Andrew Rono

• Responsible for building Cloud Principle journeys, Strategies and structures towards delivering a Cloud fluent at scale while applying DevSecOps principles.
• Responsible for building, maintaining and supporting high-performance, fault-tolerant, scalable and distributed Cloud and Container Platforms.
• Responsible for interfacing with application development teams to ensure applications fit within Cloud Infrastructure with scalability, reliability and security designed and implemented from the onset.
• Responsible for establishing and improving team processes and workflows to maximise efficiency and productivity of people and systems.
• Responsible for reviewing Cloud Providers and Cloud technologies and defining digital transformation models, policies and roadmaps.
• Responsible for Building and managing Cloud Container Platforms (ECS,EKS,AKS, ).
• Responsible for Ensuring Security Standards are well defined, Controlled Permission and Service deployments.
• Lead in automation of Cloud infrastructure deployments at massive scale to support scaling of digital services.
• Lead the ‘Open source first’ as a fit for future initiative within the function.
• Responsible for CapEx and OpEx planning within the Cloud & Container management domain.
• Provide team management to the Cloud & Container management team.

Key Deliverable:

Project: Multi-Cluster Microservices Platform (2023)- Delivery of a multi-cluster container platform, spanning multiple Kubernetes distributions with centralized load balancing in a hybrid architecture.

Technologies Employed: Route 53, AWS Elastic Kubernetes Service, HAproxy, OpenShift, Rancher, Harbor Registry, Elastic, Container Registry, FluxCD, GitLab, Jenkins, Veracode, Sonarqube, OPA gatekeeper, Google Anthos, Ceph Storage, S3 storage, OpenShift Data Foundation.

• Managing and automating infrastructure on AWS and Azure.
• Dev Ops Infrastructure management (Docker and Kubernetes).
• Cloud platforms management including and on-premise OpenShift managing docker containers, Openstack solution running Huawei cloud services and an on-premise CI/CD solution running on Jenkins.
• Deployment automation and configuration management employing Ansible Tower.
• Unix/Linux Infrastructure management; including Satellite, Rhel IPA, Ansible, CloudForms.
• Manage and set priorities for design, maintenance, development and evaluation of all office automation systems including Server Farm, Private and Public Cloud, Microsoft Exchange, Linux Systems and other related systems.
• Effectiveness of systems security (policy, controls and infrastructure) with regard to protection against exposure to and impact of risks associated with data loss, corruption and/or unauthorised access.
• Effectiveness and integration of systems strategy / blueprint with the bank's business direction.
• Manage Systems Service Agreements and its associated Budgets.
• Provide management oversight for group server farm and office automation to ensure projects, incidents, problems and escalations are dealt with per defined set of policies, processes, procedures and SLA's.

Key Deliverables:

Project 1: Mobile Savings & Loan solution eco-system migration. (2021)

This project involved the full stack re-deployment of the solution to carry 300 TPS in active-active strategy from the core banking to the databases.

Technologies Employed: RedHat OpenStack, Huawei Fusion Storage, DWDM, Director SAN Switches, Dark Fibre connectivity.

Project 2: Active directory domain collapse for 2 merged banks into a single domain, including a collapsed hybrid exchange organization. (2021)

Technologies Employed: Active Directory, Sharepoint, MS Exchange, Office 365, One Drive, Active Directory migration Toolkit, Azure AD Connect, Azure AD, Azure AD active sync, Active Directory Federation Services.

• Administration of the Banks Linux/Unix based Systems.
• Manage and set priorities for design, maintenance, development and evaluation of all office automation systems including Server Farm, Private Cloud, Microsoft Exchange, Linux Systems and other related systems.
• Effectiveness of systems security (policy, controls and infrastructure) with regard to protection against exposure to and impact of risks associated with data loss, corruption and/or unauthorised access.
• Effectiveness and integration of systems strategy / blueprint with the bank's business direction.
• Manage Systems Service Agreements and its associated Budgets.
• Provide management oversight for group server farm and office automation to ensure projects, incidents, problems and escalations are dealt with per defined set of policies, processes, procedures and SLA's.

Project: Standard Linux Operating Environment.

Technologies Employed: RedHat Satellite Server (with Regional Capsule Servers), Ansible Tower/ Playbooks, Tenable Nexus Scanner.

• Preparing technical specification, tender analysis and recommendations, and spend optimally on procurement of computer hardware and related systems software within budget.
• Manage and monitor SLAs with vendors supporting our Mission Critical Server Infrastructure for KCB Data centers and branch network to ensure high systems uptime.
• Identification of server hardware solutions to meet business requirements and Support for Windows, Linux and Unix operating systems.
• Management, configuration and administration of the private cloud infrastructure.
• Management of Red Hat Enterprise Virtualization for the bank's core banking system.
• Management, implementation and support of storage and SAN infrastructure.
• Configuration, migration and deployment of Red Hat Satellite for subscription, patch and configuration management of RHEL operating system environment.
• Deployment and support of BCM strategies with VMware Site Recovery Manager (SRM) and EMC SRDF technologies on private cloud infrastructure.
• Actifio backup solution support.
• Deployment and support of BCM strategies with HP Service-guard and EMC SRDF technologies for the core banking infrastructure.
• Setting up Red Hat Enterprise Linux 7 with the latest best practices for deploying Oracle database.

Key Deliverables:

Project: Core Banking System Upgrade (T24 R14) (2016)

Technology Employed: RedHat Enterprise Virtualization, RedHat Satellite Server, DWDM, SAN Director Switches, EMC VMAX 100K storage, HP Superdome X Blade Servers, Apache, Oracle DB, T24 R14, Dark Fibre.

Project: Private Cloud Infrastructure refresh (2015)

Technology Employed: HP Superdome 2, Brocade SAN Switches, NetApp Storage, HP Blade system enclosure, VMware Vsphere/NSX, Cisco OTV, HP Matrix.

• Active directory domain system administration.
• Maintain high availability of critical server systems and business data and BCM activities.
• Server storage management, space creation and data availability on servers.
• Monitoring of server health and Performance and necessary changes in load balancing enterprise systems.
• Inventory management and best practice in hardware and software standardization.
• Assist in sourcing and recommendation of appropriate technical specification for procurement of relevant hardware for business use.
• Optimal utilization of allocated budget in provision of relevant hardware and software.
• Testing and implementation of new technology related to computer hardware and software.
• Installation, Configuration and Management of Virtual server infrastructure and ensuring availability of Virtual infrastructure resources.
• Support server upgrade and patches.

• Software design and coding.
• Developing and understanding codebase.
• Writing and maintaining code.
• Working on bug fixes.
• Monitoring technical performance of internal systems.
• Responding to requests from the development team.
• Gathering information from consumers about program functionality.
• Report writing.
• Conducting UATs and SITs on client sites.