Stephen Somuah

Senior Infrastructure Engineer

Accra, GH.

About

Highly accomplished Senior Infrastructure Engineer with over 5 years of expertise in cloud, DevOps, and platform engineering across AWS and GCP, specializing in financial services and EV charging platforms. Proven leader in optimizing infrastructure, evidenced by a 40% reduction in AWS operational costs across 10 accounts and successfully scaling an EV charging platform from 300 to 2,000 connected nodes. Leverages deep expertise in Kubernetes, Terraform, CI/CD, and cloud security to build robust, scalable, and secure production systems, with a strong focus on enhancing developer experience and reducing infrastructure friction.

Work

Bigspark

|

Cloud DevOps Engineer

Nottingham, England, UK

→

Summary

Led the design, scaling, and optimization of cloud infrastructure for an EV charging platform on GCP, enhancing security and developer experience while significantly reducing operational costs.

Highlights

Designed and implemented secure cloud infrastructure for an OCPP-compliant EV charging platform on GCP, enabling robust WebSocket communication between EV charging infrastructure and backend services.

Engineered a custom mutual-TLS authentication layer using NGINX and Lua, resolving complex client-certificate authentication challenges where standard load-balancing options were insufficient.

Scaled the EV charging environment by over 560% from 300 to 2,000 connected nodes, leveraging Kubernetes-based production automation to reduce manual deployment efforts and enhance platform reliability.

Reduced AWS operational costs by 40% across 10 accounts through comprehensive Well-Architected reviews, rightsizing initiatives, and systematic infrastructure optimization.

Developed and deployed reusable Terraform patterns and GitHub Actions CI/CD pipelines, significantly improving deployment repeatability and reducing infrastructure provisioning time across client environments.

Collaborated on designing an internal developer platform using Kubernetes, Helm, and ArgoCD, standardizing application deployment and empowering development teams with independent infrastructure provisioning.

Hardened over 50 EC2 instances to meet stringent NatWest security standards utilizing AWS Security Hub and AWS Config, ensuring secure multi-account AWS infrastructure.

Built robust observability solutions for Kubernetes workloads with Prometheus, Grafana, and Loki, accelerating troubleshooting and root-cause analysis for critical production incidents.

QLAC Financial Trust Ltd

|

Head, Management Information Systems & Operations

Accra, Greater Accra, Ghana

→

Summary

Directed infrastructure and IT operations for a regulated financial-services organization, overseeing critical systems and implementing automation across 8 key projects.

Highlights

Led comprehensive infrastructure and IT operations, managing compute, networking, backup, disaster recovery, and business-critical systems across 8 projects for a regulated financial-services organization.

Automated infrastructure provisioning across 8 financial projects, achieving a 70% reduction in deployment time and eliminating manual configuration errors.

Spearheaded server virtualization and capacity-planning initiatives that decreased unplanned downtime by 60% and reduced infrastructure maintenance costs by 50%.

Implemented automated data protection and disaster-recovery controls for critical financial operations, ensuring regulatory compliance and successful consecutive NPRA audits.

QLAC Financial Trust Ltd

|

Officer, Management Information Systems & Operations

Accra, Greater Accra, Ghana

→

Summary

Maintained and enhanced critical infrastructure for financial-services operations, ensuring high availability, robust data protection, and adherence to regulatory compliance across multiple projects.

Highlights

Managed and improved infrastructure for diverse financial-services operations, consistently ensuring high availability and robust data protection to meet critical business needs.

Ensured strict adherence to regulatory compliance standards for all financial infrastructure, maintaining operational integrity across multiple projects.

Implemented preventative maintenance and system upgrades to optimize performance and reliability of financial systems.

Provided essential technical support and troubleshooting for infrastructure issues, minimizing downtime and ensuring continuous service delivery.

Supertech Ltd

|

IT Technician & Trainer

Accra, Greater Accra, Ghana

→

Summary

Provided critical technical support and developed training programs for Ghana's national biometric voter registration initiative.

Highlights

Delivered essential technical support and developed comprehensive trainer programs for Ghana's nationwide biometric voter registration initiative during its national deployment phase.

Nestlé Ghana Ltd

|

Salesforce Assistant

Accra, Greater Accra, Ghana

→

Summary

Provided crucial technical assistance and support for the nationwide rollout of Nestlé Ghana's Distributor Management Solution.

Highlights

Contributed to the successful nationwide rollout of the Distributor Management Solution, providing direct technical assistance and support to field users across the extensive distribution network.

Education

Kwame Nkrumah University of Science and Technology

Kumasi, Ashanti Region, Ghana
→
BSc Computer Science

Languages

English

Certificates

Kubernetes and Cloud Native Associate (KCNA)

Cloud Native Computing Foundation (CNCF)

Google Cloud Professional Cloud Architect

Google Cloud

HashiCorp Terraform Associate

HashiCorp

AWS Certified Solutions Architect - Associate

Amazon Web Services (AWS)

Certified Information Systems Security Professional (CISSP)

(ISC)²

Skills

Cloud Platforms

AWS, GCP, Azure.

Containerization & Orchestration

Kubernetes, Docker, Helm, ArgoCD, ECS, AWS Fargate.

Infrastructure as Code

Terraform, Terraform Cloud, CloudFormation, Ansible.

CI/CD & GitOps

GitHub Actions, GitLab CI, ArgoCD.

Monitoring & Observability

CloudWatch, Prometheus, Grafana, Loki, Google Cloud Logging.

Networking & Security

VPC, IAM, Security Groups, NACLs, TLS, MTLS, NGINX, AWS Security Hub, AWS Config, CSPM, Cloud Security.

Programming Languages

Python, Bash, Lua.

Developer Platforms

Platform Engineering, Internal Developer Platforms, Software Factory.

Infrastructure Optimization

Cost Optimization, Well-Architected Reviews, Rightsizing, Systematic Optimization.

Disaster Recovery & Business Continuity

Data Protection, DR Controls, High Availability.

Regulatory Compliance

NPRA Audits, Financial Services Regulations, Security Standards.

Project Management

IT Operations Management, Cross-functional Leadership.

Projects

Your CV Tailor

→

Summary

Led the development and operation of a WhatsApp-based career assistant leveraging advanced AWS services and AI models to automate career support workflows.