David OYEKAN
Senior Platform Engineer & Cloud Security Consultant
9 years of expertise in mission-critical environments
I design, industrialize, and secure large-scale cloud, hybrid, and on-premises platforms for major French enterprises (banking, telecommunications, consulting). I work on mission-critical environments with stringent requirements for availability, security, and performance.
Specializing in AWS, GCP, Kubernetes, Terraform, and DevSecOps governance, I build and operate robust, automated, and scalable platforms.
Passionate about distributed systems reliability, I place a strong emphasis on automation, observability, and security across cloud and hybrid environments.
My career spans 9 years in IT, including 7 years dedicated to cloud and platform engineering, with an early background as a full-stack developer, giving me an end-to-end understanding of the systems I build and operate.
Expertise & Offerings
Three domains where my experience and certifications deliver measurable impact.
Cloud Security Audit & Hardening
In-depth assessment of your AWS / GCP / hybrid security posture, actionable recommendations, and hands-on support to implement priority fixes.
- Cloud architecture and network exposure review
- IAM governance, KMS, secrets management (Vault)
- ANSSI, ISO 27001 compliance and cloud best practices
- Scanning tooling implementation (Checkov, CloudGuard, Trivy, Prowler, Scoutsuite, Pacu)
- Executive report with prioritized action plan
Platform Engineering & Kubernetes
Design, deployment, and operations of production-grade Kubernetes / OpenShift platforms with complete IaC automation, native observability, and GitOps standards.
- Production Kubernetes architecture (GKE, EKS, Anthos, OpenShift, ROSA)
- Terraform industrialization (reusable modules, state management)
- GitOps with ArgoCD, secrets management, secure supply chain
- Observability (Prometheus, Grafana, OpenTelemetry)
- Kubernetes hardening, network policies, RBAC, admission controllers
DevSecOps & CI/CD Industrialization
Design and deployment of secure CI/CD pipelines with native integration of SAST/DAST/SCA controls, secrets management, and artifact signing.
- Secure GitLab Ultimate / GitHub Actions pipelines
- SAST/DAST (SonarQube, Semgrep, OWASP ZAP, Trivy)
- Secrets management and signing (Vault, Sigstore, cosign)
- SBOM and dependency policy
- Migration to an all-in-one DevSecOps platform
Why work with me
Enterprise experience
Missions at Crédit Agricole (CA-GIP), IBM Consulting, Groupe Orange (Viaccess Orca) — critical banking, telecom and industrial environments.
Foundational certifications
CKA (Linux Foundation), Terraform Authoring Professional, GitLab PSE, and multiple cloud security specializations.
End-to-end vision
Full-stack developer background (Node.js, Python, frontend) gives me deep understanding of what my platforms need to serve.
Direct communication
Clear technical documentation, real knowledge transfer, no unnecessary jargon. Code and practices remain after I'm gone.
Professional Experience
FGTECH (Les Filles et les Garçons de la Tech)
Senior Platform Engineer · Cloud & DevOps Consultant
- Cloud and platform consulting missions for enterprise clients
- Design of secure architectures and Terraform / Ansible industrialization
- Coaching client teams on DevSecOps practices
DEVOTEAM — CA-GIP Mission (Crédit Agricole)
Senior CloudOps · Consultant & Career Manager
- L3 support for group entities (CACEIS, CASA, KLX)
- Scoping and pre-sales for CA-GIP Public Cloud and AI offerings
- PoC and delivery of IBM watsonx on OpenShift via AWS ROSA
- Delivery of AI use cases on AWS (SageMaker, Bedrock)
- Successful deployment of PULSE trading platform on AWS for CACEIS
- KMS key centralization and vulnerability management (CloudGuard)
AGYLA / IBM Consulting
Cloud & DevOps Consultant
- Design and deployment of secure AWS Landing Zones (Control Tower, SCP, AFT)
- FinOps QuickSight dashboard for AWS account budget monitoring
- IBM GenAI Hackathon (January 2024): target architecture and infrastructure
