Godfrey Matome Mninwa
Cloud Support Engineer
Pretoria,GP
Summary
Results-driven Cloud Support Engineer specializing in AWS infrastructure, Zero Trust security (AWS Trust & Safety), and Identity and Access Management (IAM). Expert in managing and optimizing critical cloud components including compute (EC2, Lambda), storage (S3, EBS, EFS), networking (DNS, VPN, ELB), and security solutions. Extensive experience with IAM protocols including SSO, SAML, OAuth, Federation, and SCIM for secure identity management. Proficient in troubleshooting multi-factor authentication mechanisms including TOTP, SMS, FIDO, U2F, WebAuthn, Email, and Push MFA. Strong background in network troubleshooting using command line tools (dig, traceroute, curl, tcpdump) and supporting web servers (Apache, Nginx, IIS). Demonstrated success implementing Zero Trust security principles, Secure Web Gateway policies, and endpoint protection strategies. Holds AWS Solutions Architect Associate and Microsoft Azure Fundamentals certifications. Known for effective customer communication, team mentorship, and driving operational excellence.
Overview
6
6
years of professional experience
6
6
Certifications
Work History
Cloud Support Engineer
Amazon Web Services
04.2024 - Current
- Provide technical support and troubleshooting for AWS storage, networking, and security services, including S3, AWS Backup, EBS, ELB, Lambda, IAM, VPN, DNS, Athena, EMR, CloudFront, CloudFormation, DataSync, Elastic File System, FSx for Lustre, FSx for Open ZFS, Glacier, Snowball, Snowcone, Storage Gateway, and Transfer Family, increasing customer uptime by 80%.
- Troubleshoot Identity and Access Management issues involving SSO, SAML, OAuth, Federation, and SCIM protocols using AWS Identity Center and related services.
- Support and troubleshoot multi-factor authentication mechanisms including TOTP, SMS, FIDO, U2F, WebAuthn, Email OTP, and Push MFA for customer accounts.
- Diagnose DNS resolution issues, VPN connectivity problems, and network-related errors using command line tools including dig, traceroute, curl, and tcpdump.
- Troubleshoot web server configurations (Apache, Nginx, IIS) in customer environments hosted on EC2 and other AWS services.
- Implement Zero Trust security principles and least privileged access best practices when advising customers on IAM policies and security configurations.
- Collaborate with global AWS teams to resolve customer issues, enhance support processes, and improve customer experience through various support channels (phone, chat, email, ticketing systems).
- Ensure disaster recovery for cloud infrastructure, performing system health checks and optimizing service performance.
- Mentor new hires, providing training on AWS services, security best practices, and cloud support methodologies.
- Develop Python scripts to automate processes using Lambda to generate internal AWS service reports for engineers to have visibility to support cases at risk of breaching SLAs.
- Analyze server access logs using SQL queries with Athena and troubleshoot certificate-related issues for secure communications.
Trust and Safety Specialist (Cloud Security)
Amazon Web Services
01.2023 - 03.2024
- Monitored AWS usage policies, enforced cybersecurity measures, and conducted data analysis for AWS cloud services including S3, EC2, CloudFront, ELB, and IAM.
- Implemented Zero Trust security principles to identify and mitigate security breaches and policy violations on AWS cloud services.
- Configured and monitored Secure Web Gateway policies and endpoint protection measures for customer account security.
- Collaborated with engineering, legal, and policy teams to develop cloud security measures and enforce least privileged access controls.
- Proactively monitored customer accounts to identify policy violations and addressed customer concerns professionally through multiple communication channels.
- Worked with third-party takedown reports and high severity cases such as Child Sexual Abuse Material (CSAM) and collaborated directly with Cloudflare and NCMEC to identify IP owners for hosted content.
- Led recruitment processes, mentored new hires on a 6-month program, and implemented strategies to enhance team performance and KPI delivery.
Enterprise Network Engineer Junior
Datacentrix
01.2021 - 12.2022
- Monitored network performance, diagnosed DNS and connectivity issues using dig, traceroute, curl, and tcpdump, and supported enterprise-level network infrastructure.
- Configured and troubleshot VPN connections for secure remote access to enterprise networks.
- Troubleshot web server issues on Apache, Nginx, and IIS platforms for customer environments.
- Assisted in designing and deploying network configurations adhering to Zero Trust security principles and industry best practices.
- Maintained detailed network documentation including diagrams, configurations, and security policies.
- Collaborated with senior engineers to implement network upgrades, patches, and certificate renewals.
- Conducted performance analysis using Alluvio to identify IT system bottlenecks and developed custom dashboards to visualize key performance metrics.
- Provided strategic recommendations to optimize operational efficiency and monitored applications, networks, and devices to meet customer SLA requirements.
Intern
Datacentrix
02.2020 - 12.2020
- Supported maintenance and troubleshooting of hardware, software systems, and web servers.
- Assisted in network upgrades, data migrations, and system integrations.
- Monitored network performance using command line diagnostic tools, identified security risks, and reported findings to the IT security team.
- Contributed to the development of IT support processes and security documentation.
Assistant Lecturer
Tshwane University of Technology
07.2019 - 12.2019
- Delivered lectures and tutorials to undergraduate and graduate students on IT and networking concepts.
- Assisted in developing course materials and evaluating student assignments.
- Conducted research and contributed to academic publications.
Cashier
Pick n Pay
12.2015 - 03.2018
- Processed customer transactions accurately and maintained a balanced cash register.
- Assisted customers with inquiries and resolved issues to ensure a positive customer experience.
- Monitored and reported discrepancies to support loss prevention efforts.
Education
National Diploma - Information Technology (Software Development)
Tshwane University of Technology
South Africa07.2021
Skills
Cloud Computing and Security: AWS, Azure, S3, EC2, EBS, ELB, Lambda, CloudFront, CloudFormation, DataSync, Elastic File System, FSx for Lustre, FSx for Open ZFS, Glacier, Snowball, Snowcone, Storage Gateway, Transfer Family, AWS Backup, Athena, EMR
Identity and Access Management: IAM, AWS Identity Center, SSO, SAML, OAuth, Federation, SCIM, Security Hub, Secrets Manager, KMS, Certificates, Zero Trust, Least Privileged Access
Multi-Factor Authentication: TOTP, SMS, FIDO, U2F, WebAuthn, Email OTP, Push MFA
Networking: DNS, VPN, Aruba, SD-WAN, Switches, Routing, RFID, TCP/IP, SSL/TLS
Command Line Tools: dig, traceroute, curl, tcpdump, nslookup, ping, netstat
Certification
AWS Solutions Architect Associate, February 2025
Training and Courses
- Udemy SQL Certification
- Riverbed SD-WAN 101 (Partners)
- Aruba Product, SD-Branch, Networking Essentials, OS 8.4, Switch OS 16.08
- AWS Fundamentals Bootcamp
- Zero Trust Security Fundamentals
Timeline
Cloud Support Engineer
Amazon Web Services
04.2024 - Current
Trust and Safety Specialist (Cloud Security)
Amazon Web Services
01.2023 - 03.2024
Enterprise Network Engineer Junior
Datacentrix
01.2021 - 12.2022
Intern
Datacentrix
02.2020 - 12.2020
Assistant Lecturer
Tshwane University of Technology
07.2019 - 12.2019
Cashier
Pick n Pay
12.2015 - 03.2018
National Diploma - Information Technology (Software Development)
Tshwane University of Technology