About

Software Engineer, Cloud Infrastructure

Skills

  • English and Kiswahili

Experience

Timothy Nyachio

Work experience
  • Designed, provisioned, and operated a production grade AWS EKS platform hosting microservices and a centralised API Gateway with high availability, secure traffic routing, and multi-tenant isolation.
  • Implemented Apache APISIX on Kubernetes, developing custom Lua plugins for user authorisation and service-to-service authentication via digital signatures.
  • Deployed Istio service mesh for resilient inter-service communication with traffic management, fault tolerance, and mutual TLS.
  • Built CI/CD pipelines using Argo CD and Helm for GitOps-driven deployments with automated reconciliation across environments.
  • Provisioned and managed multi-region AWS infrastructure using Terraform, bringing legacy resources under IaC governance to improve security, lifecycle management, and cost efficiency.
  • Led AWS cost optimisation achieving ~30% reduction through utilisation reviews, decommissioning unused resources, and standardising instance types for Reserved Instance adoption.
  • Standardised APM tooling across EKS, Hetzner bare metal Kubernetes, and LXC, Prometheus and Grafana for metrics and alerting, Jaeger for tracing, and Sentry for error tracking.
  • Instrumented business critical Rails and Flask services with OpenTelemetry for tracing and Prometheus exporters for metrics, extending coverage and resolving pipeline issues.
  • Deployed a self-hosted Jaeger instance on EKS with isolated tainted node groups, routing traces via OTel Collector to Jaeger and Elasticsearch without impacting application workloads.
  • Researched multi-cluster connectivity between Hetzner Kubernetes and AWS EKS using Submariner for secure cross-cluster service communication.
  • Migrated self-hosted Sentry SSO from Okta to Microsoft Entra ID.
  • Supported Hetzner bare-metal infrastructure via Ansible across Kubernetes and LXC environments, resolving deployment and infrastructure failures.
  • Supported incident response, and reliability improvements across cloud-native and legacy infrastructure.

Related persons

Brian MartinAccounting, Finance