David Sampson with his glasses on, sitting at his laptop

Based in Johannesburg, South Africa (UTC+2): full overlap with UK/EU hours and US mornings

Work with me Upwork, or company contracts through SuperStack

Senior DevOps & Platform Engineer · AWS EKS · Kubernetes · Johannesburg (UTC+2)

I run production Kubernetes platforms on AWS, and I use AI to get DevOps work done faster.

I'm David Sampson, a senior DevOps and platform engineer based in Johannesburg. I look after production AWS EKS platforms: cluster and node scaling, KEDA autoscaling, Helm, Terraform and CI/CD pipelines, and the Prometheus, Grafana, Loki and Alertmanager stack that tells you when something is wrong. I'm on incident response too. I build my own AI tooling to handle the repetitive parts (reviews, reports, tickets, runbooks), so more of my time goes into the work that needs a senior engineer.

30+ incidents resolved

in my first two months on my current platform contract

10+ CI/CD pipeline optimisations

shipped in the same period

7 operational runbooks

written in my first 30 days

Numbers from my current DevOps and platform engagement (Feb 2026 – present).

Current focus

Running a dual-cluster AWS EKS platform (UAT and production) for a fintech team, plus AWS delivery and cost work for client projects.

Platform & DevOps experience

Most of my recent work is platform and cloud engineering for South African companies that serve banks, fintechs and large enterprises. Client details stay confidential, so these summaries describe the systems and the work, not the internals.

BitVenture, through 1Solve (Pty) Ltd

Lead DevOps & Kubernetes Engineer (AWS)

South Africa·Feb 2026 – present

Most of this engagement is Kubernetes and DevOps on AWS. I look after a dual-cluster EKS platform (UAT and production) for a fintech group: node and workload scaling, CI/CD, the observability stack, and production incident response.

  • Upgraded Kubernetes clusters on premises and on EKS, checking node groups and workload compatibility before each version cutover.
  • Hardened encryption in transit and at rest to a SOC 2-aligned standard, and tightened identity and network exposure as part of that work.
  • Moved a queue-driven worker fleet from StatefulSets to Deployments and wired KEDA autoscaling to queue depth, so the fleet follows real demand instead of a fixed replica count.
  • Fixed a CI image-tagging bug that was silently shipping stale images. Deploys now pin to the commit SHA.
  • Run Prometheus, Grafana, Loki and Alertmanager, and cleaned up alert noise so pages point at real problems.
  • Led recovery on a multi-day production outage, then the follow-up hardening, and wrote a blue-green deployment feasibility report.
  • Resolved 30+ incidents and delivered 10+ pipeline optimisations in the first two months. Wrote 7 runbooks in the first 30 days.
  • Use internal AI-assisted ops automation I built for clients to draft incident notes, update tickets and keep timesheets current. I review every output before it goes out.

Systems & technologies: AWS EKS, Kubernetes, Docker, Helm, KEDA, Bitbucket Pipelines, Prometheus, Grafana, Loki, Alertmanager, RabbitMQ / Amazon MQ, RDS PostgreSQL, S3, Mosquitto MQTT, .NET / IIS services, Python, Bash, Jira.

A typical EKS platform I run

Generic layout. UAT and production are separate clusters. IAM roles for service accounts on both.

VPC · UAT

Public subnet

ALB / ingress

TLS terminates here

Private subnet · EKS

System node group

Core add-ons

Worker node group

Application pods

App Deployments

Stateless services

KEDA ScaledObjects

Scale on RabbitMQ / Amazon MQ depth

RDS PostgreSQL

S3

VPC · Production

Public subnet

ALB / ingress

TLS terminates here

Private subnet · EKS

System node group

Core add-ons

Worker node group

Application pods

App Deployments

Stateless services

KEDA ScaledObjects

Scale on RabbitMQ / Amazon MQ depth

RDS PostgreSQL

S3

CloudSmiths

Full Stack & DevOps Engineer (AWS)

South Africa·Jul 2024 – present

Embedded senior engineer on client platforms in banking, HR and legal tech, healthcare and media. Alongside feature delivery I do AWS performance and cost work, release governance, and production support inside regulated delivery processes.

