IaCOpen source
Terraform AWS Reference Architecture
Progressive Terraform examples from a single EC2 instance to a full VPC with private RDS — reusable modules, remote state, CI-validated.
TerraformAWSVPCEC2RDS
Available for work — full-time, consulting & training
AWS Community Builder · Founder, NextGen Playground · DevOps Educator & Trainer
DevOps & Cloud Infrastructure Engineerbased in Cameroon, building for teams worldwide.
I'm Durrell Gemuh — a senior DevOps and Cloud Infrastructure Engineer with 5+ years designing, automating, and operating production-grade infrastructure across AWS, GCP, and Azure. AWS Community Builder, DevOps trainer, and founder of NextGen Playground.
5+
Years in DevOps
5000+
Sites supported
8+
Organisations
6
Countries
170+
Developers enabled
100+
Students mentored
Featured Open-Source Projects
All projects →An interlinked ecosystem that composes into one platform lifecycle — provision, build, deliver, operate, secure.
CI/CDOpen source
CI/CD Pipeline Templates
Reusable GitHub Actions workflows — build/test, security scan, build-push-sign (cosign), deploy — with a sample app that uses them.
GitHub ActionsDockercosignTrivyPython
ObservabilityOpen source
Observability Stack
Metrics, logs, and traces as code: Prometheus, Grafana, Loki, Tempo, Alertmanager via Docker Compose, plus Helm values for Kubernetes.
PrometheusGrafanaLokiTempoAlertmanager
KubernetesOpen source
GitOps Kubernetes Platform
ArgoCD app-of-apps delivering a Helm sample app to Kubernetes, with a local kind bootstrap — Git as the single source of truth.
ArgoCDKubernetesHelmGitOpskind
SecurityOpen source
Vault on Kubernetes (HA + Raft)
HashiCorp Vault in HA mode with integrated Raft storage and Kubernetes auth, deployed via Helm, with a secret-injection example.
VaultKubernetesHelmRaftSecrets Management
SecurityOpen source
DevSecOps Starter Kit
Drop-in security tooling — pre-commit, gitleaks, Trivy, tfsec, checkov, hadolint — wired into one CI pipeline.
pre-commitgitleaksTrivytfseccheckov
Tech Stack
Cloud
AWSGCPAzure
Containers
KubernetesDockerHelmArgoCD
IaC
TerraformAnsiblePulumi
CI/CD
GitHub ActionsJenkinsGitLab CIAzure DevOps
Observability
PrometheusGrafanaDatadogLokiTempo
Security
VaultIAMZero TrusttfsecTrivy
What I Do
All services →Cloud Infrastructure Engineering
Design and build production-grade infrastructure on AWS, GCP, and Azure — secure, automated, and built to scale.
DevOps Consulting
CI/CD pipelines, Kubernetes platforms, Infrastructure as Code, and cloud cost optimisation for teams of any size.
Technical Training & Workshops
Hands-on team training and masterclasses on Kubernetes, Terraform, CI/CD, observability, and DevOps practices.
1:1 Mentorship
Career guidance and technical mentorship for engineers breaking into or levelling up in DevOps and cloud.
What people say
From clients, colleagues, and engineers across different organisations and continents.
“Durrell completely transformed our infrastructure. What used to take our team days to provision now happens in minutes. He hardened everything with Cloudflare — CDN, WAF, and DDoS protection — so our sites are fast and available worldwide. The platform he built supports over 5,000 sites today and is load-tested to scale well beyond that.”
“One of the most thorough DevOps engineers I've worked with. He didn't just fix the pipeline — he documented everything, trained the team, and left the system better than he found it.”
“Durrell's Kubernetes sessions at Liora were the clearest I've seen. He has a rare ability to explain complex infrastructure concepts in a way that actually sticks.”
“The observability stack he set up for us cut our incident detection time from 30 minutes to under 2. We went from flying blind to having full visibility overnight.”
“Durrell built our entire CI/CD pipeline from scratch and mentored two junior engineers through the process. The pipeline has been running without issues for over a year.”
“What impressed me most was how Durrell approached the work — he asked the right questions before touching anything, understood our constraints, and delivered something we could actually maintain ourselves.”
Latest Writing
All posts →How I think about engineering
Automation first
If a human is doing it more than twice, a machine should be doing it. Manual processes are technical debt in disguise.
Observability everywhere
A system you can't observe is a system you can't trust. Metrics, logs, and traces are how you sleep at night.
Infrastructure as code
Infrastructure that can't be version-controlled, reviewed, and reproduced will eventually fail you silently.
Knowledge sharing
Strong engineering cultures are built on documentation and shared learning, not individual heroics.
Currently working on
▸Founder & lead engineer at NextGen Playground — a hands-on DevOps learning platform
▸Talent Forge — mentoring engineers from zero to deploying real infrastructure
▸AWS Community Builder (Cloud Operations) — contributing technical content
▸Speaking & writing on Kubernetes, CI/CD, cloud cost, and DevOps careers in Africa
Let's build something reliable.
Open to DevOps & cloud roles, consulting, training, and speaking.