Raphael Gab-Momoh

Focus Areas

• Kubernetes (AKS/EKS/GKE)
• FinOps & Cost Sizing
• Data Lake Storage Gen2
• GitHub Actions
• Bicep & IaC

Case Studies

• Cloud Cost Intelligence on a Real Azure Environment: Finding Where the Money Goes — Built a FinOps pipeline (ingestion, normalization, allocation, optimization) and pointed it at the real billing data of a running Azure hub-spoke environment instead of sample data. It showed where the money actually goes (one always-on service was over half of lifetime spend) and exposed a tagging gap that would have made any cost report look more complete than it was.
• Automated CI/CD Deployment Pipeline for Dart Application — Designed and implemented a fully automated Continuous Integration and Continuous Deployment (CI/CD) pipeline for a Dart-based application, accelerating release cycles and eliminating manual deployment errors for a fast-growing startup.
• Enterprise Security Awareness Campaign & Phishing Simulation Program — Designed and executed a comprehensive Security Awareness Campaign utilizing automated phishing simulations, targeted training modules, and continuous employee risk scoring to mitigate human-centric cyber threats.
• Zero Trust Network Architecture in Azure: Firewalls, Private Link & NSGs — Architected and deployed a production-grade Zero Trust network in Azure using Hub-and-Spoke topology, Azure Firewall, Private Link, and strict NSG/ASG micro-segmentation.
• Azure SaaS Auto-Scaling Transformation: Monolith to High Availability — Transformed a fragile, single-VM monolithic application into a highly available, auto-scaling SaaS architecture on Azure, eliminating single points of failure.
• Enterprise AI RAG Platform & Azure OpenAI Security Architecture — Engineered a highly secure, zero-trust enterprise RAG search platform leveraging Azure OpenAI, processing 12M+ financial documents.
• Enterprise Azure Landing Zone: Governance, Zero-Trust Security & Cloud Cost Control — Designed and deployed a scalable Azure Landing Zone (ALZ) utilizing Terraform to enforce a strict Zero-Trust security perimeter across 40+ global subsidiaries, while consolidating redundant ExpressRoute gateways and removing idle and shadow IT resources to bring cloud spend under control.
• Multi-Cloud Kubernetes (AKS, EKS, GKE) GitOps Transformation — Modernized monolithic order processing into a federated, multi-cloud Kubernetes architecture using GitOps, ArgoCD, and Terraform.
• Automating Azure Load Testing in a GitHub Actions CI/CD Pipeline — Wired Azure Load Testing directly into GitHub Actions so every pull request against the payment API is load-tested automatically, with pass/fail performance criteria gating the merge — turning performance regression from a pre-release fire drill into a routine, automated check.

Featured Guides

• FinOps for Kubernetes: Cost Optimization & Sizing on Azure AKS — Practical strategies to slash compute spend by 40% on AKS clusters using spot node pools, KEDA auto-scalers, and Azure Data Lake Gen2 tiering.
• Zero Trust Network Architecture in Azure: Firewalls, Private Link & NSGs — A deep dive into perimeter-less networking, micro-segmentation, and central hub-and-spoke security enforcement.
• Automate Azure Load Testing Using GitHub Actions — Wiring Azure Load Testing into a GitHub Actions pipeline so every pull request gets an automated, pass/fail-gated performance test — based on the pattern in Microsoft's Automate Azure Load Testing Applied Skills path.
• Deploying Cloud-Native Apps with Azure Container Apps — A granular build: a secure, identity-based connection to Azure Container Registry, KEDA-based autoscaling rules, continuous deployment via Azure Pipelines, and safe revision management for zero-downtime rollouts.
• Building an EKS Security Baseline: RBAC, Pod Security Standards, and NetworkPolicy, Verified — A hub-spoke Transit Gateway network in Terraform, plus RBAC, Pod Security Standards, and NetworkPolicy applied to a real Kubernetes cluster — including a real NetworkPolicy bug caught only because the "allowed" connection failed for a different reason than the blocked one.
• Open Cloud Cost Intelligence: A Real FinOps Pipeline, Built and Run Against Real Billing Data — Ingestion, normalization, cost allocation, and an optimization engine — not against sample data, but against a real Azure resource group's real Cost Management API response. The result: a genuine finding (one service is 75% of daily spend) and a genuine gap (100% of that cost is currently unallocated by tag).

All guides · RSS feed