Kez Nw

Senior Devops Engineer @IBM

DCC DSP Programme — Azure Platform Engineering (Current, BPSS Cleared & SC Clearing)Architecting and delivering a greenfield Azure landing zone for a major UK smart metering programme, building enterprise-grade infrastructure from the ground up across multiple environments. Contributed to on-time phase completion that helped IBM unlock £6M in milestone payments.Landing Zone & Networking: Designed and implemented hub-spoke network topology with Azure Firewall, VNet peering, private endpoints and NSG configurations for secure, segmented connectivity across the platformOpenShift / Kubernetes: Architected OpenShift Container Platform (OCP) deployment on Azure, including Service Mesh (Istio/Kiali), OADP backup strategies and RBAC controls for multi-tenant workloadsCI/CD & Automation: Migrated 68 GitHub Actions workflows from github.com to GitHub Enterprise Server (GHES), implementing ACI-based self-hosted runners, SAML SSO via Entra ID and end-to-end pipeline automationInfrastructure as Code: All infrastructure provisioned via Terraform/Terragrunt with modular, reusable patterns across environmentsAnsible Automation Platform: Leading AAP deployment on Azure VMs, integrating with GHES pipelines for configuration management at scaleSecurity & Compliance: BPSS cleared, SC Clearance in progress. Working within strict UK government security and compliance frameworksSCS Railways / HS2 (Cloud Data Platform Project)Engineered a cloud-native data warehouse for HS2, a critical UK infrastructure project, delivering end-to-end data processing and reporting capabilities.Built on Azure Databricks, Data Factory and Logic Apps, provisioned entirely via TerraformEnabled large-scale data ingestion, transformation and Power BI reporting for operational decision-makingSecured with private networking, private endpoints and Azure RBAC with zero public exposure