YEARSIT Infrastructure, Support & Cloud
OBED://CLOUD_PLATFORM
INITIALIZING PLATFORM
·IDENTITY
·NETWORK
·SECURITY
·AUTOMATION
·OBSERVABILITY
0%
PLATFORM READY
OBED OWUSU
ENGINEERING SECURE, AUTOMATED AZURE CLOUD PLATFORMS
Cloud Platform Engineer building across Azure infrastructure, identity, security, automation and modern endpoint management.
BASED INUNITED
KINGDOM
KINGDOM
SPECIALISING INAZURE PLATFORM
ENGINEERING
ENGINEERING
FEATURED WORKSecureCloud
Hub
Hub
01ABOUT ME
I focus on secure, scalable cloud architecture using Infrastructure-as-Code, CI/CD, monitoring, and reusable design patterns.
OO // 01CLOUD PLATFORM ENGINEER
OBED OWUSU
I work across Azure platform operations, cloud security, hybrid identity, endpoint management and automation.
My engineering approach is to understand the architecture first, automate repeatable work, apply least privilege and make systems observable by default. I build with operations in mind — not just deployment.
CLOUD PROJECTSAzure, automation & governance
STACKAPIM · Logic Apps · Service Bus · Key Vault
PLATFORM TOOLKIT
AZUREENTRA IDINTUNETERRAFORMPOWERSHELLMICROSOFT GRAPH
IDENTITYSECURITYAUTOMATIONINFRASTRUCTURE
02PLATFORM CAPABILITIES
BUILT FOR OPERATIONS.
CLOUD PLATFORM ENGINEERING / CAPABILITY MAP
My stack is organised around how a cloud platform actually runs: identity, delivery, integration, telemetry, infrastructure, and governance working as one operating system.
AZURE PLATFORM AUTOMATION OPERATIONS
AZUREPLATFORMENGINEERING CORE
01020304050601 / PLATFORMCONTROL PLANE
Azure Platform & Integration
Designing and operating Azure services that connect APIs, workflows, messaging, secrets, compute, and storage.
API ManagementLogic AppsService BusKey VaultAzure FunctionsStorageApp Service
03 / DELIVERYCHANGE PLANE
Infrastructure as Code & Delivery
Repeatable platform delivery through version-controlled infrastructure, automation, and deployment pipelines.
TerraformBicepGitGitHub ActionsCI/CDPowerShellAzure CLI
05 / HYBRIDFOUNDATION PLANE
Windows & Hybrid Infrastructure
Operating the infrastructure beneath cloud workloads, including Windows identity, networking, virtualization, and Linux.
Windows ServerActive DirectoryDNSDHCPHyper-VpfSenseEntra ConnectLinux
02 / IDENTITYACCESS PLANE
Identity & Endpoint
Identity-first administration across users, devices, access policy, roles, and hybrid directory services.
Entra IDConditional AccessRBACIntuneAutopilotMicrosoft GraphHybrid Identity
04 / OPSTELEMETRY PLANE
Operations & Observability
Building the visibility needed to detect drift, investigate failures, measure health, and automate response.
Azure MonitorLog AnalyticsApplication InsightsKQLSentinelAlertsRunbooks
06 / SECURITYGUARDRAIL PLANE
Security & Governance
Applying policy, identity, least privilege, detection, and compliance controls across the Azure platform.
Azure PolicyManaged IdentityDefenderKey VaultLeast PrivilegeZero TrustCompliance
SYSTEM VIEW / SKILLS AS OPERATING CAPABILITIES06 DOMAINS / 43 PLATFORM TOOLS & PATTERNS
03CERTIFICATIONS / CONTINUOUS DEVELOPMENT
MICROSOFT CREDENTIALS.
BACKED BY HANDS-ON ENGINEERING.
CREDENTIAL CONTROL / MICROSOFT AZURE
PROFILE / ACTIVE DEVELOPMENT01VERIFIED
MICROSOFT CERTIFIED
ACTIVEAzure Fundamentals
Validated knowledge across Azure services, cloud concepts, security, governance, pricing, and cost management.
