Solomon Ekang

About Solomon Ekang

Senior Azure Cloud Architect / Engineer with a proven track record designing and operating enterprise-scale platforms on Microsoft Azure. Specializes in platform engineering, Azure landing zones, and secure, production-grade AI workloads using Azure OpenAI and Cognitive Services. Hands-on experience in IaC (Terraform, Bicep), CI/CD (Azure DevOps, GitHub Actions), Zero Trust architectures with Microsoft Entra, and Azure Virtual Desktop. Leads crossfunctional teams, sets architectural guardrails (policy-as-code, RBAC), and delivers compliant, observable, and cost-conscious solutions for regulated environmentsTechnical Stack Azure (Landing Zones, Policy, RBAC), Azure DevOps, GitHub Actions, Terraform, Bicep, PowerShell, Python, AKS, Docker, App Services, Functions, APIM, Event Grid, Key Vault, Managed Identities, Private Endpoints, VNets, NSGs, Load Balancers, Azure Monitor, Log Analytics, Defender for Cloud, Azure Automation, Azure Virtual Desktop (FSLogix, host pools)

Experience

1. Senior Azure Cloud Architect Engineer

   IBM

   Jan 2025 — Present

   Extended working knowledge in cloud service, IaaS, worker role, service bus, queue, azure blob and table storages and API Management.• Configured NSGs for two tier and three tier applications. Experience in integrating premises servers to Azure.• Configured VNETs and subnets as per the project requirement.• Designing secure AI workload patterns leveraging Azure OpenAI/Cognitive Services; integrating APIM + Functions with private endpoints, Key Vault, and managed identities.• Automating multi-subscription deployments via Azure DevOps/GitHub Actions (YAML) with approval gates and compliance checks.• Strengthening cloud security posture through Defender for Cloud governance, RBAC redesign, and Conditional Access policies.• Architected Azure Virtual Desktop for distributed teams; optimized profiles (FSLogix) and implemented cost-aware scaling.• Configure Azure blob storage and Azure file servers, private and public facing Azure load balancers, etc.• Led migration of Virtual Machines to Azure Virtual Machines for multiple global business units.• Proficiency in the configuration of Kubernetes, Containers, Prometheus, Azure Functions, Azure SQL, Cosmos Db, Azure Site recovery etc.• Designing, configuring and/or developing security solutions for the Cloud platform• Architected IAM (Identity and Access Management) scope

Education

• The College of Westchester

  Bachelor's degree, Computer Science

• Purchase College, SUNY

  Associate's degree, Biology, General

  2016 — 2018