- Multi-OS Ansible automation with rollback / fallback for critical installations (EDF)
- Contribution to a FinOps offering and Git / CI-CD training for IBM CIC
VIACCESS ORCA — Groupe Orange
Cloud & DevOps Consultant
- Automated VMware provisioning on vSphere via Terraform
- Deployment of highly available on-premise Kubernetes clusters (Anthos)
- Installation and configuration of GitLab Runners for CI/CD pipelines
- L3 support and operational management of clusters
AFRIQASOFT
Tech Lead & DevOps Engineer
- Industrialization of GKE deployments via Terraform and CI/CD
- Production administration and operation of Kubernetes clusters
- DevOps standards: GitFlow, CI pipelines, artifact management (Harbor)
- Prometheus / Grafana observability, Confluence technical documentation
ITSDB CENTER LLC
Cloud & DevOps Consultant · Full Stack Developer
- Design and deployment of cloud infrastructures using Terraform and Ansible
- GitLab CI/CD pipelines and environment management
- Log centralization and Datadog observability
- Full-stack development and integration of application services
FREELANCE & REMOTE
Full Stack Developer & Frontend
- End-to-end development of a crowd-shipping platform (Node.js / React)
- Design and implementation of IoT APIs (Orange LoRa) for data collection and processing
- Contribution to a React Native mobile application for SOTRAL (public transportation, Togo)
Skills & Technologies
Cloud Platforms
- AWS (VPC, EKS, ROSA, KMS, IAM, SageMaker, Bedrock)
- GCP (GKE, Anthos, Vertex AI, IAM)
- Hybrid cloud & on-premise
- VMware vSphere
Containers & Orchestration
- Docker, Docker Compose, Docker Swarm
- Kubernetes (GKE, EKS, Anthos)
- OpenShift, OpenShift ROSA
- Helm, Calico, Traefik, cert-manager
Security & DevSecOps
- GitLab Ultimate, Vault, HSM, KMS
- SAST/DAST (SonarQube, Semgrep, OWASP ZAP, Trivy)
- Checkov, CloudGuard, Falco
- IAM, RBAC, SBOM, Pre-commit
Infrastructure as Code & CI/CD
- Terraform, Terraform Enterprise, modules
- Ansible, Ansible Tower
- GitLab CI/CD, GitHub Actions, ArgoCD
- Harbor, GitOps
Observability & APM
- Prometheus, Grafana, Loki
- Datadog, ELK, SigNoz, OpenObserve
- OpenTelemetry, Fluentd / Fluent Bit
- AWS CloudWatch, X-Ray
Development
- Node.js, Bun, TypeScript, Deno, Python
- Vue.js, Nuxt.js, React, React Native
- MongoDB, PostgreSQL, Redis
- Nginx, Apache
Methodology & Leadership
- Agile, Scrum, SAFe, Kanban
- ITIL (incident, change, request)
- Tech Lead, Career Manager, mentoring
- Pre-sales and technical scoping
Certifications
GCP AI Agent Tools Development (ADK)
2025 · Google Cloud
Terraform Authoring Professional
2025 · HashiCorp
Terraform Associate (003) ×2
2023, 2025 · HashiCorp
Certified Kubernetes Administrator (CKA)
2024 · Linux Foundation
GitLab Professional Services Engineer (PSE)
2024 · GitLab
GitLab Security Specialist
2024 · GitLab
GitLab Migration Services Professional
2024 · GitLab
GitLab Professional Implementation
2024 · GitLab
Node.js
2022 · HackerRank
JavaScript
2022 · HackerRank
Problem Solving
2022 · HackerRank
Education
In progress · 2026-2027
Bachelor — IT Systems and Network Security Administration
Conservatoire National des Arts et Métiers (CNAM) — Experience Validation pathway
Planned · 2028-2031
Master of Science in Computer Science (target)
Computing Systems & Information Security specialization
2017 - 2021
Online web development training
SoloLearn, HackerRank — JavaScript, Node.js
2016 - High School
Scientific Baccalaureate
Togolese Republic
Clients & References
A selection of major French enterprises for whom I have designed, secured, or operated critical cloud platforms.
Crédit Agricole (CA-GIP)
Banking · CAC 40
Senior CloudOps on the group's public cloud offerings and entities (CACEIS, CASA, KLX).
IBM Consulting
Global IT consulting
Secure AWS Landing Zones and architecture for the 2024 GenAI Hackathon.
Groupe Orange (Viaccess Orca)
Telecommunications
Infrastructure provisioning and highly available on-premise Kubernetes clusters.
Technical details for each mission available on request.
Get in touch
Have a cloud or platform engineering mission in mind? Let's discuss your context and challenges.