Michael Oduor Otieno

Software Engineer | Cloud & Site Reliability Engineer

I’m a software engineer, specialising in cloud infrastructure, automation, and creating dependable systems.

My background includes front-end programming with Angular, backend development with Python and Django, and DevOps techniques that provide safe, scalable, and repeatable deployments. In order to automate environments and lower operational overhead, I frequently deal with AWS, Infrastructure as Code (Terraform), and Kubernetes.

I'm curious about how systems respond to failure, how automation lowers human error, and how well-designed infrastructure increases developer productivity and dependability. I regularly design cloud systems and write technical articles on AWS, Kubernetes, and Terraform that dissect actual infrastructure patterns in order to further this understanding.

Skills

DevOps & Cloud Skills

Cloud Platforms: AWS
DevOps: Terraform, Ansible, GitHub Actions, Jenkins, Docker, Kubernetes

Full-Stack Development Skills

Frontend: Angular, TypeScript, HTML/CSS/JavaScript
Backend: Python, Django, Django REST Framework, PostgreSQL, Redis
General: Linux, Git, Nginx, Networking, Cloud Architecture, Infrastructure Automation

Infrastructure & Automation Projects

2. Multi-Region, Multi-Tenant EKS Infrastructure

A Terraform-based platform that provisions isolated, production-grade Kubernetes environments per tenant across two AWS regions.

Each tenant gets dedicated VPC networking, EKS clusters, and node groups in both regions, with reusable modules and environment-specific tfvars to support dev, staging, and prod workflows.

View Project Details →

System Capabilities

Tenant-isolated VPCs and EKS clusters in two regions (region_1, region_2).
Public and private node groups with configurable capacity and AMIs.
IRSA wiring for Kubernetes service accounts.
EBS CSI driver installation per tenant/region via Helm.
Environment-specific provisioning with tfvars and Makefile workflows.
Kubernetes manifests for app deployment and secret management.

Technologies Used

Infrastructure:: Terraform, AWS (VPC, EKS, IAM), Helm, Kubernetes
Operations: Makefile, environment-specific tfvars
App Manifests: Kubernetes YAML

My Role

Designed the multi-tenant, multi-region Terraform architecture with reusable modules.
Implemented tenant-scoped VPC and EKS provisioning with consistent defaults and overrides.
Integrated IRSA and storage drivers to enable secure workload identities and persistent volumes.
Created repeatable, environment-specific workflows for provisioning and Kubernetes deployment.

CodeBase

1. Errandhub

A cloud-native errand service platform that connects users with vetted service providers through a reliable, secure, and scalable architecture.

The platform is designed for high API reliability, real-time communication, secure transaction workflows, and production-grade container orchestration on AWS using Terraform and Kubernetes (EKS).

View Project Details →

System Capabilities

Secure authentication and authorization workflows.
User and service provider profile management.
Provider discovery with search and filtering.
Real-time bidirectional communication using WebSockets.
Contract lifecycle management with milestone-based payments.
Secure payment processing with automated release upon contract completion
Secure payment flow with controlled release conditions.

Technologies Used

Frontend: Angular
Backend: Django REST Framework, Django Channels
Data & Messaging: PostgreSQL, Redis
Infrastructure & DevOps: Docker, Kubernetes, Nginx, GitHub Actions, Terraform
Cloud (In Progress): AWS (VPC, EKS, IAM, ALB, EBS CSI)
Observability: Prometheus, Grafana, Alertmanager, Fluent Bit, Elasticsearch, Kibana, Jaeger

My Role

Designed and implemented the full-stack architecture with clear service boundaries and scalability in mind.
Built secure REST APIs for authentication, provider workflows, contracts, and transactions.
Implemented real-time communication using Django Channels and Redis.
Containerized frontend and backend services for reproducible builds and environment consistency.
Configured Kubernetes deployments, services, ingress routing, and namespace isolation.
Built AWS infrastructure as code with Terraform, including VPC networking, EKS cluster provisioning, IAM roles, and load balancing setup.
Implemented an observability stack for metrics, logs, alerting, and distributed tracing.
Hardened secret handling by removing hardcoded credentials from tracked manifests and shifting to safer variable-driven configuration.

CodeBase

Cloud Architecture

Reproducible infrastructure provisioning via Terraform.
EKS-based container orchestration for scalable workloads.
VPC segmentation with public and private subnets, NAT routing, and controlled ingress.
ALB-backed ingress for external traffic management.
Centralized monitoring, logging, and tracing for operational visibility and incident response readiness.

Technical Writing & System Design

1. How to Set Up EBS CSI Driver on AWS EKS Using Terraform and IRSA

2. Building a 3-Tier AWS VPC with NAT Gateways Using Terraform—Step-by-Step Guide

3. Provision AWS EKS IAM roles for service accounts (IRSA) using Terraform: Step-by-Step Guide to Secure Kubernetes Pod Access

Skills

Infrastructure & Automation Projects

2. Multi-Region, Multi-Tenant EKS Infrastructure

1. Errandhub

Technical Writing & System Design

Social Links