Case studies
Cloud, product, DevOps and compliance projects
A browsable record of the systems I build: cloud foundations, shipped product experiences, delivery automation and technical governance. Each case study explains the problem, implementation approach and technology stack.
Last reviewed: 19 July 2026
Cybersecurity · 2025
GCP Zero-Trust Architecture with Cloud Armor
I designed and deployed a production-grade zero-trust security architecture on GCP — identity-first, policy-driven access controls across every service boundary, with no implicit trust for any user, device, or service.
ExploreDevOps · 2025
DevSecOps CI/CD Pipeline with SAST, DAST & GKE Deployment
I built a fully automated, security-integrated CI/CD pipeline — from commit to production on GKE — with security scanning embedded at every stage, not bolted on at the end.
ExploreCybersecurity · 2024
Cloud SIEM: GCP + Chronicle Security Operations
I designed and deployed a cloud-native SIEM environment using Google Chronicle — complete log ingestion pipeline, 14 custom YARA-L detection rules, automated incident triage, and a documented incident response playbook.
ExploreProduct Development · 2025
IntelliDoc: AI-Powered Document Intelligence Platform
I designed and built IntelliDoc — a B2B document intelligence platform for SMBs, legal firms, and enterprises. Upload contracts, policies, and documents; interact with them through natural language Q&A, expiry alerts, and conflict detection.
ExploreDevSecOps · 2025
Kubernetes Security Hardening Playbook
I built a comprehensive GKE security hardening reference implementation — RBAC design, pod security, network segmentation, admission control, and runtime threat detection, all codified in Terraform and Kubernetes manifests.
ExploreDevSecOps · 2024
Self-Hosted Trivy Scanner on GCP VM
I deployed a persistent, self-hosted Trivy vulnerability scanner on a dedicated GCP VM — running scheduled scans against all Artifact Registry images and IaC configs, with centralised reporting and CVE trend analysis in BigQuery.
ExploreProduct Intelligence · 2024
Self-Hosted PostHog Analytics on GCP VM
I deployed a self-hosted PostHog analytics instance on a GCP Compute Engine VM and integrated it with both a Flutter mobile app and a Next.js web app — keeping all product analytics data within our own GCP infrastructure.
ExploreProduct Intelligence · 2024
Microsoft Clarity + Layered Web Analytics Stack
I integrated Microsoft Clarity session recording and heatmap analytics into a Next.js web app — alongside PostHog and GA4 — building a layered analytics stack with consent-gated initialisation and GTM-managed vendor loading.
ExploreCloud Engineering · 2024
Cloud Scheduler & Cloud Tasks: Notification System
I designed and implemented a production notification and background job system on GCP — Cloud Scheduler for time-triggered orchestration and Cloud Tasks for deferred, retriable, rate-limited execution — replacing a brittle cron-on-VM setup.
ExploreDevOps · 2024
Full Enterprise CI/CD Pipeline on GCP
I designed and implemented a production-grade CI/CD pipeline — from commit through automated testing, container builds, infrastructure validation, and multi-environment progressive delivery — entirely on GCP-native tooling.
ExploreCloud Engineering · 2024–2025
GCP Infrastructure Automation Scripts Library
A curated library of automation scripts built over years of operating GCP infrastructure — covering routine maintenance, cost optimisation, security hygiene, incident response, and compliance tasks that I got tired of doing manually.
ExploreCloud Engineering · 2024
Cloud Cost Optimisation Dashboard (FinOps)
I built a real-time cloud cost observability and optimisation system — Billing Export to BigQuery as the data foundation, cost attribution by team, anomaly detection for spend spikes, and a Looker Studio dashboard for engineering and finance.
ExploreCloud Engineering · 2024
Multi-Cloud Identity Federation (GCP + Azure)
I designed and implemented a cross-cloud identity federation architecture allowing GCP workloads to authenticate to Azure resources using short-lived OIDC tokens — no stored credentials, no service account keys, no client secrets anywhere.
ExploreCompliance · 2025
GCP HIPAA Compliance Audit & Controls Implementation
I conducted a comprehensive HIPAA compliance audit of a GCP-hosted healthcare application and implemented the technical controls required to achieve HIPAA Security Rule compliance — covering all 18 implementation specifications.
