Explore Abraham O. Samuel’s cloud security, DevSecOps, Kubernetes and compliance engineering portfolio.

Services

Cloud, product, compliance and education services

Hands-on support for teams that need secure cloud architecture, reliable delivery, stronger technical governance or practical capability-building. Compliance work focuses on technical implementation and readiness support, not legal advice.

Last reviewed: 19 July 2026

Technical service

CI/CD Pipeline Implementation

I design and implement end-to-end CI/CD pipelines that take your code from commit to production safely — with automated testing, container scanning, and progressive delivery built in from the start.

Technical service

Cloud Security Audit

I run a comprehensive security posture assessment of your GCP or Azure environment — firewall rules, IAM bindings, org policies, and encryption controls — and deliver a prioritised remediation report with exact fix commands.

Technical service

Zero-Trust Architecture Design

I replace perimeter-based security with identity-first access controls across your entire cloud environment — BeyondCorp access policies, Cloud Armor WAF, VPC Service Controls, and Workload Identity Federation.

Technical service

HIPAA / ISO 27001 / SOC 2 Compliance

I implement and evidence compliance controls on GCP for HIPAA, ISO 27001:2022, and SOC 2 Type II — from gap assessment through to certification-ready evidence packages that satisfy external auditors.

Technical service

DevSecOps Integration

I embed security into every stage of your development pipeline — SAST, dependency scanning, container signing, DAST against staging, and infrastructure-as-code validation — so security is never a blocker.

Technical service

Cloud FinOps & Cost Optimisation

I audit your GCP or Azure spend, identify waste, and build the infrastructure for ongoing cost visibility — billing exports to BigQuery, anomaly detection, committed use discount analysis, and a real-time Looker Studio dashboard.

Technical service

Kubernetes Security Hardening

I harden your GKE environment for production and audit readiness — RBAC least-privilege design, OPA Gatekeeper admission policies, Kyverno enforcement, Falco runtime threat detection, and default-deny network segmentation.

Technical service

SLO Design & Reliability Audit

I define service-level objectives for your production systems, build the alerting infrastructure to enforce them, and design runbooks so your team knows exactly what to do when error budgets burn faster than expected.

Technical service

Infrastructure as Code (Terraform)

I convert manually-created cloud infrastructure into reproducible Terraform code — or build your IaC foundation from scratch — with reusable modules, remote state, and a drift-detection system so your infra never surprises you.

Technical service

App Store & Play Store Programme

I manage the full mobile publishing lifecycle — code signing, automated build and release pipelines with Fastlane, Play Store internal/closed/production track management, TestFlight, crash monitoring, and Google Play Testing Programme enrolment.

Technical service

BAA / DPA Audit & Acquisition

I identify every third-party vendor processing your users' data, assess whether a Business Associate Agreement or Data Processing Agreement is in place, flag uncovered gaps, and manage the acquisition process to get you fully covered.

Technical service

NDPA 2023 Compliance (Nigeria)

I implement technical compliance under Nigeria's Data Protection Act 2023 — automated data inventory scanning with Cloud DLP, DPIA process, breach notification procedures, and the infrastructure controls that make compliance evidence-able for the NDPC.

Technical service

Security Incident Response Automation

I build automated incident response systems that contain cloud security threats in minutes — SCC-triggered Cloud Functions that quarantine compromised VMs, revoke suspicious IAM bindings, and notify your team before a human has even opened their laptop.

Technical service

Cloud Migration & Modernisation

I plan and execute migrations from legacy infrastructure or Heroku/shared hosting to GCP — workload assessment, migration sequencing, containerisation, and a post-migration reliability review — with minimal downtime and no data loss.

Technical service

Privacy Policy & App Store Compliance

I write GDPR and NDPA 2023-compliant privacy policies for apps and web products, complete the Google Play Data Safety form and Apple App Privacy Label accurately, and implement cookie consent — resolving the most common cause of store rejections.

Technical service

Cloud Observability & Monitoring Setup

I instrument your GCP services with structured logging, distributed tracing, and custom metrics — then build the dashboards and alerts that give your team full visibility into production health before your users notice something is wrong.

Technical service

IAM Access Review & Governance

I conduct quarterly IAM access reviews across your GCP organisation — risk-scoring every binding, routing certification decisions to the right managers, revoking excess access immediately, and producing BigQuery evidence for SOC 2 and ISO 27001 audits.

Technical service

Disaster Recovery & Backup Verification

I design and automate your disaster recovery programme — Cloud SQL restore testing, audit log integrity verification, backup retention policy enforcement, and runbook documentation — so your backups are proven restorable before you need them.

Technical service

Product Analytics Infrastructure

I deploy and configure a self-hosted PostHog analytics stack on GCP — keeping all product event data within your own infrastructure — and integrate it with your web and mobile apps for unified behavioural analytics across platforms.

Technical service

DNS, Email & Domain Infrastructure

I provision production-ready DNS and email infrastructure for new domains — MX records, SPF, DKIM, DMARC, CAA records, Cloud Run domain mapping, and TLS certificate automation — fully configured via Cloudflare and GCP APIs in under an hour.

Technical service

Technical Training & Enablement

I design hands-on technical training for teams that need to operate securely and independently — from cloud and Linux foundations to compliance-aware administration and DevOps delivery practices.