Valentine Anagbogu

Senior Platform Engineer & Cloud Architect

I build the paved roads engineering teams ship on: self-service developer platforms, secure Azure foundations, and Kubernetes that stays up when it matters.

About

I'm a senior platform engineer. I design and run the foundations product teams build on: Azure landing zones, large shared AKS clusters, and an internal developer platform that turns a single form into a running, secured, monitored service.

My work sits where infrastructure, security and developer experience meet. I build golden paths with Backstage, Terraform and Helm. I keep networking private and CI/CD keyless by default. When production misbehaves, I lead the investigation: evidence first, theory second.

I care about making the right way the easy way, with standards in code, changes that are safe to make, and cost decisions backed by evidence. The case studies below show how I work.

Developer Platforms

Backstage golden paths for Node.js, .NET and Python: repo, keyless CI/CD, RBAC and deployment from one form.

Kubernetes at Scale

Reliability, incident root-cause analysis and high-availability standards on multi-tenant AKS clusters with 200+ nodes.

Cloud Foundations

Hub-and-spoke networking, private endpoints, firewall policy and private DNS, all as Terraform.

FinOps & Governance

Cost reviews backed by live resource data, workload identity, and policy enforced in code.

CKA · Azure Solutions Architect Expert · Azure DevOps Engineer Expert · AWS Solutions Architect · Terraform Associate

Technical Expertise

Cloud Platforms

  • Amazon Web Services (AWS)
  • Microsoft Azure

Infrastructure as Code

  • Terraform
  • CloudFormation
  • Bicep
  • ARM Templates

Containerization & Orchestration

  • Kubernetes
  • Docker
  • Helm

CI/CD

  • GitHub Actions
  • GitLab CI/CD
  • Azure DevOps
  • Jenkins

Monitoring & Observability

  • Prometheus
  • Grafana
  • ELK Stack
  • CloudWatch
  • Az Monitor

Scripting & Automation

  • Python
  • Bash
  • PowerShell

Professional Certifications

Featured Projects

Internal Developer Platform with Golden Paths

Internal Developer Platform with Golden Paths

A self-service Backstage portal with golden paths for Node.js, .NET and Python. One form creates the repo, keyless CI/CD, RBAC, infrastructure and an AKS deployment.

Backstage AKS Terraform Golden Paths
View Project →
Hardening a Developer Portal on AKS

Hardening a Developer Portal on AKS

Taking a proof-of-concept portal to production on shared AKS: workload identity, private endpoints, a dedicated node pool, group-gated SSO and six silent issues fixed along the way.

AKS Workload Identity Helm Entra ID
View Project →
Debugging a Managed CoreDNS Regression

Debugging a Managed CoreDNS Regression

Intermittent production timeouts with no change on our side. The cause was a provider-managed CoreDNS update, made worse by a liveness probe wired to downstream health.

AKS CoreDNS Incident RCA Observability
View Project →
Unblocking Batch Jobs: An Admission Webhook Bottleneck

Unblocking Batch Jobs: An Admission Webhook Bottleneck

Batch Jobs in every namespace started minutes late. One replica of a sidecar-injection webhook was throttling pod creation. Scaling it and forcing reconnects brought starts down to seconds.

AKS Admission Webhooks KEDA Performance
View Project →
Hub-and-Spoke Landing Zone with Authoritative Private DNS

Hub-and-Spoke Landing Zone with Authoritative Private DNS

Hub-and-spoke networking with firewall policy as code, private-only PaaS and a single authoritative private DNS pattern that resolves correctly from AKS, VMs and on-premises.

Azure Hub-Spoke Private DNS Terraform
View Project →
FinOps: Turning Off What Nobody Uses

FinOps: Turning Off What Nobody Uses

An estate-wide cost review that validated every finding against live state. Always-on non-production AKS clusters were the biggest lever in a five-figure monthly saving.

FinOps Azure AKS Resource Graph
View Project →

More Case Studies

Designing for Node Failure on AKS

Designing for Node Failure on AKS

A memory-saturated node took a single-replica auth service with it, and the autoscaler had no room to recover. This is the RCA and the high-availability baseline that came out of it.

AKS High Availability PDB Autoscaling
View Project →
Crash-Loops with Three DNS Root Causes

Crash-Loops with Three DNS Root Causes

Three services, a thousand restarts each, and one shared symptom: "health check failed". Testing layer by layer from inside the pod found three different private DNS root causes.

AKS Private DNS Private Link Troubleshooting
View Project →
Inside-Out Ingress Troubleshooting

Inside-Out Ingress Troubleshooting

Users saw a block page, and the first instinct was to change the cluster. Testing from the pod outwards proved every layer healthy and found the block upstream, on the client side.

AKS NGINX Ingress OIDC Troubleshooting
View Project →
Silent Failure Modes in Shared Helm Charts

Silent Failure Modes in Shared Helm Charts

Five ways a shared Helm chart and pipeline reported success while the app was broken, from dropped args and unbound ports to sticky image tags, and the guardrails that stop them.

Helm AKS CI/CD Reliability
View Project →
Keyless CI/CD with OIDC for Terraform

Keyless CI/CD with OIDC for Terraform

Terraform pipelines with no stored cloud secrets, plus the root cause of AADSTS700024 failures on long applies: a token exported once and never refreshed.

OIDC GitHub Actions Terraform Entra ID
View Project →
Certificate and Secret Lifecycle at Scale

Certificate and Secret Lifecycle at Scale

Rotating a shared TLS certificate across dozens of services without an outage, distributing SFTP host keys to every environment and triaging expiring app-registration secrets.

Key Vault TLS AKS Change Management
View Project →
Observability: Noise, Gaps and Blind Spots

Observability: Noise, Gaps and Blind Spots

Three observability investigations: a health check flooding a log partition, a missing partition hiding millions of dev logs a day, and an averaged disk metric hiding a full volume.

Observability Logging APM Kubernetes
View Project →
Moving Central Logging to a New Region

Moving Central Logging to a New Region

Re-pointing diagnostics for a set of Terraform stacks to a new region's Log Analytics, one environment at a time, with a clean revert-and-reland and drift handled rather than overwritten.

Terraform Azure Monitor Log Analytics Migration
View Project →
Managed SQL as Code, Safely

Managed SQL as Code, Safely

Database platform changes in Terraform (renames, one-way settings, firewall-blocked Entra auth, decommissioning), each with the check that kept it safe, including a mass destroy caught at plan time.

Azure SQL Terraform Private Endpoints Change Safety
View Project →
AI-Assisted Platform Operations

AI-Assisted Platform Operations

Platform runbooks and golden-path standards encoded as AI agent skills. Investigations follow the same evidence trail every time, and resource requests become reviewed pull requests.

AI Agents Platform Engineering Automation Backstage
View Project →

Get in Touch

Interested in collaboration or have questions about my work? Feel free to reach out.

Schedule Meeting