DevOps engineer · Lagos, Nigeria

Afeez Musa

I build and run cloud infrastructure on AWS and Kubernetes. For three years that has meant CI/CD, Terraform, and the path from a failing deploy to a stable release. I have also done AI data annotation and labelling.

  • GitHub Actions
  • Terraform
  • EKS
  • Prometheus
  • AZ-900
Portrait of Afeez Musa
Afeez Musa Lagos

Now

DevOps Engineer, FlexDelivery24 · Nigeria

Nov 2025 – Present

01

Experience

November 2025 – Present
Lagos, Nigeria

FlexDelivery24

DevOps Engineer

  • Replaced a manual release checklist with a single GitHub Actions path: lint, version, and deploy frontend applications to AWS across environments. One pipeline, one rollback story.
  • Own mobile releases end to end — Android builds signed and packaged as APK and AAB with versions taken from the GitHub run number, and iOS shipped through Fastlane and Match to TestFlight. No engineer has to remember the signing steps.
  • Keep production AWS healthy for frontend and backend: debug Node.js runtime and environment failures with service owners, and use SQL during incidents to verify what a service actually wrote.
  • Handle database administration alongside the pipeline work — users, privileges, schema cleanup — so access and data hygiene don't wait for a ticket.
  • Cleared pipeline failures in Gradle, permissions, and Node dependencies, and run PM2 so backend deploys restart cleanly without dropping the process.

June 2023 – January 2026
Nigeria

WaveBudget LLC

DevOps Engineer

  • Designed the AWS platform from scratch: EKS for workloads, an HTTP API fronted by API Gateway and AWS WAF, with backend traffic routed through a VPC Link and network load balancer. Only the edge is public.
  • Made infrastructure reproducible — reusable Terraform modules, Helm charts on Kubernetes, and GitHub Actions feeding Argo CD, so deploys are reviewed Git commits rather than console clicks.
  • Locked down access with IAM, Kubernetes RBAC, and AWS Secrets Manager, and moved remote cluster and database access behind Teleport so every session is authenticated and audited.
  • Defined service level indicators for error rate and request duration, and tracked them in Datadog and Prometheus against uptime and latency targets — regressions surface in dashboards before users report them.
  • Ran event-driven pieces on Lambda with S3 and CloudFront serving static assets through Route 53 DNS, keeping the parts of the platform that don't need a cluster off the cluster.
  • Wrote Bash to remove repeated provisioning work, turning multi-step setup into a single repeatable script.
02

Selected work

Production systems for employers stay private. The repository below is a public reference build of the same kind of platform: a private network, a reviewed pipeline, and a deploy that does not drop traffic.

Node.js delivery pipeline

A Node.js service on ECS Fargate, in private subnets, behind an application load balancer that redirects HTTP to HTTPS. Only the load balancer is public. Tasks run as a non-root user with a read-only filesystem. Postgres and Redis stay on managed services, and secrets come from AWS Secrets Manager rather than the task definition.

Terraform describes the network and the runtime. GitHub Actions builds and ships the image. CloudWatch holds the logs. The service scales between two and ten tasks.

View repository
  • Terraform
  • ECS Fargate
  • Application Load Balancer
  • GitHub Actions
  • RDS
  • ElastiCache
  • Secrets Manager
  • CloudWatch
  • Docker

AI data annotation and labelling

Alongside the infrastructure work, I have done AI data annotation and labelling. The task is to apply a written guideline the same way across a set of examples, and to flag items the guideline does not cover. It is review work. The useful part is a consistent decision and a reason that another person can check, which is the same standard I use when writing up an incident.

03

Skills

Cloud
AWS, Azure, Google Cloud
Platform
Docker, Kubernetes, Helm, NGINX, Linux
Delivery
GitHub Actions, Jenkins, Argo CD, GitLab CI, Git
Infrastructure
Terraform, Ansible, Bash, PowerShell
Security
IAM, RBAC, HashiCorp Vault, AWS Secrets Manager, AWS WAF, Teleport
Networks
VPC, NLB, ALB, DNS, HTTP and HTTPS
Data
PostgreSQL on RDS, MySQL, MariaDB
Observability
Datadog, Prometheus, ELK
Languages
Python, JavaScript
Practice
CI/CD, GitOps, infrastructure as code, incident response
04

Background

Certifications

  • Microsoft Certified: Azure Fundamentals

    AZ-900 · June 2024

  • JavaScript Algorithms and Data Structures

    freeCodeCamp · November 2022

Education

  • B.Sc. Economics, Second Class Upper

    Federal University of Agriculture, Abeokuta · 2015 – 2021

05

Contact

Based in Lagos. Email is the direct line, and the résumé is the same PDF I use for applications.

afeezmusa215@gmail.com