ansible, Linux, networking and infrastructure automation.
• DevSecOps: Kyverno, Vault, Trivy, SonarQube, CodeQL, OWASP ZAP, Checkov, SBOMs and software supply-chain security.
• Data & Reliability: PostgreSQL, RLS, connection pooling, database migrations, backup automation and disaster recovery.

Designed and implemented observability capabilities for a Kubernetes-based application platform, integrating Prometheus, Grafana, Loki, Tempo and OpenTelemetry.

Key engineering areas:

• Centralized metrics, structured logging and distributed tracing.
• OpenTelemetry Collector pipelines and telemetry correlation.
• Four Golden Signals: latency, traffic, errors and saturation.
• Prometheus recording rules, alerting rules and Alertmanager integration.
• SLI/SLO monitoring, error budgets and burn-rate alerting.
• Automated incident creation, severity classification and resolution workflows.
• Operational runbooks for application health, API latency, error rates and resource saturation.
• Troubleshooting across Kubernetes workloads, application dependencies and PostgreSQL connection pools.
• End-to-end synthetic alert-delivery testing and recovery verification.

Implemented platform delivery and reliability patterns using Kubernetes, Helm, Docker and ArgoCD.

• Immutable container-image releases and digest-pinned deployments.
• GitOps-driven staging and production promotion.
• Kubernetes RBAC, ServiceAccounts and NetworkPolicies.
• Kyverno admission policies and workload security controls.
• Horizontal Pod Autoscaling, PodDisruptionBudgets, health probes and topology spreading.
• External Secrets, Keycloak and OAuth2 Proxy integration patterns.
• Deployment health verification, drift detection and controlled rollback procedures.

Integrated security controls throughout application delivery workflows.

• Static application and dependency security analysis.
• Container image and infrastructure-as-code scanning.
• Secret scanning and Kubernetes policy enforcement.
• Software Bill of Materials (SBOM) generation.
• Artifact signing, provenance and immutable image verification.
• Least-privilege access and centralized secrets management.

Built and maintained automated delivery and testing workflows across Linux, Windows and Kubernetes environments.

• Jenkins and Azure DevOps pipeline automation.
• Docker image build, validation and registry publishing.
• Kubernetes-based test execution using Playwright.
• Windows application provisioning and GUI automation using PowerShell, C# and FlaUI.
• Infrastructure provisioning and configuration using Terraform and Ansible.
• Automated test reporting, failure diagnostics and deployment verification.

Cloud & Infrastructure
AWS · Azure · OCI · Terraform · Ansible · Linux · Windows Server

Containers & Platform
Kubernetes · OpenShift · Docker · RKE2 · EKS · AKS · Helm · ArgoCD · NGINX Ingress · Istio

Observability & SRE
OpenTelemetry · Prometheus · Grafana · Loki · Tempo · Alertmanager · ELK · PromQL · SLIs/SLOs · Golden Signals · Incident Response

CI/CD & Automation
Jenkins · Azure DevOps · GitHub Actions · GitLab CI/CD · GitOps · Bash · PowerShell · Python

Security & Identity
Kyverno · Vault · Trivy · SonarQube · CodeQL · OWASP ZAP · Checkov · External Secrets · Keycloak · OAuth2 Proxy · RBAC

Databases & Storage
PostgreSQL · SQL Server · Redis · Kafka · MinIO · Ceph · Longhorn · S3-compatible Storage · Backup & Recovery

Programming & Scripting
Python · Bash · PowerShell · C# · SQL · Ruby

• Certified Kubernetes Administrator (CKA)
• Kubernetes and Cloud Native Associate (KCNA)
• Prometheus Certified Associate (PCA)
• AWS Certified SysOps Administrator
• Oracle Cloud Infrastructure DevOps Professional
• Oracle Cloud Infrastructure CyberOps Associate

• Enterprise observability architecture and OpenTelemetry
• Kubernetes platform engineering and security
• SRE, incident management and reliability automation
• Internal developer platforms and GitOps
• Distributed systems troubleshooting
• AI-assisted operations and incident investigation

• LinkedIn: linkedin.com/in/rodgersbiwott
• Email: rodgersbiwott2016@gmail.com

Building secure, observable and reliable platforms that teams can confidently operate.