Etien Mbah

Work with stakeholders on application design and formulate the CI/CD pipeline for implementation.

• Write and edit files for application deployment through our end-to-end pipeline architecture.
• Collaborate with cross-functional teams to determine infrastructure needs based on Business Required Documentation (BRD) and SLA.
• Create and maintain robust EKS clusters for container orchestration, leveraging Terraform functionality for efficiency, accuracy, and flexibility.
• Analyze container images and submit appropriate requests to upgrade images with the latest versions certified and available in our artifactory to mitigate security vulnerabilities.
• Coordinate with application teams to provide recommendations on container vulnerability remediation, ensuring compliance and minimizing potential impacts.
• Manage vulnerability remediation efforts for GFCT applications, ensuring all security violations are addressed prior to critical deadlines.
• Configure and implement Jenkins Master-Slave architecture in UAT/Testing environments to achieve high availability and mitigate risks of single points of failure during builds.
• Write Jenkins files and configure Jenkins pipeline jobs for end-to-end continuous deployment in Production and Contingency environments.
• Ensure all vulnerability remediation actions are rigorously tested in UAT/Testing environments before raising CRQ for Production and DR server implementation.
• Analyze and propose remediation solutions for issues such as SSH keys, open SSH, non-restricted file and directory permissions, and create comprehensive documentation for future reference.
• Analyze application servers for OS updates using the LEAPP tool for RHEL, collaborating with teams to upgrade software per the bank's product catalog standards.
• Work with the Network team to ensure all LTMs are configured and tested before application go-live.
• Create and associate RMW to all applications in the GFCT space to guarantee server patching adherence to schedules.
• Monitor applications using Prometheus and Grafana, scraping metrics for performance monitoring, visualizing data in Grafana dashboards, and feeding metrics into CM for further analysis.
• Implement scalable hybrid data architectures integrating Teradata and Hadoop, using tools like QueryGrid, Hive, and Spark to improve query performance by 30%.
• Work with vendors such as SingleStore and RedHat to identify non-permitted technology (NPT) product upgrades, ensuring certification and implementation through the MW team.
• Create and assign roles to application and APS teams using AppviewX for certificate management.
• Set up SMTP/SFTP mailboxes and configure them to align with internal mail server LDAP for user group authentication.

Create and mount NAS during application design and conduct testing in lower lanes on all certified servers prior to deployments

• Created and maintained fully automated CI/CD pipelines for code deployment using Jenkins and Ansible to manage Deployment, and Kubernetes for orchestration
• Worked with my team to create a production ready EKS Cluster for container orchestration using Terraform IaC, leverage Helm charts as Kubernetes package manager to deploy Prometheus and Grafana, and EFK for APM and log aggregation
• Integrate Jenkins with Maven build tool, SonarQube for testing, nexus for artifactory to build war/java base packages deploying into Apache tomcat/Kubernetes with webhook automation
• Leverage Jenkins shared library in DI/CD pipeline scripting and management for reusability, consistency, flexibility, scalability and improved productivity by centralizing via shard library
• Leverage Prometheus and Grafana for application performance monitoring, ELK stack for log aggregation for understanding feedback and remediation
• Used Datadog for APM by integrating application servers to monitor metrics, declare incidents, create dashboards and monitors for visibility and more, communicate and collaborate and more
• Used Casandra as an open-source distributed NoSQL database for storing transactional data with high scalability, reliability, availability for large scale data processing
• Actively involved in an end-to-end SDLC automated pipelines in my team using Github, Maven code-build and Junit Testing, SonarQube static code analysis, Nexus Artifactory, Docker containerization and deployment into Kubernetes
• Deploy and manage web applications using elastic beanstalk with its autoscaling, monitoring, load balancing, debugging capabilities with ease as Elastic beanstalk takes care of infrastructure provisioning and management
• Hands-on experience in installing, configuring, and managing JBoss Application Servers, including setting up JBoss clustering and load balancing (LB) with redundancy, essential for achieving high availability, scalability, and resiliency in enterprise environments
• Manage authentication in Jboss using RBAC and IAM policies and configure SSL/TLS encryption
• Leverage Jboss management console and logging for application monitoring and observability
• Architected Dev/UAT/Prod in a three tier VPCs, subnets, NACL, Rout-tables, security groups, EC2 using launch Templates, LB, RDS, ASG and Route53 in multiple AZs for disaster recovery
• Designed and implemented highly available, scalable, and secure AWS Infrastructures using IaC tools -Terraform/CloudFormation and leveraging DHCP to dynamically assign IP addresses
• Extensive use of Terraform and its extensibility tools HCL, Vault, backend State management to spin AWS EKS-Cluster, EC2 severs, configure EBS, EFS for high scalability
• Leverage Gitlab pipeline to perform script deployment in parallel style taking advantage of build, test, deploy, logging, and monitoring features of Gitlab and runners
• Set up AWS Direct Connect for dedicated network between on-premises to AWS the datacenter
• Set up and manage AWS Lambda functions for automation and efficient serverless computing
• Configure AWS Lambda to automatically stream logs, based on success or errors as event driven functions and send notifications
• Implemented Security best practices in AWS, including multi-factor authentication, access definition, role-based access control (RBAC), enforced firm password policy for authentication
• I have used AWS Glue for Serverless Data Integration, Data Processing and ETL from a source system to fit specific business need and load to target system for usage
• I use VSCode tool for developing and debugging code, managing code repositories, and deploying applications to production environments leveraging its extensive functionality
• Developed baseline VPC and Network design, including leveraging VPN, Transit-gateway and for multi-VPC connectivity
• Analyze the organization's IT environment to detect critical deficiencies and recommend solutions for improvement, high documentation, and guidelines for reusable code and security
• Worked actively on AWS Glue for ETL for date serverless data processing to meet client business needs
• Configure AWS Lambda to extract data as new data is uploaded into S3, transform, and upload the data into RDS and Amazon DynamoDB
• Coordinate activities that enhance team collaboration for solution design, and decision implementation, high level research for team
• Write python script to leverage AWS lambda to clone code and run pytest on the code and if the test passes, lambda publishes the application servers and send emails
• Manage end-to-end Build, manage Git Dev/Stage/Master branches in a unique three stage branching strategy with good mastery of Git CLI workflow

• Performing application builds, running sanity tests on builds, and generating packages
• Participated in all phases of Build and Release activities
• Responsible for managing source code repository GitHub creating organizations and teams, and adding team members with related permissions
• Work with various development teams to build and support automated builds, supporting daily continuous integration
• Write Jenkins pipeline scripts in groovy, run pipeline locally for POC and validate for automation Jenkins and maven build tools
• Deploying the war files in the Apache Tomcat server, building and deploy JAVA base and Node.js applications
• Work in a team actively installing and configuring applications settings on on-prem Windows Servers including Database connections, Security settings and installing packages on windows servers
• Configure S3 for Object storages and use DynamoDB tables to lock terraform state files for security and consistency in my environment
• Integrated AWS Athena to query data in S3, Glue and output the data through firehose to configured endpoints by configuring lambda event driven functions as triggers
• Highly experience in Jira collaboration for tracking work progress, ticketing and managing teams
• Troubleshoot automated deployment downtime in application servers like WebLogic and Apache Tomcat/docker/AWS EKS clusters, Windows Servers application debugging
• Monitored end-to-end infrastructure using CloudWatch, New Relic and AWS Guard Duty
• Designed secured, cost-optimized, highly available, and fault-tolerant infrastructure in AWS