Samuel Onyekwere

Samuel Onyekwere
Cloud Engineer

I build secure, automated infrastructure on Microsoft Azure — Terraform, containers, and GitHub Actions CI/CD — grounded in cloud networking and security.

View projects Download CV GitHub

About

Cloud Engineer with a software-engineering background and hands-on Azure experience across Terraform, containers, and CI/CD. I provision infrastructure as code, containerise applications with Docker, and automate build and release with GitHub Actions using OIDC — grounded in cloud networking, identity, secrets management, and security.

I recently built an internal developer platform on Azure that provisions a full application stack from a single manifest, and earlier founded a registered consultancy migrating client workloads onto Azure.

I'm completing an MSc in Cloud & Network Security (taught modules at Distinction level; dissertation result pending), with research on reproducible cloud misconfiguration detection for fintech payment workloads on Azure.

Featured Projects

FinPay — Internal Developer Platform for PHP Workloads on Azure

A self-service internal developer platform (IDP) that lets any team deploy a containerised PHP application to Azure from a single deploy.yaml manifest — turning a one-off fintech deployment into a reusable, self-service product with golden-path defaults.

  • Versioned, reusable Terraform module provisioning Azure Container Apps, MySQL Flexible Server, Azure Cache for Redis, Key Vault and ACR.
  • Private-by-default networking: VNet-integrated MySQL and private-endpoint Redis over TLS; passwordless access via user-assigned managed identity and Key Vault RBAC.
  • Reusable GitHub Actions pipelines (workflow_call) with OIDC federation to Azure.
  • Security and quality gates in CI (Checkov, Trivy, tflint); semantic-versioned releases.
Azure Container Apps Terraform GitHub Actions (OIDC) Key Vault
View on GitHub

FinPay — Fintech Payment Application (Software Engineering)

The PHP fintech application underneath the platform above: a versioned REST API (api/v1), authentication and user-account modules, and payment functionality including Bitcoin HD-wallet address generation.

  • Containerised with Docker and Compose, with a health-check endpoint for platform probes and a PHPUnit test suite.
  • Dependencies managed with Composer, configuration externalised via environment variables.
  • Authorship note: Built as MSc SWE7303 (DevOps) coursework. The PHP application was authored by me; a classmate handled the AWS deployment shown in the repo's buildspec.yml. I independently re-platformed the application onto Azure — the IDP project above is that work.
PHP 8.2 Composer MySQL Docker
View on GitHub

Cloud Misconfiguration Detection Benchmark — MSc Research

A reproducible benchmark comparing static and runtime cloud misconfiguration detection for fintech payment workloads on Azure, using Terraform variants that model high-impact security misconfigurations.

  • Evaluated detection tools on coverage, false-positive rate and time-to-flag, and analysed their complementarity.
  • Incorporates DORA and PCI DSS considerations. Released as an open, reproducible artefact.
Terraform Checkov TFSec Azure Policy Defender for Cloud
View GitHub Repo DOI: 10.5281/zenodo.21628426 (Manuscript submitted to IEEE; decision pending)

Currently Building (Roadmap)

Online Boutique on Azure AKS

Kubernetes, Helm/Kustomize, workload identity, ingress, managed Prometheus/Grafana.

Planned next: GitOps (Argo CD), observability/SRE, Terraform testing & policy-as-code, multi-region resilience.

Experience

Founder & Backend Developer — Ecosynd Technologies

Nigeria · 2022–2025

Registered software & web-development consultancy (CAC, Abuja, 2023), grown from an independent client practice; paused Sept 2025 on relocation to the UK for postgraduate study.

  • Founded the consultancy and led migration of client websites from shared-hosting providers (Namecheap, Hostinger and others) to Microsoft Azure — re-platforming onto Azure App Service and Azure Static Web Apps, with domain/DNS cutover and database migration. [Optional, only if accurate: migrated ~[N] client sites for [M] clients]
  • Delivered web applications, APIs and backend systems for clients in Go and PHP, including fintech and trading workflows.
  • Owned client engagements end to end — requirements to deployment, troubleshooting, and ongoing maintenance in production.
Azure Terraform App Service Static Web Apps Go PHP

Backend Developer — BlueX Services

2021–2022

  • Built backend functionality and APIs for web applications across application logic, databases and deployment workflows.
  • Investigated issues and implemented fixes to improve reliability.
PHP APIs Git

Education

MSc Cloud & Network Security — University of Greater Manchester

2025–2026

Taught modules completed at Distinction level; dissertation result pending, provisional until ratified by the university's Awards/Progression Board.

Key modules (Level 7, grade A unless noted): DevOps 83, InfoSec 75, Professional Practice 72, Cloud Solutions & Implementation 71, Penetration Testing & Forensics 70, Research Methods 66 (B). Dissertation (in assessment): reproducible cloud misconfiguration detection for fintech payment workloads on Azure.

[Bachelor's degree — fill in]

[University] · [Dates]

Skills

Certifications