  • Tuned Elastic Beanstalk and nginx on a production system: worker and connection limits, timeouts and static handling, aimed at slow pages and unstable releases.
  • Built a Lambda check that watches certificate expiry and raises a ticket before a certificate lapses.
  • AWS performance and cost work on a large HR and legal-tech production system, and cost reviews for a tier-1 bank’s learning platform, written up inside that bank’s change process.
  • Weekly releases to UAT and production across concurrent projects, with CI/CD in the path.
  • Prometheus, Grafana and CloudWatch on the stacks that already used them, so production support had something concrete to look at.
  • Rescued a deadline-critical media analytics project and delivered it on time.
  • The same internal AI-assisted ops automation I built for clients drafts timesheets, tickets and incident triage notes. I check each draft before it is sent.

Systems & technologies: AWS (Elastic Beanstalk, Amplify, RDS, Lambda, DynamoDB, ECS, EC2, S3, CloudWatch, AppSync, API Gateway, Cost Explorer), nginx, Django / Python, React / React Native, Node.js, GraphQL, Flowable.

OpenVantage

Software Engineer

South Africa·Jul 2023 – Apr 2024

Joined a new real-estate SaaS build with no infrastructure in place. The DevOps part of the role was setting up the AWS footprint and the delivery pipeline alongside the product.

  • Set up the initial AWS footprint: S3 storage, RDS PostgreSQL, and Lambda for background work.
  • Built the GitHub-to-AWS CI/CD pipeline, with tests and SonarQube quality gates on every merge.
  • Handled weekly production deployments, daily code reviews and delivery habits aligned with DORA.
  • Kept building the product in the same engagement: React and TypeScript on tRPC, with Prisma against PostgreSQL.

Systems & technologies: AWS (S3, RDS, Lambda), GitHub Actions CI/CD, SonarQube, PostgreSQL, Prisma, tRPC, React / TypeScript, Jest, Storybook.

CI/CD pipeline

The same shape on Bitbucket Pipelines and GitHub Actions.

  1. 1Git pushCommit on the branch
  2. 2CIBitbucket Pipelines or GitHub Actions
  3. 3Test + SonarQubeQuality gate on the merge
  4. 4Docker buildImage tagged with the commit SHA
  5. 5RegistryPush the pinned image
  6. 6Helm → UATUpgrade the UAT release
  7. 7ApprovalHuman gate before production
  8. 8Helm → productionSame SHA, with a rollback path

SHA-pinned images. No latest tag in production.

Earlier engineering work

These stay as separate engagements, with the dates and titles on the CV. They are not rolled into one freelance role.

  • No Regrets Studios

    Apr 2025 – Sep 2025

    Full Stack AI Engineer·United Kingdom

    Next.js platform for a UK studio, with AI image generation and AWS asset storage.

  • Italtile Limited

    Sep 2024 – Dec 2024

    Full Stack Engineer·South Africa

    Point-of-sale maintenance and a Cordova toolchain update, released through Azure DevOps.

  • Freelance

    Apr 2024 – Dec 2024

    Next.js Developer·South Africa

    Convo Freaks, built from scratch, and a Crabaride UI rework on Next.js and Vercel.

  • Freelance

    Oct 2022 – Apr 2024

    Lead React Developer·South Africa

    Insurance business-tracker frontend. Recovered the project and delivered it.

  • Irricheck

    Apr 2022 – Jul 2023

    React Developer·South Africa

    Agritech productivity frontend, built and owned day to day.

  • VZAP | Van Zyl & Pritchard

    Apr 2021 – Apr 2022

    Junior Software Developer·Johannesburg

    Healthcare quality tracker and a printing CRM, on React and Java.

Full CV available on request. View CV

AI-driven DevOps automation

I treat AI as part of my toolchain, not a gimmick. I build small assistants that do the repetitive half of DevOps: gathering evidence, writing up findings, keeping tickets and timesheets current. I check every output before it reaches a client. The result is senior-level work delivered faster, with a paper trail.

Internal AI-assisted ops automation I built for clients

Scripts and assistants pull cluster health, write morning ops reports, draft incident notes and runbooks, create and update tickets, and keep timesheets in sync. The same approach drafts AWS cost reviews, action plans and status reports from account data. I check every output before it reaches a client.