AZURE FOUNDATIONCLOUD CONCEPTSGOVERNANCESECURITY
CREDENTIAL STATUSMICROSOFT VERIFIED
VERIFY CREDENTIAL↗02PATHWAY
CURRENT CERTIFICATION PATHWAY
IN PROGRESSAzure Administrator Associate
Developing deeper administration capability across identity, governance, compute, storage, networking, monitoring, and operational Azure management.
IDENTITYNETWORKINGCOMPUTEMONITORING
PATHWAY STATUSACTIVE STUDY / AZ-104
TARGET / Q3 2026LEARNING MODEL / CERTIFICATION + PRODUCTION-MINDED CLOUD BUILDSAZURE PLATFORM ENGINEERING
04PROJECTS / SYSTEMS
SELECTED CLOUD
SYSTEMS.
Five hands-on systems spanning identity, zero-trust file handling, governance, container platforms and Azure integration operations.
05 SYSTEMSAZURE / AUTOMATION / OPERATIONS
01
PLATFORM OPERATIONSSYSTEM / READY
AZURE ENTERPRISE INTEGRATION PLATFORM
Production-style integration operations across APIM, Logic Apps, Service Bus, Dataverse and Azure Monitor — built, broken, investigated, recovered and documented.
ARCHITECTURE SIGNAL01 / 05
APIM
LOGIC
BUS
CONSUMER
TOPOLOGY / ACTIVE
API ManagementLogic AppsService BusDataverseAzure Monitor
OPEN CASE STUDY↗02
ZERO-TRUST SERVERLESSSYSTEM / READY
SECURECLOUD HUB
Azure-native secure file sharing using Entra ID, direct-to-Blob short-lived SAS, Event Grid malware scanning, private storage separation and secure downloads.
ARCHITECTURE SIGNAL02 / 05
AUTH
RAW
SCAN
SAFE
Q
TOPOLOGY / ACTIVE
Azure FunctionsBlob StorageEvent GridEntra IDTerraform
OPEN CASE STUDY↗03
GOVERNANCE OBSERVABILITYSYSTEM / READY
CLOUD POLICY COMPLIANCE DASHBOARD
Management-group Azure governance that detects policy drift, visualizes compliance, alerts operators and automatically restores compliant configuration.
ARCHITECTURE SIGNAL03 / 05
POLICY
MG
LOGS
FIX
TOPOLOGY / ACTIVE
Azure PolicyBicepAzure Resource GraphWorkbooksLog Analytics
OPEN CASE STUDY↗04
CONTAINER PLATFORMSYSTEM / READY
WEATHER TRACKER
A FastAPI workload engineered into a monitored, containerised Azure service with Docker, ACR, Container Apps, CI/CD, Key Vault and managed identity.
ARCHITECTURE SIGNAL04 / 05
GIT
ACR
ACA
MON
TOPOLOGY / ACTIVE
FastAPIDockerACRContainer AppsGitHub Actions
OPEN CASE STUDY↗05
IDENTITY AUTOMATIONSYSTEM / READY
AZURE ONBOARDING AUTOMATOR
HR-driven Azure identity automation that turns new-starter requests into repeatable Entra ID provisioning, group assignment, notifications and audit evidence.
ARCHITECTURE SIGNAL05 / 05
REQUEST
LOGIC
ENTRA
RBAC
TOPOLOGY / ACTIVE
Logic AppsEntra IDRBACSecurity GroupsAzure Monitor
OPEN CASE STUDY↗05EXPERIENCE
FROM SUPPORT TO
AZURE-FIRST ENGINEERING.
I've grown from hands-on IT support into an Azure-focused engineer trusted with escalations, hybrid connectivity, security, governance, and platform operations. Each role strengthened my ability to troubleshoot quickly, automate repeatable work, and build cloud services that remain supportable under real operational pressure.
MSP & ENTERPRISEHYBRID AZURE / ON-PREMSECURITY & COMPLIANCEAUTOMATION & SCRIPTING
01
JUL 2026 — PRESENTAZURE PLATFORM · NON-PROFIT● CURRENT ROLE
Cloud Platform Engineer
NCVO
- Building and supporting NCVO’s Azure platform transformation across API Management, Logic Apps, Service Bus, Azure Monitor, Log Analytics, and Application Insights.
