Skip to content
Obed Uwakwe

Obed Uwakwe

The future of infrastructure architecture.

Entry-level DevOps and software engineer with hands-on experience across AWS, Terraform, Kubernetes, and GitOps.

Explore the case studyDownload resume

Open to DevOps and software engineering roles

OBED UWAKWE / DEVOPS AND SOFTWARE ENGINEERING

ORBIT · 5 SECTIONS · BUILT WITH NEXT.JS AND R3F

01 / CASE STUDY

Digital Bank Microservices

A four-service banking platform, in production for $0 per month.

Overview

A microservices banking platform: auth, account, transfer, and notification services behind an nginx gateway. Postgres per service on Supabase, an Upstash Redis queue, Resend for email, Prembly for identity checks. JWT access plus refresh tokens, per-route rate limiting, correlation IDs across services. A solo build, still in progress, with a React Native and Expo mobile app as the current primary surface.

Problem

Running real microservice infrastructure as a solo developer, without a monthly bill, while keeping it secure.

The process

  • Infrastructure as code first on AWS: ECS, Terraform, Atlantis, and a GitOps pipeline.
  • Hit the cost ceiling of always-on cloud infrastructure when the AWS free-tier credits expired.
  • Migrated the whole stack to free-tier hosting (Supabase, Upstash, Vercel) and verified it end to end in production, fixing a branch-tracking bug, a TLS trust gap, and a missing secret along the way.
  • Ran an adversarial security review before shipping and caught a real IDOR bug that would have exposed customer PII.
  • Built the registration and onboarding flow for a React Native and Expo mobile app, now the primary surface.

The solution

Free-tier architecture: nginx gateway routing to four Node services, each with a Supabase Postgres database, an Upstash Redis queue feeding the notification service, and Resend for email delivery.
Free-tier architecture

The free-tier architecture holds every service at a $0 resting state. nginx routes to four Node services, each with its own Postgres database. The Redis queue decouples notification delivery from the request path, so a slow email never blocks a transfer.

The Digital Bank web application dashboard showing account balances and recent transfers.
Web app: account dashboard
The Digital Bank mobile application home screen with a card carousel and a transfer shortcut.
Mobile app: home screen

Impact

In progress
$0 / moInfrastructure cost
4Services live
ShippedMobile app
IDORCaught before prod
02 / SELECTED WORK

Selected Work

CloudOps Platform

AWS / Kubernetes

Platform engineer

The CloudOps Platform Grafana dashboard with cluster health panels.
Grafana cluster dashboard
Multi-AZAWS topology

A multi-AZ AWS platform with Terraform, EKS, and ArgoCD GitOps, drift detection, and a Prometheus and Grafana stack. Torn down to $0 between sessions.

Repository (opens in a new tab)

DevSecOps Pipeline

CI/CD / Security

Pipeline engineer

A GitHub Actions workflow graph for the DevSecOps pipeline with security jobs.
GitHub Actions security gate
3Blocking scanners

Checkov, Trivy, and npm-audit security gates in GitHub Actions, plus a fraud-detection engine. Fully committed and public.

Repository (opens in a new tab)

Car$ync

Security audit / Fintech

Security and platform engineer

A fintech marketplace admin view separating masked public data from full customer detail.
Fail-closed admin view
PII / IDORVulnerability found

A live fintech marketplace audited end to end. Found a PII and IDOR hole exposing every customer's financial data to unauthenticated callers, shipped a fail-closed admin auth pattern to close it, and recovered a drifted Terraform state with zero downtime.

Repository (opens in a new tab)

03 / PERSPECTIVE

How I Work

I build infrastructure the way an architect builds: reproducible, documented, and cheap to keep standing. Every project has a $0 resting state and a security log.

Cost discipline

Infrastructure is torn down between sessions. Free-tier by default. Every project has a $0 per month resting state.

Security as default

Validate at the boundary, authorize on the server, keep secrets in environment variables, and keep a security log per project.

Everything as code

Terraform plus GitOps: reproducible and drift-checked, never clicked together in a console.

Portrait of Obed Uwakwe.
04 / TECH STACK

Tech Stack

Cloud and Infrastructure

AWSTerraformKubernetes / EKSHelmDockernginx

CI/CD and GitOps

GitHub ActionsArgoCDAtlantisOIDCRenderVercel

Observability and Security

PrometheusGrafanaCheckovTrivySecrets ManagerKMSWAF

Application

PythonTypeScriptNode.jsNext.jsReact Native / ExpoPostgreSQLRedis
$0 / moInfra at rest
100Lighthouse
Google CybersecurityProfessional Certificate
CIEvery push
05 / CONTACT

Contact

Let's build reliable systems together.

Open to DevOps and software engineering roles, on-site or hybrid.

I usually reply within a day.