Raphael Gab-Momoh

Focus Areas

• Kubernetes (AKS/EKS/GKE)
• FinOps & Cost Sizing
• Data Lake Storage Gen2
• GitHub Actions
• Bicep & IaC

Case Studies

• Automated CI/CD Deployment Pipeline for Dart Application — Designed and implemented a fully automated Continuous Integration and Continuous Deployment (CI/CD) pipeline for a Dart-based application, accelerating release cycles and eliminating manual deployment errors for a fast-growing startup.
• Enterprise Security Awareness Campaign & Phishing Simulation Program — Designed and executed a comprehensive Security Awareness Campaign utilizing automated phishing simulations, targeted training modules, and continuous employee risk scoring to mitigate human-centric cyber threats.
• Zero Trust Network Architecture in Azure: Firewalls, Private Link & NSGs — Architected and deployed a production-grade Zero Trust network in Azure using Hub-and-Spoke topology, Azure Firewall, Private Link, and strict NSG/ASG micro-segmentation.
• Azure SaaS Auto-Scaling Transformation: Monolith to High Availability — Transformed a fragile, single-VM monolithic application into a highly available, auto-scaling SaaS architecture on Azure, eliminating single points of failure.
• Enterprise AI RAG Platform & Azure OpenAI Security Architecture — Engineered a highly secure, zero-trust enterprise RAG search platform leveraging Azure OpenAI, processing 12M+ financial documents.
• Enterprise Azure Landing Zone & Zero-Trust Security Architecture — Designed and deployed a scalable Azure Landing Zone (ALZ) utilizing Terraform to enforce a strict Zero-Trust security perimeter across 40+ global subsidiaries.
• Multi-Cloud Kubernetes (AKS, EKS, GKE) GitOps Transformation — Modernized monolithic order processing into a federated, multi-cloud Kubernetes architecture using GitOps, ArgoCD, and Terraform.
• Automating Azure Load Testing in a GitHub Actions CI/CD Pipeline — Wired Azure Load Testing directly into GitHub Actions so every pull request against the payment API is load-tested automatically, with pass/fail performance criteria gating the merge — turning performance regression from a pre-release fire drill into a routine, automated check.

Recent Articles

• Building AI-Powered Applications with Azure Database for PostgreSQL — A granular walkthrough of turning Azure Database for PostgreSQL into an AI application backend — pgvector embeddings, semantic search, in-database Azure OpenAI calls, a full RAG pipeline, and a simple generative agent.
• Configuring and Migrating to Azure Database for PostgreSQL — A granular DBA-level walkthrough — migrating a database with minimal downtime, configuring zone-redundant high availability, tuning query performance, and locking down identity and network access.
• Deploying Cloud-Native Apps with Azure Container Apps — A granular build: a secure, identity-based connection to Azure Container Registry, KEDA-based autoscaling rules, continuous deployment via Azure Pipelines, and safe revision management for zero-downtime rollouts.
• Containerizing MultiLangua for Azure Container Apps — A real migration, not a toy example — MultiLangua's Firebase Hosting deployment only serves static files, so its AI chat backend never actually runs in production. Containerizing it for Azure Container Apps is what makes the full app work end to end.
• Containerizing ORIN: From Docker to Azure App Service and a Plain VM — The same Express + Vite app, deployed two different ways — Azure App Service and a plain Azure VM — to see exactly what a managed PaaS product is buying you over doing it by hand, then automated end to end with GitHub Actions.
• Networking MYRIX: Hub-Spoke VNets, Bastion, and Load-Balancer Health on Azure — A containerized Flutter game deployed to a plain Azure VM with no public IP at all — reached only through a hub-spoke VNet, peered networks, Azure Bastion for management, and a Standard Load Balancer whose health probe is the actual first line of monitoring.

RSS feed