Lepolesa Libete

• Led Proof of Concept (POC) for progressive delivery tools (Flagger, Argo Rollout), reducing deployment time and improving release confidence.

• Deployed Istio Service Mesh for traffic management and security across microservices, improving reliability.

• Integrated AWS Secrets Manager with Kubernetes for automated secret management, reducing manual intervention.

• Provisioned a virtual contact center using Amazon Connect, integrated with Amazon Lex and Customer support LLM to create virtual agents, reducing live agent interaction in a healthcare environment.

• Developed an AI solutions marketplace for model serving and Pipelines for retraining, accelerating AI service deployment.

• Automated continuous scanning of Docker images for vulnerabilities using SonarQube APIs and Python, increasing security issue resolution.

• Integrated Grafana with Azure AD to centralize access control, improving monitoring security and streamlining user management.

• Configured AWS Config Rules to enforce governance, reducing compliance auditing time.

• Implemented infrastructure and configuration as code using Terraform, Ansible, and Bash scripts, ensuring version control and automation through source control management.

• Developed Bitbucket pipelines to automate infrastructure provisioning, configuration, and deployment, reducing manual effort and improving deployment efficiency.

• Re-designed database schema to improve data relationships and normalization, enhancing performance and maintainability of the system.

• Integrated a new database schema into a Laravel-based project, improving data integrity and application performance.

• Managed DigitalOcean infrastructure, overseeing maintenance, deployments, and scaling to ensure high availability.

• Integrated a Laravel state machine to automate and manage the state transitions of user applications, streamlining application logic.

• Configured SSL certificates for Apache2 servers using Certbot and deployed Let’s Encrypt certificates, enhancing website security and trust.

• Integrated DigitalOcean Spaces with a Laravel project, configuring it as a scalable file storage system.

• Revamped a web interface for secrets and configuration storage using React and Node.js, improving user experience and configuration management.

• Managed and maintained three Kubernetes clusters, ensuring high availability and resource optimization.

• Administered AWS infrastructure across multiple AWS accounts, optimizing resources and ensuring secure, scalable operations.

• Configured Elasticsearch on Kubernetes to compare the cost and performance of on-prem Elasticsearch vs. managed Elastic Cloud, driving informed cost-saving decisions.

• Managed and configured Jenkins servers, ensuring efficient CI/CD operations and system stability.

• Developed Jenkins shared libraries to streamline pipelines, reduce redundancy, and simplify CI/CD workflows.

• Provisioned AWS resources using Infrastructure as Code (IaC) tools, ensuring consistent, scalable cloud infrastructure.

• Maintained logging infrastructure using Elastic Cloud and Logstash, optimizing logging solutions and monitoring.

• Implemented and managed alerting systems using Elastic Cloud watchers, improving system reliability through proactive alerts.

• Deployed Elasticsearch Curator on Kubernetes to automate index management, improving the efficiency of Elasticsearch operations.

• Configured and maintained Prometheus for monitoring AWS and Kubernetes resources, ensuring system visibility and health.

• Supported developers with application debugging, deployment, and configuration across various infrastructures, improving development efficiency.

• Researched and implemented cost-saving strategies for managed services and AWS resources, optimizing cloud spend.

• Implemented compliance tests using AWS custom config rules, ensuring adherence to organizational and security standards.

• Designed and implemented configuration portal pages for generating and importing x509 certificates using Vaadin 6 & 7.

• Updated portal authentication to use LDAP(s) through Apache Shiro for improved user management.

• Designed and implemented a portal for the Registration Authority (RA) server, facilitating secure certificate management.

• Replaced Enterprise Java CDI with Google Guice for dependency injection, improving code modularity.

• Modified TCP protocol to optimize session handling using the ZeroMQ messaging library.

• Maintained Certificate Authority (CA) and Registration Authority (RA) servers, ensuring security and availability of certificate services.

• Researched and integrated two-factor authentication systems from Google and Microsoft using Chrome extension libraries.

• Encrypted end-to-end server communication, ensuring secure data transfer across systems.

• Re-architected a legacy monolithic system into microservices, improving scalability and modularity.

• Maintained USSD push system, ensuring reliable mobile service delivery.

• Developed algorithm to generate school time table for school management system
• Helped 5 clients configure school management portal.

• Changed storage system from file storage to database to increase performance
• Researched time table generation algorithms