- Implementing and testing Azure integration workflows using APIM as the API control layer, Logic Apps for orchestration, and Service Bus for resilient messaging.
- Developing operational runbooks and troubleshooting procedures covering API failures, Logic App runs, Service Bus backlogs, monitoring alerts, and integration dependencies.
- Building cloud operations visibility through Azure Monitor, Log Analytics, Application Insights, Microsoft Graph, and PowerShell automation.
- Built and piloted NCVO’s conference-suite shared Windows device platform using Microsoft Intune, Windows Autopilot, and Entra ID, creating a dedicated self-deploying device profile for conference-room laptops and validating enrolment, policy assignment, and repeatable reset/OOBE deployment.
API ManagementLogic AppsService BusAzure MonitorLog AnalyticsApplication InsightsIntuneEntra ID
02
OCT 2024 — MAY 2026AZURE · MSP
Azure Support Engineer
Lifeline IT (MSP)
- Designed and enforced zero-trust identity controls across multiple client tenants using Entra ID Conditional Access, RBAC, and Intune compliance baselines, achieving 95% device compliance across the managed client base.
- Architected and configured Site-to-Site VPNs connecting on-premises networks to Azure VNets, implementing tunnel monitoring, failover planning, and hybrid connectivity documentation for production environments.
- Built and deployed identity lifecycle automation using PowerShell and Azure Logic Apps, reducing manual provisioning effort by approximately 50% and enforcing consistent access controls across client environments.
- Diagnosed and remediated complex email security failures using MXToolbox, Exchange message trace, and SPF/DKIM/DMARC analysis, improving domain deliverability across multiple clients.
AzureEntra IDConditional AccessIntunePowerShellLogic AppsS2S VPN
03
APR 2023 — AUG 20242ND LINE · ENTERPRISE
2nd Line Technical Support Engineer
News Corp UK
- Provided Tier 2 escalation support across Active Directory, Group Policy, networking, DNS/DHCP, and VPN connectivity for a distributed enterprise estate.
- Investigated and resolved replication issues, GPO failures, login delays, and hybrid identity inconsistencies.
- Created and maintained technical documentation and operational runbooks using IT Glue.
- Supported and monitored Darktrace, SonicWall, Mimecast, and Bitwarden across the environment.
Active DirectoryGroup PolicyDNSDHCPVPNDarktraceSonicWallMimecast
04
JAN 2024 — MAR 2024AZURE · INTERNSHIP
Junior Azure Cloud Engineer (Intern)
Firebrand Training (Remote)
- Built Azure lab environments with VNets, NSGs, Load Balancers, and hub-and-spoke networking patterns.
- Assisted with AD Connect and hybrid identity testing, including Site-to-Site VPNs for multi-environment connectivity.
- Configured Azure Monitor, Log Analytics, and alert rules for lab environments.
AzureVNetsNSGsLoad BalancerHub-SpokeAD ConnectAzure Monitor
05
NOV 2019 — APR 20231ST–2ND LINE
IT Support Engineer
ONTRAQ
- Delivered Tier 1–2 support across Windows environments, printers, VPN access, and on-premises applications.
- Configured UNC paths, group-based access, and basic file permissions for shared data.
- Installed and maintained Sage 50/200 for finance users, resolving client and server connectivity issues.
- Supported Duo MFA rollout and VPN access for administrative and remote staff.
WindowsVPNFile ServicesSage 50/200Duo MFAAccess Control
CAREER PATH / SUPPORT → CLOUD → PLATFORM ENGINEERING2019 — PRESENT
06CONTACT
LET'S BUILDSOMETHING RELIABLE.
AZUREOPENCHANNEL
AVAILABLE FOR PLATFORM / CLOUD ENGINEERING CONVERSATIONS
BUILD.OPERATE.AUTOMATE.
If you're building an Azure platform, improving cloud operations, modernising identity, or solving integration problems, I'd be happy to connect.
PRIMARY CHANNELEMAIL ME DIRECTLYOPEN MAIL↗STATUS / AVAILABLELOCATION / UNITED KINGDOMFOCUS / AZURE PLATFORM ENGINEERING
SECURESCALABLEOPERABLE
IDENTITYAUTOMATIONOBSERVABILITY