ExploreCompliance · 2025
ISO 27001:2022 Cloud Controls Audit & Implementation
I conducted an ISO 27001:2022 readiness assessment of a GCP environment — mapping infrastructure against all 93 Annex A controls, implementing missing controls, and producing the full evidence artefacts required for certification audit.
ExploreCompliance · 2025
SOC 2 Type II Readiness for a Cloud-Native SaaS
I led the SOC 2 Type II readiness programme for a cloud-native SaaS — mapping Trust Services Criteria to GCP technical controls, implementing missing controls, and building automated evidence collection for the 12-month observation window.
ExploreCompliance · 2025
Nigeria Data Protection Act (NDPA 2023) Compliance Programme
I designed and implemented a compliance programme under Nigeria's Data Protection Act 2023 — covering new obligations, technical controls, data inventory, DPIAs, 72-hour breach notification procedures, and cross-border transfer governance.
ExploreCompliance · 2024
Privacy Policy & Data Compliance Framework
I developed a complete privacy and data compliance framework for mobile and web apps — covering privacy policy authoring, App Store data safety declarations, GDPR, NDPR compliance, cookie consent implementation, and data retention policies.
ExploreDevOps · 2024
Mobile App Publishing Pipeline: Play Store & App Store
I built and managed the complete end-to-end publishing pipeline for a mobile app — code signing, automated builds with Fastlane, store listing management, crash monitoring, and progressive rollout management for both Android and iOS simultaneously.
ExploreCybersecurity · 2025
GCP SCC Custom Findings & Security Posture Management
I deployed GCP Security Command Center Premium and extended it with four custom security findings for organisation-specific threats — plus a security posture dashboard tracking finding resolution over time and a Jira integration for CRITICAL and HIGH findings.
ExploreAI Engineering · 2025
Tingo 102.5 FM — Africa's First AI-Powered Radio Station
I led the end-to-end technical design, infrastructure build, and launch of Tingo 102.5 FM — a live, continuously broadcasting radio station where all content is generated and delivered by AI systems running on GCP.
ExploreCybersecurity · 2025
Security Incident Response Automation on GCP
I built an automated incident response system that contains threats, collects evidence, and notifies the right people — all within minutes of an SCC finding, before a human analyst has even opened their laptop.
ExploreCloud Engineering · 2024
DNS & Email Infrastructure Automation (Cloudflare + Zoho + GCP)
I built a fully automated DNS and email infrastructure provisioning tool — setting up production-ready DNS records, SPF, DKIM, DMARC, and MX routing for a custom domain in under 5 minutes via the Cloudflare and GCP APIs.
ExploreDevSecOps · 2024
GCP VPC & Firewall Audit Tool
I built an automated GCP VPC and firewall rule auditing tool that scans all projects in an organisation, risk-scores each rule, maps them against security baselines, and produces a prioritised remediation report — what normally takes 3 days takes 15 minutes.
ExploreCloud Engineering · 2024
Cloud Resource Tagging & Governance Enforcement
I built a tag governance system that automatically detects untagged GCP resources, notifies owners, applies default tags where safe to do so, and enforces tagging standards through Organisation Policy — solving the cost attribution data gap.
ExploreCloud Engineering · 2024
Cloud SQL Automated Backup Verification & DR Testing
I built an automated Cloud SQL backup verification and disaster recovery testing system — performing monthly automated restore tests, verifying data integrity, and producing compliance evidence that backups are both present and functional.
ExploreCybersecurity · 2025
Audit Log Integrity Verification System
I built a cryptographic audit log integrity verification system — using SHA-256 hashing, KMS-signed hash registries, and immutable Cloud Storage to create a tamper-evident audit trail that satisfies HIPAA, ISO 27001, and SOC 2 log integrity requirements.
ExploreDevOps · 2024
Cloud Load Testing & Performance Baseline System
I built a repeatable, infrastructure-as-code load testing system on GCP — running distributed k6 load tests from multiple regions simultaneously, capturing performance baselines, and integrating results into CI/CD to catch regressions before production.
