I run production Kubernetes platforms on AWS, and I use AI to get DevOps work done faster.
I'm David Sampson, a senior DevOps and platform engineer based in Johannesburg. I look after production AWS EKS platforms: cluster and node scaling, KEDA autoscaling, Helm, Terraform and CI/CD pipelines, and the Prometheus, Grafana, Loki and Alertmanager stack that tells you when something is wrong. I'm on incident response too. I build my own AI tooling to handle the repetitive parts (reviews, reports, tickets, runbooks), so more of my time goes into the work that needs a senior engineer.
in my first two months on my current platform contract
10+ CI/CD pipeline optimisations
shipped in the same period
7 operational runbooks
written in my first 30 days
Numbers from my current DevOps and platform engagement (Feb 2026 – present).
Current focus
Running a dual-cluster AWS EKS platform (UAT and production) for a fintech team, plus AWS delivery and cost work for client projects.
Platform & DevOps experience
Most of my recent work is platform and cloud engineering for South African companies that serve banks, fintechs and large enterprises. Client details stay confidential, so these summaries describe the systems and the work, not the internals.
BitVenture, through 1Solve (Pty) Ltd
Lead DevOps & Kubernetes Engineer (AWS)
South Africa·Feb 2026 – present
Most of this engagement is Kubernetes and DevOps on AWS. I look after a dual-cluster EKS platform (UAT and production) for a fintech group: node and workload scaling, CI/CD, the observability stack, and production incident response.
Upgraded Kubernetes clusters on premises and on EKS, checking node groups and workload compatibility before each version cutover.
Hardened encryption in transit and at rest to a SOC 2-aligned standard, and tightened identity and network exposure as part of that work.
Moved a queue-driven worker fleet from StatefulSets to Deployments and wired KEDA autoscaling to queue depth, so the fleet follows real demand instead of a fixed replica count.
Fixed a CI image-tagging bug that was silently shipping stale images. Deploys now pin to the commit SHA.
Run Prometheus, Grafana, Loki and Alertmanager, and cleaned up alert noise so pages point at real problems.
Led recovery on a multi-day production outage, then the follow-up hardening, and wrote a blue-green deployment feasibility report.
Resolved 30+ incidents and delivered 10+ pipeline optimisations in the first two months. Wrote 7 runbooks in the first 30 days.
Use internal AI-assisted ops automation I built for clients to draft incident notes, update tickets and keep timesheets current. I review every output before it goes out.
Generic layout. UAT and production are separate clusters. IAM roles for service accounts on both.
VPC · UAT
Public subnet
ALB / ingress
TLS terminates here
Private subnet · EKS
System node group
Core add-ons
Worker node group
Application pods
App Deployments
Stateless services
KEDA ScaledObjects
Scale on RabbitMQ / Amazon MQ depth
RDS PostgreSQL
S3
VPC · Production
Public subnet
ALB / ingress
TLS terminates here
Private subnet · EKS
System node group
Core add-ons
Worker node group
Application pods
App Deployments
Stateless services
KEDA ScaledObjects
Scale on RabbitMQ / Amazon MQ depth
RDS PostgreSQL
S3
CloudSmiths
Full Stack & DevOps Engineer (AWS)
South Africa·Jul 2024 – present
Embedded senior engineer on client platforms in banking, HR and legal tech, healthcare and media. Alongside feature delivery I do AWS performance and cost work, release governance, and production support inside regulated delivery processes.
Tuned Elastic Beanstalk and nginx on a production system: worker and connection limits, timeouts and static handling, aimed at slow pages and unstable releases.
Built a Lambda check that watches certificate expiry and raises a ticket before a certificate lapses.
AWS performance and cost work on a large HR and legal-tech production system, and cost reviews for a tier-1 bank’s learning platform, written up inside that bank’s change process.
Weekly releases to UAT and production across concurrent projects, with CI/CD in the path.
Prometheus, Grafana and CloudWatch on the stacks that already used them, so production support had something concrete to look at.
Rescued a deadline-critical media analytics project and delivered it on time.
The same internal AI-assisted ops automation I built for clients drafts timesheets, tickets and incident triage notes. I check each draft before it is sent.
Joined a new real-estate SaaS build with no infrastructure in place. The DevOps part of the role was setting up the AWS footprint and the delivery pipeline alongside the product.
Set up the initial AWS footprint: S3 storage, RDS PostgreSQL, and Lambda for background work.
Built the GitHub-to-AWS CI/CD pipeline, with tests and SonarQube quality gates on every merge.
Handled weekly production deployments, daily code reviews and delivery habits aligned with DORA.
Kept building the product in the same engagement: React and TypeScript on tRPC, with Prisma against PostgreSQL.
Systems & technologies: AWS (S3, RDS, Lambda), GitHub Actions CI/CD, SonarQube, PostgreSQL, Prisma, tRPC, React / TypeScript, Jest, Storybook.
CI/CD pipeline
The same shape on Bitbucket Pipelines and GitHub Actions.
1Git pushCommit on the branch
2CIBitbucket Pipelines or GitHub Actions
3Test + SonarQubeQuality gate on the merge
4Docker buildImage tagged with the commit SHA
5RegistryPush the pinned image
6Helm → UATUpgrade the UAT release
7ApprovalHuman gate before production
8Helm → productionSame SHA, with a rollback path
SHA-pinned images. No latest tag in production.
Earlier engineering work
These stay as separate engagements, with the dates and titles on the CV. They are not rolled into one freelance role.
No Regrets Studios
Apr 2025 – Sep 2025
Full Stack AI Engineer·United Kingdom
Next.js platform for a UK studio, with AI image generation and AWS asset storage.
Italtile Limited
Sep 2024 – Dec 2024
Full Stack Engineer·South Africa
Point-of-sale maintenance and a Cordova toolchain update, released through Azure DevOps.
Freelance
Apr 2024 – Dec 2024
Next.js Developer·South Africa
Convo Freaks, built from scratch, and a Crabaride UI rework on Next.js and Vercel.
Freelance
Oct 2022 – Apr 2024
Lead React Developer·South Africa
Insurance business-tracker frontend. Recovered the project and delivered it.
Irricheck
Apr 2022 – Jul 2023
React Developer·South Africa
Agritech productivity frontend, built and owned day to day.
VZAP | Van Zyl & Pritchard
Apr 2021 – Apr 2022
Junior Software Developer·Johannesburg
Healthcare quality tracker and a printing CRM, on React and Java.
I treat AI as part of my toolchain, not a gimmick. I build small assistants that do the repetitive half of DevOps: gathering evidence, writing up findings, keeping tickets and timesheets current. I check every output before it reaches a client. The result is senior-level work delivered faster, with a paper trail.
Internal AI-assisted ops automation I built for clients
Scripts and assistants pull cluster health, write morning ops reports, draft incident notes and runbooks, create and update tickets, and keep timesheets in sync. The same approach drafts AWS cost reviews, action plans and status reports from account data. I check every output before it reaches a client.
Built with: Next.js, Node.js, Python, Bash, PowerShell, the Jira API, time-tracking APIs, kubectl and the AWS CLI.
Taxzi
A live product I built and run: upload a South African bank statement and get a tax estimate. Proof that I ship and operate production software end to end, not only infrastructure.
Alongside client platform work, I build and run my own products on Vercel and Next.js. They keep my hands on the full stack, which is why I know what developers need from a platform. Live ones link out; archived ones are kept for the record.