oluwatoyin odesanya

Designed and built a secure AWS environment for a fictional fintech using Terraform, covering account guardrails, MFA-protected IAM, segmented VPC with WAF, and KMS encryption. Implemented centralized logging and automated incident response playbooks.

Architected an end-to-end AWS IoT platform for real-time fleet tracking, sustaining 43M messages/month at 0% loss and 1s latency. Drove key design trade-offs and implemented a replay-based resilience pattern for unreliable networks.

Architected a 4-account AWS landing zone with SCPs and centralized logging, enforcing NDPA data residency and least-privilege cross-account access. Drove design trade-offs to eliminate double-debit on NIBSS timeouts, cutting payment failures from 30% to 0%.

Provisioned cloud infrastructure declaratively using Terraform and built an end-to-end Continuous Delivery pipeline with AWS CodePipeline and CodeBuild. Deployed a serverless AI-powered recipe generation web application using AWS Amplify and Amazon Bedrock.

Designed and deployed multi-tier AWS architectures including web, application, and database layers using EC2, RDS, ELB, and Route53. Built fault-tolerant, scalable, and secure cloud environments aligned with AWS Well-Architected Framework.

Designed, configured, and deployed AWS infrastructure using EC2, S3, RDS, Route53, CloudFormation, CloudWatch, SQS, and IAM. Monitored performance and cost, and migrated on-prem SQL Server workloads to AWS RDS using DMS.

Architected multi-account AWS environments using AWS Organizations and Control Tower for governance and compliance. Automated infrastructure provisioning using CloudFormation and CI/CD pipelines, reducing manual deployments by 60%.

Supported deployment and tuning of a SIEM (Splunk/Elastic) across ~1,200 endpoints and 40 servers. Contributed to a detection rule catalog and built SOC triage dashboards, helping reduce mean time to detect from ~8 hours to under 45 minutes.

Assisted in standing up a vulnerability management program, running authenticated scans (Nessus) across ~500 assets and triaging findings using CVSS. Documented the vulnerability management policy and built a monthly patch compliance and risk reporting pack for leadership.

Conducted vulnerability assessments and penetration testing using Metasploit, Nessus, Nmap, and OWASP ZAP. Developed IT security policies aligned with NIST and ISO 27001 frameworks.

Conducted vulnerability assessments and penetration testing using Metasploit, Nessus, Nmap, and OWASP ZAP. Developed IT security policies aligned with NIST and ISO 27001 frameworks.

Produced structural and architectural CAD drawings and reinforcement bar schedules. Developed strong project management and documentation skills transferable to cloud engineering roles.

Built and launched a 12-page corporate WordPress site on a hardened LAMP stack, handling DNS, SSL/TLS, and staging-to-production deployment. Applied WordPress security hardening and ran pre-launch vulnerability scans.

Performed a scoped black-box/gray-box penetration test of a staging e-commerce web app using OWASP Top 10 methodology. Identified and documented findings including stored XSS, IDOR, weak password policy, and missing security headers, and produced a client-ready remediation report.

Grade: First-Class

Bachelor of Science with Honours in Cyber Security, graduated with First-Class honours.

Postgraduate Certificate in Education studies (PGCE).