ExploreCybersecurity · 2025
IAM Access Review Automation
I built a quarterly IAM access review automation system — pulling all IAM bindings across a GCP organisation, risk-scoring access, routing certification tasks to managers, tracking responses, and producing SOC 2 / ISO 27001 audit evidence.
ExploreDevOps · 2024
Ephemeral Dev Environment Provisioner
I built an on-demand ephemeral environment provisioner — developers spin up a full, isolated copy of the production stack (GKE namespace, Cloud Run, Cloud SQL clone) from a Slack command or GitHub PR label, and it auto-tears down after a configurable TTL.
ExploreDevOps · 2024
GCP SSL/TLS Certificate Lifecycle Management
I built a fully automated TLS certificate lifecycle management system on GCP — Certificate Manager managed certificates, health monitoring across all domains, and alerting on any anomaly — making certificate expiry outages structurally impossible.
ExploreProduct Development · 2026
APTOE: Governed AI-Native Penetration Testing Platform
A Linux-first platform for authorized penetration testing that coordinates AI-assisted security work through exact approvals, sandboxed capabilities, encrypted evidence, and independent finding verification.
ExploreProduct Development · 2026
Gatherly: Event Invitation and Engagement Platform
A full-stack event platform with a Next.js organiser studio, guest PWA and shared database layer for invitations, admission, media, Q&A and announcements.
ExploreProduct Development · 2026
Electro-Mart Nigeria E-commerce Platform
A Nigerian electronics retail web product, shaped around a practical catalogue, product seeding workflow and customer-facing commerce experience.
ExploreProduct Development · 2026
TerraRun: Location-Based Territory Game
A concept for a real-world running game where routes become persistent territory, supported by squads, real-time state and anti-cheat controls.
ExploreProduct Development · 2026
Epistemic Research Assistant
A multi-agent research system for mapping knowledge, surfacing gaps and generating falsifiable hypotheses with provenance, uncertainty and revision built into the workflow.
ExploreCompliance · 2026
Makintouch Cloud, Linux and Compliance Learning Lab
A structured, hands-on learning laboratory spanning Azure AI, data protection, Microsoft Server querying, Red Hat Linux administration and OpenShift foundations.
ExploreProduct Development · 2026
Azure Classroom: Controlled Lab Platform for Technical Trainers
A cloud-lab platform that gives technical trainers repeatable Azure and Linux hands-on labs without manual account creation, access administration, or environment cleanup.
ExploreCloud · 2026
Azure Operational Readiness Assessment and Remediation Plan
A five-day Azure operational-readiness consultation model that connects identity, networking, storage, compute, monitoring, and recovery to ownership and evidence.
ExploreCompliance · 2026
Governed AI Capability Roadmap
A five-day AI capability assessment and solution-discovery model for turning broad AI interest into a risk-aware, defensible pilot decision.
ExploreCompliance · 2026
GDPR Compliance and DPO Advisory Programme
A five-day privacy-governance and DPO capability model that turns fragmented privacy activity into documented, risk-based, continuously monitored compliance operations.
ExploreCompliance · 2026
ISO 31000 Risk Decision and Governance System
A five-day enterprise-risk consultation design that reframes a static risk register as evidence-based decision support embedded in operations and governance.
ExploreCompliance · 2026
ISO 9001 Audit Readiness and QMS Evidence Review
A five-day ISO 9001 audit-readiness model that connects QMS clauses, process performance, audit evidence, findings, corrective action, and programme oversight.
ExploreCompliance · 2026
AI Risk Governance Consultation: Inventory to Board Oversight
A five-day AI governance and risk-management model that links AI systems to owners, risks, controls, monitoring, audit evidence, and leadership decisions.
ExploreDevOps · 2026
Cloud Run Story Notification Job Recovery
A production incident remediation that restored MyHealthDiary's daily Cloud Run notification job after a Docker dependency failure prevented Firebase broadcasts.
ExploreProduct Development · 2026
Token-Efficient Scientific Writing System
A Python scientific-writing system enhanced with local diagram rendering, bounded tool output, phase-specific agent tools, and configurable research budgets to reduce unnecessary LLM usage.
ExploreMethodology note: confidential implementation details may be summarized. Repository links are included where available and should not be interpreted as independent verification of every reported production outcome.