Built with: Next.js, Node.js, Python, Bash, PowerShell, the Jira API, time-tracking APIs, kubectl and the AWS CLI.

Taxzi

A live product I built and run: upload a South African bank statement and get a tax estimate. Proof that I ship and operate production software end to end, not only infrastructure.

taxzi.co.za

Ops automation loop

Internal AI-assisted ops automation I built for clients. Generic flow, not a client system.

  1. 1 · Signals

    • Cluster health
    • Alerts
    • Jira
    • Calendar
  2. 2 · Scripts and assistants

    • Gather the evidence
    • Draft the write-up
    • Update the ticket
  3. 3 · Outputs

    • Morning ops report
    • Incident draft
    • Ticket updates
    • Timesheet
  4. 4 · Review

    • I check the draft
    • Then it goes to the client

AI drafts, I decide. Nothing reaches a client without review.

My rule: AI drafts, I decide. Nothing touches a client environment without review.

Systems & technologies

What I have used in production client work. Items marked ◐ are supporting skills.

Cloud (AWS)

  • EKS
  • EC2
  • ECS
  • Elastic Beanstalk
  • Lambda
  • RDS (PostgreSQL)
  • DynamoDB
  • S3
  • Amazon MQ
  • API Gateway
  • AppSync
  • Amplify
  • CloudWatch
  • Cost Explorer
  • IAM

Cloud (other)

  • Vercel
  • Azure◐
  • DigitalOcean◐
  • Google Cloud◐
  • Neon

Containers & orchestration

  • Kubernetes
  • Amazon EKS
  • Docker
  • Helm
  • KEDA (event-driven autoscaling)

Infrastructure as code

  • Terraform
  • Helm charts
  • AWS CloudFormation◐

CI/CD

  • Bitbucket Pipelines
  • GitHub Actions
  • Azure DevOps◐
  • SonarQube quality gates
  • Commit-SHA image pinning
  • Blue-green release planning

Observability & incident response

  • Prometheus
  • Grafana
  • Loki
  • Alertmanager
  • CloudWatch
  • P1 incident response
  • Runbooks
  • Post-incident reports

Messaging & data

  • RabbitMQ / Amazon MQ
  • Mosquitto MQTT
  • PostgreSQL
  • MongoDB◐
  • Prisma

Languages & frameworks

  • Python
  • Bash
  • PowerShell
  • TypeScript / JavaScript
  • Node.js
  • Next.js
  • React
  • Django◐
  • .NET / IIS◐
  • Java◐

AI & automation

  • OpenAI APIs
  • AI-assisted ops automation
  • AI coding agents (for example Cursor)
  • ComfyUI / Stable Diffusion / HuggingFace
  • Jira and time-tracking API automation

Observability stack

Metrics, logs and pages. The useful part is what the alert is actually telling you.

Workloads

App metrics

Node exporters

Node health

KEDA metrics

Queue depth

Prometheus

Scrapes metrics. Recording and alert rules live here.

Grafana

Dashboards for capacity and symptoms

Loki

Logs from the same workloads, queried next to the metrics.

Alertmanager

Routes to on-call, Slack or email

Alert on symptoms, not on every pod restart.

Products I've built

Alongside client platform work, I build and run my own products on Vercel and Next.js. They keep my hands on the full stack, which is why I know what developers need from a platform. Live ones link out; archived ones are kept for the record.

Need a senior DevOps engineer on your AWS platform?

I take on remote DevOps and platform work through Upwork, and company contracts through SuperStack. Typical engagements:

  • Stabilise or own an EKS/Kubernetes platform: scaling, upgrades, incident response.
  • Fix slow or unreliable CI/CD: deterministic builds, safe promotion, rollbacks.
  • Monitoring that is actually useful: Prometheus, Grafana, Loki and Alertmanager, with alerts on symptoms rather than noise.
  • AWS delivery and cost work inside a client’s existing change process.
  • Automate the ops toil: reports, tickets, runbooks and checks a team does by hand.

I am in South Africa (UTC+2), with full overlap with UK/EU working hours and US mornings.

Hire me on UpworkEmail me

Company or long-term contracts: SuperStack.